luke/ansible-roles/pleroma/otp/tasks/instance.yaml, branch main Ansible roles for nth.io infrastructure https://src.nth.io/luke/ansible-roles/atom?h=main 2026-04-06T02:19:55+00:00 Harden role security: file permissions, service binding, no_log, strict defaults 2026-04-06T02:19:55+00:00 Luke Hoersten luke@hoersten.org 2026-04-06T02:19:55+00:00 urn:sha1:06b69bd8def0aae07d3fb565d19193be1a8dfe20 - Add no_log: true to tasks that handle passwords/secrets - Tighten config file permissions (0644 -> 0600/0640 where appropriate) - Bind pleroma to 127.0.0.1 instead of 0.0.0.0 - Tighten ergo unix socket mode 0777 -> 0770 - Remove weak defaults; roles now fail explicitly if required vars not set Cleaned up always-changed status tasks. 2024-07-29T17:41:57+00:00 Luke Hoersten luke@hoersten.org 2024-07-29T17:41:57+00:00 urn:sha1:874be10f6646a66cd0e994963b2746ad48f5b73e Changed pleroma logging to "warn" status. 2022-09-05T16:14:16+00:00 Luke Hoersten luke@hoersten.org 2022-09-05T16:14:16+00:00 urn:sha1:d39e7c2142f5920a4e4b135eb92a1e44a863dd6d Updated pleroma to 2.2.0 and added new dep. 2020-11-16T22:42:59+00:00 Luke Hoersten luke@hoersten.org 2020-11-16T22:42:59+00:00 urn:sha1:d5cc77393693f09ad2bc26576384b8d57e95d490 Added proper reinstall logic for pleroma. 2020-09-19T18:17:07+00:00 Luke Hoersten luke@hoersten.org 2020-09-19T18:17:07+00:00 urn:sha1:d3fb76110e016f66fa0ac5f4380e3cdc489cd662