|
d7862918a6
|
bundles/nginx: set default X-Frame-Options to SAMEORIGIN
bundlewrap/pipeline/head This commit looks good
|
2020-08-18 15:07:43 +02:00 |
|
|
9f760f9a88
|
nodes/htz.ex42-1048908: remove grafana
bundlewrap/pipeline/head This commit looks good
|
2020-08-18 15:04:39 +02:00 |
|
|
5704fd94a1
|
nodes/htz-cloud.pirmasens: configure webserver and letsencrypt
|
2020-08-18 15:03:38 +02:00 |
|
|
72b5b8d880
|
nodes/htz.ex42-1048908: do not set security headers for webmail
|
2020-08-18 15:03:07 +02:00 |
|
|
17828a29f8
|
bundles/nginx: fix hsts header
bundlewrap/pipeline/head This commit looks good
|
2020-08-14 08:23:41 +02:00 |
|
|
79a5baa04e
|
htz.ex42-1048908: increase proxy timeout for matrix-media-repo
|
2020-08-07 17:50:53 +02:00 |
|
|
460b7d5375
|
htz.ex42-1048908: remove riot-web permalink prefix
bundlewrap/pipeline/head This commit looks good
|
2020-07-30 16:12:48 +02:00 |
|
|
087f4cbad9
|
htz.ex42-1048908: add buster-backports repo
bundlewrap/pipeline/head This commit looks good
|
2020-07-30 15:51:10 +02:00 |
|
|
83ff19f3fb
|
htz.ex42-1048908: fix matrix .well-known config
bundlewrap/pipeline/head This commit looks good
|
2020-07-30 15:37:39 +02:00 |
|
|
7986f6ee7d
|
bundles/letsencrypt: remove ocsp stapling
bundlewrap/pipeline/head This commit looks good
This causes problems with weechat and dovecot. Those certificates
are short-lived, so not having OCSP stapling is probably fine.
|
2020-07-26 18:48:37 +02:00 |
|
|
ae6e590bda
|
htz.ex42-1048908: add mx0.kunbox.net to letsencrypt
|
2020-07-26 18:46:08 +02:00 |
|
|
85c0abeb7e
|
make sure to use bundlewrap<4.0.0
bundlewrap/pipeline/head This commit looks good
|
2020-07-19 14:02:40 +02:00 |
|
|
f7eb0cc150
|
bundles/{letsencrypt,nginx}: fix ocsp stapling
bundlewrap/pipeline/head There was a failure building this commit
|
2020-07-19 12:10:19 +02:00 |
|
|
245559ee09
|
groups/locations: update
|
2020-07-19 12:09:34 +02:00 |
|
|
de632a7725
|
htz.ex42-1048908: add missing domains
bundlewrap/pipeline/head There was a failure building this commit
|
2020-07-19 11:26:12 +02:00 |
|
|
94c2c644a6
|
bundles/nginx: support PHP 7.3
|
2020-07-19 11:09:53 +02:00 |
|
|
0743283763
|
bundles/letsencrypt: use sorted() in domains.txt
|
2020-07-19 10:59:19 +02:00 |
|
|
31a1a88d13
|
bundles/nginx: use DEFAULTS for letsencrypt
|
2020-07-19 10:58:54 +02:00 |
|
|
ce0af62968
|
remove legacy nodes
bundlewrap/pipeline/head There was a failure building this commit
|
2020-07-05 17:00:35 +02:00 |
|
|
950897324c
|
bundles/mx-puppet-discord: add dependency on chown
|
2020-07-05 16:59:30 +02:00 |
|
|
291392d2ba
|
hostus.ovz-512: is dummy
bundlewrap/pipeline/head This commit looks good
somehow i'm not able to get this thing to boot reliably.
