libretic/ansible-role-reverse_proxy
7
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Corrections adresses mail

Browse source
This commit is contained in:
Navas 2022-03-21 14:29:38 +01:00
parent b8a04561fa
commit db60ca2804
3 changed files with 7 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
defaults/main.yml
View file

@ -1,5 +1,4 @@
reverse_proxy_SSLProtocol: "all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1" reverse_proxy_SSLProtocol: "all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1"
reverse_proxy_SSLCipherSuite: "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4" reverse_proxy_SSLCipherSuite: "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4"
reverse_proxy_default_serveradmin_email: olivier+admin@navas.rocks reverse_proxy_default_website: https://www.libretic.fr
reverse_proxy_default_website: https://libretic.fr reverse_proxy_default_issue_url: https://www.libretic.fr/contact
reverse_proxy_default_issue_url: https://libretic.fr/contact

4
templates/custom_reverse_proxy.conf
View file

@ -201,6 +201,10 @@ SecCookieFormat 0
<Location /> <Location />
Use $accessPolicy Use $accessPolicy
</Location> </Location>
# On autorise quand même l'accès a .well-known pour letsencrypt
<Location /.well-known>
Use OpenAccessPolicy
</Location>
ProxyRequests Off ProxyRequests Off
ProxyVia Off ProxyVia Off
ProxyPreserveHost On ProxyPreserveHost On

2
templates/jail.local
View file

@ -3,7 +3,7 @@
[DEFAULT] [DEFAULT]
ignoreip = 127.0.0.1/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 ignoreip = 127.0.0.1/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16
destemail = olivier+fail2ban@navas.rocks destemail = {{ reverse_proxy_default_serveradmin_email }}
banaction = nftables-multiport banaction = nftables-multiport
banaction_allports = nftables-allports banaction_allports = nftables-allports
action = %(action_mwl)s action = %(action_mwl)s