luke/ansible-roles/prosody/tasks/main.yaml, branch main Ansible roles for nth.io infrastructure https://src.nth.io/luke/ansible-roles/atom?h=main 2026-04-06T02:19:55+00:00 Harden role security: file permissions, service binding, no_log, strict defaults 2026-04-06T02:19:55+00:00 Luke Hoersten luke@hoersten.org 2026-04-06T02:19:55+00:00 urn:sha1:06b69bd8def0aae07d3fb565d19193be1a8dfe20 - Add no_log: true to tasks that handle passwords/secrets - Tighten config file permissions (0644 -> 0600/0640 where appropriate) - Bind pleroma to 127.0.0.1 instead of 0.0.0.0 - Tighten ergo unix socket mode 0777 -> 0770 - Remove weak defaults; roles now fail explicitly if required vars not set Fixed an error with overwriting certbot certs. 2025-05-30T01:01:29+00:00 Luke Hoersten luke@hoersten.org 2025-05-30T01:01:29+00:00 urn:sha1:a6f6bf556cf28894ac21d41396397acbbda524d7 Cleaned up always-changed status tasks. 2024-07-29T17:41:57+00:00 Luke Hoersten luke@hoersten.org 2024-07-29T17:41:57+00:00 urn:sha1:874be10f6646a66cd0e994963b2746ad48f5b73e Use proper ssl cert config for prosody. 2020-09-06T02:31:59+00:00 Luke Hoersten luke@hoersten.org 2020-09-06T02:31:59+00:00 urn:sha1:dbc6e0eca5171a87d0ee344df2650c4727c81040 Added postgresql for prosody. 2020-06-14T20:22:14+00:00 Luke Hoersten luke@hoersten.org 2020-06-14T20:22:14+00:00 urn:sha1:0301c507208ff895645e23b1d766438af795ebbc Copy prosody keys over. 2020-06-14T19:50:21+00:00 Luke Hoersten luke@hoersten.org 2020-06-14T19:50:21+00:00 urn:sha1:2f583cf15c00744ed6799c06ed71fde73c7ba839 Added prosody role. 2020-05-14T13:25:10+00:00 Luke Hoersten luke@hoersten.org 2020-05-14T13:25:10+00:00 urn:sha1:85b09b3cbdaabbc8ee7e88247c78fb77ab81667b