dffd8e3b76
Features: - PHP 8.4 support (from 8.3) - WordPress 7.0 (auto-update via WP-CLI) - Modern TLS 1.3 cipher suites (2026 best practices) - Fail2Ban security integration (5 jails: SSH, Nginx, WordPress, recidive) - Auto-update cron job for WordPress (weekly Minor updates) - Debian 14 Forky support (testing) - Ubuntu 25.04 support - Python 3.12 in GitHub Actions Security: - Fail2Ban with SSH brute force protection (24h ban) - WordPress wp-login.php protection (2h ban) - Nginx bot scanner protection - Recidive jail for repeat offenders (1 week ban) - Modern TLS ciphers (AEAD only) - HSTS 2 years for preload Documentation: - docs/autoupdate.md - WordPress auto-update guide - docs/fail2ban.md - Fail2Ban configuration guide - docs/troubleshooting.md - Updated with php_version variable Breaking changes: - PHP 8.4 is now the default (requires Ubuntu 20.04+ or Debian 11+)
38 lines
1.0 KiB
Plaintext
Executable File
38 lines
1.0 KiB
Plaintext
Executable File
# Ansible-lint configuration
|
|
# https://ansible-lint.readthedocs.io/en/latest/configuring.html
|
|
|
|
# Exclude paths from linting
|
|
exclude_paths:
|
|
- .cache/
|
|
- .github/
|
|
- docker/
|
|
- tests/
|
|
- '*.md'
|
|
|
|
# Enable specific rules
|
|
enable_list:
|
|
- yaml
|
|
- no-changed-when
|
|
- no-tabs
|
|
|
|
# Skip specific rules for faster CI/CD
|
|
skip_list:
|
|
- role-name # We don't use role naming conventions
|
|
- galaxy # We don't publish to Galaxy
|
|
- meta-no-info # No meta/main.yml files
|
|
- fqcn # Skip FQCN requirements for faster setup
|
|
- name[casing] # Allow lowercase names
|
|
- risky-file-permissions # Allow default permissions
|
|
- no-relative-paths # Allow relative paths in templates
|
|
- partial-become # Allow simplified become usage
|
|
- command-instead-of-module # Allow command module usage
|
|
- command-instead-of-shell # Allow shell when needed
|
|
- ignore-errors # Allow ignore_errors for specific cases
|
|
- load-failure # Skip missing file warnings
|
|
|
|
# Offline mode (don't check for newer ansible-lint versions)
|
|
offline: false
|
|
|
|
# Verbosity level
|
|
verbosity: 1
|