| Age | Commit message (Collapse) | Author | Files | Lines | |
|---|---|---|---|---|---|
| 2026-06-29 | certbot: scoped CF API token; gate prosody deploy hook on RENEWED_LINEAGE | Luke Hoersten | 1 | -2/+19 | |
| cred.conf.j2 now emits the single-line dns_cloudflare_api_token form (scoped Cloudflare API Token) instead of the legacy account-wide email + global API key. prosody.sh.j2 deploy hook now no-ops unless $RENEWED_LINEAGE matches the prosody vhost, so unrelated lineage renewals (haskell.social, etracapital.com) no longer report a spurious "Hook reported error code 1 / No certificate for host found". Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]> | |||||
| 2026-04-05 | Harden role security: file permissions, service binding, no_log, strict defaults | Luke Hoersten | 1 | -0/+1 | |
| - Add no_log: true to tasks that handle passwords/secrets - Tighten config file permissions (0644 -> 0600/0640 where appropriate) - Bind pleroma to 127.0.0.1 instead of 0.0.0.0 - Tighten ergo unix socket mode 0777 -> 0770 - Remove weak defaults; roles now fail explicitly if required vars not set | |||||
| 2025-05-29 | More cert fixes. | Luke Hoersten | 1 | -1/+1 | |
| 2025-05-29 | Fixed an error with overwriting certbot certs. | Luke Hoersten | 3 | -5/+5 | |
| 2024-07-29 | Cleaned up always-changed status tasks. | Luke Hoersten | 2 | -2/+2 | |
| 2024-07-29 | Fixed prosody cert installation hook. | Luke Hoersten | 1 | -1/+1 | |
| 2024-07-20 | Version updates. | Luke Hoersten | 1 | -1/+1 | |
| 2024-02-04 | Tons of updates to fix migration to new server. | Luke Hoersten | 1 | -1/+2 | |
| 2020-09-05 | Use proper ssl cert config for prosody. | Luke Hoersten | 4 | -17/+11 | |
| 2020-07-04 | Got ngircd + atheme services roles working. | Luke Hoersten | 1 | -1/+1 | |
| 2020-06-14 | Added postgresql for prosody. | Luke Hoersten | 4 | -5/+42 | |
| 2020-06-14 | Copy prosody keys over. | Luke Hoersten | 1 | -0/+14 | |
| 2020-05-14 | Added prosody role. | Luke Hoersten | 4 | -0/+52 | |
 |
index : luke/ansible-roles | |
| Ansible roles for nth.io infrastructure | Luke Hoersten |
| summaryrefslogtreecommitdiff |