luke/ansible-roles/ergo/tasks/main.yaml, branch main
Ansible roles for nth.io infrastructure
https://src.nth.io/luke/ansible-roles/atom?h=main
2026-04-06T02:19:55+00:00
Harden role security: file permissions, service binding, no_log, strict defaults
2026-04-06T02:19:55+00:00
Luke Hoersten
luke@hoersten.org
2026-04-06T02:19:55+00:00
urn:sha1:06b69bd8def0aae07d3fb565d19193be1a8dfe20
- Add no_log: true to tasks that handle passwords/secrets
- Tighten config file permissions (0644 -> 0600/0640 where appropriate)
- Bind pleroma to 127.0.0.1 instead of 0.0.0.0
- Tighten ergo unix socket mode 0777 -> 0770
- Remove weak defaults; roles now fail explicitly if required vars not set
Fixed log rotation and log2ram sizing.
2026-03-24T03:22:36+00:00
Luke Hoersten
luke@hoersten.org
2026-03-24T03:22:36+00:00
urn:sha1:1859f62813f0c586ea49f912944fb25efd60520f
Lots of updates.
2021-07-25T15:30:51+00:00
Luke Hoersten
luke@hoersten.org
2021-07-25T15:30:51+00:00
urn:sha1:1804c35d5306fc9c34c07655419fa8449c501162
Updated versions: minecraft, miniflux, pleroma, writefreely, ergo-oragono.
2021-07-24T15:29:53+00:00
Luke Hoersten
luke@hoersten.org
2021-07-24T15:29:53+00:00
urn:sha1:2e7b40f78e52530299e5c859b6adeba50df54446