Commit Graph

67 Commits

Author SHA1 Message Date
staticsafe
9aa40b3967 Clean up site.yml and move some other roles into their own yml files 2020-08-22 16:21:24 -04:00
staticsafe
b2bd30101b ssh-enforcement role should be run for unsetup hosts as well. 2020-08-22 15:59:38 -04:00
staticsafe
2bfed5b9ed add ssh-enforcement playbook 2020-08-22 15:47:23 -04:00
staticsafe
ce39f769a2 add ipset-deploy role 2020-04-14 21:42:03 -04:00
staticsafe
da7c56eeb5 Update ubuntu/site.yml for unattended-upgrades task 2019-10-29 10:37:11 -04:00
staticsafe
665d24a6cb fix typo in ubuntu/site.yml 2019-10-20 21:04:25 -04:00
staticsafe
74f35940f3 Add pgbackrest-install role 2019-10-20 21:02:36 -04:00
staticsafe
7705504cf7 add firewall-ruleset-deploy to site.yml 2019-08-21 21:53:38 -04:00
staticsafe
4761744224 add apt-maintenance defs in ubuntu/site.yml 2019-07-07 20:04:04 -04:00
staticsafe
f27f5135a4 common configuration should include turning off MOTD 2018-09-25 21:02:34 -04:00
staticsafe
df28d10f01 hosts group should be myubuntunodes 2018-09-25 20:40:33 -04:00
staticsafe
482bbc8cf1 add turn-off-motd-news role 2018-09-25 20:38:53 -04:00
staticsafe
4d992b8fc7 Add a LEMP stack combo to ubuntu/site.yml 2018-06-10 13:04:44 -04:00
staticsafe
e0e30edeb0 Add MySQL role to ubuntu/site.yml 2018-06-10 12:47:46 -04:00
staticsafe
a85dfac3fc Move webserver1's nginx config to its own YAML file 2018-04-08 14:38:42 -04:00
staticsafe
bf36cacc89 Remove LetsEncrypt role, it is no longer useful. 2018-04-08 14:35:06 -04:00
staticsafe
3c428e0781 Replace 8.8.8.8 with [::1] in ubuntu/site.yml 2018-02-12 10:34:16 -05:00
staticsafe
d0814a5657 Use wildcard v4 listeners in nginx 2018-02-06 11:42:11 -05:00
staticsafe
1874de7c22 nginx does not need to bind to a specific address
just bind to all addresses on the required ports
2018-01-14 20:28:16 -05:00
Sadiq Saif
6215dbcfc6
Remove netdata upstream 2017-12-17 23:58:00 -05:00
staticsafe
508e73ff39 Fix another typo in ubuntu/site.yml 2017-11-27 14:24:02 -05:00
staticsafe
26d4fa21f8 Fix small typo in ubuntu/site.yml 2017-11-27 14:21:49 -05:00
staticsafe
6a74202168 Add icinga-client role. 2017-11-27 14:20:22 -05:00
Sadiq Saif
084ee25fa9
Add some deny blocks to secure cache directories for tt-rss 2017-11-09 16:07:57 -05:00
Sadiq Saif
9bea7f7d08
Add vhosts for ttrss.sadiqsaif.com 2017-11-09 11:27:19 -05:00
Sadiq Saif
4dafe9ee93
Remove netdata vhosts
we are no longer using netdata
2017-11-09 11:10:36 -05:00
Sadiq Saif
760d2fe9df
turns out fastcgi_cache_path didn't need quoting 2017-10-29 14:40:01 -04:00
Sadiq Saif
662051312c
remove inactive parameter from fastcgi_cache_path 2017-10-29 14:32:16 -04:00
Sadiq Saif
310a8373ae
Add fcgicache nginx config block for global use 2017-10-29 14:27:37 -04:00
Sadiq Saif
8a8426e5d4 Remove location block from netdata http 2017-09-16 13:06:13 -04:00
Sadiq Saif
d52252e0d9 Remove root variable from http netdata 2017-09-16 13:03:51 -04:00
Sadiq Saif
becd78336d Update SSL certificates with new acme.sh locations 2017-09-16 13:00:53 -04:00
Sadiq Saif
d2aed3cfae remove ACME location block and add it to http block 2017-09-16 12:21:31 -04:00
Sadiq Saif
1c1002be6e Add ACME location in netdat vhost 2017-09-16 12:17:34 -04:00
Sadiq Saif
b85519e0f1 Turn off access log for netdata vhost 2017-07-18 14:52:13 -04:00
Sadiq Saif
5d11eaaf47 fix server_name in netdata https vhost 2017-07-17 23:08:11 -04:00
Sadiq Saif
861b13471b only unsetup hosts need the initial package install 2017-07-17 23:02:32 -04:00
Sadiq Saif
2d6a0a42b3 update netdata proxy pass and add backend 2017-07-17 23:01:33 -04:00
Sadiq Saif
055458219e disable letsencrypt role for now
its broken with webroot method
2017-07-17 22:57:09 -04:00
Sadiq Saif
1ca6c8643c add site configurations for netdata.asininetech.net 2017-07-17 22:52:57 -04:00
Sadiq Saif
f7b40f6e28 Add "gzip_types" parameter for nginx gzip config 2017-07-07 09:40:20 -04:00
staticsafe
f428fadf2b Typo in error_page configuration variable. 2017-06-28 13:02:53 -04:00
staticsafe
3f15c339ec Add custom 404 page for entropynet.net. 2017-06-28 12:58:34 -04:00
staticsafe
e60c082e78 Add SSL session settings to nginx config. 2017-05-08 23:58:22 -04:00
staticsafe
bc0645c412 We are moving to Mozilla's recommended settings for 'Modern' browsers. 2017-05-08 22:36:52 -04:00
staticsafe
c80fc35887 We redirect all HTTP requests to their HTTPS equivalents. 2017-05-08 21:12:15 -04:00
staticsafe
de8c801cb3 301 staticsafe.ca to sadiqsaif.com. 2017-03-18 18:31:37 +00:00
staticsafe
8130b10d7b lets try that port 80 thing again 2017-03-18 02:06:53 +00:00
staticsafe
9f3efeb9a2 Revert "Add port 80 listens for sadiqsaif.*"
This reverts commit bb2be78f67.
2017-03-18 02:00:25 +00:00
staticsafe
bb2be78f67 Add port 80 listens for sadiqsaif.* 2017-03-18 01:57:01 +00:00