Project

General

Profile

Activity

From 2018-12-01 to 2018-12-30

2018-12-30

14:44 Revision 802177b7 (duckcorp-infra): Orfeo: needs accounts resolution
It was removed in e8b3717 because Orfeo does not have historical VIP
shell accounts anymore, but certain services nee...
Marc Dequènes
13:41 Revision aad53888 (duckcorp-infra): dns: adjust rate limiting
Marc Dequènes
10:33 Revision f498ead5 (duckcorp-infra): Pond: experimenting with Bind DNSSEC support
Marc Dequènes
10:32 Revision 55ee712d (duckcorp-infra): Pond: update list of reverse zones
Marc Dequènes

2018-12-29

10:18 Revision a7da91d8 (duckcorp-infra): dns: add rate limiting
Marc Dequènes
08:31 Revision 6e731173 (duckcorp-infra): added duckcorp/www.milkypond.org
Marc Dequènes
07:59 Revision 9ab70ad9 (duckcorp-infra): dc-postfix: rework TLS security
* enforce server cipher order
* be more restrictive with mandatory secured connections
* smtpd?_tls_session_cache_dat...
Marc Dequènes

2018-12-28

16:35 Revision 7dcda2d6 (duckcorp-infra): www.duckcorp.org: webstats are no more
Removed Piwik/Matomo from the CSP. Marc Dequènes (Duck)
16:27 Revision 0cf9ae03 (duckcorp-infra): www.duckcorp.org: forgot alias to TLD
Marc Dequènes (Duck)
07:35 Revision e8b37173 (duckcorp-infra): Orfeo: not a shell server anymore
Marc Dequènes (Duck)

2018-12-27

07:04 Revision f968f7df (duckcorp-infra): unlock_host_encryption: failed when facts caching is expired
`system.boot.options` could not be defined because `_ip` depends on
facts, which prevented using any of the `system.b...
Marc Dequènes
07:03 Revision 112ade40 (duckcorp-infra): unlock_host_encryption: do not log passphrases
Marc Dequènes

2018-12-24

22:09 Revision 848bda6e (ansible-role-zabbix): enable selinux/zabbix_run_sudo for recent CentOS
Marc Dequènes (Duck)

2018-12-20

09:19 Revision f4d889a8 (duckcorp-infra): add a simplified view of the hosts<->services association
Marc Dequènes

2018-12-19

08:17 Revision 84711404 (duckcorp-infra): static.perso.duckcorp.org: ensure 'proxy_wstunnel' Apache mod...
Marc Dequènes
08:08 Revision df6e330d (duckcorp-infra): static.perso.duckcorp.org: no need for TLS to reach weechat o...
A recent update changed the behavior and the weechat certificate was not
accepted anymore. Weechat can bind on localh...
Marc Dequènes
08:00 Revision 75a83248 (duckcorp-infra): static.perso.duckcorp.org: weechat port was hardcoded
Marc Dequènes

2018-12-14

02:47 Revision b18c4706 (duckcorp-infra): added duckcorp/lists.duckcorp.org (web only)
Marc Dequènes
02:47 Revision f7f0da45 (duckcorp-infra): dc-web: remove manually managed vhost confdir
Marc Dequènes
02:33 Revision c1c28bf2 (duckcorp-infra): added duckland/calibre.hq.duckcorp.org (web only)
Marc Dequènes
02:13 Revision 3c210693 (duckcorp-infra): www.hq.duckcorp.org: fix DN for 'dc-duckland' group
Marc Dequènes
02:09 Revision cbeb6a63 (duckcorp-infra): added duckcorp/photos-ng.duckcorp.org (web only)
Marc Dequènes

