KheOps

Simplex-chat should follow system proxy configuration

5

Starting `simplex-chat` in a terminal on Linux with the variables `https_proxy` et `http_proxy` (also in uppercase) set to a proxy address, it still connects directly to the SMP servers. No...

SSHA is salted SHA-1, which is not considered secure. `slappasswd` can be forced to use `crypt` with SHA-512 hashing both on Debian 7 and Debian 8. Commands should be replaced...

Debian cleans up `/var/run/`'s content after each reboot, erasong notably `/var/run/php5-fpm/` where our PHP sockets are stored. They should probably be moved, or this path may need to be made...

As advised on official doc. Must be done right after install. https://doc.owncloud.org/server/9.0/admin_manual/installation/installation_wizard.html#strong-perms-label

Check services that need a restart after system upgrade

1

Using for instance Debian's checkrestart

Add automatic email warning when TLS certificates have or are about to expire

1

This would avoid unforeseen downtime for users.

For now nginx blocks everything but changepassword.

Getting local SID of Samba not possible before slapd has been restarted with new configuration

1

This makes the playbook fail when trying to retrieve the local SID in order to populate the LDAP tree using smbldap-populate. Slapd should probably be force-restarted before retrieve it?

- they're in wp-config.php - helps mitigating potentially compromised accounts

It is safer to do it with a second, backup, public key (in case the in-production one gets compromised/canceled/etc.)