<feed xmlns='http://www.w3.org/2005/Atom'>
<title>luke/ansible-roles/pleroma/otp/templates/config.exs.j2, branch main</title>
<subtitle>Ansible roles for nth.io infrastructure
</subtitle>
<id>https://src.nth.io/luke/ansible-roles/atom?h=main</id>
<link rel='self' href='https://src.nth.io/luke/ansible-roles/atom?h=main'/>
<link rel='alternate' type='text/html' href='https://src.nth.io/luke/ansible-roles/'/>
<updated>2026-04-06T02:19:55+00:00</updated>
<entry>
<title>Harden role security: file permissions, service binding, no_log, strict defaults</title>
<updated>2026-04-06T02:19:55+00:00</updated>
<author>
<name>Luke Hoersten</name>
<email>luke@hoersten.org</email>
</author>
<published>2026-04-06T02:19:55+00:00</published>
<link rel='alternate' type='text/html' href='https://src.nth.io/luke/ansible-roles/commit/?id=06b69bd8def0aae07d3fb565d19193be1a8dfe20'/>
<id>urn:sha1:06b69bd8def0aae07d3fb565d19193be1a8dfe20</id>
<content type='text'>
- Add no_log: true to tasks that handle passwords/secrets
- Tighten config file permissions (0644 -&gt; 0600/0640 where appropriate)
- Bind pleroma to 127.0.0.1 instead of 0.0.0.0
- Tighten ergo unix socket mode 0777 -&gt; 0770
- Remove weak defaults; roles now fail explicitly if required vars not set
</content>
</entry>
<entry>
<title>Version updates and fixed excessive logging on web server.</title>
<updated>2025-01-04T01:36:28+00:00</updated>
<author>
<name>Luke Hoersten</name>
<email>luke@hoersten.org</email>
</author>
<published>2025-01-04T01:36:28+00:00</published>
<link rel='alternate' type='text/html' href='https://src.nth.io/luke/ansible-roles/commit/?id=b180fe427c44da015874dbf86c326f6e6bcd0aa8'/>
<id>urn:sha1:b180fe427c44da015874dbf86c326f6e6bcd0aa8</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Lots of updates and fixes for Ubuntu 24.04 Noble.</title>
<updated>2024-10-07T20:25:37+00:00</updated>
<author>
<name>Luke Hoersten</name>
<email>luke@hoersten.org</email>
</author>
<published>2024-10-07T20:25:37+00:00</published>
<link rel='alternate' type='text/html' href='https://src.nth.io/luke/ansible-roles/commit/?id=27739609362360b2bf533f5a59106ce52c8d4b9f'/>
<id>urn:sha1:27739609362360b2bf533f5a59106ce52c8d4b9f</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Changed pleroma logging to "warn" status.</title>
<updated>2022-09-05T16:14:16+00:00</updated>
<author>
<name>Luke Hoersten</name>
<email>luke@hoersten.org</email>
</author>
<published>2022-09-05T16:14:16+00:00</published>
<link rel='alternate' type='text/html' href='https://src.nth.io/luke/ansible-roles/commit/?id=d39e7c2142f5920a4e4b135eb92a1e44a863dd6d'/>
<id>urn:sha1:d39e7c2142f5920a4e4b135eb92a1e44a863dd6d</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Updated pleroma to 2.2.0 and added new dep.</title>
<updated>2020-11-16T22:42:59+00:00</updated>
<author>
<name>Luke Hoersten</name>
<email>luke@hoersten.org</email>
</author>
<published>2020-11-16T22:42:59+00:00</published>
<link rel='alternate' type='text/html' href='https://src.nth.io/luke/ansible-roles/commit/?id=d5cc77393693f09ad2bc26576384b8d57e95d490'/>
<id>urn:sha1:d5cc77393693f09ad2bc26576384b8d57e95d490</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Added optional log level change.</title>
<updated>2020-09-07T20:06:06+00:00</updated>
<author>
<name>Luke Hoersten</name>
<email>luke@hoersten.org</email>
</author>
<published>2020-09-07T20:06:06+00:00</published>
<link rel='alternate' type='text/html' href='https://src.nth.io/luke/ansible-roles/commit/?id=6913bc25b4588aa21a6b2dc825682f5287ddb317'/>
<id>urn:sha1:6913bc25b4588aa21a6b2dc825682f5287ddb317</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Added local pleroma prometheus scraping.</title>
<updated>2020-07-10T00:57:16+00:00</updated>
<author>
<name>Luke Hoersten</name>
<email>luke@hoersten.org</email>
</author>
<published>2020-07-10T00:57:16+00:00</published>
<link rel='alternate' type='text/html' href='https://src.nth.io/luke/ansible-roles/commit/?id=997c63e2bb7a6d930a130c7d4047fecb742cc8dd'/>
<id>urn:sha1:997c63e2bb7a6d930a130c7d4047fecb742cc8dd</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Added pleroma backup cleanup and mediaproxy.</title>
<updated>2020-07-01T23:52:57+00:00</updated>
<author>
<name>Luke Hoersten</name>
<email>luke@hoersten.org</email>
</author>
<published>2020-07-01T23:52:57+00:00</published>
<link rel='alternate' type='text/html' href='https://src.nth.io/luke/ansible-roles/commit/?id=f0a5a5264e3fb8c3726ba47a2509512b2d08d8b2'/>
<id>urn:sha1:f0a5a5264e3fb8c3726ba47a2509512b2d08d8b2</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Split out aws s3 and otp roles.</title>
<updated>2020-07-01T17:16:48+00:00</updated>
<author>
<name>Luke Hoersten</name>
<email>luke@hoersten.org</email>
</author>
<published>2020-07-01T17:16:48+00:00</published>
<link rel='alternate' type='text/html' href='https://src.nth.io/luke/ansible-roles/commit/?id=d5a690b1e03a998510d48d2f39d1a224c64d82ff'/>
<id>urn:sha1:d5a690b1e03a998510d48d2f39d1a224c64d82ff</id>
<content type='text'>
</content>
</entry>
</feed>
