luke/ansible-roles/miniflux/tasks, branch main Ansible roles for nth.io infrastructure https://src.nth.io/luke/ansible-roles/atom?h=main 2026-07-31T19:31:51Z install from the 26.04 archive instead of third-party sources 2026-07-31T19:31:51Z Luke Hoersten luke@hoersten.org 2026-07-31T19:31:51Z urn:sha1:846782c44c1c65e7b755de76fd50d86fc7c9636e - rpi-base: log2ram from the archive, drop the azlux repo (which still pointed at debian buster) - aws-s3-backup: apt awscli (v2) instead of pip v1; drop boto3, nothing used it - scrypted, koreader-sync: docker.io and docker-compose-v2 instead of the docker.com repo pinned to noble; the docker-ce removal lives in cleanup-third-party.yaml since the packages collide on files - miniflux: the archive package with a dbconfig preseed; drops the github binary download and the bundled unit - prometheus/client: note the nginx and postgres exporters are in apt - dendrite/build, nostr/build: unversioned golang-go instead of pinned golang-1.21-go and a hand symlink that shadowed the real go Harden role security: file permissions, service binding, no_log, strict defaults 2026-04-06T02:19:55Z Luke Hoersten luke@hoersten.org 2026-04-06T02:19:55Z urn:sha1:06b69bd8def0aae07d3fb565d19193be1a8dfe20 - Add no_log: true to tasks that handle passwords/secrets - Tighten config file permissions (0644 -> 0600/0640 where appropriate) - Bind pleroma to 127.0.0.1 instead of 0.0.0.0 - Tighten ergo unix socket mode 0777 -> 0770 - Remove weak defaults; roles now fail explicitly if required vars not set Minor version updates and bug fixes. 2022-09-05T16:14:48Z Luke Hoersten luke@hoersten.org 2022-09-05T16:14:48Z urn:sha1:7d2ffb19545a7888c23851b73dbd577cd98ef655 Lots of updates. 2021-07-25T15:30:51Z Luke Hoersten luke@hoersten.org 2021-07-25T15:30:51Z urn:sha1:1804c35d5306fc9c34c07655419fa8449c501162 Tons of updates. 2021-07-18T22:43:46Z Luke Hoersten luke@hoersten.org 2021-07-18T22:43:46Z urn:sha1:9bb76f57d55ca5a9e502a34e504a21904d4157a1 Added miniflux role. 2020-08-08T14:49:57Z Luke Hoersten luke@hoersten.org 2020-08-08T14:49:57Z urn:sha1:b46cf2027341c5faf34b945952eaaa1a578b8910