Commit Graph

414 Commits

Author SHA1 Message Date
staticsafe 26d4fa21f8 Fix small typo in ubuntu/site.yml 2017-11-27 14:21:49 -05:00
staticsafe 6a74202168 Add icinga-client role. 2017-11-27 14:20:22 -05:00
Sadiq Saif 084ee25fa9
Add some deny blocks to secure cache directories for tt-rss 2017-11-09 16:07:57 -05:00
Sadiq Saif 9bea7f7d08
Add vhosts for ttrss.sadiqsaif.com 2017-11-09 11:27:19 -05:00
Sadiq Saif 4dafe9ee93
Remove netdata vhosts
we are no longer using netdata
2017-11-09 11:10:36 -05:00
Sadiq Saif 760d2fe9df
turns out fastcgi_cache_path didn't need quoting 2017-10-29 14:40:01 -04:00
Sadiq Saif 662051312c
remove inactive parameter from fastcgi_cache_path 2017-10-29 14:32:16 -04:00
Sadiq Saif 310a8373ae
Add fcgicache nginx config block for global use 2017-10-29 14:27:37 -04:00
Sadiq Saif 8a8426e5d4 Remove location block from netdata http 2017-09-16 13:06:13 -04:00
Sadiq Saif d52252e0d9 Remove root variable from http netdata 2017-09-16 13:03:51 -04:00
Sadiq Saif becd78336d Update SSL certificates with new acme.sh locations 2017-09-16 13:00:53 -04:00
Sadiq Saif d2aed3cfae remove ACME location block and add it to http block 2017-09-16 12:21:31 -04:00
Sadiq Saif 1c1002be6e Add ACME location in netdat vhost 2017-09-16 12:17:34 -04:00
Sadiq Saif 62709d3731 Add some custom APT periodic task configuration
Ensure that the periodic APT cron task clears out old kernels and does unattended security upgrades
2017-08-06 16:24:25 -04:00
Sadiq Saif 7969f8908d Add 10periodic file, APT Periodic task config 2017-08-06 16:21:10 -04:00
Sadiq Saif 3f9ab5a693 Add unattended-upgrades to package list
subversion was removed as we don't need it anymore
2017-08-06 16:03:17 -04:00
Sadiq Saif b85519e0f1 Turn off access log for netdata vhost 2017-07-18 14:52:13 -04:00
Sadiq Saif 5d11eaaf47 fix server_name in netdata https vhost 2017-07-17 23:08:11 -04:00
Sadiq Saif 861b13471b only unsetup hosts need the initial package install 2017-07-17 23:02:32 -04:00
Sadiq Saif 2d6a0a42b3 update netdata proxy pass and add backend 2017-07-17 23:01:33 -04:00
Sadiq Saif 055458219e disable letsencrypt role for now
its broken with webroot method
2017-07-17 22:57:09 -04:00
Sadiq Saif 7bb3478ea7 add netdata LE and change to webroot use 2017-07-17 22:55:15 -04:00
Sadiq Saif 1ca6c8643c add site configurations for netdata.asininetech.net 2017-07-17 22:52:57 -04:00
Sadiq Saif fb6039aebf Update letsencrypt-renew
changes for webroot renewal
2017-07-16 19:43:34 -04:00
Sadiq Saif f7b40f6e28 Add "gzip_types" parameter for nginx gzip config 2017-07-07 09:40:20 -04:00
staticsafe f428fadf2b Typo in error_page configuration variable. 2017-06-28 13:02:53 -04:00
staticsafe 3f15c339ec Add custom 404 page for entropynet.net. 2017-06-28 12:58:34 -04:00
staticsafe e60c082e78 Add SSL session settings to nginx config. 2017-05-08 23:58:22 -04:00
staticsafe bc0645c412 We are moving to Mozilla's recommended settings for 'Modern' browsers. 2017-05-08 22:36:52 -04:00
staticsafe c80fc35887 We redirect all HTTP requests to their HTTPS equivalents. 2017-05-08 21:12:15 -04:00
staticsafe de8c801cb3 301 staticsafe.ca to sadiqsaif.com. 2017-03-18 18:31:37 +00:00
staticsafe 8130b10d7b lets try that port 80 thing again 2017-03-18 02:06:53 +00:00
staticsafe 9f3efeb9a2 Revert "Add port 80 listens for sadiqsaif.*"
This reverts commit bb2be78f67.
