Mercurial > repos > other > Puppet
graph
-
Update to a newer Python moduleFri, 03 Jan 2020 19:56:04 +0000, by IBBoard
-
Add wget so that we can download files like a normal personTue, 31 Dec 2019 13:49:38 +0000, by IBBoard
-
Mask "clamav@amavisd" service to save memoryTue, 31 Dec 2019 13:49:02 +0000, by IBBoard
-
Blacklist more invalid SSH usernamesMon, 30 Dec 2019 17:00:10 +0000, by IBBoard
-
Filter new log line from puppet-apply outputSun, 29 Dec 2019 21:00:27 +0000, by IBBoard
-
Set a sensible default timezone for VPSSun, 29 Dec 2019 20:56:00 +0000, by IBBoard
-
Remove some version specific code that can use virtual packagesSun, 29 Dec 2019 16:58:25 +0000, by IBBoard
-
Make PIM site skip CSP headers - NextCloud manages themSun, 29 Dec 2019 16:48:04 +0000, by IBBoard
-
Update Hiera to fix warningsSun, 29 Dec 2019 16:47:31 +0000, by IBBoard
-
Add a way to skip setting CSPSun, 29 Dec 2019 16:43:55 +0000, by IBBoard
-
Re-merge CentOS 7 vs 8 deviationsSun, 29 Dec 2019 11:00:05 -0500, by IBBoard
-
Fix more CentOS 7 vs 8 differencesSun, 29 Dec 2019 10:57:43 -0500, by IBBoard
-
Fix naming of files for new VPS overridesSun, 29 Dec 2019 10:57:18 -0500, by IBBoard
-
Update OBS key for IBBoard reposSun, 29 Dec 2019 10:56:26 -0500, by IBBoard
-
Update repo handlingSun, 22 Dec 2019 14:46:29 -0500, by IBBoard
-
Update Apache module to get CentOS 8 supportSun, 22 Dec 2019 14:43:29 -0500, by IBBoard
-
Merge Puppet divergences and fix SSL chain issues it causedSun, 29 Dec 2019 15:31:28 +0000, by IBBoard
-
Fix Yum update check to handle hyphenated aliasesSun, 29 Dec 2019 14:54:45 +0000, by IBBoard
-
Change header types and add module to fix NextCloud header checksSun, 29 Dec 2019 12:25:14 +0000, by IBBoard
-
Add more bad SSH usersWed, 25 Dec 2019 12:04:26 +0000, by IBBoard
-
Use generic, non-version-specific package name for CertbotSun, 22 Dec 2019 09:41:45 -0500, by IBBoard
-
Enable console over admin shell via serialSun, 22 Dec 2019 09:31:31 -0500, by IBBoard
-
Add some missing command prompt dependenciesSun, 22 Dec 2019 06:58:44 -0500, by IBBoard
-
Make EPEL work on multiple versions of CentOSSun, 22 Dec 2019 06:57:52 -0500, by IBBoard
-
Make sure that web server files come after package creates dirSat, 21 Dec 2019 14:31:41 -0500, by IBBoard
-
Add config for new serverSat, 21 Dec 2019 14:30:50 -0500, by IBBoard
-
Update configs for Puppet 6Sat, 21 Dec 2019 14:19:47 -0500, by IBBoard
-
Add "translate" module used by MySQL moduleSat, 21 Dec 2019 14:12:10 -0500, by IBBoard
-
Update MySQL moduleSat, 21 Dec 2019 14:11:43 -0500, by IBBoard
-
Merge back in to MasterFri, 20 Dec 2019 15:36:56 +0000, by IBBoard
-
Change owner/group on Nextcloud for easy upgrade puppet-3.6Fri, 20 Dec 2019 15:17:43 +0000, by IBBoard
-
Make Content-Security-Policy cleaner and easier to set puppet-3.6Wed, 18 Dec 2019 21:22:50 +0000, by IBBoard
-
Blacklist two media players, ghost, webmaster and others puppet-3.6Sat, 09 Nov 2019 20:00:36 +0000, by IBBoard
-
Blacklist more user probes - a database and a generic "service" puppet-3.6Sun, 27 Oct 2019 16:59:42 +0000, by IBBoard
-
