dev #1

Merged

Corentin merged 17 commits from dev into main 2026-07-01 14:28:29 +02:00

Conversation 0 Commits 17 Files changed 46 +851 -187

Corentin commented 2026-07-01 14:27:30 +02:00

Owner

Copy link

No description provided.

Corentin added 17 commits 2026-07-01 14:27:31 +02:00

feat: role hardening/ssh (opt-in ssh_lockdown, garde anti-lockout) ... 26b1cb4973

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

feat: docker daemon.json (rotation logs, live-restore, no-new-privileges) ... 13fc47229a

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

refactor: firewall idempotent + edge DOCKER-USER, sans flush ni restart docker ... 44f2433387

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

fix: basicauth dashboard traefik depuis le vault, hash clair de-tracke ... 8c04928d50

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

docs: changelog et readme durcissement P1 ... e7aa6a442a

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

merge: durcissement P1 (feat/ansible-hardening) dans dev ... 9998783585

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

feat: role hardening/os-baseline (fail2ban, unattended-upgrades, sysctl, needrestart) ... e87b8e47e7

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

refactor: tools remonte les erreurs (docker_compose_v2, requirements.yml) ... 6d700a62f3

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

refactor: monitoring conteneurs de-privilegies (cadvisor, process-exporter) ... 456eac49a8

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

docs: changelog et readme durcissement P2 ... 363c5893ad

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

merge: durcissement P2 (feat/ansible-hardening-p2) dans dev ... e59e70f8ca

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

feat: outillage projet (ansible.cfg, lint, tags, CI Gitea) ... 53a3e0b1b4

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

feat: baseline compte (auditd, pwquality, login.defs, banniere) ... 15eac67d7d

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

feat: anti-fuite secrets (pre-commit, .env/acme generes sur l'hote) ... e9c937b218

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

refactor: reproductibilite + nettoyage (pins, dedup, tools defaults) ... 14f68e035d

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

docs: changelog et readme P3 ... a1f4d39bea

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

merge: durcissement P3 (feat/ansible-hardening-p3) dans dev ... e61484c5b6

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Corentin merged commit e33ee3fbe9 into main 2026-07-01 14:28:29 +02:00

Corentin referenced this pull request from a commit 2026-07-01 14:28:30 +02:00

Merge pull request 'dev' (#1) from dev into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

AcadeNice/Ansible!1

No description provided.