Timeline



Mar 16, 2018:

6:06 PM Changeset in darkpeak-services [a8b9a14e]ansiblekeycloakmatrixpleroma by Caolan McMahon <caolan.mcmahon@…>
update mastodon to latest version and serve via apache
6:06 PM Changeset in darkpeak-services [ebf2aa15]ansiblekeycloakmatrixpleroma by Caolan McMahon <caolan.mcmahon@…>
Use same version of ttrss as docker build until move to ansible is complete
5:48 PM Changeset in darkpeak-services [6c6fc4bb]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
trac: Few tweaks to trac configuration
3:54 PM Changeset in darkpeak-services [9d7ff370]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
trac: change subdomain bugs --> issues
3:39 PM Changeset in darkpeak-services [eaf3af2b]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
apache: Provide a way to generate SAML2 metadata automatically
12:57 PM Changeset in darkpeak-services [eadd025b]ansiblekeycloakmatrixpleroma by Caolan McMahon <caolan.mcmahon@…>
Add sabredav role
9:46 AM Changeset in darkpeak-services [795b337c]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
Ensure readme is still accurate and add missing dep for trac
12:21 AM Changeset in darkpeak-services [6cd99e5c]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
trac: Allow interwiki links to darkpeak wiki articles to work
12:01 AM Changeset in darkpeak-services [4d88f5fd]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
Add TODO note about trac/git integration

Mar 15, 2018:

11:09 PM Changeset in darkpeak-services [3cc489a8]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
trac: allow authenticated users to manage stuff
8:24 PM Changeset in darkpeak-services [7b9c733a]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
git: Nicer URLs for cgit and anonymous clones Got rid of the …
7:56 PM Changeset in darkpeak-services [b943a488]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
ipsilon: Avoid hard-coding version in more than one place
7:50 PM Changeset in darkpeak-services [d2975596]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
ipsilon: Avoid cloning and building sources where possible
7:39 PM Changeset in darkpeak-services [3e1ad49b]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
ipsilon: More branding and fix the idp.darkpeak.org homepage
4:24 PM Changeset in darkpeak-services [539a8c33]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
trac: disable built-in wiki and show the roadmap as the default …
3:36 PM Changeset in darkpeak-services [11b0564c]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
Add a TODO note about Trac/task-tracking
3:14 PM Changeset in darkpeak-services [8df9eeca]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
Add a trac role for task tracking

Mar 14, 2018:

8:17 PM Changeset in darkpeak-services [f829765e]ansiblekeycloakmatrixpleroma by Caolan McMahon <caolan.mcmahon@…>
Fix login and redirect flow for mediawiki using mod_php
11:30 AM Changeset in darkpeak-services [742af8fe]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
mediawiki: populate user prefs from the mellon session

Mar 13, 2018:

4:47 PM Changeset in darkpeak-services [fca5de60]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
git/ipsilon: Slightly better branding
3:37 PM Changeset in darkpeak-services [cf70956f]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
apache: attempt to fix redirection issues also, use temporary …
3:08 PM Changeset in darkpeak-services [09c201f4]ansiblekeycloakmatrixpleroma by Caolan McMahon <caolan.mcmahon@…>
remote_user auth for mediawiki Currently using /secure URL to force …
12:49 PM Changeset in darkpeak-services [3c1d5ab0]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
ipsilon: Add dark peak branding to the SSO login page
10:15 AM Changeset in darkpeak-services [30338c11]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
apache: Fix perms on generated SAML2 metadata
10:04 AM Changeset in darkpeak-services [c7573e2c]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
ttrss: No longer require that unzip command be installed
9:53 AM Changeset in darkpeak-services [64291be5]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
apache: Install the helper script for generating SAML2 metadata
12:27 AM Changeset in darkpeak-services [a0e85ae0]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
ttrss: move from nginx to apache and hook up SAML2 SSO auth

Mar 12, 2018:

