infra-ansible, branch v0.0.5 Common Ansible roles http://git.tensin.name/infra-ansible/atom?h=v0.0.5 2023-08-08T23:23:53Z v0.0.5 2023-08-08T23:23:53Z Egor Tensin Egor.Tensin@gmail.com 2023-08-08T23:23:53Z urn:sha1:385824267349fd46426d00cbc293d62522dc30f7 systemd_requires_mount_for: fix a systemd key name 2023-08-08T23:19:45Z Egor Tensin Egor.Tensin@gmail.com 2023-08-08T23:19:45Z urn:sha1:53f349b490ead1068513a09bf93fb7aaa8c4c881 firewall: fail on malformed rule files 2023-08-08T22:55:36Z Egor Tensin Egor.Tensin@gmail.com 2023-08-08T22:51:16Z urn:sha1:98fe4a333bd76af7eef8e10e3635edd6f40e86a0 journald: set default level to warning 2023-08-08T22:16:40Z Egor Tensin Egor.Tensin@gmail.com 2023-08-08T22:16:36Z urn:sha1:2c1671f077f50afec2bc7356ebe77f34ed9a3691 My journals are still too messy. v0.0.4 2023-08-08T20:59:14Z Egor Tensin Egor.Tensin@gmail.com 2023-08-08T20:59:14Z urn:sha1:c5a68e76eca22deca195054087b3817f621f6b77 firewall: make SSH port go first in rules 2023-08-08T20:57:19Z Egor Tensin Egor.Tensin@gmail.com 2023-08-08T20:57:19Z urn:sha1:3ca728406720da6814f4bcb670639315e3170270 add router role 2023-08-08T20:55:04Z Egor Tensin Egor.Tensin@gmail.com 2023-08-08T20:54:28Z urn:sha1:f10a9fe80ce3b3a8eeb183c24cec1f34bd0f8177 wireguard: optionally set iptables rules 2023-08-08T20:45:22Z Egor Tensin Egor.Tensin@gmail.com 2023-08-08T20:38:33Z urn:sha1:0b2eb8d752c5229e50663226be897f8ef8bfa013 firewall: reboot on rule changes 2023-08-08T20:32:17Z Egor Tensin Egor.Tensin@gmail.com 2023-08-08T20:30:18Z urn:sha1:95a082d3c771fbe9a380f10280134406b7dc3f93 Just restaring netfilter-persistent could break other services depending on iptables, like Docker. Also, I'm not sure why I need a wait_for_connection after a reboot call, so get rid of those. add firewall role 2023-08-08T20:17:16Z Egor Tensin Egor.Tensin@gmail.com 2023-08-08T18:14:32Z urn:sha1:bc2d42aab02b5ef9e27ee59a03543b41d99adf04