Blacklist more bad usernames, including "UI" in German puppet-3.6Fri, 06 Sep 2019 19:54:36 +0100, by IBBoard
-
Blacklist more usernames that Script Kiddies probe puppet-3.6Thu, 15 Aug 2019 18:20:16 +0100, by IBBoard
-
Blacklist more usernames including "administrateur" puppet-3.6Sat, 27 Jul 2019 15:28:16 +0100, by IBBoard
-
Blacklist more bad usernames that skiddies probe puppet-3.6Sat, 27 Jul 2019 15:23:20 +0100, by IBBoard
-
Update SSL config for newer, more secure browsers puppet-3.6Sat, 20 Jul 2019 16:13:52 +0100, by IBBoard
-
Fix "blacklist three identical characters" pattern puppet-3.6Sun, 14 Jul 2019 10:47:38 +0100, by IBBoard
-
Add a load more blacklisted SSH usernames (from probes) puppet-3.6Sat, 08 Jun 2019 13:37:19 +0100, by IBBoard
-
Increase the security for the common CSP headers puppet-3.6Wed, 29 May 2019 19:52:31 +0100, by IBBoard
-
Blacklist more usernames no-one will ever log in with puppet-3.6Wed, 29 May 2019 19:51:42 +0100, by IBBoard
-
Allow locally hosted fonts in Content-Security-Policy puppet-3.6Mon, 27 May 2019 20:08:57 +0100, by IBBoard
-
Blacklist even more commonly probed SSH users puppet-3.6Mon, 27 May 2019 11:28:31 +0100, by IBBoard
-
Add "bcmath" module to PHP at Wordpress's suggestion puppet-3.6Sun, 19 May 2019 15:51:15 +0100, by IBBoard
-
Blacklist more usernames we'll never see that come in SSH probes puppet-3.6Sat, 11 May 2019 09:17:38 +0100, by IBBoard
-
Separate the two Fail2ban SSH rules in iptables puppet-3.6Wed, 17 Apr 2019 12:05:32 +0100, by IBBoard
-
Separate out SSH repeats from web/email repeats puppet-3.6Wed, 17 Apr 2019 12:00:31 +0100, by IBBoard
-
Add a named.conf file to control cache/memory size puppet-3.6Wed, 10 Apr 2019 20:11:55 +0100, by IBBoard
-
Add imagick for PHP to staisfy a NextCloud recommendation puppet-3.6Sun, 10 Mar 2019 10:07:52 +0000, by IBBoard
-
Update logwatch fail2ban handling for v0.10 log changes puppet-3.6Tue, 12 Feb 2019 21:04:51 +0000, by IBBoard
-
Switch to new Postfix SASL filter (no longer a separate file) puppet-3.6Sun, 10 Feb 2019 16:13:24 +0000, by IBBoard
-
Reduce Apache Instaban ban duration to reduce reboot time puppet-3.6Sat, 02 Feb 2019 16:30:40 +0000, by IBBoard
-
Add latest Logwatch "named" script to handle DNS log changes puppet-3.6Fri, 14 Dec 2018 20:07:09 +0000, by IBBoard
-
Handle Dovecot "logged out" messages in LogWatch puppet-3.6Fri, 14 Dec 2018 19:58:09 +0000, by IBBoard
-
Try to fix "Garbage after numerical service in server description" puppet-3.6Fri, 07 Dec 2018 19:54:20 +0000, by IBBoard
-
Set group sticky bit on all sites to ease collaboration puppet-3.6Fri, 07 Dec 2018 19:52:50 +0000, by IBBoard
-
Add PHP "intl" module so NextCloud doesn't use fallback implementation puppet-3.6Sat, 20 Oct 2018 10:07:51 +0100, by IBBoard
-
Handle possible "undef" from FileMagic that causes warnings puppet-3.6Sat, 12 May 2018 10:05:12 +0100, by IBBoard
-
Add missing dependencies for SpamAssassin rules puppet-3.6Mon, 07 May 2018 09:40:41 +0100, by IBBoard
-
Add a find time to custom SSH rule as it is low and slow puppet-3.6Sat, 31 Mar 2018 10:19:03 +0100, by IBBoard
-