11:49 PM Changeset in darkpeak-services [333e7568]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
sssd/ipsilon: Fetch uid field from the LDAP
10:47 PM Changeset in darkpeak-services [47feeb58]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
php-fpm: use fastcgi via apache for running php stuff
5:25 PM Changeset in darkpeak-services [4e177f8b]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
git: Prevent robots from hitting snapshot download links in cgit
4:02 PM Changeset in darkpeak-services [5a8520ac]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
Add an example role for demonstrating SAML2 SSO using Apache Mellon
3:50 PM Changeset in darkpeak-services [61634ab6]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
ipsilon: pre-generate idp metadata
2:28 PM Changeset in darkpeak-services [96e4f733]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
apache: allow services to use apache's mod_mellon for SAML2 auth
2:11 PM Changeset in darkpeak-services [fe5b9a07]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
apache: Break out some module-specific configuration
11:09 AM Changeset in darkpeak-services [b6bf17d3]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
apache: minor simplification
9:55 AM Changeset in darkpeak-services [e67d8805]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
ipsilon: delete redundant uwsgi.ini template
9:39 AM Changeset in darkpeak-services [215f9ebe]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
apache: set ServerName? globally
9:32 AM Changeset in darkpeak-services [676b92f3]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
ipsilon: remove redundant handler, fix wsgi process user/group
9:16 AM Changeset in darkpeak-services [2d371f47]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
ipsilon: port to apache from nginx and enable in prod playbook

Mar 11, 2018:

10:31 PM Changeset in darkpeak-services [b4b25cde]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
git: Only enable cgid if git role is to be installed
2:53 PM Changeset in darkpeak-services [4f752d86]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
znc/git: Migrate to apache web server from nginx
2:52 PM Changeset in darkpeak-services [e7908c65]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
apache: Add a role for apache web server

Mar 10, 2018:

10:11 PM Changeset in darkpeak-services [feca43dc]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
tls: Split cert installation into separate role It's not just for nginx!
1:33 PM Changeset in darkpeak-services [88e73a50]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
ipsilon: Install sssd config with correct permission and reload sssd
1:00 PM Changeset in darkpeak-services [9445672b]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
sssd: Move ifp config into ipsilon role

Mar 9, 2018:

9:43 AM Changeset in darkpeak-services [2ba4148d]ansiblekeycloakmatrixpleroma by Caolan McMahon <caolan.mcmahon@…>
use dest parameter for lineinfile module to also support ansible 2.2 …

Feb 20, 2018:

10:17 PM Changeset in darkpeak-example-services [83c9da3e] by Mat Booth <mat.booth@…>
Display user's full name after login
9:59 PM Changeset in darkpeak-example-services [9189b268] by Mat Booth <mat.booth@…>
Commit code formatting rules
5:28 PM Changeset in darkpeak-example-services [caddf2df] by Mat Booth <mat.booth@…>
Update project configuration
2:37 PM Changeset in darkpeak-services [53a14fc9]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
sssd/ipsilon: Enable and allow ipsilon access to the sssd infopipe dbus api
12:12 PM Changeset in darkpeak-services [83370115]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
znc: Avoid blowing away user data when re-provisioning with ansible
12:02 PM Changeset in darkpeak-services [e5c3bf5c]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
znc: ZNC doesn't support reloading, must be restarted
10:35 AM Changeset in darkpeak-services [23973407]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
Remove a TODO note. Further testing shows that what I thought might …

Feb 19, 2018:

11:23 AM Changeset in darkpeak-services [c22d151e]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
Add TODO notes about identity service
3:20 AM Changeset in darkpeak-example-services [472a64c5] by Mat Booth <mat.booth@…>
Fix markdown
3:15 AM Changeset in darkpeak-example-services [5c93cc30] by Mat Booth <mat.booth@…>
Update readme
2:13 AM Changeset in darkpeak-services [50c4a0fe]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
Add more TODO thoughts
2:04 AM Changeset in darkpeak-services [02923404]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
Add TODO note about ipsilon databases
1:54 AM Changeset in darkpeak-services [a5cb567a]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
ipsilon: When in dev mode, add an example service provider
1:28 AM Changeset in darkpeak-example-services [ec7ce988] by Mat Booth <mat.booth@…>
Fix saml landing page bug and simplify ldap anonymous handling.
12:58 AM Changeset in darkpeak-example-services [ef517cd1] by Mat Booth <mat.booth@…>
Turn into web projects

