The_miro
/
Dotfiles
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Dotfiles/setup/modules/FreeipaAnsible/image
History
Amir Alexander Abdelbaki 4200557757 feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 
Replaces the unsigned SMB-policystore auto-sync (enforcer blindly sourced
whatever .sh files sat on the share, no integrity check) with a dedicated
git-over-SSH server plus GPG commit signing: nodes pull on a timer, verify
every commit's signature and fast-forward history before an unprivileged
puller account hands off to root via one exact scoped sudo command, and a
fetch failure is a safe no-op that keeps the last-known-good policy running.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 		2026-07-22 15:56:19 +02:00
..
nginx feat(ansipa): nginx gateway — reverse proxy + portal start-page 2026-07-02 12:36:28 +02:00
.env.example feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 2026-07-22 15:56:19 +02:00
.gitignore feat(ansipa): integrate CheckMK CE monitoring 2026-07-01 18:32:28 +02:00
Dockerfile feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 2026-07-22 15:56:19 +02:00
ansipa-checkmk-setup.sh refactor(ansipa): dev_security-scan → dev_mon_clamscan, report to CheckMK; drop SMB scan pipeline 2026-07-02 13:49:18 +02:00
ansipa-checkmk.service feat(ansipa): integrate CheckMK CE monitoring 2026-07-01 18:32:28 +02:00
ansipa-git-add-deploy-key.sh feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 2026-07-22 15:56:19 +02:00
ansipa-git-server-setup.service feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 2026-07-22 15:56:19 +02:00
ansipa-git-server-setup.sh feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 2026-07-22 15:56:19 +02:00
ansipa-git-sshd.service feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 2026-07-22 15:56:19 +02:00
ansipa-infra-checkmk-install.sh feat(freeipa-ansible): add CheckMK monitoring for Proxmox VE + PBS 2026-07-20 11:31:03 +02:00
ansipa-pbs-monitor.sh feat(freeipa-ansible): add CheckMK monitoring for Proxmox VE + PBS 2026-07-20 11:31:03 +02:00
ansipa-pve-monitor.sh feat(freeipa-ansible): add CheckMK monitoring for Proxmox VE + PBS 2026-07-20 11:31:03 +02:00
ansipa-smb-setup.sh refactor(ansipa): dev_security-scan → dev_mon_clamscan, report to CheckMK; drop SMB scan pipeline 2026-07-02 13:49:18 +02:00
ansipa-smb.service fix(ansipa): full end-to-end test + multiple bug fixes 2026-07-01 10:30:06 +02:00
docker-compose.yml feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 2026-07-22 15:56:19 +02:00
docker-env.service feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 2026-07-22 15:56:19 +02:00
ipa-first-boot.service fix(ansipa): full end-to-end test + multiple bug fixes 2026-07-01 10:30:06 +02:00
ipa-first-boot.sh fix(ansipa): full end-to-end test + multiple bug fixes 2026-07-01 10:30:06 +02:00
keycloak-configure.sh setup: add FreeIPA image builder and Keycloak integration 2026-05-18 11:22:48 +02:00
run.sh feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 2026-07-22 15:56:19 +02:00