xsrv/xsrv

• #1200 - automatically install qemu-guest-agent on KVM guests, add a video output/display device to VM templates create by xsrv init-vm-template - 1.19.0 enhancement,feature

• #1191 - rebase configuration files on their debian12 versions - 1.19.0 configuration,maintenance

• #1190 - doc: jitsi: changing passwords through debconf no longer always returns changed - 1.20.0 documentation,easy,maintenance,upstream

• #1178 - netdata-logcount/needrestart: switch to multi-bar display by default - 1.19.0 configuration,easy,enhancement,monitoring

• #1174 - cleanup: limit use of check_mode: no to tasks that do not change anything - - maintenance

• #1172 - WIP use diff: no instead of no_log: yes to mask sensitive info/silence excessively verbose diffs when using diff mode - 1.20.0 enhancement,maintenance,upstream

• #1162 - WIP: tools/gitlab CI: perform release tests automatically - - tools

• #1160 - homepage: display the URI for non-clickable links - - enhancement

• #1159 - homepage: optional dark theme? - - enhancement,question

• #1155 - gamevault role? - - question

• #1152 - nextcloud: before upgrade, abort if .old nextcloud installation directory is found (indicates incomplete upgrade) - - easy,enhancement

• #1148 - nextcloud: update to v27.0.1 - 1.19.0 enhancement,maintenance

• #1144 - automate roles uninstallation procedures? - - enhancement,question

• #1143 - nextcloud: upload speed improvements? - - configuration,enhancement,performance,question

• #1134 - Lemmy role? - - feature,question

• #1127 - xsrv: help-tags: outputs duplicate tags when running on non-default playbook - - bug

• #1122 - nextcloud: install memories app? - - feature,question

• #1121 - graylog/mongodb: require authentication to connect to mongodb - - configuration,enhancement,security

• #1119 - WIP: common/firewalld: allow defining a manual IP address/network blacklist (firewalld_bad_ips) - - enhancement,security

• #1117 - baserow role? - - feature,question

• #1111 - WIP: tests: add tests for deploying individual roles to a host - - enhancement,tools

• #1108 - matrix/element: Cross-Origin Request Blocked: .well-known/matrix/client - - question

• #1103 - xsrv: bash completion: auto-complete init-vm/init-vm-template options - 1.19.0 enhancement

• #1099 - graylog: document backup restoration procedure - - backups,documentation

• #1087 - openldap/netdata: setup netdata OpenLDAP monitoring? - - monitoring,question

• #1067 - graylog: migrate to opensearch? - - maintenance,question

• #1065 - enable kernel command-line haredning options? - - configuration,enhancement,question,security

• #1062 - dovecot: add a local netdata port check - - configuration,easy,enhancement,monitoring

• #1057 - jellyfin: task mount jellyfin samba share to jellyfin directory is not idempotent/always returns changed - - bug,upstream

• #1054 - apache: redirect to maintenance page/HTTP 503 when accessing services/applications disabled through *_enable_service: no - - enhancement

• #1040 - jitsi: /var/log/jitsi/jicofo.log and /var/log/jitsi/jvb.log do not append to syslog properly - - bug,monitoring

• #1031 - apache: allow restricting access by IP address, per-application/virtualhost - 1.20.0 easy,enhancement,security

• #1027 - shaarli: update ownership/mode of directories is not idempotent - - enhancement,maintenance

• #1026 - libvirt: changing a libvirt network’s settings does not work if the network already exists - - bug,upstream

• #1012 - dovecot: encrypt all incoming e-mail with the recipient’s GPG key? - - enhancement,question,security

• #1001 - libvirt: add support for EFI as an alternative to legacy BIOS - - enhancement

• #997 - make publish_collection: no role readme found/empty roles list on galaxy.ansible.com - - bug,tools,upstream

• #990 - matrix: add IRC bridge? - - feature,question

• #986 - matrix: allow self-hosting Element Call - - enhancement,feature

• #983 - readme-gen: show netmasks in IP address/host summary? - - enhancement,question

• #980 - readme-gen: show disks size in host summary - - enhancement

• #977 - Soulseek client? (slskd) - - feature,question

• #969 - graylog/elasticsearch: setup “minimal security”/authentication - - enhancement,security

• #949 - loki role? - - feature,question

• #937 - DDoS mitigation mode? - - question,security

• #936 - jitsi: prosody: add mod-listusers? - - easy,enhancement,question

• #931 - jitsi: noise cancellation/suppression doesn’t work for clients using Pulseaudio microphone input - - bug,question,upstream