Feb 18, 2018:

11:50 PM Changeset in darkpeak-example-services [57826243] by Mat Booth <mat.booth@…>
Fix Eclipse project config
11:48 PM Changeset in darkpeak-example-services [56718ac0] by Mat Booth <mat.booth@…>
Add saml example application
2:15 PM Changeset in darkpeak-services [5fabf538]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
ipsilon: let the idp generate initial metadata.xml file
1:14 PM Changeset in darkpeak-services [acded7d3]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
ipsilon: Fix problem finding config files
12:10 PM Changeset in darkpeak-services [ded4ef7d]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
ipsilon: add missing dep on git
11:59 AM Changeset in darkpeak-services [dfa0bb7d]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
sssd: Allow openldap client tools to work This allows you to do, eg: …

Feb 17, 2018:

2:20 PM Changeset in darkpeak-example-services [cdc51c4b] by Mat Booth <mat.booth@…>
Update deps and refactor projects
1:01 PM Changeset in darkpeak-example-services [e6db6df5] by Mat Booth <mat.booth@…>
Convert to multimodule project

Feb 16, 2018:

11:29 PM Changeset in darkpeak-services [0e67dba6]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
ipsilon: disable sssd acount info for now
11:02 PM Changeset in darkpeak-services [352758f2]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
sssd: allow access to security services over dbus
10:26 PM Changeset in darkpeak-services [03a2a4fc]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
ipsilon: always use https for authentication things
9:59 PM Changeset in darkpeak-services [a059ba84]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
ipsilon: configure ipsilon, configure nginx and uwsgi
1:56 PM Changeset in darkpeak-services [69e9dd86]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
ipsilon: Add experimental role for SSO/SAML provider
11:13 AM Changeset in darkpeak-services [a1dd2510]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
Remove TODO note about failing gracefully. Brain fart: People with no …
11:10 AM Changeset in darkpeak-services [b4c21f99]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
git: add python deps needed for pretty-rendering source in cgit
11:00 AM Changeset in darkpeak-services [cbe76706]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
git: Add cron job to regenerate cgit's project list every 5 mins If …
10:44 AM Changeset in darkpeak-services [05c259bf]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
git: allow anonymous cloning of public repos over http cgit now has …
9:54 AM Changeset in darkpeak-services [17754b5d]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
sssd: Relax umask to allow cgit to traverse user repo directories
9:42 AM Changeset in darkpeak-services [1dee0a76]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
git: Add project list munging script for feeding into cgit
1:28 AM Changeset in darkpeak-services [e075f854]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
Add TODO note about git hosting
1:00 AM Changeset in darkpeak-services [0b2263be]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
git: enable WIP git role in prod playbook Also fix typo in mastodon …
12:45 AM Changeset in darkpeak-services [4663b79d]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
git: Force incoming user ssh connections to use gitolite-shell

Feb 15, 2018:

5:03 PM Changeset in darkpeak-services [68106b22]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
git: add repo-specific subdir
4:43 PM Changeset in darkpeak-services [a8475b72]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
git: create gitolite local dir, execute init script only when opening …
4:07 PM Changeset in darkpeak-services [1381b53e]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
git: add gitolite bootstrap script
3:56 PM Changeset in darkpeak-services [84eb303b]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
sssd: make homedirs a bit more private
3:41 PM Changeset in darkpeak-services [91e7f260]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
sssd: Configure pam to allow execution of "bootstrap" scripts After …
11:25 AM Changeset in darkpeak-services [667994d0]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
sssd: ansible likes to use sftp
11:14 AM Changeset in darkpeak-services [d01480b3]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
git: Ensure every home dir gets gitolite configuration
10:43 AM Changeset in darkpeak-services [5318be95]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
Add TODO note about branding
10:40 AM Changeset in darkpeak-services [4cb8338f]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
git: stub out a git role for gitolite and cgit

