| Tue, 31 May 2016 22:00:56 +0100 |
IBBoard |
Add dev machine entry with correct IPs
puppet-3.6
|
| Tue, 31 May 2016 20:57:39 +0100 |
IBBoard |
Swap Webtatic to new GPG key
puppet-3.6
|
| Sat, 21 May 2016 15:32:13 +0100 |
IBBoard |
Add more Postscreen whitelisting, and a private section
puppet-3.6
|
| Sat, 14 May 2016 17:10:10 +0100 |
IBBoard |
Lock down Apache headers for security, based on https://securityheaders.io/
puppet-3.6
|
| Sat, 23 Apr 2016 16:28:47 +0100 |
IBBoard |
Make sure that we're always setting HSTS headers, even when cannonicalising domains
puppet-3.6
|
| Thu, 21 Apr 2016 20:53:37 +0100 |
IBBoard |
Add PayPal IPs to whitelist so that they don't get delayed
puppet-3.6
|
| Sat, 26 Mar 2016 09:05:36 +0000 |
IBBoard |
Remove review email, as GG is shutting down
puppet-3.6
|
| Tue, 22 Mar 2016 21:09:25 +0000 |
IBBoard |
Avoid SELinux warnings by disabling bytecode support
puppet-3.6
|
| Sun, 13 Mar 2016 19:58:17 +0000 |
IBBoard |
Stop Bind trying IPv6, as we only have a link-local IP
puppet-3.6
|
| Wed, 24 Feb 2016 20:21:44 +0000 |
IBBoard |
Set up a recursive localhost-only Bind server (assuming RH's safe and sane default configs)
puppet-3.6
|
| Tue, 16 Feb 2016 20:26:00 +0000 |
IBBoard |
Patch isn't a standard package on a minimal install. Make sure we have it.
puppet-3.6
|
| Sun, 14 Feb 2016 20:04:04 +0000 |
IBBoard |
Reduce the number of spare servers, because we're quiet and need spare memory
puppet-3.6
|
| Wed, 27 Jan 2016 20:18:32 +0000 |
IBBoard |
Add another regular command to check that we've not got services requiring a restart
puppet-3.6
|
| Tue, 26 Jan 2016 20:15:23 +0000 |
IBBoard |
Remove repo checking cruft from potential Yum Check Update cron job output
puppet-3.6
|
| Sun, 24 Jan 2016 20:11:51 +0000 |
IBBoard |
Make sure that we don't get Yum just emailing us "I updated my metadata for the repos"
puppet-3.6
|
| Fri, 22 Jan 2016 20:27:16 +0000 |
IBBoard |
Reduce opcache memory usage because it doesn't use that much
puppet-3.6
|
| Sat, 16 Jan 2016 15:03:04 +0000 |
IBBoard |
Run cron job to notify of available updates
puppet-3.6
|
| Sat, 16 Jan 2016 11:01:09 +0000 |
IBBoard |
Add body checks to emails for the minority of obvious spam that aren't caught
puppet-3.6
|
| Sat, 16 Jan 2016 11:00:38 +0000 |
IBBoard |
Follow the documentation properly and specify dport, not just port
puppet-3.6
|
| Sat, 16 Jan 2016 10:59:56 +0000 |
IBBoard |
Extend blocked files to include backup files
puppet-3.6
|
| Sun, 10 Jan 2016 20:24:22 +0000 |
IBBoard |
Whitelist Google's IPs so that they don't get greylisted
puppet-3.6
|
| Tue, 05 Jan 2016 21:00:52 +0000 |
IBBoard |
Put postscreen back (our second SMTP line seems to have overridden it)
puppet-3.6
|
| Sun, 03 Jan 2016 20:48:38 +0000 |
IBBoard |
Make sure that config file changes for changes trigger a reload
puppet-3.6
|
| Sun, 03 Jan 2016 20:13:19 +0000 |
IBBoard |
Make sure that Amavis daemon is running so mail gets delivered after reboot!
puppet-3.6
|
| Sat, 26 Dec 2015 20:26:22 +0000 |
IBBoard |
Fight back against spam
puppet-3.6
|
| Wed, 23 Dec 2015 11:16:17 +0000 |
IBBoard |
Drop the number of spare servers to save some memory when we normally only have a couple of processes at once
puppet-3.6
|
| Tue, 24 Nov 2015 20:48:36 +0000 |
IBBoard |
Add mlocate as another core package, since it wasn't on our (very) minimal CentOS 7 install
puppet-3.6
|
| Sat, 14 Nov 2015 14:08:32 +0000 |
IBBoard |
New LogRotate is picky about usernames for security reasons. Fix it for Trac logs.
puppet-3.6
|
| Sun, 01 Nov 2015 21:18:07 +0000 |
IBBoard |
Move to CentOS7-based dovecot (with a tweak for "in=…") because it seems to match output better
puppet-3.6
|
| Sat, 31 Oct 2015 20:33:05 +0000 |
IBBoard |
Require bzip2 - why isn't this a default?!
puppet-3.6
|
