| Age | Commit message (Collapse) | Author | Files | Lines | |
|---|---|---|---|---|---|
| 9 hours | install from the 26.04 archive instead of third-party sources | Luke Hoersten | 1 | -19/+15 | |
| - rpi-base: log2ram from the archive, drop the azlux repo (which still pointed at debian buster) - aws-s3-backup: apt awscli (v2) instead of pip v1; drop boto3, nothing used it - scrypted, koreader-sync: docker.io and docker-compose-v2 instead of the docker.com repo pinned to noble; the docker-ce removal lives in cleanup-third-party.yaml since the packages collide on files - miniflux: the archive package with a dbconfig preseed; drops the github binary download and the bundled unit - prometheus/client: note the nginx and postgres exporters are in apt - dendrite/build, nostr/build: unversioned golang-go instead of pinned golang-1.21-go and a hand symlink that shadowed the real go | |||||
| 2026-04-05 | Harden role security: file permissions, service binding, no_log, strict defaults | Luke Hoersten | 1 | -2/+4 | |
| - Add no_log: true to tasks that handle passwords/secrets - Tighten config file permissions (0644 -> 0600/0640 where appropriate) - Bind pleroma to 127.0.0.1 instead of 0.0.0.0 - Tighten ergo unix socket mode 0777 -> 0770 - Remove weak defaults; roles now fail explicitly if required vars not set | |||||
| 2022-09-05 | Minor version updates and bug fixes. | Luke Hoersten | 1 | -3/+0 | |
| 2021-07-25 | Lots of updates. | Luke Hoersten | 1 | -1/+1 | |
| 2021-07-18 | Tons of updates. | Luke Hoersten | 1 | -1/+1 | |
| 2020-08-08 | Added miniflux role. | Luke Hoersten | 1 | -0/+53 | |
 |
index : luke/ansible-roles | |
| Ansible roles for nth.io infrastructure | Luke Hoersten |
| summaryrefslogtreecommitdiff |