Add extra headers for improved security practice puppet-3.6Sat, 03 Mar 2018 14:20:06 +0000, by IBBoard
-
Try to fix NextCloud warnings about "wrong" headers puppet-3.6Sat, 17 Feb 2018 20:59:37 +0000, by IBBoard
-
Fix case of <HOST> tag so that rule pulls the IP puppet-3.6Sat, 10 Feb 2018 13:32:51 +0000, by IBBoard
-
Tighten up some Fail2Ban rules (including SSH probes with only insecure keys) puppet-3.6Tue, 06 Feb 2018 20:42:49 +0000, by IBBoard
-
Expand PHP OpCache config in line with NextCloud recommendations puppet-3.6Fri, 01 Sep 2017 11:36:16 +0100, by IBBoard
-
Change MySQL/MariaDB settings to support all Unicode puppet-3.6Fri, 01 Sep 2017 11:29:55 +0100, by IBBoard
-
Completely remove GG after running "puppet apply" puppet-3.6Wed, 03 May 2017 21:00:04 +0100, by IBBoard
-
Add a config fragment (for 404s) to BDStrike site puppet-3.6Mon, 17 Apr 2017 16:50:58 +0100, by IBBoard
-
Remove lktutoring.com - it expired in December puppet-3.6Tue, 04 Apr 2017 19:48:44 +0100, by IBBoard
-
Add custom log format - combined plus requested domain puppet-3.6Sun, 02 Apr 2017 20:09:13 +0100, by IBBoard
-
Make the IBBoard repo config go away, rather than just leaving it undefined puppet-3.6Sat, 01 Apr 2017 10:54:09 +0100, by IBBoard
-
IBBoard repo is no longer necessary and has been removed! puppet-3.6Fri, 31 Mar 2017 21:00:58 +0100, by IBBoard
-
Move all sites to separate LetsEncrypt certs to make adding future domains easier puppet-3.6Thu, 30 Mar 2017 20:41:18 +0100, by IBBoard
-
Remove slash in redirect because group catches path slash puppet-3.6Tue, 28 Mar 2017 21:12:49 +0100, by IBBoard
-
Make sure that we still redirect to non-www if we want it puppet-3.6Tue, 28 Mar 2017 21:05:12 +0100, by IBBoard
-
Swap GlitterGoth to its own Let's Encrypt cert puppet-3.6Tue, 28 Mar 2017 20:56:53 +0100, by IBBoard
-
Update test machine IPs to match new DHCP pool puppet-3.6Tue, 28 Mar 2017 20:47:45 +0100, by IBBoard
-
Restructure HTTPS certificates and multiple TLD sites for clarity puppet-3.6Tue, 28 Mar 2017 20:46:35 +0100, by IBBoard
-
Remove now deprecated mcrypt extension - all scripts now use openssl puppet-3.6Sun, 26 Mar 2017 16:53:34 +0100, by IBBoard
-
Remove mod_auth_token and replace with mod_xsendfile puppet-3.6Sat, 25 Mar 2017 20:18:13 +0000, by IBBoard
-
Make IP on redirects optional (defaults to primary IP) puppet-3.6Sat, 25 Mar 2017 12:05:23 +0000, by IBBoard
-
Add OLE detection to SpamAssassin without ClamAV puppet-3.6Thu, 09 Feb 2017 20:54:30 +0000, by IBBoard
-
Make GG DB backup less frequent now that site is closing puppet-3.6Wed, 18 Jan 2017 21:13:20 +0000, by IBBoard
-
Block another annoying IP with a firewall rule puppet-3.6Mon, 09 Jan 2017 21:06:10 +0000, by IBBoard
-
Override minimum UID for Dovecot/IMAP, as we use old "500+ is users" range puppet-3.6Sat, 17 Dec 2016 12:01:55 +0000, by IBBoard
-
Firewall Baidu's new Brazillian IP range for being to agressive puppet-3.6Sat, 17 Dec 2016 12:01:16 +0000, by IBBoard
-
Fix "direct under CA" custom conditions and sites that use "cert named after domain" pattern puppet-3.6Fri, 11 Nov 2016 21:04:13 +0000, by IBBoard
-