• #927 - jitsi: permanently disable RECENT_LIST_ENABLED - - enhancement,security,upstream

• #925 - jitsi: setup TURN server for P2P one-to-one calls? - - enhancement,question

• #924 - init-vm: add ability to attach more network interfaces? - - enhancement,question

• #920 - xsrv: graphical user interface? - - question

• #915 - Snipe-IT role - - feature

• #912 - mount /tmp noexec? - - question,security

• #911 - test compatibility with librelogic.librelogic.gitlab/gitlab-runner? - 2.0.0 documentation,easy,enhancement,feature

• #903 - common: setup qemu-agent if host is virtualized - 1.19.0 configuration,easy,enhancement

• #890 - apache: implement modpagespeed? - - performance,question

• #881 - Keycloak role? - - feature,question

• #870 - xsrv: allow using xsrv show-defaults | grep some_search_term to search/filter available configuration variables - 2.0.0 enhancement

• #868 - dovecot: document how to open a local copy of a maildir with a mail client - - backups,documentation

• #867 - dovecot: document/test LDAPS setup - - documentation,enhancement,security

• #862 - dovecot: enable other mail plugins? - - question

• #861 - dovecot: performance tweaks? - - performance,question

• #860 - dovecot: harden SSL configuration/ciphers? - - question,security

• #859 - dovecot: allow generating and using Let’s Encrypt SSL/TLS certificates - 2.0.0 enhancement,security

• #858 - dovecot: setup dovecot-submissiond? - - question

• #857 - dovecot: setup server-side full text search? - - question

• #856 - dovecot: setup antispam? - - question

• #855 - dovecot: add autoconfig TXT record or A record + webserver vhost? - - question,wontfix

• #835 - monitoring_utils: lynis: suggestion[]=HOME-9306|Double check the ownership of home directories as some might be incorrect. - - enhancement,question,security

• #834 - monitoring_utils: lynis: suggestion[]=HOME-9304|Double check the permissions of home directories as some might be not strict enough. - - enhancement,question,security

• #833 - monitoring_utils: lynis: suggestion[]=FILE-7524|Consider restricting file permissions - - easy,enhancement,question,security

• #832 - monitoring_utils: lynis: suggestion[]=FINT-4350|Install a file integrity tool to monitor changes to critical and sensitive files - - easy,enhancement,question,security

• #831 - monitoring_utils: lynis: suggestion[]=TIME-3128|Check ntpq peers output for time source candidates - - enhancement,question,security

• #829 - monitoring_utils: lynis: suggestion[]=ACCT-9622|Enable process accounting - - configuration,easy,enhancement,monitoring,question,security

• #817 - monitoring_utils: lynis: suggestion[]=HTTP-6643|Install Apache modsecurity to guard webserver against web application attacks - - enhancement,security

• #816 - monitoring_utils: lynis: suggestion[]=FIRE-4513|Check iptables rules to see which rules are currently not used - - enhancement,question,security

• #811 - monitoring_utils: lynis: suggestion[]=FILE-6430|Consider disabling unused kernel modules - - enhancement,question,security

• #808 - monitoring_utils: lynis: suggestion[]=AUTH-9229|Check PAM configuration, add rounds if applicable and expire passwords to encrypt with new values - - configuration,enhancement,security

• #798 - tt_rss: document LDAP over SSL/TLS + self-signed certificate setup - - documentation,enhancement,security

• #796 - shaarli: document LDAP over SSL/TLS + self-signed certificate setup - 2.0.0 documentation,enhancement,security

• #794 - openldap: self-service-password: allow trusting self-signed certificates? - - enhancement,question,security

• #782 - xsrv init-vm: don’t require sudo to fix cloned disk image permissions - 2.0.0 enhancement,question

• #778 - systemd-nspawn/systemd-machined role? - - feature,question

• #768 - add ldap-client role (LDAP PAM/SSH authentication)? - - feature,question

• #764 - graylog: lynis: warning[]=DBS-1820|MongoDB instance allows any user to access databases - - enhancement,monitoring,security

• #752 - monitoring_utils: add duc disk usage analyzer? - - feature,monitoring,question

• #751 - monitoring_utils: add scripts to measure disk usage by type/extension/path? - - easy,enhancement,monitoring,question

• #734 - nextcloud: add whiteboard app? - - enhancement,question

• #733 - monitoring_netdata: allow whitelisting debsecan bugs - - enhancement,monitoring,security

