luke/ansible-roles/pleroma, branch main Ansible roles for nth.io infrastructure https://src.nth.io/luke/ansible-roles/atom?h=main 2026-04-06T02:19:55+00:00 Harden role security: file permissions, service binding, no_log, strict defaults 2026-04-06T02:19:55+00:00 Luke Hoersten luke@hoersten.org 2026-04-06T02:19:55+00:00 urn:sha1:06b69bd8def0aae07d3fb565d19193be1a8dfe20 - Add no_log: true to tasks that handle passwords/secrets - Tighten config file permissions (0644 -> 0600/0640 where appropriate) - Bind pleroma to 127.0.0.1 instead of 0.0.0.0 - Tighten ergo unix socket mode 0777 -> 0770 - Remove weak defaults; roles now fail explicitly if required vars not set Added soju role. 2026-03-28T18:42:08+00:00 Luke Hoersten luke@hoersten.org 2026-03-28T18:42:08+00:00 urn:sha1:45da5bca82200af63b0ee16479b267eb209386f3 Version updates and fixed excessive logging on web server. 2025-01-04T01:36:28+00:00 Luke Hoersten luke@hoersten.org 2025-01-04T01:36:28+00:00 urn:sha1:b180fe427c44da015874dbf86c326f6e6bcd0aa8 Lots of updates and fixes for Ubuntu 24.04 Noble. 2024-10-07T20:25:37+00:00 Luke Hoersten luke@hoersten.org 2024-10-07T20:25:37+00:00 urn:sha1:27739609362360b2bf533f5a59106ce52c8d4b9f Cleaned up always-changed status tasks. 2024-07-29T17:41:57+00:00 Luke Hoersten luke@hoersten.org 2024-07-29T17:41:57+00:00 urn:sha1:874be10f6646a66cd0e994963b2746ad48f5b73e Tons of updates to fix migration to new server. 2024-02-05T02:27:19+00:00 Luke Hoersten luke@hoersten.org 2024-02-05T02:27:19+00:00 urn:sha1:04edbf561c44e28753cbbaa3870b23b220cc644c Version update 2023-04-03T18:20:18+00:00 Luke Hoersten luke@hoersten.org 2023-04-03T18:20:18+00:00 urn:sha1:fecba00f69bf8577d7abe67dcb81a612b3c547e5 Version updates 2023-02-23T23:55:33+00:00 Luke Hoersten luke@hoersten.org 2023-02-23T23:55:33+00:00 urn:sha1:c5343ef2c6830c3f833c65a21ad5e6ea3affc5a0 Updated versions. 2023-01-08T18:57:34+00:00 Luke Hoersten luke@hoersten.org 2023-01-08T18:57:34+00:00 urn:sha1:f74c8bd36c7796b94ed30cea2f748a14da557e14 Backed out changeset 10051617d075 2022-11-07T04:03:27+00:00 Luke Hoersten luke@hoersten.org 2022-11-07T04:03:27+00:00 urn:sha1:3cf3889b92cf553ade47f51d0130d69e67e7f992