Add Certbot packages we depend on for commands and providing certs puppet-3.6Fri, 11 Nov 2016 21:02:09 +0000, by IBBoard
-
Do not supply incorrect CA chain for GG Test site puppet-3.6Fri, 11 Nov 2016 18:17:46 +0000, by IBBoard
-
Remove (hopefully) redundant Spamhaus checks - Postscreen should do this puppet-3.6Fri, 04 Nov 2016 20:55:22 +0000, by IBBoard
-
Be less agressive with blocking on the grounds of SPF puppet-3.6Thu, 06 Oct 2016 19:02:30 +0100, by IBBoard
-
Fix rookie cron mistake - don't run Postwhite EVERY MINUTE! puppet-3.6Sun, 18 Sep 2016 07:22:22 +0100, by IBBoard
-
Swap from manual Postscreen whitelist to Postwhite generated whitelist puppet-3.6Tue, 13 Sep 2016 20:27:22 +0100, by IBBoard
-
Add missing "permit" on Postscreen whitelist lines puppet-3.6Sat, 03 Sep 2016 20:31:35 +0100, by IBBoard
-
Blacklist more spamming IPs (with a ######.info domain) puppet-3.6Sat, 03 Sep 2016 14:28:56 +0100, by IBBoard
-
Disable PCRE JIT to stop SELinux giving "denied execmem" for Apache puppet-3.6Sat, 13 Aug 2016 13:44:01 +0100, by IBBoard
-
Blank some Apache configs to prevent httpd update breaking the server puppet-3.6Wed, 20 Jul 2016 20:31:22 +0100, by IBBoard
-
Ban IODC bot, because they can't behave and don't have robots.txt instructions puppet-3.6Tue, 19 Jul 2016 20:25:44 +0100, by IBBoard
-
Redirect dumb bots that removed the ID number to the main module page puppet-3.6Fri, 08 Jul 2016 20:34:29 +0100, by IBBoard
-
Make sure that we're detecting and serving 7zip and RAR files correctly puppet-3.6Wed, 29 Jun 2016 20:49:56 +0100, by IBBoard
-
Make sure that custom config comes before site configs puppet-3.6Tue, 28 Jun 2016 20:36:42 +0100, by IBBoard
-
Make sure our websites load after ALL other Apache config puppet-3.6Sat, 04 Jun 2016 14:07:37 +0100, by IBBoard
-
Make sure that we don't leak PHP source code if something breaks puppet-3.6Sat, 04 Jun 2016 14:06:15 +0100, by IBBoard
-
Make sure that HTTPS redirects have the full set of headers puppet-3.6Sat, 04 Jun 2016 14:05:14 +0100, by IBBoard
-
Add more Postscreen whitelisting, and a private section puppet-3.6Sat, 21 May 2016 15:32:13 +0100, by IBBoard
-
Lock down Apache headers for security, based on https://securityheaders.io/ puppet-3.6Sat, 14 May 2016 17:10:10 +0100, by IBBoard
-
Make sure that we're always setting HSTS headers, even when cannonicalising domains puppet-3.6Sat, 23 Apr 2016 16:28:47 +0100, by IBBoard
-
Add PayPal IPs to whitelist so that they don't get delayed puppet-3.6Thu, 21 Apr 2016 20:53:37 +0100, by IBBoard
-
Avoid SELinux warnings by disabling bytecode support puppet-3.6Tue, 22 Mar 2016 21:09:25 +0000, by IBBoard
-
Stop Bind trying IPv6, as we only have a link-local IP puppet-3.6Sun, 13 Mar 2016 19:58:17 +0000, by IBBoard
-
Set up a recursive localhost-only Bind server (assuming RH's safe and sane default configs) puppet-3.6Wed, 24 Feb 2016 20:21:44 +0000, by IBBoard
-
Patch isn't a standard package on a minimal install. Make sure we have it. puppet-3.6Tue, 16 Feb 2016 20:26:00 +0000, by IBBoard
-
Reduce the number of spare servers, because we're quiet and need spare memory puppet-3.6Sun, 14 Feb 2016 20:04:04 +0000, by IBBoard