2018-12-13

14:03 Revision c8355c25 (duckcorp-infra): added duckcorp/wiki.duckcorp.org (web only)
Marc Dequènes
13:46 Enhancement #640 (New): Migrate main wiki from Moinmoin to Mediawiki
See: https://www.mediawiki.org/wiki/MoinMoin
Would be better to be done with it before Buster and avoid double mig...
Marc Dequènes
12:51 DuckCorp Website Revision 0caafd0c (duckcorp-website): remove tracking
we were just looking are very basic visits stats, but we don't really
need it and it's best for privacy.
Marc Dequènes
12:50 Revision cd87ba9a (duckcorp-infra): www.duckcorp.org: prune useless files
Marc Dequènes
12:11 Revision 77ff0dab (duckcorp-infra): dc-web: install indexoverride data and config
Marc Dequènes
11:51 Revision 50d2c386 (duckcorp-infra): dc-web: install shared data
Marc Dequènes
11:12 Revision 04054cfc (duckcorp-infra): pki: remove useless certs
Marc Dequènes
11:04 Revision 3ea6b94f (duckcorp-infra): added DL/www.hq.duckcorp.org
Marc Dequènes
10:42 Revision c6d062d6 (duckcorp-infra): added DL/printer.hq.duckcorp.org
Marc Dequènes
10:41 work
* DL/printer.hq.duckcorp.org: fixed Cups CSS loading (see Debian#792731)
Marc Dequènes
10:10 Revision 5b710d38 (duckcorp-infra): radio.duckcorp.org: fix ProxyPassReverse
Marc Dequènes
09:57 Revision 01e5f906 (duckcorp-infra): dc-icecast: add ansible_managed tags
Marc Dequènes
09:53 Revision eea73e50 (duckcorp-infra): dc-ftp: fix mode
Marc Dequènes
09:52 Revision 0fae6ebe (duckcorp-infra): Merge branch 'radio'
Marc Dequènes
09:52 Revision 4f25165c (duckcorp-infra): added radio
Marc Dequènes
09:03 Revision 41dda944 (duckcorp-infra): dc-ftp: add ansible_managed tags
Marc Dequènes
08:59 Revision 09433a02 (duckcorp-infra): Merge branch 'ftp'
Marc Dequènes
08:58 Revision af35a124 (duckcorp-infra): added FTP installation
Marc Dequènes

2018-12-11

15:48 Enhancement #630 (Resolved): dovecot-antispam is obsolete
Applied in changeset commit:duckcorp-infra|70ea0c6c68d0195d95d4ee3c63831468f2b98eac. Marc Dequènes
15:48 Revision d6f87283 (duckcorp-infra): Merge branch 'dovecot_antispam_imapsieve'
Marc Dequènes
15:12 Revision 70ea0c6c (duckcorp-infra): dc-dovecot: replace obsolete 'antispam' plugin with 'imapsieve'
- update dc-spoolinger config as 'imapsieve' does not normalize line
endings like 'antispam' did
- also fix global ...
Marc Dequènes

2018-12-07

02:49 Revision 520b44df (duckcorp-infra): add playbook to unlock encrypted filesystems
Marc Dequènes

2018-12-06

19:11 Revision 2194c5f6 (duckcorp-infra): Elwing: enable initramfs_ssh and enable decrypting Elwing_dat...
Marc Dequènes
18:53 Revision 134fa877 (duckcorp-infra): ignore '__pycache__' directories
Marc Dequènes
18:52 Revision cdcd99e0 (duckcorp-infra): dc-base: move 'initramfs_ssh' parameter in the tree
Also fix the default value btw. Marc Dequènes
18:46 Revision d4a206f1 (duckcorp-infra): dc-base: take care of encrypted filesystems
Marc Dequènes
18:19 Revision 66944da3 (duckcorp-infra): dc-base: update initramfs after generating dropbear's host keys
Marc Dequènes
18:10 Revision 4e8a4d1c (duckcorp-infra): Merge branch 'Toushirou-NG'
Marc Dequènes
18:10 Revision daf34d8f (duckcorp-infra): add special vars to prepare Toushirou-NG
Marc Dequènes
18:10 Revision b51060f1 (duckcorp-infra): dc-base: reuse OpenSSH keys for dropbear-initramfs
Marc Dequènes
16:32 Revision 394eced5 (duckcorp-infra): web: vhosts cleanup in accounts
Marc Dequènes
16:12 Revision 171152bb (duckcorp-infra): lib/ansible_inventory: find_host_by_fqdn() is now case insens...
Marc Dequènes
16:12 Revision 2dad7ea1 (duckcorp-infra): adm_check_web: clarify when CNAME differs
Marc Dequènes
16:11 Revision e3e4bb8e (duckcorp-infra): adm_check_web: adapt to new scheme from the 'httpd' role
Marc Dequènes
14:44 Revision 67766a22 (duckcorp-infra): adm_check_mx: handle multiple MX1 and clarify the partially m...
Marc Dequènes
14:44 Revision 2d2eafd0 (duckcorp-infra): adm_check_mx: clarify the partially missing MX2
Marc Dequènes
14:43 Revision 60ca37cf (duckcorp-infra): adm_check_mx: fix MX2 check
- use the computed list of provided MX2
- fix result when provided MX2 list is empty
Marc Dequènes
12:15 Enhancement #602: Deploy Content Security Policy (CSP) and check other security headers
It works, even if finding the right setting may need some trial and error.
I've already setup certain vhosts and c...
Marc Dequènes
11:55 Enhancement #630 (In Progress): dovecot-antispam is obsolete
Marc Dequènes
10:56 Bug #259 (Resolved): Dicoweb should allow robots.txt
In recent versions dicoweb adds a _robots_ meta tag which allows to index the index page but not the results. Marc Dequènes
10:46 work
* roundcube: upgraded rcmcarddav plugin from pre-3.0.0 to 3.0.3
Marc Dequènes
09:58 Revision 9726d378 (duckcorp-infra): dc-dovecot: enable vacation-seconds SIEVE rules
Marc Dequènes
09:57 Revision 5ee863e9 (duckcorp-infra): dc-dovecot: enable spamtest SIEVE rules
Marc Dequènes
09:07 Revision 76c95ab8 (duckcorp-infra): webmail.duckcorp.org: replace unmaintained Roundcube 'sieveru...
Marc Dequènes
06:10 Revision 7badb0ca (duckcorp-infra): dc-dovecot: workaround for Debian#915687
Marc Dequènes
05:29 Revision b14d3d60 (duckcorp-infra): dc-dovecot: enable IMAP METADATA
Marc Dequènes
04:41 Revision 66f1a4bc (duckcorp-infra): shizuka-STAR.duckcorp.org: not need for document root
Marc Dequènes

