<feed xmlns='http://www.w3.org/2005/Atom'>
<title>luke/ansible-roles/miniflux/defaults/main.yaml, branch main</title>
<subtitle>Ansible roles for nth.io infrastructure
</subtitle>
<id>https://src.nth.io/luke/ansible-roles/atom?h=main</id>
<link rel='self' href='https://src.nth.io/luke/ansible-roles/atom?h=main'/>
<link rel='alternate' type='text/html' href='https://src.nth.io/luke/ansible-roles/'/>
<updated>2026-04-06T02:19:55+00:00</updated>
<entry>
<title>Harden role security: file permissions, service binding, no_log, strict defaults</title>
<updated>2026-04-06T02:19:55+00:00</updated>
<author>
<name>Luke Hoersten</name>
<email>luke@hoersten.org</email>
</author>
<published>2026-04-06T02:19:55+00:00</published>
<link rel='alternate' type='text/html' href='https://src.nth.io/luke/ansible-roles/commit/?id=06b69bd8def0aae07d3fb565d19193be1a8dfe20'/>
<id>urn:sha1:06b69bd8def0aae07d3fb565d19193be1a8dfe20</id>
<content type='text'>
- Add no_log: true to tasks that handle passwords/secrets
- Tighten config file permissions (0644 -&gt; 0600/0640 where appropriate)
- Bind pleroma to 127.0.0.1 instead of 0.0.0.0
- Tighten ergo unix socket mode 0777 -&gt; 0770
- Remove weak defaults; roles now fail explicitly if required vars not set
</content>
</entry>
<entry>
<title>Update versions and fix nginx logging.</title>
<updated>2026-03-26T02:42:49+00:00</updated>
<author>
<name>Luke Hoersten</name>
<email>luke@hoersten.org</email>
</author>
<published>2026-03-26T02:42:49+00:00</published>
<link rel='alternate' type='text/html' href='https://src.nth.io/luke/ansible-roles/commit/?id=58d4444b06de49587417791bb06a4fe1aeda571d'/>
<id>urn:sha1:58d4444b06de49587417791bb06a4fe1aeda571d</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Updated versions.</title>
<updated>2025-05-29T00:24:44+00:00</updated>
<author>
<name>Luke Hoersten</name>
<email>luke@hoersten.org</email>
</author>
<published>2025-05-29T00:24:44+00:00</published>
<link rel='alternate' type='text/html' href='https://src.nth.io/luke/ansible-roles/commit/?id=cb74bdc5ae5194ceeda48aa92ca26ca685c737f9'/>
<id>urn:sha1:cb74bdc5ae5194ceeda48aa92ca26ca685c737f9</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Version updates and fixed excessive logging on web server.</title>
<updated>2025-01-04T01:36:28+00:00</updated>
<author>
<name>Luke Hoersten</name>
<email>luke@hoersten.org</email>
</author>
<published>2025-01-04T01:36:28+00:00</published>
<link rel='alternate' type='text/html' href='https://src.nth.io/luke/ansible-roles/commit/?id=b180fe427c44da015874dbf86c326f6e6bcd0aa8'/>
<id>urn:sha1:b180fe427c44da015874dbf86c326f6e6bcd0aa8</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Lots of updates and fixes for Ubuntu 24.04 Noble.</title>
<updated>2024-10-07T20:25:37+00:00</updated>
<author>
<name>Luke Hoersten</name>
<email>luke@hoersten.org</email>
</author>
<published>2024-10-07T20:25:37+00:00</published>
<link rel='alternate' type='text/html' href='https://src.nth.io/luke/ansible-roles/commit/?id=27739609362360b2bf533f5a59106ce52c8d4b9f'/>
<id>urn:sha1:27739609362360b2bf533f5a59106ce52c8d4b9f</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Version updates.</title>
<updated>2024-07-20T15:22:38+00:00</updated>
<author>
<name>Luke Hoersten</name>
<email>luke@hoersten.org</email>
</author>
<published>2024-07-20T15:22:38+00:00</published>
<link rel='alternate' type='text/html' href='https://src.nth.io/luke/ansible-roles/commit/?id=77c421bdee5279551abbfeea8a97fdf5ba8edc61'/>
<id>urn:sha1:77c421bdee5279551abbfeea8a97fdf5ba8edc61</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Version updates.</title>
<updated>2024-01-16T06:04:53+00:00</updated>
<author>
<name>Luke Hoersten</name>
<email>luke@hoersten.org</email>
</author>
<published>2024-01-16T06:04:53+00:00</published>
<link rel='alternate' type='text/html' href='https://src.nth.io/luke/ansible-roles/commit/?id=312bf5e6094a496eafbfaed53d972c7d21d0b6d2'/>
<id>urn:sha1:312bf5e6094a496eafbfaed53d972c7d21d0b6d2</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Version updates.</title>
<updated>2023-09-16T03:46:19+00:00</updated>
<author>
<name>Luke Hoersten</name>
<email>luke@hoersten.org</email>
</author>
<published>2023-09-16T03:46:19+00:00</published>
<link rel='alternate' type='text/html' href='https://src.nth.io/luke/ansible-roles/commit/?id=12c9a85cbc9f4c218dd09f226c235e9376b45c85'/>
<id>urn:sha1:12c9a85cbc9f4c218dd09f226c235e9376b45c85</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Version updates.</title>
<updated>2023-07-19T18:54:22+00:00</updated>
<author>
<name>Luke Hoersten</name>
<email>luke@hoersten.org</email>
</author>
<published>2023-07-19T18:54:22+00:00</published>
<link rel='alternate' type='text/html' href='https://src.nth.io/luke/ansible-roles/commit/?id=d5c5467d4d2a6090d75436f07ef2eac6945dfa1b'/>
<id>urn:sha1:d5c5467d4d2a6090d75436f07ef2eac6945dfa1b</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Version update</title>
<updated>2023-04-03T18:20:18+00:00</updated>
<author>
<name>Luke Hoersten</name>
<email>luke@hoersten.org</email>
</author>
<published>2023-04-03T18:20:18+00:00</published>
<link rel='alternate' type='text/html' href='https://src.nth.io/luke/ansible-roles/commit/?id=fecba00f69bf8577d7abe67dcb81a612b3c547e5'/>
<id>urn:sha1:fecba00f69bf8577d7abe67dcb81a612b3c547e5</id>
<content type='text'>
</content>
</entry>
</feed>
