Commit Graph

70 Commits

Author SHA1 Message Date
Mischa ter Smitten f6d1f857c9 Merge remote-tracking branch 'origin/master' into micha 2017-02-28 16:44:17 +01:00
Kevin van Zonneveld 1f176099c7 Upgrade Frey to v0.3.31 /cc @tersmitten (#113) 2017-02-17 14:48:54 +01:00
Kevin van Zonneveld f1d2d1c60f Upgrade Frey to v0.3.30 /cc @tersmitten (#112) 2017-02-17 10:56:08 +01:00
Mischa ter Smitten ee9bb7f04f Merge remote-tracking branch 'origin/master' into micha 2017-02-16 15:05:37 +01:00
Mischa ter Smitten 918240fe32 Fix incorrect install npm user (#111)
* Fix incorrect install_npm_user

* Fix incorrect install_npm_user
2017-02-16 13:44:24 +01:00
Mischa ter Smitten f8c2c4401e Fix incorrect install_npm_user (#110) 2017-02-16 12:53:09 +01:00
Marius 3dd28fa028 Exclude certain blacklisted ciphers from Nginx 2017-02-06 15:32:37 +01:00
Mischa ter Smitten 03ee590f14 Merge remote-tracking branch 'origin/master' into micha 2017-02-03 21:53:08 +01:00
Mischa ter Smitten 63014c78cc Cleanup Frey file (#104) 2017-02-01 10:46:36 +01:00
Mischa ter Smitten d016e08918 Remove unused dependencies (#103)
Using unattended-upgrades
2017-02-01 10:29:52 +01:00
Mischa ter Smitten 9dd8ba3171 Merge remote-tracking branch 'origin/master' into micha 2017-01-31 16:03:16 +01:00
Kevin van Zonneveld 8784d54045 Upgrade Frey to v0.3.28 /cc @tersmitten (#102) 2017-01-31 14:44:03 +01:00
Mischa ter Smitten 98009f87c1 Update Frey variables (#100)
Needed for future role updates and cleanup
2017-01-31 13:37:43 +01:00
Mischa ter Smitten 3052090f72 Update roles (#101) 2017-01-31 13:37:18 +01:00
Mischa ter Smitten 11b282935e Merge remote-tracking branch 'origin/master' into micha 2017-01-30 22:10:30 +01:00
Marius f5a2be33c8 Disable HTTP/2 for non-HTTPS traffic 2017-01-26 22:31:35 +01:00
Marius 36f646851d Enable HTTP/2 support on master.tus.io 2017-01-24 09:47:06 +01:00
Mischa ter Smitten e7eb8439d1 More Frey specific variables (#92) 2017-01-12 16:06:30 +01:00
Mischa ter Smitten 9a64b52616 Add some files to make Frey install work
These can be removed later
2017-01-12 15:16:23 +01:00
Mischa ter Smitten f62074c1c1 Removal of duplicate file 2017-01-12 14:10:03 +01:00
Mischa ter Smitten c8bb148084 Merge remote-tracking branch 'origin/master' into micha 2017-01-12 14:07:35 +01:00
Mischa ter Smitten 778ec8fe77 Make use of ssh pipelining (#90)
And fixate ansible_managed variable
2017-01-12 14:01:31 +01:00
Mischa ter Smitten 8e9702d049 Merge remote-tracking branch 'upstream/master' into micha 2017-01-12 09:44:14 +01:00
Mischa ter Smitten 93c62b836d Fix for failing apt-get dist-upgrade 2017-01-12 09:31:23 +01:00
Kevin van Zonneveld 598ca78fa7 Upgrade Frey to v0.3.27 /cc @tersmitten (#85)
* Upgrade Frey to v0.3.27 /cc @tersmitten

* Add forgotten and misspelled role variables

* Make it easier to override settings and clear that this is a private file
2017-01-11 10:25:28 +01:00
Mischa ter Smitten ca5fbcc7f8 Merge remote-tracking branch 'upstream/master' into micha 2016-12-27 22:38:09 +01:00
Kevin van Zonneveld cc78da7de5 Pin Frey as a dependency vs installing latest globally 2016-12-20 13:42:06 +01:00
Mischa ter Smitten 843e38dda8 Update unattended upgrades role (#80)
* Add working public private key pair

* Make use of forked roles

* Update unattended-upgrades role to 1.3.0
2016-12-15 10:37:21 +01:00
Mischa ter Smitten d8b5c77cf5 Make use of new apt role (#79)
* Add working public private key pair

* Make use of forked roles

* Make use of new apt role
2016-12-14 10:13:59 +01:00
Mischa ter Smitten f5c1aa9085 Make use of forked roles (#78)
* Add working public private key pair

* Make use of forked roles
2016-12-14 10:13:21 +01:00
Marius 2d187c00aa Correct state of nginx after restarting 2016-11-11 23:30:32 +01:00
Marius 2665650b8c Restart nginx instead of reloading 2016-11-11 23:24:12 +01:00
Marius bffd8f24b0 Deploy current master branch to master.tus.io 2016-11-11 15:59:01 +01:00
Marius 09a0deaca8 Reload nginx instead of restarting
If the restart of nginx fails (e.g. address already in use), the service will
not reload the configuration which is usually not wanted. By using nginx(1)
and telling it explicitly to reload the configuration, these issues do not
appear.
2016-11-09 23:23:45 +01:00
Marius 97def4c99f Enable SSL session cache for master.tus.io 2016-11-09 23:10:18 +01:00
Marius 25771dfbcd Enable OCSP stapling for master.tus.io 2016-11-09 22:56:15 +01:00
Marius 2ef7e5c975 Generate and use custom primes for DH 2016-11-09 21:44:24 +01:00
Mischa ter Smitten dfc111963f Upgrade rsyslog role (#72)
* Add working public private key pair

* Upgrade rsyslog role
2016-11-09 09:25:30 +01:00
Marius d5e3ca60af Enable SSL using certificate from Let's Encrypt 2016-11-04 19:51:44 +01:00
Marius a0b37487e9 Add public directory 2016-11-04 19:51:39 +01:00
Marius 3b55041992 Add configuration file for nginx 2016-11-04 18:54:35 +01:00
Marius 6c3af75c51 Use nginx as reverse proxy in front of tusd 2016-11-04 18:53:21 +01:00
Mischa ter Smitten 00a8279e61 Disable UseDNS for sshd (#71)
* Add working public private key pair

* Disable UseDNS for SSHD
2016-11-03 10:22:10 +01:00
Mischa ter Smitten e882b88697 Improved ansible.cfg (#70)
* Add working public private key pair

* Improved ansible_managed setting

* Make use of SSH pipelining
2016-11-03 10:20:58 +01:00
Marius e4cd32f2c4 Do not use limitedstore on master.tus.io instance 2016-10-27 23:07:09 +02:00
Marius 2f5bc77649 Enable running tusd behind the CloudFlare proxy for supporting HTTPS uploads 2016-10-14 11:35:21 +02:00
Mischa ter Smitten 8174314669 Add working public private key pair (#65) 2016-10-13 13:23:06 +02:00
Kevin van Zonneveld 0c99b7377a Make sure rsyslog has permissions to write to log dir 2016-10-12 20:50:02 +02:00
Kevin van Zonneveld 4d595672f6 Merge remote-tracking branch 'origin/master' 2016-09-30 13:13:22 +02:00
Kevin van Zonneveld 3d2320a0f2 Make ssh key creation, part of infra setup /cc @Acconut 2016-09-30 13:13:20 +02:00