• #723 - Automate DNS scans with dnsspy.io? - - feature,question,security

• #722 - Allow hdparm/disk spindown time configuration? - - feature,question

• #717 - transmission: configuration templating task always returns changed (cleartext/hashed password) - 2.0.0 enhancement,maintenance,upstream

• #715 - dnsmasq: DNS-over-HTTPS support? - - configuration,enhancement,question,security

• #714 - dnsmasq: DNS-based ad blocking/filtering? - - feature,question

• #686 - samba: announce shares over MDNS - - enhancement

• #685 - apache: automate running Qualys SSLLabs scans against all virtualhosts? - - feature,monitoring,question,security

• #684 - alltube role? - - feature,question

• #668 - apache: allow defining custom ErrorDocuments - - enhancement

• #642 - mumble: LDAP user backend? - - question

• #641 - common: implement manual reboot/shutdown (utils-reboot/utils-shutdown ansible tags) - 1.19.0 easy,enhancement,feature

• #640 - common: apt: enable purging data/configuration files by default - - configuration,enhancement

• #638 - common: apt: implement forced/manual apt upgrade (utils-apt-upgrade ansible tag) - - easy,feature

• #637 - firewalld: implement DNAT/SNAT - - enhancement

• #635 - firewalld: implement outbound traffic filtering - 2.0.0 enhancement,security

• #628 - limit fact gathering inside roles to ansible_local facts (speed up setup: tasks) - - enhancement,performance

• #627 - WIP: add molecule tests - 2.0.0 difficult,enhancement,maintenance,question,tools

• #622 - tt_rss: log cron job errors to syslog instead of sending them by mail - - configuration,easy,enhancement,monitoring

• #614 - common: allow disabling ctrl+alt+del combination - - enhancement,security

• #613 - common - implement sysctl-34 - link protection settings - - enhancement,security

• #604 - use j2cli or yq for init-playbook/init-host templating? - - maintenance,question,tools

• #598 - CI/CD: automate checks for newer upstream versions of software - - enhancement,tools

• #593 - tt_rss: role/permission setup tasks are not idempotent - - enhancement,maintenance

• #589 - homepage: add buttons to download self-signed certificates - - enhancement

• #546 - nextcloud: allow optional configuration of server-side encryption? - - configuration,enhancement,question,security

• #543 - homepage: add (optional) links section with links to recommendend mobile/desktop software - - easy,enhancement

• #535 - Add hardening measures from ANSSI guidelines - - enhancement,security

• #522 - openldap: performance optimizations? - - enhancement,performance,question

• #518 - Mumble web interface - 2.0.0 feature

• #517 - allow configuration of a custom MOTD? - - feature,question

• #513 - doc: screenshots slideshow on main page instead of thumbnails? - - documentation,enhancement

• #507 - all roles/apache: disable reverse proxy rules and redirect to maintenance page when target service is disabled in configuration - 2.0.0 enhancement,monitoring

• #503 - graylog/rsyslog: authenticate clients using client certificates? - - enhancement,monitoring,question,security

• #498 - firewall: add GeoIP-based blacklist/whitelist mechanism? - - feature,question,security

• #497 - nextcloud: allow enabling 2-factor authentication? - - configuration,enhancement,question,security

• #485 - monitoring: netdata: disable python.d/go.d/aclk self-monitoring charts - - enhancement,maintenance,monitoring,performance

• #475 - ACME certificate authority role? - - feature,question,security

• #466 - netdata: graph lynis warnings/suggestions? - - enhancement,monitoring,question,security

• #465 - lynis: add detection of SUID files? - - enhancement,monitoring,question,security,wontfix

• #459 - add xsrv nmap subcommand (nmap scan all hosts or a specific host, output to html) - - easy,feature

• #457 - samba: setup dfs_samba4/acl_xattr VFS modules? - - configuration,enhancement,question,wontfix

• #453 - postgresql: enable checksums? - - configuration,question,wontfix

• #451 - Document management system? - - feature,question

• #450 - netdata: setup ML-based anomaly detection? - - configuration,enhancement,monitoring,question,wontfix

• #448 - netdata: send notifications using signal-cli? - - feature,monitoring,question

• #447 - display local mailboxes through netdata static web server, raise alarm if there is unread mail - - feature,monitoring

• #445 - bookstack role? - 2.0.0 feature,question

• #441 - openldap: allow restricting application access to groups/setup MemberOf overlay - - enhancement,security

• #426 - samba: add ability to delete a share by setting state: absent - - enhancement

