Commits · master · Digital Preservation / ansible_lza_server_hardening · GitLab

Snippets Groups Projects

May 30, 2025
- fix: logical mistake in crypto-policy condition · 0cdba386
  Jörg Sachse authored 1 week ago
  
  0cdba386
May 23, 2025
- feat: explicitely configure crypto policy to disable weak ciphers and kex algorithms in SSH · 75ad2e61
  Jörg Sachse authored 2 weeks ago
  
  75ad2e61
- test: onyl keep paths in vault_identity_list that we expect to exist · bc6e9d8e
  Jörg Sachse authored 2 weeks ago
  
  bc6e9d8e
Feb 03, 2025
- fix: use correct syntax to print list of Fail2Ban ignoreips as space separated string · a9c3446d
  Jörg Sachse authored 4 months ago
  
  a9c3446d
- fix: point symlink to correct default Molecule scenario · 90c9d3e9
  Jörg Sachse authored 4 months ago
  
  90c9d3e9
Jan 15, 2025
- feat: add Molecule support for Ubuntu 22.04 · aa4e277d
  Jörg Sachse authored 4 months ago
  
  aa4e277d
- chore: remove deprecated lint section from molecule config · 3ba3438f
  Jörg Sachse authored 4 months ago
  
  3ba3438f
- feat: hide messages about skipped and ok tasks during Ansible and Molecule runs to remove clutter · 17f8591d
  Jörg Sachse authored 4 months ago
  
  17f8591d
- refactor: use lists to store IPs and subnets that are to be ignored by fail2ban · 6761cfbc
  Jörg Sachse authored 4 months ago
  
  6761cfbc
- Merge branch 'master' of... · 239da1ef
  Jörg Sachse authored 4 months ago
  239da1ef
- feat: add GUBS IP address for VLAN 24 · 9390cb96
  Jörg Sachse authored 4 months ago
  
  9390cb96
Dec 18, 2024
- fix: use correct module to regex-replace string in file · 448881a4
  Jörg Sachse authored 5 months ago
  
  448881a4
Dec 17, 2024
- doc: add 'icmp' tags · dc0d6e74
  Jörg Sachse authored 5 months ago
  
  dc0d6e74
- fix: set empty CRYPTO_POLICY for sshd to make sure that SSH on RHEL respects... · 5de6b252
  Jörg Sachse authored 5 months ago
  5de6b252
Oct 11, 2024
- fix: run correct Alma 8 scenario in CI · ee67f263
  Jörg Sachse authored 7 months ago
  
  ee67f263
- test: make pipeline jobs interruptible if a newer commit comes in · aa11e33a
  Jörg Sachse authored 7 months ago
  
  aa11e33a
- chore: migrate Rocky Linux 8 based tests to Alma Linux 8 · 0175eecb
  Jörg Sachse authored 7 months ago
  
  0175eecb
Sep 03, 2024
- Merge branch 'master' of... · 9ae5f7a6
  Jörg Sachse authored 9 months ago
  9ae5f7a6
- fix: make sure to remove all residuals of ClamAV from the system (packages, services) · 0d049107
  Jörg Sachse authored 9 months ago
  
  0d049107
- fix: set default policy in the last step instead of an earlier step to avoid getting locked out · 6eb912c4
  Jörg Sachse authored 9 months ago
  
  6eb912c4
- feat: add fail2ban exception for Greenbone Security Manager (GSM) · d1af9655
  Jörg Sachse authored 9 months ago
  
  d1af9655
Aug 12, 2024
- feat: add switch to make sure that ClamAV is not uninstalled on Archivematica-Servers · 12c80f67
  Jörg Sachse authored 9 months ago
  
  12c80f67
Aug 07, 2024
- chore: remove unnecessary clamav handlers · 213e53a2
  Jörg Sachse authored 10 months ago
  
  213e53a2
- feat: resolves GitLab issue 2368... · d2e3217f
  Jörg Sachse authored 10 months ago
  d2e3217f
Jul 26, 2024
- test: increase Molecule VMs' RAM to make sure clamav has enough RAM to even start without swapping · 94c6e77c
  Jörg Sachse authored 10 months ago
  
  94c6e77c
- test: run molecule destroy even if CI job fails · 948ef612
  Jörg Sachse authored 10 months ago
  
  948ef612
- feat: use Ansible's dnf module to install packages · 73b08844
  Jörg Sachse authored 10 months ago
  
  73b08844
- fix: improve task waiting for ClamAV signature databases to be downloaded by... · 89719f79
  Jörg Sachse authored 10 months ago
  89719f79
- chore: cleanup unused code · 159f0a5d
  Jörg Sachse authored 10 months ago
  
  159f0a5d
- fix: remove EPEL installation task; we expect EPEL to be enabled on production... · 8835b09e
  Jörg Sachse authored 10 months ago
  8835b09e
- style: satisfy linter · d8f24e7d
  Jörg Sachse authored 10 months ago
  
  d8f24e7d
- chore: add options required by latest yamllint version · 9aabe334
  Jörg Sachse authored 10 months ago
  
  9aabe334
- chore: deprecate RHEL 7 and add Molecule/Gitlab-CI compatibility for Rocky 8 · afb08d0c
  Jörg Sachse authored 10 months ago
  
  afb08d0c
Feb 21, 2024
- style: use deb822 format and remove deprecated apt_key (resolves #2233 / ND-2723) · 79861b67
  Jörg Sachse authored 1 year ago
  
  79861b67
Jan 29, 2024
- fix: undo changes done with the systemd override for rpcbind.socket, because... · b1064159
  Jörg Sachse authored 1 year ago
  b1064159
Dec 22, 2023
- fix: create working version of rpcbind configuration · 4f738758
  Jörg Sachse authored 1 year ago
  
  4f738758
- fix: use correct syntax for sshd_config · 4b693b08
  Jörg Sachse authored 1 year ago
  
  4b693b08
- sec: implement Terrapin (CVE-2023-48795) config mitigations while patches are unavailable · 75556bf3
  Jörg Sachse authored 1 year ago
  
  75556bf3
Dec 07, 2023
- feat: prepare tasks for NFSv3 rpcbind risk mitigations. CAUTION: as we're... · 7200fc1c
  Jörg Sachse authored 1 year ago
  7200fc1c
Nov 15, 2023
- feat: resolve ND-2709 'Bereinigung clamd-Services Rosetta-Server' · f1a4cab6
  Jörg Sachse authored 1 year ago
  
  f1a4cab6

DE: Impressum · Datenschutzerklärung | EN: Legal Notice · Privacy Policy