2018-12-05

16:22 Revision 5bded476 (duckcorp-infra): update submodules
Marc Dequènes
14:33 Revision 67d85a02 (duckcorp-infra): stuff.milkypond.org: avoid duplicate headers
Marc Dequènes
09:43 Revision a67bcabf (duckcorp-infra): update submodules
Marc Dequènes
09:43 Revision a51cc37f (ansible-role-redmine): rewrite plugins_list generation to work on Python3 too
Marc Dequènes
09:22 Revision 18ef5eab (duckcorp-infra): update submodules
Marc Dequènes
09:22 Revision 30980af1 (duckcorp-infra): dc-web: lowercase status page vhost name to avoid duplicates
Marc Dequènes
07:56 Revision 218e55fb (duckcorp-infra): dc-accounts: fix hosts resolution order, broke FQDN resolutio...
Marc Dequènes
07:14 Revision 9c8196bf (duckcorp-infra): switch the controller to Python 3
Marc Dequènes
07:13 Revision 4de9bb8d (duckcorp-infra): fix E502
Marc Dequènes
06:59 Revision 51f50b55 (ansible-role-stunnel): fix E202
Marc Dequènes

2018-12-04

19:13 Revision e622a1c6 (duckcorp-infra): ignore more pedantic flake8 tests
Marc Dequènes
19:12 Revision 64ca35b6 (duckcorp-infra): added duckcorp/www.duckcorp.org
Marc Dequènes
17:45 DuckCorp Website Revision 01704986 (duckcorp-website): fix identifiers: no ending slash, not supported in earlier ...
Marc Dequènes
13:02 Revision c44433bb (duckcorp-infra): fix E122
Marc Dequènes
13:01 Revision 948b37ed (duckcorp-infra): fix E265
Marc Dequènes
13:00 Revision 10db18a8 (duckcorp-infra): vcs: prepare partition and directories
Marc Dequènes
12:59 Revision 9b1801d6 (duckcorp-infra): fix ANSIBLE0011
Marc Dequènes
12:58 Revision 5ad2d234 (duckcorp-infra): typo
Marc Dequènes
12:45 Revision 16c6bf14 (duckcorp-infra): mail: create mail storage partition
Marc Dequènes
12:28 Revision 9499819b (duckcorp-infra): added duckcorp/vcs-git-viewer.duckcorp.org
Marc Dequènes
05:01 Revision 06993aa2 (duckcorp-infra): add DICT server and client and duckcorp/dico.duckcorp.org web...
Marc Dequènes

2018-12-03

10:48 Revision 068e7350 (duckcorp-infra): dc-postfix: fix IPv6 quoting
Marc Dequènes
10:28 Revision 52672286 (duckcorp-infra): dl/l2tp: fix tunnel auth
Marc Dequènes
10:21 Revision a58b7f15 (duckcorp-infra): dl/l2tp: remove 'noccp' option
Marc Dequènes
04:19 Revision 1b91365b (duckcorp-infra): redmine: move vaulted variables in a specific file, easier to...
Marc Dequènes
04:09 Revision 18fece2a (duckcorp-infra): projects.duckcorp.org: setup local repositories
Marc Dequènes
04:08 Revision bb19663c (ansible-role-redmine): care about local repositories
Marc Dequènes

2018-12-01

09:29 Revision a712a5d1 (duckcorp-infra): added duckcorp/stuff.milkypond.org
Marc Dequènes
 

Also available in: Atom