d1d38d672a
feat(baseline): rotate auditd logs until a plan is in place to archive them
2025-12-22 11:04:08 +00:00
c3a5cb1f54
feat(baseline): add handler to reload firewalld
2025-12-22 11:03:26 +00:00
3a09fb1351
fix(cloudns_monitor): correct delete notification endpoint
2025-12-22 11:02:44 +00:00
d5a6ef3461
feat(cloudns): prototype module for handling monitoring checks
Ansible Lint Check / lint (push) Successful in 55s
2025-12-20 17:14:16 +00:00
8825c6d024
lint: ansible-lint suggested updates
Ansible Lint Check / lint (push) Successful in 56s
2025-12-20 13:22:40 +00:00
d188a70ff5
docs: add note on become convention
Ansible Lint Check / lint (push) Failing after 56s
2025-12-20 13:16:09 +00:00
cd7e824890
feat(podman_host): add XDG_RUNTIME_DIR to .bashrc too
2025-12-20 13:15:44 +00:00
7eb6119137
feat(generic): add a simple playbook for manually deployed apps
2025-12-20 13:15:10 +00:00
6933aad1fa
feat(baseline): do not expect global become true
2025-12-20 13:14:35 +00:00
c793b470b0
feat(baseline): enable sssd faillock, pwhistory and disable nullok
2025-12-20 13:12:43 +00:00
366f6c036a
feat(baseline): enable project quotas for /home
Ansible Lint Check / lint (push) Failing after 58s
2025-12-04 17:30:11 +00:00
e098840fab
feat(podman_keycloak): nginx enhancements (buffering + DNS)
...
Ansible Lint Check / lint (push) Failing after 57s
* lookup of the keycloak container is at runtime to allow for
the keycloak container being restarted while nginx is running
* increased buffer sizes to permit for larger signed SAML exchanges
(was required for Google Workspace)
2025-11-30 15:02:54 +00:00
57c58eb26a
fix(podman_keycloak): allow override of podman username
2025-11-30 15:02:16 +00:00
f65ad3fce2
fix(podman_nginx): modifying firewall requires become
2025-11-30 15:00:16 +00:00
78aad663e6
feat(baseline): move freeipa related lockdown overrides to role from playbook
Ansible Lint Check / lint (push) Failing after 57s
2025-11-08 21:00:18 +00:00
ec972f9470
feat(baseline): enable with-subid feature for sssd
2025-11-08 20:59:45 +00:00
7792cac0c7
feat(podman_host): do not create local users and assume a user exists
...
For SR2's usage, these users will exist because they have been created
in FreeIPA along with their subids.
2025-11-08 20:57:45 +00:00
b471a034a4
feat(podman_nginx): configure firewalld
2025-11-08 20:56:53 +00:00
b360d0e861
docs: bump version for RHEL9-CIS role
Ansible Lint Check / lint (push) Successful in 59s
2025-11-01 15:21:36 +00:00
1d5d39d1c2
lint: ansible-lint suggested updates
2025-11-01 15:21:36 +00:00
2ba6c6691b
Initial import; migrate some roles from irl.wip
2025-10-31 22:36:32 +00:00
