Commit Graph

21 Commits (e8947f318b197cc8e7c3dfeb7a1289f2593f3b6c)

Author SHA1 Message Date
Jack Ivanov e8947f318b Large refactor to support Ansible 2.5 (#976)
* Refactoring, booleans declaration and update users fix

* Make server_name more FQDN compatible

* Rename variables

* Define the default value for store_cakey

* Skip a prompt about the SSH user if deploying to localhost

* Disable reboot for non-cloud deployments

* Enable EC2 volume encryption by default

* Add default server value (localhost) for the local installation

Delete empty files

* Add default region to aws_region_facts

* Update docs

* EC2 credentials fix

* Warnings fix

* Update deploy-from-ansible.md

* Fix a typo

* Remove lightsail from the docs

* Disable EC2 encryption by default

* rename droplet to server

* Disable dependencies

* Disable tls_cipher_suite

* Convert wifi-exclude to a string. Update-users fix

* SSH access congrats fix

* 16.04 > 18.04

* Dont ask for the credentials if specified in the environment vars

* GCE server name fix
6 years ago
Jack Ivanov ee6db37428 Change the P12 and SSH passwords only for new users (#550) 7 years ago
Jack Ivanov 58d5a06e87 delete tasks and move to roles (#519) 7 years ago
Ruben Jongejan 07ddb5863b improved readability with native yaml (#530) 7 years ago
Jack Ivanov bd348af9c2 Implementing blocks and additional fail hints #487 (#497)
change the troubleshooting url
7 years ago
Jack Ivanov a7b06058cb remove the proxy role #440 (#457)
* remove the proxy role #440

* Separate facts. Make roles more independent from each other

move openssl to local tasks

move unneeded tasks
7 years ago
Jack Ivanov bf75a1bb03 move generating of the known_hosts file to local_action (#425) 7 years ago
Jack Ivanov 6facb6cb4f FreeBSD / HardenedBSD (#262)
* FreeBSD draft

ifconfig fix

Pre-tasks fixes

fix hardcoded IP

some refactoring

disable system-based tags

disable freebsd tags

FreeBSD vpn role

add defaults

ssh role freebsd

default fix

dns_adblocking freebsd

ubuntu dict fix

* HardenedBSD

update-users BSD

* Rebuild the kernel

docs changing
7 years ago
Jack Ivanov d7d976784c Fixes #207 7 years ago
Jack Ivanov 2a7dd88a3c Changed to ECDSA #102 7 years ago
Jack Ivanov 35faf4bca7 Local openssl tasks (#169)
* Draft

works with ECDSA

RSA support for Windows

* update-users with local_openssl_tasks

* move prompts to the algo script

* additional directory for SSH keys

* move easyrsa_p12_export_password to pre_tasks

* update-users testing

* Fix hardcoded vars

* Delete the CA key

* Hardcoded IP. Fixes #219

* Some fixes
7 years ago
Jack Ivanov 37ec574d8d IP_subject_alt_name is not declared for localhost. Fixed #149 8 years ago
Jack Ivanov d50bd43988 Fix SSH keys permissions 8 years ago
Jack Ivanov 44bc3ead48 set AllowTcpForwarding to local 8 years ago
Jack Ivanov 00e4bcc1ec security role and SSH fixes #77 8 years ago
Jack Ivanov 8c5f80bf8f linting 8 years ago
Jack Ivanov 57b6c96ba8 SSH fingerprints #77 8 years ago
Jack Ivanov 0945f54366 SSH user-management #77 8 years ago
Jack Ivanov c19908c9b1 ssh fixes 8 years ago
Dan Guido 27421070b9 linting 8 years ago
Jack Ivanov 1dcfe18055 SSH tunneling role #77 8 years ago