| Age | Commit message (Collapse) | Author | Files | Lines |
|---|
|
- rpi-base: log2ram from the archive, drop the azlux repo (which still
pointed at debian buster)
- aws-s3-backup: apt awscli (v2) instead of pip v1; drop boto3, nothing
used it
- scrypted, koreader-sync: docker.io and docker-compose-v2 instead of
the docker.com repo pinned to noble; the docker-ce removal lives in
cleanup-third-party.yaml since the packages collide on files
- miniflux: the archive package with a dbconfig preseed; drops the
github binary download and the bundled unit
- prometheus/client: note the nginx and postgres exporters are in apt
- dendrite/build, nostr/build: unversioned golang-go instead of pinned
golang-1.21-go and a hand symlink that shadowed the real go
|
|
infocmp fails when ansible runs from a terminal without a compiled
terminfo entry (e.g. emacs eshell, TERM=emacs); treat that as skip
instead of failing the play.
|
|
- Add no_log: true to tasks that handle passwords/secrets
- Tighten config file permissions (0644 -> 0600/0640 where appropriate)
- Bind pleroma to 127.0.0.1 instead of 0.0.0.0
- Tighten ergo unix socket mode 0777 -> 0770
- Remove weak defaults; roles now fail explicitly if required vars not set
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