• #425 - openldap: self-service-password/ldap-account-manager: checksum/signature download verification? - - enhancement,security

• #405 - xsrv: replace environment variable-based settings with options, arguments or configuration from file? - 1.20.0 enhancement,maintenance

• #393 - Samba: performance improvements (socket options)? - - configuration,enhancement,performance,question,wontfix

• #379 - setup IPV6 support (sysctl, firewall, applications…)? - - question

• #378 - netdata: add a “proxied” mode (proxy behind apache/mod_proxy) ? - - monitoring

• #374 - makefile/readthedocs: include roles documentation in generated docs - - documentation,enhancement

• #366 - nextcloud: setup redis memcache backend? - - configuration,performance,question

• #364 - pulseaudio: document setting up streaming from pulseaudio server to android tablet/phone - - documentation

• #348 - ldap-account-manager: Unable to set locale - - bug

• #344 - nextcloud: replace onlyoffice integration with collabora/nextcloud office? - - feature,question

• #341 - nextcloud: warning on settings/admin/overview: Some app directories are owned by a different user than the web server one - - enhancement

• #337 - nextcloud: maps: enable OSRM demo servers by default - - easy,enhancement

• #323 - prometheus role? - - monitoring

• #322 - Frontail role? - - monitoring

• #331 - apache: php-fpm: chroot php pools? - - enhancement,security

• #330 - netdata: monitor php-fpm - - enhancement,monitoring

• #328 - apache: mpm_event performance tuning? - - enhancement,performance,question

• #327 - nextcloud: verify gpg signatures - - enhancement,security

• #317 - monitoring_utils: lynis: suggestion[]=BOOT-5264|Consider hardening system services - 1.19.0 enhancement,security

• #310 - samba: ability to whitelist/blacklist files by extension? - - enhancement,question,security

• #309 - apply postgresqltuner recommended settings? - - enhancement,performance

• #307 - apache: mod_md: make certificate status endpoint enable/disable configurable - - enhancement,monitoring

• #280 - Samba Directory Controller or other Identity Management solution? - - feature,question

• #277 - Samba: protect samba accounts from bruteforce attempts with fail2ban - - enhancement,security

• #276 - Samba: protect file shares from cryptolockers? - - enhancement,question,security

• #275 - Samba: implement filesystem/size quotas - - enhancement

• #274 - Samba: advertise samba server over avahi/zeroconf? - - configuration,enhancement

• #272 - postgresql: hardening - - enhancement,security

• #271 - apache: enable mod_md status handler - - enhancement,monitoring

• #267 - apache: make disabled modules list configurable, disable more modules by default - - enhancement,performance

• #265 - apache: provide custom error pages - - enhancement

• #256 - CAS, SAML or Oauth Single Sign On (SSO)? - - feature

• #254 - apache: allow using LDAP for basic auth? - - enhancement,question,security

• #231 - apache: letsencrypt/selfsigned: reach A+ grade on Mozilla Security Observatory - - enhancement,security,tools

• #229 - apache: add a config variable to log times taken to serve requests - - enhancement,monitoring,performance

• #228 - apache: additional hardening measures - - enhancement,security

• #222 - apache: add ability to specify a whitelist/blacklist of IP addresses per-virtualhost - - feature,security

• #208 - netdata: graph/alert on logwatch warnings - - feature,monitoring,security

• #205 - netdata: monitor debsums warnings/return status - 2.0.0 easy,feature,monitoring,security

• #200 - roles for other monitoring software? - - feature,monitoring,question

• #193 - netdata: graph tiger warnings - - feature,monitoring,security

• #191 - monitoring_utils: add inxi? - - feature,monitoring,question

• #189 - netdata: graph VULS reports - - feature,monitoring,security

• #187 - monitoring: setup PSAD (Port Scan Attack Detector) Edit - - feature,security

• #186 - netdata: many ERROR messages in logs - - bug,monitoring,upstream

• #184 - monitoring_utils: add Mozilla observatory module - - feature,monitoring,security

• #180 - netdata: graph SCAP workbench warnings - - feature,monitoring,security

• #178 - netdata: graph/alert on deborphan matches - - feature,monitoring

• #174 - netdata: allow setting a repetition period for alarms - - enhancement

• #172 - netdata: support long-term archiving - - enhancement,monitoring

• #167 - monitoring: add spectre-meltdown-checker to lynis reports - - feature,monitoring,security

