dffd8e3b76
Features: - PHP 8.4 support (from 8.3) - WordPress 7.0 (auto-update via WP-CLI) - Modern TLS 1.3 cipher suites (2026 best practices) - Fail2Ban security integration (5 jails: SSH, Nginx, WordPress, recidive) - Auto-update cron job for WordPress (weekly Minor updates) - Debian 14 Forky support (testing) - Ubuntu 25.04 support - Python 3.12 in GitHub Actions Security: - Fail2Ban with SSH brute force protection (24h ban) - WordPress wp-login.php protection (2h ban) - Nginx bot scanner protection - Recidive jail for repeat offenders (1 week ban) - Modern TLS ciphers (AEAD only) - HSTS 2 years for preload Documentation: - docs/autoupdate.md - WordPress auto-update guide - docs/fail2ban.md - Fail2Ban configuration guide - docs/troubleshooting.md - Updated with php_version variable Breaking changes: - PHP 8.4 is now the default (requires Ubuntu 20.04+ or Debian 11+)
97 lines
1.0 KiB
Plaintext
Executable File
97 lines
1.0 KiB
Plaintext
Executable File
# Ansible
|
|
*.retry
|
|
.ansible/
|
|
|
|
# Inventory files with real credentials
|
|
inventory/production.ini
|
|
inventory/staging.ini
|
|
inventory/local.ini
|
|
|
|
# SSH Keys
|
|
*.pem
|
|
*.key
|
|
id_rsa*
|
|
id_ed25519*
|
|
|
|
# Secrets and credentials
|
|
secrets/
|
|
.env
|
|
.vault_pass
|
|
|
|
# System files
|
|
.DS_Store
|
|
Thumbs.db
|
|
|
|
# IDE
|
|
.vscode/
|
|
.idea/
|
|
*.swp
|
|
*.swo
|
|
*~
|
|
|
|
# Logs
|
|
*.log
|
|
logs/
|
|
|
|
# Temporary files
|
|
tmp/
|
|
temp/
|
|
.tmp
|
|
|
|
# Environment files
|
|
.env.local
|
|
.env.production
|
|
|
|
# Backup files
|
|
*.backup
|
|
*.bak
|
|
|
|
# SSL certificates (keep templates, ignore actual certs)
|
|
*.crt
|
|
*.pem
|
|
*.p12
|
|
*.pfx
|
|
!templates/*.j2
|
|
|
|
# WordPress
|
|
wp-content/uploads/
|
|
wp-content/cache/
|
|
wp-content/backups/
|
|
wp-config-local.php
|
|
|
|
# Docker
|
|
docker-compose.override.yml
|
|
.dockerignore
|
|
|
|
# Terraform (if used)
|
|
*.tfstate
|
|
*.tfstate.backup
|
|
.terraform/
|
|
terraform.tfvars
|
|
|
|
# Testing
|
|
.pytest_cache/
|
|
.coverage
|
|
htmlcov/
|
|
.tox/
|
|
|
|
# Documentation build
|
|
docs/_build/
|
|
site/
|
|
.vuepress/dist/
|
|
|
|
# Node.js (for documentation)
|
|
node_modules/
|
|
npm-debug.log*
|
|
yarn-debug.log*
|
|
yarn-error.log*
|
|
|
|
# Python
|
|
__pycache__/
|
|
*.py[cod]
|
|
*$py.class
|
|
*.so
|
|
.Python
|
|
venv/
|
|
env/
|