-
Add another regular command to check that we've not got services requiring a restart puppet-3.6Wed, 27 Jan 2016 20:18:32 +0000, by IBBoard
-
Remove repo checking cruft from potential Yum Check Update cron job output puppet-3.6Tue, 26 Jan 2016 20:15:23 +0000, by IBBoard
-
Make sure that we don't get Yum just emailing us "I updated my metadata for the repos" puppet-3.6Sun, 24 Jan 2016 20:11:51 +0000, by IBBoard
-
Reduce opcache memory usage because it doesn't use that much puppet-3.6Fri, 22 Jan 2016 20:27:16 +0000, by IBBoard
-
Add body checks to emails for the minority of obvious spam that aren't caught puppet-3.6Sat, 16 Jan 2016 11:01:09 +0000, by IBBoard
-
Follow the documentation properly and specify dport, not just port puppet-3.6Sat, 16 Jan 2016 11:00:38 +0000, by IBBoard
-
Whitelist Google's IPs so that they don't get greylisted puppet-3.6Sun, 10 Jan 2016 20:24:22 +0000, by IBBoard
-
Put postscreen back (our second SMTP line seems to have overridden it) puppet-3.6Tue, 05 Jan 2016 21:00:52 +0000, by IBBoard
-
Make sure that config file changes for changes trigger a reload puppet-3.6Sun, 03 Jan 2016 20:48:38 +0000, by IBBoard
-
Make sure that Amavis daemon is running so mail gets delivered after reboot! puppet-3.6Sun, 03 Jan 2016 20:13:19 +0000, by IBBoard
-
Drop the number of spare servers to save some memory when we normally only have a couple of processes at once puppet-3.6Wed, 23 Dec 2015 11:16:17 +0000, by IBBoard
-
Add mlocate as another core package, since it wasn't on our (very) minimal CentOS 7 install puppet-3.6Tue, 24 Nov 2015 20:48:36 +0000, by IBBoard
-
New LogRotate is picky about usernames for security reasons. Fix it for Trac logs. puppet-3.6Sat, 14 Nov 2015 14:08:32 +0000, by IBBoard
-
Move to CentOS7-based dovecot (with a tweak for "in=…") because it seems to match output better puppet-3.6Sun, 01 Nov 2015 21:18:07 +0000, by IBBoard
-
Hide extra output from Puppet cron job that later Puppet generates puppet-3.6Sat, 31 Oct 2015 20:30:31 +0000, by IBBoard
-
Do it properly and put a path in our cron job puppet-3.6Mon, 26 Oct 2015 08:46:22 +0000, by IBBoard
-
Fix package name - doing it from memory is bad puppet-3.6Sun, 25 Oct 2015 21:21:13 +0000, by IBBoard
-
Add missing dependency for Trac Subversion support on CentOS 7 puppet-3.6Sun, 25 Oct 2015 20:55:19 +0000, by IBBoard
-
Fix differences in how we allow/deny between Apache 2.2 and 2.4 puppet-3.6Sun, 25 Oct 2015 20:28:43 +0000, by IBBoard
-
Be specific about port blocking on Repeat Offender to try to prevent accidental lock-out puppet-3.6Sun, 18 Oct 2015 19:39:46 +0100, by IBBoard
-
Update IP address of clouduk - test VM should use a different name! puppet-3.6Sun, 18 Oct 2015 18:57:46 +0100, by IBBoard
-
Allow for specifying extra PHP packages (e.g. to enable Posix)Sat, 17 Oct 2015 15:03:45 +0000, by IBBoard
-
Add missing fail2ban.local config fileSun, 11 Oct 2015 19:03:30 +0000, by IBBoard
-
"Already Banned" is actually at NOTICESun, 11 Oct 2015 18:41:53 +0000, by IBBoard
-
Update/fix Fail2Ban parsing in LogwatchSat, 26 Sep 2015 14:28:16 +0000, by IBBoard