2017-03-18 02:00:25 +00:00
staticsafe bb2be78f67 Add port 80 listens for sadiqsaif.* 2017-03-18 01:57:01 +00:00
staticsafe feaa58b5ca Add a 301 return for sadiqsaif.ca. 2017-03-17 02:45:44 +00:00
staticsafe 1b8bb49e03 Add nginx config for sadiqsaif.com 2017-03-17 02:39:11 +00:00
staticsafe 2da2ba0312 add sadiqsaif.com to LE domain list. 2017-03-17 02:34:27 +00:00
staticsafe ef896a0f2f letsencrypt renew script had invalid arguments 2017-01-14 14:41:07 +00:00
staticsafe 0897a454ae PHP role is now installing required PHP libs.
Close issue #2
2017-01-14 14:17:50 +00:00
staticsafe f7bdbcd297 add some location directives for dokuwiki 2017-01-14 04:08:03 +00:00
staticsafe 0d09eae129 Add nginx service conditional to LetsEncrypt role.
Resolve issue #1
2017-01-14 03:51:43 +00:00
staticsafe 6b87ad2c87 add ssl_dhparam in nginx config options 2017-01-14 01:59:08 +00:00
staticsafe 7bc7afbb24 Fix error in TSOB's nginx config block 2017-01-14 01:12:37 +00:00
staticsafe 6c077a8f0a Remove rewrite statements now due to some parsing issues 2017-01-14 01:04:53 +00:00
staticsafe 822924ea95 Add all nginx sites to site.yml. 2017-01-14 00:17:51 +00:00
staticsafe 03276432f4 Add LetsEncrypt roles for webserver use. 2017-01-13 22:21:21 +00:00
staticsafe 98d8783038 Remove gzip_types directive 2017-01-13 03:19:08 +00:00
staticsafe 34bb61e026 Oops, wrong nginx variable name. 2017-01-13 03:15:16 +00:00
staticsafe 860dfd2a44 increase nginx's server_names_has_bucket_size to 128 2017-01-13 03:12:32 +00:00
staticsafe 14af637538 Upstream configuration probably doesn't need quotes 2017-01-13 03:05:20 +00:00
staticsafe 25ef8aee95 Add webserver role using jdauphant.nginx 2017-01-13 03:00:01 +00:00
staticsafe baf710fc32 PHP-FPM daemon should be in a started state. 2017-01-13 02:49:33 +00:00
staticsafe eb644482c3 Fix YAML syntax error in roles/php/tasks/main.yml 2017-01-13 02:45:22 +00:00
staticsafe 2ed429d06a Add new basic PHP role. 2017-01-13 02:43:11 +00:00
staticsafe f73a0972f5 Remove unbound from boot check list. 2017-01-12 20:27:22 +00:00
staticsafe 7bfc6267e1 We are no longer modifying host resolvers.
VPS provider defaults are sufficient.
2017-01-12 20:24:45 +00:00
staticsafe 05b4122862 Remove appservers-php and webservers-nginx roles.
We are going to be using Galaxy roles going forward.
2017-01-12 20:20:40 +00:00
staticsafe 01dd5a9491 Update cloudflare.conf with latest set of Cloudflare IPs from their docs. 2016-09-06 19:42:15 -04:00
staticsafe d0e17c7351 Remove uwsgi role as I don't really need it anymore. 2016-09-06 19:32:11 -04:00
staticsafe ee8dba40ee Fix indentation from last commit. 2016-09-06 19:25:04 -04:00
staticsafe 4f65a95591 Add letsencrypt to required packages list. 2016-09-06 19:23:38 -04:00
staticsafe 4690ace036 Use "127.0.0.1" instead of "::1" to prevent odd behaviour in mtr. 2016-09-06 19:18:52 -04:00
staticsafe c924387905 Better cipher settings for nginx. 2015-05-24 13:30:39 -04:00
staticsafe 550c81b78f Add a slightly modified playbook for Ubuntu systems.
- No need for nginx repo anymore.
2015-05-24 13:23:21 -04:00