Commit Graph

78 Commits

Author SHA1 Message Date
staticsafe fbb5391eae Permissions for pgbackrest binary should be 755. 2019-10-20 21:28:45 -04:00
staticsafe 74f35940f3 Add pgbackrest-install role 2019-10-20 21:02:36 -04:00
staticsafe ab33cd0200 Add yet another Bytespider range to block list to firewall rules. 2019-10-17 12:20:28 -04:00
staticsafe 7c7ff101e5 Missed a Bytespider crawler range 2019-10-17 12:03:15 -04:00
staticsafe f5d7c6dc39 Block aggressive Bytespider crawler across web servers 2019-10-17 11:58:42 -04:00
staticsafe afa8aa556c Add firewall rules to drop kiwifarms subnets. 2019-10-11 00:00:45 -04:00
staticsafe 7152d8d5f2 should be multiports 2019-10-04 09:44:14 -04:00
staticsafe d16ec626e1 add OUTPUT rules to allow DHCP on restricted nodes 2019-10-04 09:42:26 -04:00
staticsafe e419d3aefb add drop rule for 159.149.133.66 to deirdre.asininetech.net.rules.v4 2019-09-16 12:05:46 -04:00
staticsafe 4c23562144 add handlers to firewall-ruleset-deploy 2019-08-25 21:08:39 -04:00
staticsafe 3002276209 clean up of firewall rulesets
remove byte counters, remove chains that didn't need to be there
2019-08-21 23:42:07 -04:00
staticsafe 8e471b7254 add COMMIT after end of filter 2019-08-21 23:23:58 -04:00
staticsafe df177dd04b clear out packet values in demonreach.asininetech.net.rules.v4 2019-08-21 23:21:17 -04:00
staticsafe 83fcf86900 POSTROUTING should be in nat chain 2019-08-21 23:20:41 -04:00
staticsafe e86367ed83 add firewall rulesets for demonreach.asininetech.net. 2019-08-21 23:18:16 -04:00
staticsafe ab7979ce01 add firewall rulesets for grevane.asininetech.net. 2019-08-21 22:46:53 -04:00
staticsafe 135e9bd008 add firewall rulesets for erlking.asininetech.net. 2019-08-21 22:37:20 -04:00
staticsafe d411bc74dd add firewall rulesets for deirdre.asininetech.net. 2019-08-21 22:26:34 -04:00
staticsafe ee1e6fb76f add firewall rulesets for catsith.asininetech.net 2019-08-21 22:23:10 -04:00
staticsafe 8b77463939 turn off backups in firewall-ruleset-deploy/tasks/main.yml 2019-08-21 22:15:34 -04:00
staticsafe 985895c082 add firewall rulesets for waldo.asininetech.net. 2019-08-21 22:12:42 -04:00
staticsafe df3044c9f3 fix another error in gard.asininetech.net.rules.v6 2019-08-21 22:07:24 -04:00
staticsafe ecda411031 fix syntax error in gard.asininetech.net.rules.v6 2019-08-21 22:02:55 -04:00
staticsafe 70fb7c8212 maybe fully enclosed? 2019-08-21 22:00:48 -04:00
staticsafe 62530669c9 double quotes maybe? 2019-08-21 21:58:10 -04:00
staticsafe 89e35f402b add quotes around ansible_fqdn 2019-08-21 21:56:43 -04:00
staticsafe f1623be2e9 add firewall-ruleset-deploy playbook and gard's ruleset 2019-08-21 21:52:12 -04:00
staticsafe de780e0254 make sure iptables-persistent and netfilter-persistent is installed via common playbook 2019-08-21 18:45:56 -04:00
staticsafe 7b42ceeca2 Remove warn=false in ubuntu/roles/common/tasks/main.yml 2019-07-21 20:43:43 -04:00
staticsafe 8d6bcde072 set warn=False for non-module apt task 2019-07-21 20:43:06 -04:00
staticsafe 32190262bc stop using with_items for apt in ubuntu/roles/common/tasks/main.yml 2019-07-21 20:34:13 -04:00
staticsafe 26d749a670 make sure PATH is set in ubuntu/roles/apt-maintenance/files/apt-maintenance.sh 2019-07-14 08:18:44 -04:00
staticsafe c82b4f2ccf remove MAILTO from apt-maintenance.sh 2019-07-12 23:42:20 -04:00
staticsafe c1e39c3f73 remove insertafter from ubuntu/roles/apt-maintenance/tasks/main.yml 2019-07-12 23:40:21 -04:00
staticsafe e7865d16c9 Add MAILTO variable addition into apt-maintenance/tasks/main.yml 2019-07-12 23:39:01 -04:00
staticsafe 616b5c1a83 make sure /root/scripts exists 2019-07-12 23:13:48 -04:00
staticsafe 1ca719c43f Copy script to dif location and add cronjob to root 2019-07-12 23:11:51 -04:00
staticsafe e698c4a809 Change permission of script to 755 2019-07-12 11:30:46 -04:00
staticsafe cd6efefd3f turn off backups for apt-maintenance/tasks/main.yml 2019-07-10 10:15:54 -04:00
staticsafe d0452a3e95 modify apt-maintenance.sh to add a mailto addr 2019-07-10 10:13:44 -04:00
staticsafe acdb50458f Add apt-maintenance role 2019-07-07 20:00:42 -04:00
staticsafe e0f2bedf62 Use variable method for listing package installs in ubuntu/roles/icinga-client/tasks/main.yml 2019-02-03 13:35:19 -05:00
staticsafe 279b4e10f0 Modify icinga-client role to add some systemd options 2019-02-03 13:11:39 -05:00
Sadiq Saif 94ae12002a
Update package removal list
add snapd and lxcfs to removal list
2019-01-15 21:22:27 -05:00
staticsafe 1f81721ab6 Remove letsencrypt from packages list. 2019-01-12 15:13:10 -05:00
staticsafe 482bbc8cf1 add turn-off-motd-news role 2018-09-25 20:38:53 -04:00
staticsafe 40e6a57afa Add GD to the PHP extensions list 2018-06-10 15:40:42 -04:00
staticsafe f5d3828f3c Add some Ubuntu version conditionals to ubuntu/roles/php/tasks/main.yml 2018-06-10 13:11:12 -04:00
staticsafe 02e8237c42 Add MySQL server role 2018-06-10 12:41:02 -04:00
staticsafe f5683efd4b Make the icinga role Ubuntu version agnostic 2018-06-03 18:15:46 -04:00