luke/ansible-roles/miniflux, branch main Ansible roles for nth.io infrastructure https://src.nth.io/luke/ansible-roles/atom?h=main 2026-07-31T19:31:51Z install from the 26.04 archive instead of third-party sources 2026-07-31T19:31:51Z Luke Hoersten luke@hoersten.org 2026-07-31T19:31:51Z urn:sha1:846782c44c1c65e7b755de76fd50d86fc7c9636e - rpi-base: log2ram from the archive, drop the azlux repo (which still pointed at debian buster) - aws-s3-backup: apt awscli (v2) instead of pip v1; drop boto3, nothing used it - scrypted, koreader-sync: docker.io and docker-compose-v2 instead of the docker.com repo pinned to noble; the docker-ce removal lives in cleanup-third-party.yaml since the packages collide on files - miniflux: the archive package with a dbconfig preseed; drops the github binary download and the bundled unit - prometheus/client: note the nginx and postgres exporters are in apt - dendrite/build, nostr/build: unversioned golang-go instead of pinned golang-1.21-go and a hand symlink that shadowed the real go Harden role security: file permissions, service binding, no_log, strict defaults 2026-04-06T02:19:55Z Luke Hoersten luke@hoersten.org 2026-04-06T02:19:55Z urn:sha1:06b69bd8def0aae07d3fb565d19193be1a8dfe20 - Add no_log: true to tasks that handle passwords/secrets - Tighten config file permissions (0644 -> 0600/0640 where appropriate) - Bind pleroma to 127.0.0.1 instead of 0.0.0.0 - Tighten ergo unix socket mode 0777 -> 0770 - Remove weak defaults; roles now fail explicitly if required vars not set Update versions and fix nginx logging. 2026-03-26T02:42:49Z Luke Hoersten luke@hoersten.org 2026-03-26T02:42:49Z urn:sha1:58d4444b06de49587417791bb06a4fe1aeda571d Updated versions. 2025-05-29T00:24:44Z Luke Hoersten luke@hoersten.org 2025-05-29T00:24:44Z urn:sha1:cb74bdc5ae5194ceeda48aa92ca26ca685c737f9 Version updates and fixed excessive logging on web server. 2025-01-04T01:36:28Z Luke Hoersten luke@hoersten.org 2025-01-04T01:36:28Z urn:sha1:b180fe427c44da015874dbf86c326f6e6bcd0aa8 Lots of updates and fixes for Ubuntu 24.04 Noble. 2024-10-07T20:25:37Z Luke Hoersten luke@hoersten.org 2024-10-07T20:25:37Z urn:sha1:27739609362360b2bf533f5a59106ce52c8d4b9f Version updates. 2024-07-20T15:22:38Z Luke Hoersten luke@hoersten.org 2024-07-20T15:22:38Z urn:sha1:77c421bdee5279551abbfeea8a97fdf5ba8edc61 Tons of updates to fix migration to new server. 2024-02-05T02:27:19Z Luke Hoersten luke@hoersten.org 2024-02-05T02:27:19Z urn:sha1:04edbf561c44e28753cbbaa3870b23b220cc644c Version updates. 2024-01-16T06:04:53Z Luke Hoersten luke@hoersten.org 2024-01-16T06:04:53Z urn:sha1:312bf5e6094a496eafbfaed53d972c7d21d0b6d2 Version updates. 2023-09-16T03:46:19Z Luke Hoersten luke@hoersten.org 2023-09-16T03:46:19Z urn:sha1:12c9a85cbc9f4c218dd09f226c235e9376b45c85