Clément Désiles 7972fe09ad security: deploy pod manifests containing credentials with mode 0600 ...

gitea.yaml, immich.yaml, and metabase.yaml embed database passwords in
env vars; per repo policy, rendered files containing secrets must not
be world-readable.

2026-07-04 00:06:29 +02:00

..

archlinux

fix: review archlinux install details

2026-04-11 22:55:03 +02:00

dhcpd

fix: restart dhcpd on nas restart

2026-05-29 21:29:14 +02:00

disks

chore: ansible-lint review (almost done)

2026-01-04 11:21:15 +01:00

docker

chore: ansible-lint review (almost done)

2026-01-04 11:21:15 +01:00

fail2ban

doc: add more ufw comments

2025-11-10 23:57:34 +01:00

fdroid

fix(roles): detect new image on podman pull and restart services

2026-07-04 00:06:13 +02:00

gitea

security: deploy pod manifests containing credentials with mode 0600

2026-07-04 00:06:29 +02:00

immich

security: deploy pod manifests containing credentials with mode 0600

2026-07-04 00:06:29 +02:00

matrix/templates

fix(podman): use Type=notify + service-container so systemd sees pod crashes

2026-05-29 21:49:13 +02:00

metabase

security: deploy pod manifests containing credentials with mode 0600

2026-07-04 00:06:29 +02:00

monitoring/tasks

chore: ansible-lint review (almost done)

2026-01-04 11:21:15 +01:00

net_config

feat(net_config): support IPForward and IPMasquerade in network config

2026-06-19 23:55:02 +02:00

net_persist

fix: secure pg + fix old way of sharing podman network

2026-05-29 21:31:07 +02:00

networking

fix: secure pg + fix old way of sharing podman network

2026-05-29 21:31:07 +02:00

nfs_server

refactor: hoist OS-specific package names to role defaults

2026-05-30 21:57:20 +02:00

nginx

fix(nginx): prevent cert leak on IPv6 / unknown SNI

2026-05-30 17:06:10 +02:00

ntfy

fix(roles): detect new image on podman pull and restart services

2026-07-04 00:06:13 +02:00

ntp_chrony

chore: ansible-lint review (almost done)

2026-01-04 11:21:15 +01:00

nut

feat(nut): report outage duration and battery % in ntfy

2026-06-29 23:50:48 +02:00

nut_exporter

Add support for NUT (EATON inverter)

2026-06-13 09:37:49 +02:00

podman

fix: use ansible_facts['kernel'] to avoid deprecation warning

2026-05-29 21:35:54 +02:00

postgres

fix: secure pg + fix old way of sharing podman network

2026-05-29 21:31:07 +02:00

qfieldcloud/templates

fix(podman): use Type=notify + service-container so systemd sees pod crashes

2026-05-29 21:49:13 +02:00

samba_server

feat(samba_server): new role for SMB/CIFS shares

2026-05-30 21:57:13 +02:00

sshd

feat: allow sshd to bind on multiple networks

2026-04-11 22:54:35 +02:00

static_web

fix: tls for static web

2026-05-29 21:27:00 +02:00

syncthing

feat: add syncthing support

2026-06-03 23:28:26 +02:00

sys_autoupdate

feat: sys autoupdate

2026-05-08 23:47:21 +02:00

systemd

feat: introduce systemd config

2025-11-15 00:18:35 +01:00

tooling

refactor: hoist OS-specific package names to role defaults

2026-05-30 21:57:20 +02:00

unbound

feat: BREAKING unbound configuration

2026-03-17 23:08:44 +01:00

unifi

fix(roles): detect new image on podman pull and restart services

2026-07-04 00:06:13 +02:00

uptime_kuma

fix(roles): detect new image on podman pull and restart services

2026-07-04 00:06:13 +02:00

valkey

chore: ansible-lint review (almost done)

2026-01-04 11:21:15 +01:00

wireguard

refactor: hoist OS-specific package names to role defaults

2026-05-30 21:57:20 +02:00

zfs

refactor(zfs): inline dataset ownership, add absent cleanup

2026-06-19 23:46:33 +02:00

zsh

doc: add readme to zsh

2026-07-03 00:11:52 +02:00