• #155 - nextcloud: add Fulltextsearch App + OCR? - - feature,question

• #150 - nextcloud: add maintenance on/off switch - - easy,enhancement

• #149 - nextcloud: add bookmarks app? - - enhancement,question

• #148 - nextcloud: verify downloads with GPG signature - - enhancement,security

• #146 - nextcloud: add Collabora Online integration - - feature

• #144 - nextcloud: task set nextcloud config.php values is not idempotent/always returns changed - - enhancement,upstream

• #142 - nextcloud: add files automated tagging app? - - enhancement,question

• #138 - apache: rewrite all 500 502 503 errors to generic 50x.html error page - - enhancement,security

• #137 - apache: allow setting up HTTP Basic auth and autoindex for specific directories/URLs/virtualhosts - - feature,security

• #127 - xsrv: add commands to check firewall/fail2ban status/active TCP/UDP connections - - enhancement

• #125 - common: enforce AppArmor on all services/executables - - enhancement,security

• #122 - common: ssh/sftp: harden default SFTP umask - - enhancement,security

• #121 - common: disable sysctl configuration when running in a container? - - enhancement,question,tools

• #120 - common: firewalld: add a manual IP whitelist/blacklist mechanism - - feature,security

• #119 - monitoring_utils: lynis: suggestion[]=AUTH-9262|Install a PAM module for password strength testing like pam_cracklib or pam_passwdqc - - configuration,enhancement,question,security

• #118 - common: allow restricting use of ‘su’ to a list of approved users - - enhancement,security

• #117 - common: prevent forkbombs through ulimit/limits.conf - - enhancement,security

• #116 - common: add an option to disable known compilers? - - enhancement,question,security

• #115 - monitoring_utils: lynis: suggestion[]=ACCT-9628|Enable auditd to collect audit information - - feature,security

• #114 - common: ssh/sftp: check that SFTP users are chrooted - - enhancement,security,tools

• #113 - common: fail2ban: allow permaban when accessing specific/honeypot URLs - - feature,security

• #112 - common: firewalld: implement a TARPIT action? - - enhancement,question,security

• #111 - common: setup process accounting? - - enhancement,question,security

• #109 - common: check that locale generation works correctly - - enhancement,tools

• #108 - common: minimize write access to a list of files/directories? - - question,security

• #105 - xsrv: add a global download cache dir variable? (instead of /root) - - maintenance,question,tools,wontfix

• #103 - common: firewalld: allow limiting a rule to a single user (owner iptables module)? - - enhancement,question,security

• #101 - common: improve OS hardening/implement STIG/CIS - - enhancement,security

• #98 - Maps and routing services - - feature

• #97 - openshift/openstack role? - - question

• #96 - grafana role? - - feature,monitoring,question

• #93 - VNC/other remote desktop server role? - - feature,question

• #86 - Peertube role - - feature

• #78 - Adminer role - - feature

• #70 - common: ssh: allow setting up endlessh? - - feature,question,security

• #69 - IDS/IPS role? - - feature,question,security

• #66 - add show-tasks command - - enhancement

• #64 - RAID role? - - feature,question

• #63 - pfSense role? - - feature,question,wontfix

• #61 - GDPR compliance? - - feature,question

• #59 - Collaborative pad - - feature

• #57 - rundeck role? - - feature,question

• #55 - Guacamole remote control gateway role? - - feature,question

• #52 - blogging engine/static site generator role? - - feature,question

• #49 - caching HTTP proxy/squid role? - - feature,question

• #46 - Printer sharing server? - - feature,question

• #45 - Video hosting/streaming platform - 1.19.0 feature

• #44 - jellyfin: document DLNA/UPnP usage - - configuration,documentation,feature,question

• #43 - OSM routing service role? - - feature,question

• #42 - OpenStreetMap/maps tileserver role? - - feature,question

• #41 - network scanner (SANE) server role? - - feature,question

• #40 - SearxNG role - 1.19.0 feature

• #39 - wallabag role? - - feature

• #37 - Replace ntp with chrony? - 2.0.0 question

• #35 - simple git server role? - - feature,question,wontfix

• #34 - CentOS compatibility? - - feature,question,wontfix

• #33 - Minecraft server role? - - feature,question,wontfix

• #30 - Gitlab role - - feature

• #26 - dynamic DNS updater role? - 2.0.0 feature

• #24 - DHCP/TFTP/PXE server role? - - feature,question

• #16 - Automated performance benchmarks - - feature

• #10 - xsrv init-vm: use cloud-init images? - - feature,question

• #3 - Mail server role? - - feature,question