<feed xmlns='http://www.w3.org/2005/Atom'>
<title>luke/ansible-roles/miniflux/tasks/main.yaml, branch main</title>
<subtitle>Ansible roles for nth.io infrastructure
</subtitle>
<id>https://src.nth.io/luke/ansible-roles/atom?h=main</id>
<link rel='self' href='https://src.nth.io/luke/ansible-roles/atom?h=main'/>
<link rel='alternate' type='text/html' href='https://src.nth.io/luke/ansible-roles/'/>
<updated>2026-04-06T02:19:55+00:00</updated>
<entry>
<title>Harden role security: file permissions, service binding, no_log, strict defaults</title>
<updated>2026-04-06T02:19:55+00:00</updated>
<author>
<name>Luke Hoersten</name>
<email>luke@hoersten.org</email>
</author>
<published>2026-04-06T02:19:55+00:00</published>
<link rel='alternate' type='text/html' href='https://src.nth.io/luke/ansible-roles/commit/?id=06b69bd8def0aae07d3fb565d19193be1a8dfe20'/>
<id>urn:sha1:06b69bd8def0aae07d3fb565d19193be1a8dfe20</id>
<content type='text'>
- Add no_log: true to tasks that handle passwords/secrets
- Tighten config file permissions (0644 -&gt; 0600/0640 where appropriate)
- Bind pleroma to 127.0.0.1 instead of 0.0.0.0
- Tighten ergo unix socket mode 0777 -&gt; 0770
- Remove weak defaults; roles now fail explicitly if required vars not set
</content>
</entry>
<entry>
<title>Minor version updates and bug fixes.</title>
<updated>2022-09-05T16:14:48+00:00</updated>
<author>
<name>Luke Hoersten</name>
<email>luke@hoersten.org</email>
</author>
<published>2022-09-05T16:14:48+00:00</published>
<link rel='alternate' type='text/html' href='https://src.nth.io/luke/ansible-roles/commit/?id=7d2ffb19545a7888c23851b73dbd577cd98ef655'/>
<id>urn:sha1:7d2ffb19545a7888c23851b73dbd577cd98ef655</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Lots of updates.</title>
<updated>2021-07-25T15:30:51+00:00</updated>
<author>
<name>Luke Hoersten</name>
<email>luke@hoersten.org</email>
</author>
<published>2021-07-25T15:30:51+00:00</published>
<link rel='alternate' type='text/html' href='https://src.nth.io/luke/ansible-roles/commit/?id=1804c35d5306fc9c34c07655419fa8449c501162'/>
<id>urn:sha1:1804c35d5306fc9c34c07655419fa8449c501162</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Tons of updates.</title>
<updated>2021-07-18T22:43:46+00:00</updated>
<author>
<name>Luke Hoersten</name>
<email>luke@hoersten.org</email>
</author>
<published>2021-07-18T22:43:46+00:00</published>
<link rel='alternate' type='text/html' href='https://src.nth.io/luke/ansible-roles/commit/?id=9bb76f57d55ca5a9e502a34e504a21904d4157a1'/>
<id>urn:sha1:9bb76f57d55ca5a9e502a34e504a21904d4157a1</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Added miniflux role.</title>
<updated>2020-08-08T14:49:57+00:00</updated>
<author>
<name>Luke Hoersten</name>
<email>luke@hoersten.org</email>
</author>
<published>2020-08-08T14:49:57+00:00</published>
<link rel='alternate' type='text/html' href='https://src.nth.io/luke/ansible-roles/commit/?id=b46cf2027341c5faf34b945952eaaa1a578b8910'/>
<id>urn:sha1:b46cf2027341c5faf34b945952eaaa1a578b8910</id>
<content type='text'>
</content>
</entry>
</feed>
