src.nth.io/

summaryrefslogtreecommitdiff
path: root/rpi-base/tasks/main.yaml
AgeCommit message (Collapse)AuthorFilesLines
13 daysHarden role security: file permissions, service binding, no_log, strict defaultsLuke Hoersten1-0/+1
- Add no_log: true to tasks that handle passwords/secrets - Tighten config file permissions (0644 -> 0600/0640 where appropriate) - Bind pleroma to 127.0.0.1 instead of 0.0.0.0 - Tighten ergo unix socket mode 0777 -> 0770 - Remove weak defaults; roles now fail explicitly if required vars not set
2026-03-28Added soju role.Luke Hoersten1-1/+14
2026-03-23Fixed log rotation and log2ram sizing.Luke Hoersten1-0/+9
2024-07-20Added task to ensure log2ram is running.Luke Hoersten1-0/+4
2024-01-18Minor cleanup.Luke Hoersten1-5/+4
2022-10-22Added trusted keys and httpsLuke Hoersten1-1/+1
2022-10-21Added key signing for apt repos.Luke Hoersten1-2/+2
2022-09-09Removed deprecated apt_key ansible module.Luke Hoersten1-1/+4
2020-11-26Expanded yaml file extension name.Luke Hoersten1-0/+81