The_miro
/
Dotfiles
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Dotfiles/setup/modules/FreeipaAnsible/ansible
History
Amir Alexander Abdelbaki 4200557757 feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 
Replaces the unsigned SMB-policystore auto-sync (enforcer blindly sourced
whatever .sh files sat on the share, no integrity check) with a dedicated
git-over-SSH server plus GPG commit signing: nodes pull on a timer, verify
every commit's signature and fast-forward history before an unprivileged
puller account hands off to root via one exact scoped sudo command, and a
fetch failure is a safe no-op that keeps the last-known-good policy running.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 		2026-07-22 15:56:19 +02:00
..
lib feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 2026-07-22 15:56:19 +02:00
policies.d feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 2026-07-22 15:56:19 +02:00
ansipa-enforce-policies.sh feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 2026-07-22 15:56:19 +02:00
ansipa-git-pull-sudoers feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 2026-07-22 15:56:19 +02:00
ansipa-install-flatpaks.service feat(ansipa): unify FreeIPA group naming with dev_* / usr_* prefixes 2026-06-26 11:48:24 +02:00
ansipa-install-flatpaks.sh feat(ansipa): unify FreeIPA group naming with dev_* / usr_* prefixes 2026-06-26 11:48:24 +02:00
ansipa-install-flatpaks.timer setup: add FreeIPA Flatpak group installer (fp_install_* groups) 2026-05-18 11:52:27 +02:00
ansipa-install-modules.service feat(ansipa): unify FreeIPA group naming with dev_* / usr_* prefixes 2026-06-26 11:48:24 +02:00
ansipa-install-modules.sh feat(ansipa): unify FreeIPA group naming with dev_* / usr_* prefixes 2026-06-26 11:48:24 +02:00
ansipa-install-modules.timer setup: add freeipa-client module and FreeIPA group-based module automation 2026-05-18 11:40:51 +02:00
ansipa-install-packages.sh fix(ansipa): full end-to-end test + multiple bug fixes 2026-07-01 10:30:06 +02:00
ansipa-install.service feat(ansipa): unify FreeIPA group naming with dev_* / usr_* prefixes 2026-06-26 11:48:24 +02:00
ansipa-install.timer Add setup/modules/FreeipaAnsible/ansible/ansipa-install.timer 2026-04-27 16:44:18 +02:00
ansipa-pull-apply.sh feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 2026-07-22 15:56:19 +02:00
ansipa-pull.service feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 2026-07-22 15:56:19 +02:00
ansipa-pull.timer feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 2026-07-22 15:56:19 +02:00
auto-add-baseuser.sh Update setup/modules/FreeipaAnsible/ansible/auto-add-baseuser.sh 2026-04-27 16:37:39 +02:00
baseuser-sync.path Add setup/modules/FreeipaAnsible/ansible/baseuser-sync.path 2026-04-27 16:39:11 +02:00
baseuser-sync.service Add setup/modules/FreeipaAnsible/ansible/baseuser-sync.service 2026-04-27 16:38:37 +02:00
collect-luks-keys.yml feat(ansipa): store LUKS backup keys on SMB share with KeyAdmin access control 2026-05-20 15:33:17 +02:00
deploy-ansipa-git-pull.yml feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 2026-07-22 15:56:19 +02:00
deploy-ansipa-install.yml feat(ansipa): unify FreeIPA group naming with dev_* / usr_* prefixes 2026-06-26 11:48:24 +02:00
deploy-ansipa-modules.yml feat(ansipa): unify FreeIPA group naming with dev_* / usr_* prefixes 2026-06-26 11:48:24 +02:00
deploy-ansipa-policies.yml feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 2026-07-22 15:56:19 +02:00
deploy-baseuser-sync.yml Add setup/modules/FreeipaAnsible/ansible/deploy-baseuser-sync.yml 2026-04-27 16:39:34 +02:00
manage-sudo-rules.yml feat(freeipa): add policy enforcement for binary blocking, backups, scans, and sudo 2026-05-20 11:34:09 +02:00