| Age | Commit message (Collapse) | Author | Files | Lines | |
|---|---|---|---|---|---|
| 13 days | Harden role security: file permissions, service binding, no_log, strict defaults | Luke Hoersten | 1 | -0/+1 | |
| - Add no_log: true to tasks that handle passwords/secrets - Tighten config file permissions (0644 -> 0600/0640 where appropriate) - Bind pleroma to 127.0.0.1 instead of 0.0.0.0 - Tighten ergo unix socket mode 0777 -> 0770 - Remove weak defaults; roles now fail explicitly if required vars not set | |||||
| 2026-03-28 | Added soju role. | Luke Hoersten | 1 | -1/+14 | |
| 2026-03-23 | Fixed log rotation and log2ram sizing. | Luke Hoersten | 1 | -0/+9 | |
| 2024-07-20 | Added task to ensure log2ram is running. | Luke Hoersten | 1 | -0/+4 | |
| 2024-01-18 | Minor cleanup. | Luke Hoersten | 1 | -5/+4 | |
| 2022-10-22 | Added trusted keys and https | Luke Hoersten | 1 | -1/+1 | |
| 2022-10-21 | Added key signing for apt repos. | Luke Hoersten | 1 | -2/+2 | |
| 2022-09-09 | Removed deprecated apt_key ansible module. | Luke Hoersten | 1 | -1/+4 | |
| 2020-11-26 | Expanded yaml file extension name. | Luke Hoersten | 1 | -0/+81 | |
