| Age | Commit message (Collapse) | Author | Files | Lines | |
|---|---|---|---|---|---|
| 12 hours | install from the 26.04 archive instead of third-party sources | Luke Hoersten | 1 | -11/+0 | |
| - rpi-base: log2ram from the archive, drop the azlux repo (which still pointed at debian buster) - aws-s3-backup: apt awscli (v2) instead of pip v1; drop boto3, nothing used it - scrypted, koreader-sync: docker.io and docker-compose-v2 instead of the docker.com repo pinned to noble; the docker-ce removal lives in cleanup-third-party.yaml since the packages collide on files - miniflux: the archive package with a dbconfig preseed; drops the github binary download and the bundled unit - prometheus/client: note the nginx and postgres exporters are in apt - dendrite/build, nostr/build: unversioned golang-go instead of pinned golang-1.21-go and a hand symlink that shadowed the real go | |||||
| 32 hours | rpi-base: skip terminfo sync when the controller TERM has no entry | Luke Hoersten | 1 | -0/+5 | |
| infocmp fails when ansible runs from a terminal without a compiled terminfo entry (e.g. emacs eshell, TERM=emacs); treat that as skip instead of failing the play. | |||||
| 2026-04-05 | Harden role security: file permissions, service binding, no_log, strict defaults | Luke Hoersten | 1 | -0/+1 | |
| - Add no_log: true to tasks that handle passwords/secrets - Tighten config file permissions (0644 -> 0600/0640 where appropriate) - Bind pleroma to 127.0.0.1 instead of 0.0.0.0 - Tighten ergo unix socket mode 0777 -> 0770 - Remove weak defaults; roles now fail explicitly if required vars not set | |||||
| 2026-03-28 | Added soju role. | Luke Hoersten | 1 | -1/+14 | |
| 2026-03-23 | Fixed log rotation and log2ram sizing. | Luke Hoersten | 1 | -0/+9 | |
| 2024-07-20 | Added task to ensure log2ram is running. | Luke Hoersten | 1 | -0/+4 | |
| 2024-01-18 | Minor cleanup. | Luke Hoersten | 1 | -5/+4 | |
| 2022-10-22 | Added trusted keys and https | Luke Hoersten | 1 | -1/+1 | |
| 2022-10-21 | Added key signing for apt repos. | Luke Hoersten | 1 | -2/+2 | |
| 2022-09-09 | Removed deprecated apt_key ansible module. | Luke Hoersten | 1 | -1/+4 | |
| 2020-11-26 | Expanded yaml file extension name. | Luke Hoersten | 1 | -0/+0 | |
| 2020-08-01 | Added auto upgrades to base. | Luke Hoersten | 1 | -0/+4 | |
| 2020-06-07 | various updates | Luke Hoersten | 1 | -9/+9 | |
| 2020-05-01 | Standardize my shell. | Luke Hoersten | 1 | -0/+1 | |
| 2020-05-01 | Fixed small log2ram size. | Luke Hoersten | 1 | -1/+9 | |
| 2020-02-15 | Added better use for admin user. | Luke Hoersten | 1 | -0/+26 | |
| 2020-02-10 | Updated some permissions on conf files | Luke Hoersten | 1 | -1/+1 | |
| 2020-02-09 | Base is rpi specific. | Luke Hoersten | 1 | -0/+42 | |
 |
index : luke/ansible-roles | |
| Ansible roles for nth.io infrastructure | Luke Hoersten |
| summaryrefslogtreecommitdiff |