1 commit

Author	SHA1	Message	Date
justin	695c3e2431	security: drop all CBC TLS suites (Qualys WEAK -> AEAD-only, still A+); sync ansible nginx templates (ciphers + ywxi CSP); capture host firewall as IaC	2026-06-06 00:49:21 -05:00