Feb 14, 2018:

4:27 PM Changeset in darkpeak-services [d6f28353]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
locales: more descriptive task name, more locales
3:50 PM Changeset in darkpeak-services [80e646ac]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
sssd: make pam create home directories when a user ssh's in
11:57 AM Changeset in darkpeak-services [a1ae89de]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
Better templatise the ldap config
11:47 AM Changeset in darkpeak-services [966cf788]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
ttrss: Fix command "unzip" not found when installing auth_ldap plugin
11:09 AM Changeset in darkpeak-services [aa3be795]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
sssd: Add dependency on generating GB locales
10:22 AM Changeset in darkpeak-services [19e42a3c]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
sssd: Configure sshd to pull public ssh keys directly from ldap using …

Feb 13, 2018:

12:08 PM Changeset in darkpeak-services [9693e7f3]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
sssd: Bind non-anonymously to allow retrieval of more privileged …

Feb 12, 2018:

3:33 PM Changeset in darkpeak-services [df455da7]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
irc: Configure znc to auth using pam Sasl has a pam backend, so let's …
2:44 PM Changeset in darkpeak-services [480dbf70]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
Add a TODO note about LDAP over TLS
2:35 PM Changeset in darkpeak-services [b4fe3802]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
sssd: Added a role for the sssd service NSS and PAM will now talk to …

Feb 10, 2018:

7:16 PM Changeset in darkpeak-services [14e789e4]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
nginx: Remove redundant user/group creation The nginx package itself …
3:40 PM Changeset in darkpeak-services [9a434e17]ansiblekeycloakmatrixpleroma by Edward Saxton <eddsax@…>
Add obviously missing migration step
3:39 PM Changeset in darkpeak-services [3ad7be66]ansiblekeycloakmatrixpleroma by Edward Saxton <eddsax@…>
Basics of a migration plan
3:29 PM Changeset in darkpeak-services [494293bd]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
Add note about ansible branch
3:26 PM Changeset in darkpeak-services [3f65a8c2]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
Readme file improvements
2:39 PM Changeset in darkpeak-services [4d4da826]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
php: playbook fails when ttrss role is commented out due to missing …
2:11 PM Changeset in darkpeak-services [9bbfd887]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
irc: avoid putting znc secrets in the nginx webroot
2:04 PM Changeset in darkpeak-services [731f4660]ansiblekeycloakmatrixpleroma by Caolan McMahon <caolan.mcmahon@…>
WIP: towards LDAP auth in TTRSS (not working yet)
12:53 PM Changeset in darkpeak-services [425776f1]ansiblekeycloakmatrixpleroma by Mat Booth <mat.booth@…>
Switch to libvirt friendly vagrant image
10:49 AM Changeset in darkpeak-services [3a4173a4]ansiblekeycloakmatrixpleroma by Caolan McMahon <caolan.mcmahon@…>
Add dev-playbook.retry to gitignores
10:48 AM Changeset in darkpeak-services [90eb2cd8]ansiblekeycloakmatrixpleroma by Caolan McMahon <caolan.mcmahon@…>
Add git submodule reminder to README

Jan 22, 2018:

10:50 PM Changeset in darkpeak-services [47faad4c]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Add a TODO list to the project
10:49 PM Changeset in darkpeak-services [615fbb10]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Initial version of TTRSS role

Jan 21, 2018:

9:09 PM Changeset in darkpeak-services [d5240093]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Minor tweaks to ZNC role
8:53 PM Changeset in darkpeak-services [eab34466]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Slightly more accurate task names
8:53 PM Changeset in darkpeak-services [ec828723]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Redis does not support reload, only restart
11:14 AM Changeset in darkpeak-services [a6308f85]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Use handlers to start znc, saslauthd
11:00 AM Changeset in darkpeak-services [8780552b]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Minor cosmetic change to YAML layout
10:57 AM Changeset in darkpeak-services [8e0bca8e]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Avoid accidental software upgrades
10:44 AM Changeset in darkpeak-services [cd2d5894]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
BUGFIX: Custom repos for mastodon were not being added correctly
10:41 AM Changeset in darkpeak-services [2f67749f]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Use a handler to start redis
10:35 AM Changeset in darkpeak-services [d2cb5202]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Use a handler to start mastodon

