Faalkaart fixes

https://basisbeveiliging.nl/report/NL/cyber_non_profit/1720

roles/www/tasks/mediawiki.yaml

@@ -1,8 +1,18 @@
 ---
 - name: Install dependencies
   apt:
-    name:
-      - php-fpm
+    name: php-fpm
+    state: present
+
+- import_tasks: ../../../snippets/common-nginx.yaml
+
+- name: Install security.txt
+  template:
+    src: security.txt
+    dest: /opt/security.txt
+    owner: root
+    group: root
+    mode: 0644
 
 - name: Allow HTTP/HTTPS
   iptables:

roles/www/templates/nginx-site.conf

@@ -127,5 +127,9 @@ server {
         alias /opt/matrix-delegation.json;
     }
 
+    location = /.well-known/security.txt {
+        alias /opt/security.txt;
+    }
+
     include "snippets/acme.conf";
 }

roles/www/templates/security.txt

@@ -0,0 +1,3 @@
+Contact: mailto:bestuur@bitlair.nl
+Preferred-Languages: nl, en
+Hiring: https://bitlair.nl/Deelnemer_Worden