Commit graph

28 commits

Author SHA1 Message Date
Dan Guido
aac052da46 this option is deprecated (#477) 2017-04-23 09:04:30 -04:00
Jack Ivanov
a7b06058cb remove the proxy role #440 (#457)
* remove the proxy role #440

* Separate facts. Make roles more independent from each other

move openssl to local tasks

move unneeded tasks
2017-04-20 18:00:17 -04:00
Dan Guido
b29772f146 prefer ed25519 2017-04-18 02:20:44 -04:00
Jauder Ho
5b2e13d18f Only enable ChaCha cipher (#412)
* Only enable ChaCha cipher

* Add back a few ciphers for compatability
2017-04-17 23:17:40 -04:00
Jack Ivanov
95e0134f21 1. Disable SSH key deploying if installation on existing server
2. Move to the ed25519 algorithm
3. Delete unneeded option RSAAuthentication
Fixes #272
2017-04-09 20:41:45 +02:00
brad2014
09e5d87c7b Minor name and documentation edits (#327) 2017-04-01 00:19:10 -04:00
Jack Ivanov
6facb6cb4f FreeBSD / HardenedBSD (#262)
* FreeBSD draft

ifconfig fix

Pre-tasks fixes

fix hardcoded IP

some refactoring

disable system-based tags

disable freebsd tags

FreeBSD vpn role

add defaults

ssh role freebsd

default fix

dns_adblocking freebsd

ubuntu dict fix

* HardenedBSD

update-users BSD

* Rebuild the kernel

docs changing
2017-03-18 12:22:07 +03:00
Jack Ivanov
c43ccc3898 iptables moved to the vpn role #61 2016-10-14 18:50:24 +03:00
Jack Ivanov
2cca45c967 additional tags 2016-10-10 15:32:14 +03:00
Jack Ivanov
4d731580b7 linting 2016-09-19 20:18:27 +03:00
Jack Ivanov
91688324ce additional functions 2016-08-28 23:19:41 +03:00
Jack Ivanov
97a00699b7 new tags 2016-08-28 23:04:59 +03:00
Jack Ivanov
05df4f0c04 unattended-upgrades moved to the security role 2016-08-28 22:11:39 +03:00
Evgeniy Ivanov
4284dd63aa rsyslog moved to the logging role 2016-08-28 22:06:33 +03:00
Jack Ivanov
0cd4084aa4 ssh fixes 2016-08-26 00:47:08 +03:00
Jack Ivanov
00e4bcc1ec security role and SSH fixes #77 2016-08-26 00:35:07 +03:00
Dan Guido
27421070b9 linting 2016-08-24 09:22:04 +02:00
Defunct
50f43dc601 revert systemd changes (2.2 only), identation normalization; 2016-08-23 02:02:57 +00:00
Evgeniy Ivanov
c51fe5dac0 run charon as non-root user #66 2016-08-21 20:32:31 +03:00
Evgeniy Ivanov
ba50abce8a make local ip changeable #67 2016-08-21 13:29:53 +03:00
Evgeniy Ivanov
e6090b8245 forwarding #61 2016-08-21 12:51:58 +03:00
Evgeniy Ivanov
de06b4fd9e security remarks 2016-08-20 16:24:00 +03:00
Evgeniy Ivanov
3fa75a081d new iptabes deployment #61 2016-08-20 16:22:14 +03:00
Evgeniy Ivanov
cfc38e3df1 Drop SMB traffic ##61 2016-08-20 15:19:46 +03:00
Dan Guido
f538ffe4e8 linting 2016-08-15 23:32:44 -04:00
jack
7a8d58783f Roles and Google cloud 2016-08-14 20:03:33 +03:00
jack
2f66b03880 EC2 Role; Loggin Role 2016-08-11 22:36:36 +03:00
jack
fff70293f1 Roles enabled 2016-08-11 11:54:34 +03:00