-
Make sure Fail2Ban rules are in right order (using separate chain) and whitelist Googlebot (which keeps hitting Script Kiddy targets for unknown reasons) puppet-3.6Sun, 13 Sep 2015 20:48:18 +0100, by IBBoard
-
Add CentOS 7 config for postfix to take advantage of Postfix 2.10 and Postscreen puppet-3.6Sat, 12 Sep 2015 21:00:55 +0100, by IBBoard
-
Remove "mod_version" from templates as Website module handles it and it isn't site specific puppet-3.6Sat, 12 Sep 2015 16:42:27 +0100, by IBBoard
-
Allow requests to ".well-known" so that we don't accidentally get blockedSat, 12 Sep 2015 11:08:22 +0000, by IBBoard
-
Add more complex fragment for Forums to stop hotlinkingSun, 06 Sep 2015 09:50:39 +0000, by IBBoard
-
Merge Default changes to Puppet 3.6 and fix conflict puppet-3.6Sun, 26 Jul 2015 17:55:43 +0100, by IBBoard
-
Update firewalling so that we block the right ports when using iptables directly puppet-3.6Sun, 26 Jul 2015 17:46:32 +0100, by IBBoard
-
Make Webtatic distro-specific using built-in Yum variable puppet-3.6Sun, 26 Jul 2015 15:21:00 +0100, by IBBoard
-
Remove BarracudaCentral from email blacklistingThu, 03 Sep 2015 08:25:02 +0000, by IBBoard
-
Mercurial repo versions index.php files etc, so removing index.php breaks things!Sat, 15 Aug 2015 19:15:19 +0000, by IBBoard
-
Reduce table cache because of possible odd performance issues and increase query cacheSat, 08 Aug 2015 15:20:17 +0000, by IBBoard
-
Fix Trac log rotation with correct usernameSat, 08 Aug 2015 08:48:06 +0000, by IBBoard
-
Make sure that we compress JavaScript that uses the OTHER mime typeSat, 01 Aug 2015 19:53:18 +0000, by IBBoard
-
Use other IP range so that we can contact it (rather than NAT, which prevents us testing in-bound connections, which is the point of a server!) puppet-3.6Sat, 25 Jul 2015 11:48:42 +0100, by IBBoard
-
Don't specify how to restart SSHD so that Puppet does its default thing (and works) puppet-3.6Sat, 27 Jun 2015 19:10:52 +0100, by IBBoard
-
Remove "puppet" host name because we don't need itSat, 06 Jun 2015 19:13:02 +0000, by IBBoard
-
Update the "repeat offender" rule so that a) it works, and b) "already banned"* also counts as repeatSat, 11 Apr 2015 08:21:12 +0000, by IBBoard
-
Fix hgignore and add some files that accidentally got ignored puppet-3.6Sat, 14 Mar 2015 22:37:07 +0000, by IBBoard
-
Add firewall handling when we run without APF puppet-3.6Sat, 14 Mar 2015 22:22:26 +0000, by IBBoard
-
Move APF refresh command to node template, as it won't work on boxes without it! puppet-3.6Sat, 14 Mar 2015 20:22:36 +0000, by IBBoard
-
Update Puppet module for Apache (pulls in concat module) puppet-3.6Sat, 14 Mar 2015 20:07:04 +0000, by IBBoard
-
Handle differences in firewalling between ASO (using APF) and most other hosts (using iptables) puppet-3.6Sat, 14 Mar 2015 20:01:17 +0000, by IBBoard
-
Make sure that we have mod_version installed so that Apache config fragments that try to support 2.2 and 2.4 work properlySun, 22 Mar 2015 18:26:06 +0000, by IBBoard
-
Merge the PTerry header into the Puppet-3.6 branch puppet-3.6Sat, 14 Mar 2015 19:38:50 +0000, by IBBoard