Will need to be fixed another day
|
2020-06-12 16:50:42 +02:00 |
|
|
0833b10d69
|
htz.ex42-1048908: update riot config
|
2020-06-12 16:48:55 +02:00 |
|
|
f47c9ea0a0
|
htz-cloud: keep cloud-init
bundlewrap/pipeline/head This commit looks good
|
2020-06-08 10:12:48 +02:00 |
|
|
2e92f9851a
|
bundles/apt: auto reboot after upgrade if needed
|
2020-06-08 10:08:16 +02:00 |
|
|
9bc4b4c149
|
nodes/ovh.39528a5b: third nameserver
bundlewrap/pipeline/head This commit looks good
|
2020-06-06 10:38:32 +02:00 |
|
|
75aa654f1c
|
nodes/gce.bind01: add to dns
|
2020-06-06 10:34:19 +02:00 |
|
|
507e28bc24
|
bundles/apt: remove cloud-init if found on node
|
2020-06-06 10:26:05 +02:00 |
|
|
7c53a13483
|
gce.bind01 / hostus.ovz-512: add
|
2020-06-06 10:20:58 +02:00 |
|
|
88083bb8c3
|
dns: update zonefiles
bundlewrap/pipeline/head This commit looks good
|
2020-06-06 07:18:41 +02:00 |
|
|
d3c6eb5b7d
|
add dns group
|
2020-06-06 06:28:21 +02:00 |
|
|
9d9e33977a
|
bundles/bind: add
bundlewrap/pipeline/head This commit looks good
|
2020-06-05 17:50:45 +02:00 |
|
|
d1236d6e25
|
bundles/nginx: add stub_status
bundlewrap/pipeline/head This commit looks good
|
2020-06-01 13:35:54 +02:00 |
|
|
1e475d8638
|
nodes/htz.ex42-1048908: more nginx vhosts
|
2020-06-01 13:33:33 +02:00 |
|
|
5f804ca3be
|
bundles/letsencrypt: add metadata to reload certificates and services
bundlewrap/pipeline/head This commit looks good
|
2020-06-01 12:33:25 +02:00 |
|
|
2a6547dfb7
|
bundles/cron: add
|
2020-06-01 11:54:28 +02:00 |
|
|
f0d962ab04
|
nodes/htz-cloud.sewfile: deploy nginx for seafile
bundlewrap/pipeline/head This commit looks good
|
2020-06-01 11:35:56 +02:00 |
|
|
85b3adf671
|
add proxy feature to nginx
|
2020-06-01 11:31:13 +02:00 |
|
|
3523edbcb4
|
bundles/nginx: ensure we're doing letsencrypt, since we're enforcing ssl
|
2020-06-01 11:17:52 +02:00 |
|
|
54467af6f5
|
bundles/jenkins-ci: fix metaproc name
|
2020-06-01 11:14:04 +02:00 |
|
|
943a7c1566
|
nodes/htz.ex42-1048908: move postgres roles and databases to bundles
bundlewrap/pipeline/head This commit looks good
|
2020-06-01 11:09:40 +02:00 |
|
|
033adc1f0b
|
move nginx and letsencrypt bundle to group "webserver"
bundlewrap/pipeline/head This commit looks good
|
2020-06-01 11:04:51 +02:00 |
|
|
36c8b90c4b
|
bundles/nginx: switch to TLS 1.2 and 1.3 only
bundlewrap/pipeline/head There was a failure building this commit
|
2020-06-01 11:01:00 +02:00 |
|
|
871341dd4b
|
bundles/riot-web: add nginx metadata
bundlewrap/pipeline/head There was a failure building this commit
|
2020-06-01 10:53:19 +02:00 |
|
|
c4330f866b
|
bundles/nginx: add deployment of vhost configs
|
2020-06-01 10:52:52 +02:00 |
|
|
dc9e8dc679
|
add letsencrypt bundle
|
2020-06-01 10:26:37 +02:00 |
|
|
04f2baacf4
|
nodes/htz.ex42-1048908: metadata apt/packages needs to be a dict
bundlewrap/pipeline/head This commit looks good
|
2020-05-29 20:15:04 +02:00 |
|
|
58a9683cfd
|
nodes/htz.ex42-1048908: more comments
bundlewrap/pipeline/head There was a failure building this commit
|
2020-05-29 20:13:34 +02:00 |
|
|
4362b0feb0
|
nodes/htz.ex42-1048908: add weechat packages
|
2020-05-29 20:12:06 +02:00 |
|
|
d136e90a3d
|
bundles/apt: no need to do minimal steps when doing unattended-upgrade
bundlewrap/pipeline/head This commit looks good
|
2020-05-29 20:06:33 +02:00 |
|
|
6d9e62e653
|
bundles/apt: fix typo
|
2020-05-29 19:58:21 +02:00 |
|