Skip to content
GitLab
Explore
Sign in
Primary navigation
Search or go to…
Project
A
ansible_lza_server_hardening
Manage
Activity
Members
Labels
Plan
Issues
Issue boards
Milestones
Wiki
Code
Merge requests
Repository
Branches
Commits
Tags
Repository graph
Compare revisions
Snippets
Build
Pipelines
Jobs
Pipeline schedules
Artifacts
Deploy
Releases
Package registry
Container registry
Model registry
Operate
Environments
Terraform modules
Monitor
Incidents
Analyze
Value stream analytics
Contributor analytics
CI/CD analytics
Repository analytics
Model experiments
Help
Help
Support
GitLab documentation
Compare GitLab plans
GitLab community forum
Contribute to GitLab
Provide feedback
Keyboard shortcuts
?
Snippets
Groups
Projects
Show more breadcrumbs
Digital Preservation
ansible_lza_server_hardening
Repository graph
Repository graph
You can move around the graph by using the arrow keys.
2a03760960ec51591c1d282557ee5846475c8bf3
Select Git revision
Selected
2a03760960ec51591c1d282557ee5846475c8bf3
Branches
1
master
default
protected
2 results
Begin with the selected commit
Created with Raphaël 2.2.0
16
Sep
4
1
27
Aug
30
May
23
3
Feb
15
Jan
18
Dec
17
11
Oct
3
Sep
12
Aug
7
26
Jul
21
Feb
29
Jan
22
Dec
7
15
Nov
9
Oct
2
30
Aug
21
27
Jun
27
Apr
6
Mar
2
9
Aug
5
11
Apr
18
Mar
11
2
1
21
Dec
15
Sep
10
2
5
Aug
13
Jul
29
Jan
chore: remove deprecated option for STDOUT callback
master
master
feat: enable SystemD unit protections for detection service
fix: make sure that detection script is cloned to the correct directory and is always up to date
feat: add prerequisite packages for detection script
feat: add support for encrypted SystemD credentials to the detection service
fix: remove unnecessary task that set execution permissions for graylog_scan4lza.sh, because now this is set in its repository itself
fix: add templates for testing Filebeats and detection in Molecule
fix: add graylog_fqdn varibale for Molecule tests
chore: add .ansible/ to .gitignore file
test: prepare Molecule scenario for Debian 13 Trixie. We can only activate it once a Vagrant Box for Trixie is released.
style: satisfy linter (blank lines)
fix: don't try to get elevated permissions for seaching Ansible Vault files on the Ansible controller. It's not necessary, and there's no way to get the sudo password interactively.
feat: add detection service and Graylog logging for it
fix: logical mistake in crypto-policy condition
feat: explicitely configure crypto policy to disable weak ciphers and kex algorithms in SSH
test: onyl keep paths in vault_identity_list that we expect to exist
fix: use correct syntax to print list of Fail2Ban ignoreips as space separated string
fix: point symlink to correct default Molecule scenario
feat: add Molecule support for Ubuntu 22.04
chore: remove deprecated lint section from molecule config
feat: hide messages about skipped and ok tasks during Ansible and Molecule runs to remove clutter
refactor: use lists to store IPs and subnets that are to be ignored by fail2ban
Merge branch 'master' of https://git.slub-dresden.de/digital-preservation/ansible_lza_server_hardening
feat: add GUBS IP address for VLAN 24
fix: use correct module to regex-replace string in file
doc: add 'icmp' tags
fix: set empty CRYPTO_POLICY for sshd to make sure that SSH on RHEL respects the custom settings in sshd_config
fix: run correct Alma 8 scenario in CI
test: make pipeline jobs interruptible if a newer commit comes in
chore: migrate Rocky Linux 8 based tests to Alma Linux 8
Merge branch 'master' of https://git.slub-dresden.de/digital-preservation/ansible_lza_server_hardening
fix: make sure to remove all residuals of ClamAV from the system (packages, services)
fix: set default policy in the last step instead of an earlier step to avoid getting locked out
feat: add fail2ban exception for Greenbone Security Manager (GSM)
feat: add switch to make sure that ClamAV is not uninstalled on Archivematica-Servers
chore: remove unnecessary clamav handlers
feat: resolves GitLab issue 2368 (https://git.slub-dresden.de/import-jira-projekte/referat_2.3/-/issues/2368) by making sure that all ClamAV components are uninstalled
test: increase Molecule VMs' RAM to make sure clamav has enough RAM to even start without swapping
test: run molecule destroy even if CI job fails
feat: use Ansible's dnf module to install packages
Loading