Thu, 30 Mar 2017 20:41:18 +0100 |
IBBoard |
Move all sites to separate LetsEncrypt certs to make adding future domains easier
puppet-3.6
|
Tue, 28 Mar 2017 21:12:49 +0100 |
IBBoard |
Remove slash in redirect because group catches path slash
puppet-3.6
|
Tue, 28 Mar 2017 21:05:12 +0100 |
IBBoard |
Make sure that we still redirect to non-www if we want it
puppet-3.6
|
Tue, 28 Mar 2017 20:56:53 +0100 |
IBBoard |
Swap GlitterGoth to its own Let's Encrypt cert
puppet-3.6
|
Tue, 28 Mar 2017 20:51:06 +0100 |
IBBoard |
Remove unused Apache config files
puppet-3.6
|
Tue, 28 Mar 2017 20:50:17 +0100 |
IBBoard |
Add missing HTTPS site config template
puppet-3.6
|
Tue, 28 Mar 2017 20:47:45 +0100 |
IBBoard |
Update test machine IPs to match new DHCP pool
puppet-3.6
|
Tue, 28 Mar 2017 20:46:35 +0100 |
IBBoard |
Restructure HTTPS certificates and multiple TLD sites for clarity
puppet-3.6
|
Sun, 26 Mar 2017 16:53:34 +0100 |
IBBoard |
Remove now deprecated mcrypt extension - all scripts now use openssl
puppet-3.6
|
Sun, 26 Mar 2017 16:12:57 +0100 |
IBBoard |
Fix pip installations
puppet-3.6
|
Sat, 25 Mar 2017 20:54:34 +0000 |
IBBoard |
Switch to mercurial_keyring from Pip
puppet-3.6
|
Sat, 25 Mar 2017 20:18:13 +0000 |
IBBoard |
Remove mod_auth_token and replace with mod_xsendfile
puppet-3.6
|
Sat, 25 Mar 2017 12:05:36 +0000 |
IBBoard |
Add BDStrike domains
puppet-3.6
|
Sat, 25 Mar 2017 12:05:23 +0000 |
IBBoard |
Make IP on redirects optional (defaults to primary IP)
puppet-3.6
|
Fri, 03 Mar 2017 19:48:06 +0000 |
IBBoard |
Remove hgview because it is GUI only
puppet-3.6
|
Thu, 09 Feb 2017 20:54:30 +0000 |
IBBoard |
Add OLE detection to SpamAssassin without ClamAV
puppet-3.6
|
Wed, 18 Jan 2017 21:13:20 +0000 |
IBBoard |
Make GG DB backup less frequent now that site is closing
puppet-3.6
|
Sun, 15 Jan 2017 20:47:13 +0000 |
IBBoard |
Remove ClamAV from server config
puppet-3.6
|
Mon, 09 Jan 2017 21:06:10 +0000 |
IBBoard |
Block another annoying IP with a firewall rule
puppet-3.6
|
Sat, 17 Dec 2016 12:01:55 +0000 |
IBBoard |
Override minimum UID for Dovecot/IMAP, as we use old "500+ is users" range
puppet-3.6
|
Sat, 17 Dec 2016 12:01:16 +0000 |
IBBoard |
Firewall Baidu's new Brazillian IP range for being to agressive
puppet-3.6
|
Fri, 11 Nov 2016 21:04:13 +0000 |
IBBoard |
Fix "direct under CA" custom conditions and sites that use "cert named after domain" pattern
puppet-3.6
|
Fri, 11 Nov 2016 21:02:09 +0000 |
IBBoard |
Add Certbot packages we depend on for commands and providing certs
puppet-3.6
|
Fri, 11 Nov 2016 18:17:46 +0000 |
IBBoard |
Do not supply incorrect CA chain for GG Test site
puppet-3.6
|
Fri, 11 Nov 2016 17:15:23 +0000 |
IBBoard |
Switch to using LetsEncrypt certs by default
puppet-3.6
|
Fri, 04 Nov 2016 20:55:22 +0000 |
IBBoard |
Remove (hopefully) redundant Spamhaus checks - Postscreen should do this
puppet-3.6
|
Wed, 26 Oct 2016 19:40:37 +0100 |
IBBoard |
Change all "latest" packages to "installed"
puppet-3.6
|
Thu, 06 Oct 2016 19:02:30 +0100 |
IBBoard |
Be less agressive with blocking on the grounds of SPF
puppet-3.6
|
Sun, 02 Oct 2016 19:33:22 +0100 |
IBBoard |
Filter what we see in Postwhite cron output
puppet-3.6
|
Sun, 18 Sep 2016 07:22:22 +0100 |
IBBoard |
Fix rookie cron mistake - don't run Postwhite EVERY MINUTE!