Jan 20, 2018:

11:15 PM Changeset in darkpeak-services [d23dc93d]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Cosmetic changes
11:07 PM Changeset in darkpeak-services [1bc98ac2]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Avoid upgrading packages as a side-effect of re-running playbooks
11:06 PM Changeset in darkpeak-services [fdd35d87]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Replace deprecated aliases with current equivalent values
10:57 PM Changeset in darkpeak-services [22da0f68]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Sort package list alphabetically
10:54 PM Changeset in darkpeak-services [9f92e793]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Remove duplicate tasks
12:06 PM Changeset in darkpeak-services [8ce257de]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Fix whitespace
12:00 PM Changeset in darkpeak-services [f9817aad]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Minor permissions tweaks
11:58 AM Changeset in darkpeak-services [92c5a4df]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Make php workers start on demand to save memory
11:57 AM Changeset in darkpeak-services [053d27a4]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Ensure php-fpm restarts if we change these directory permissions
11:56 AM Changeset in darkpeak-services [c5d8e8b1]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Remove the (now obsolete) default php-fpm pool
11:22 AM Changeset in darkpeak-services [01ade98a]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Run each php-fpm pool as a separate user This prevents an attacker …

Jan 19, 2018:

10:59 PM Changeset in darkpeak-services [a5017f02d]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Make mediawiki role use php-fpm role
9:27 PM Changeset in darkpeak-services [7e6e98c1]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Apparently these config values have to be listed in a specific order
9:10 PM Changeset in darkpeak-services [75c45701]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Copy and modify Caislean php-fpm role

Jan 15, 2018:

11:49 PM Changeset in darkpeak-services [b879b47f]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Make sure nginx reloads when moving from prod to dev mode.
11:48 PM Changeset in darkpeak-services [afc0ecf3]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Set postgresql DB locale to en_GB.UTF-8
11:47 PM Changeset in darkpeak-services [3b833272]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Use postgresql role to create postgres database for mediawiki
11:04 PM Changeset in darkpeak-services [779fa805]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Use postgresql role to create postgres user for mediawiki
10:56 PM Changeset in darkpeak-services [a51c2721]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Use postgresql role to install postgresql for mediawiki
10:53 PM Changeset in darkpeak-services [4612cd51]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Use postgresql role to create postgres user for mastodon
10:03 PM Changeset in darkpeak-services [f4abe1fe]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Use postgresql role to install postgresql for Mastodon.
9:30 PM Changeset in darkpeak-services [a5959eef]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Add postgresql playbook from Ansible Galaxy
9:08 PM Changeset in darkpeak-services [bc8ae337]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Move global variables into playbook There should be only one place …

Jan 14, 2018:

10:47 PM Changeset in darkpeak-services [03421238]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Follow files directory convention
10:30 PM Changeset in darkpeak-services [afe57589]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Enable HTTP/2
10:16 PM Changeset in darkpeak-services [50aedac5]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Switch off HSTS again We're probably not ready to start forcing TLS. …
10:03 PM Changeset in darkpeak-services [4b31703e]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Improve consistency of permissions across web services
10:03 PM Changeset in darkpeak-services [98912dc3]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Permissions and ownership consistency with Debian norms.
9:52 PM Changeset in darkpeak-services [6001c6a2]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Remove default nginx vhost web root.
9:46 PM Changeset in darkpeak-services [f569cebb]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Bugfix: ZNC serving 504 bad gateway errors This was caused by the …
9:26 PM Changeset in darkpeak-services [b16182b2]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Bugfix: Mastodon JS and CSS not being served.
8:52 PM Changeset in darkpeak-services [cd9d731b]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Only use self-signed TLS certs when developing locally.
8:34 PM Changeset in darkpeak-services [2f6bee51]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Rename and standardise TLS role
8:33 PM Changeset in darkpeak-services [0e49dc8a]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Lock down file and directory ownership, permissions
7:31 PM Changeset in darkpeak-services [1e400bd5]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Bugfix: incorrect permissions on mastodon web_root This was …
5:48 PM Changeset in darkpeak-services [4a29e1bc]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Install and configure the default vhost the same way as all the others
3:27 PM Changeset in darkpeak-services [b7f68264]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Update readme
3:27 PM Changeset in darkpeak-services [e8c5ef0d]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Tidy up nginx playbook
3:26 PM Changeset in darkpeak-services [9f4fc01f]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Restore some missing mastodon settings.
3:22 PM Changeset in darkpeak-services [638d31cb]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Enable HSTS (duration: 1 year) Note: not yet enabled for all subdomains.
3:17 PM Changeset in darkpeak-services [9158616e]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Extract desirable nginx settings from roles to common config file.
3:14 PM Changeset in darkpeak-services [910f26da]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Avoid failure due to part-installed configs
3:12 PM Changeset in darkpeak-services [14b85e16]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Ensure roles can set their own nginx roots
3:06 PM Changeset in darkpeak-services [f00ecaf8]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Move & update vhost configuration playbook.
3:04 PM Changeset in darkpeak-services [69d1564e]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Make default vhost match common vhost config
3:03 PM Changeset in darkpeak-services [0abafb6a]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Extract a common nginx vhost configuration
12:11 AM Changeset in darkpeak-services [78ebffb1]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Update to do list
12:05 AM Changeset in darkpeak-services [0af09eb4]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Separate log files for each nginx vhost

Jan 13, 2018:

11:37 PM Changeset in darkpeak-services [5df082c1]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Create webroot directory up front
10:29 PM Changeset in darkpeak-services [0f8eb0e9]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Extract some more global variables
10:09 PM Changeset in darkpeak-services [3b4d75e3]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Make variables defined in roles take lowest precedence.
10:00 PM Changeset in darkpeak-services [fa16810d]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Avoid breakage if {{ webroot }} changes between ansible runs It would …
9:55 PM Changeset in darkpeak-services [41af6ed1]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Make web root a global variable
8:43 PM Changeset in darkpeak-services [a6398921]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Remove clutter (retain only the link to online docs)
7:33 PM Changeset in darkpeak-services [84540dcd]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Separate playbooks for dev and production
6:52 PM Changeset in darkpeak-services [05264bbb]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Update todo list
5:45 PM Changeset in darkpeak-services [2a5c02ee]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Remove unused templates from nginx role
5:41 PM Changeset in darkpeak-services [15790bed]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Restore full playbook after reducing it for development
5:36 PM Changeset in darkpeak-services [aa23dff7]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Make mastodon depend on nginx role
5:03 PM Changeset in darkpeak-services [9a456aca]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Make znc depend on nginx role
4:56 PM Changeset in darkpeak-services [c10df8ce]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Make mediawiki role depend on nginx role
4:22 PM Changeset in darkpeak-services [56d17a5c]ansiblekeycloakmatrixpleroma by Richard King <richard@…>
Butcher Caislean's nginx role

Dec 17, 2017:

11:57 AM Changeset in darkpeak-services [b5433656]ansiblekeycloakmatrixpleroma by Caolan McMahon <caolan.mcmahon@…>
re-enable mastodon in playbook.yml mastodon's nginx config shouldn't …
11:56 AM Changeset in darkpeak-services [aa89d8ba]ansiblekeycloakmatrixpleroma by Caolan McMahon <caolan.mcmahon@…>
Turn off HTTP2 in mastodon nginx config It was messing up requests to …
11:50 AM Changeset in darkpeak-services [19e3a3fa]ansiblekeycloakmatrixpleroma by Caolan McMahon <caolan.mcmahon@…>
mastodon: fix redis ports and re-enable systemd services
Note: See TracTimeline for information about the timeline view.