puppet-3.6
|
Sat, 17 Sep 2016 15:19:54 +0100 |
IBBoard |
Fix PHP reporting in logwatch
puppet-3.6
|
Tue, 13 Sep 2016 21:04:40 +0100 |
IBBoard |
Fix Apache 2.4 Logwatch support
puppet-3.6
|
Tue, 13 Sep 2016 20:53:16 +0100 |
IBBoard |
Schedule Postwhite to run regularly
puppet-3.6
|
Tue, 13 Sep 2016 20:27:22 +0100 |
IBBoard |
Swap from manual Postscreen whitelist to Postwhite generated whitelist
puppet-3.6
|
Sat, 03 Sep 2016 20:31:35 +0100 |
IBBoard |
Add missing "permit" on Postscreen whitelist lines
puppet-3.6
|
Sat, 03 Sep 2016 14:28:56 +0100 |
IBBoard |
Blacklist more spamming IPs (with a ######.info domain)
puppet-3.6
|
Fri, 02 Sep 2016 13:40:26 +0100 |
IBBoard |
Add eBay to Postscreen whitelist
puppet-3.6
|
Sat, 13 Aug 2016 13:44:01 +0100 |
IBBoard |
Disable PCRE JIT to stop SELinux giving "denied execmem" for Apache
puppet-3.6
|
Wed, 20 Jul 2016 20:31:22 +0100 |
IBBoard |
Blank some Apache configs to prevent httpd update breaking the server
puppet-3.6
|
Tue, 19 Jul 2016 20:25:44 +0100 |
IBBoard |
Ban IODC bot, because they can't behave and don't have robots.txt instructions
puppet-3.6
|
Fri, 08 Jul 2016 20:34:29 +0100 |
IBBoard |
Redirect dumb bots that removed the ID number to the main module page
puppet-3.6
|
Wed, 29 Jun 2016 20:49:56 +0100 |
IBBoard |
Make sure that we're detecting and serving 7zip and RAR files correctly
puppet-3.6
|
Tue, 28 Jun 2016 20:36:42 +0100 |
IBBoard |
Make sure that custom config comes before site configs
puppet-3.6
|
Sat, 04 Jun 2016 14:08:19 +0100 |
IBBoard |
Update test machine IP again
puppet-3.6
|
Sat, 04 Jun 2016 14:07:37 +0100 |
IBBoard |
Make sure our websites load after ALL other Apache config
puppet-3.6
|
Sat, 04 Jun 2016 14:06:15 +0100 |
IBBoard |
Make sure that we don't leak PHP source code if something breaks
puppet-3.6
|
Sat, 04 Jun 2016 14:05:14 +0100 |
IBBoard |
Make sure that HTTPS redirects have the full set of headers
puppet-3.6
|
Tue, 31 May 2016 22:02:15 +0100 |
IBBoard |
Switch to PHP 7 from Webtatic
puppet-3.6
|
Tue, 31 May 2016 22:00:56 +0100 |
IBBoard |
Add dev machine entry with correct IPs
puppet-3.6
|
Tue, 31 May 2016 20:57:39 +0100 |
IBBoard |
Swap Webtatic to new GPG key
puppet-3.6
|
Sat, 21 May 2016 15:32:13 +0100 |
IBBoard |
Add more Postscreen whitelisting, and a private section
puppet-3.6
|
Sat, 14 May 2016 17:10:10 +0100 |
IBBoard |
Lock down Apache headers for security, based on https://securityheaders.io/
puppet-3.6
|
Sat, 23 Apr 2016 16:28:47 +0100 |
IBBoard |
Make sure that we're always setting HSTS headers, even when cannonicalising domains
puppet-3.6
|
Thu, 21 Apr 2016 20:53:37 +0100 |
IBBoard |
Add PayPal IPs to whitelist so that they don't get delayed
puppet-3.6
|
Sat, 26 Mar 2016 09:05:36 +0000 |
IBBoard |
Remove review email, as GG is shutting down
puppet-3.6
|
Tue, 22 Mar 2016 21:09:25 +0000 |
IBBoard |
Avoid SELinux warnings by disabling bytecode support
puppet-3.6
|
Sun, 13 Mar 2016 19:58:17 +0000 |
IBBoard |
Stop Bind trying IPv6, as we only have a link-local IP
puppet-3.6
|
Wed, 24 Feb 2016 20:21:44 +0000 |
IBBoard |
Set up a recursive localhost-only Bind server (assuming RH's safe and sane default configs)
puppet-3.6
|
Tue, 16 Feb 2016 20:26:00 +0000 |
IBBoard |
Patch isn't a standard package on a minimal install. Make sure we have it.
puppet-3.6
|
Sun, 14 Feb 2016 20:04:04 +0000 |
IBBoard |
Reduce the number of spare servers, because we're quiet and need spare memory
puppet-3.6
|