Benoît S.
2a065abf5f
nagios-nrpe: check_hpraid: Fix wrong command name in examples
2020-08-21 14:51:30 +02:00
Benoît S.
39c8daacf4
nagios-nrpe: check_hpraid: Be sure that variables are bound
2020-08-21 14:51:30 +02:00
Jérémy Lecour
d67be3cd91
haproxy: deport SSL tuning to Mozilla SSL generator
...
There are too many combinations and they change every so often.
It's better to direct the user to the generator to have a good
configuration.
2020-08-21 14:51:30 +02:00
Jérémy Lecour
2a5195078c
haproxy: split stats variables
2020-08-21 14:51:30 +02:00
Jérémy Lecour
4c4771b3ab
haproxy: add deny_ips file to reject connections
2020-08-21 14:51:30 +02:00
Jérémy Lecour
d26d501b2c
haproxy: add some comments to default config
2020-08-21 14:51:30 +02:00
Jérémy Lecour
17b49ccc3d
haproxy: simplify syntax fos stats section
2020-08-21 14:51:30 +02:00
Jérémy Lecour
d9f8c4fc89
whitespaces
2020-08-21 14:51:30 +02:00
Jérémy Lecour
c2ae3de929
nginx: read server-status values before changing the config
2020-08-21 14:51:30 +02:00
Jérémy Lecour
a381d23d1f
haproxy: preconfigure SSL with defaults
2020-08-21 14:51:30 +02:00
Jérémy Lecour
e197f5c2ba
haproxy: adapt backports installed package list to distibution
2020-08-21 14:51:30 +02:00
Jérémy Lecour
d5b29a2fe0
nginx: make default vhost configurable
2020-08-21 14:51:30 +02:00
Jérémy Lecour
39b8e9698d
certbot: detect HAProxy cert directory
2020-08-21 14:51:30 +02:00
Patrick Marchand
9bfbbf08c4
Fix variable par défaut manquante dans mysql
...
Le lower_case_table_names doit être mis à Null pour que le check marche.
2020-08-21 14:51:30 +02:00
Jérémy Lecour
7f65505f01
update changelog
2020-08-21 14:51:30 +02:00
Jérémy Lecour
45731c7755
haproxy: enable stats frontend with access lists
2020-08-21 14:51:30 +02:00
Patrick Marchand
f5d06ad0b1
evobackup-client: Fix ssh connection test in zzz_evobackup.sh
...
When I made the ssh key name a variable and defaulted it to id_ed25519,
I forgot to change the hardcoded value for the ssh test in
evobackup-client/templates/zzz_evobackup.default.sh.j2
2020-08-21 14:51:30 +02:00
Jérémy Lecour
99f0d9e178
evoacme: read values from environment before defaults file
2020-08-21 14:51:30 +02:00
Jérémy Lecour
968d19bb30
mongodb: fix logrotate patterm on Debian buster
2020-08-21 14:51:30 +02:00
Eric Morino
413597cd59
Force owner opendkim for /etc/opendkim/ folder
2020-08-21 14:51:30 +02:00
Jérémy Lecour
e380fa5085
evoacme: upstream release 20.06.1
2020-08-21 14:51:30 +02:00
Ludovic Poujol
974bc653f3
lxc-php: Do --no-install-recommends for ssmtp/opensmtpd
2020-08-21 14:51:30 +02:00
Ludovic Poujol
5ce715d2ae
lxc-php: Install opensmtpd as intended
2020-08-21 14:51:30 +02:00
Ludovic Poujol
c521c98a11
php: Don't disable putenv() by default in PHP settings
2020-08-21 14:51:30 +02:00
Ludovic Poujol
2dcf99a117
lxc-php: Don't disable putenv() by default in PHP settings
2020-08-21 14:51:30 +02:00
Ludovic Poujol
193b640226
lxc-php: Install php-sqlite by default
2020-08-21 14:51:30 +02:00
Ludovic Poujol
72939c3e57
php: Install php-sqlite by default
2020-08-21 14:51:30 +02:00
Ludovic Poujol
0dfe97d771
packweb-apache: Install zip & unzip by default
2020-08-21 14:51:30 +02:00
Jérémy Lecour
a841e60531
haproxy: syntax and whitespaces
2020-08-21 14:51:30 +02:00
Jérémy Lecour
8d8e5f6998
certbot: restore compatibility with old Nginx
2020-08-21 14:51:30 +02:00
Jérémy Lecour
cd29ee4d33
certbot: install certbot dependencies non-interactively for jessie
2020-08-21 14:51:30 +02:00
Jérémy Dubois
877a32bbf0
nagios-nrpe / evolinux-base : new ntp server variable
...
Online hosted servers must use ntp.online.net as
ntp server, because others one are rate limited.
Default ntp server is pool.ntp.org, and a custom
one can be set with the nagios_nrpe_ntp_server
variable.
2020-08-21 14:51:30 +02:00
Benoît S.
bdb234c0cd
evolinux-base: check_hpraid.sh: Fix missing copy of RAID state
2020-08-21 14:51:30 +02:00
Benoît S.
f963eaacf6
evolinux-base: check_hpraid.sh: Fix RAID state detection
2020-08-21 14:51:30 +02:00
Benoît S.
35123f8189
evolinux-base: Add check_hpraid.sh
...
This script is meant to be executed as a cron by executing Nagios
NRPE plugin check_hpraid and notify by mail any errors
2020-08-21 14:51:30 +02:00
Jérémy Lecour
6d31568a41
evoacme: upstream release 20.06
2020-08-21 14:51:30 +02:00
Jérémy Lecour
291ad2ba40
redis: raise an error is port 6379 is used in "instance" mode
2020-08-21 14:51:30 +02:00
Jérémy Lecour
107f1f06e6
redis: new syntax for match filter
2020-08-21 14:51:30 +02:00
Jérémy Lecour
bd8a30a107
redis: create sudoers file if missing
2020-08-21 14:51:30 +02:00
Jérémy Lecour
66b62c5629
haproxy: chroot and socket path are configurable
2020-08-21 14:51:30 +02:00
Jérémy Lecour
f034e93b6e
whitespaces
2020-08-21 14:51:30 +02:00
Patrick Marchand
0a4aeea481
Add option to make a mysql install read only
...
Rebased on unstable
2020-08-21 14:51:30 +02:00
Patrick Marchand
004b48eee7
Added mysql_innodb_log_file_size option to the mysql role
...
Makes it possible to have larger binary entries when replicating.
2020-08-21 14:51:30 +02:00
Patrick Marchand
e713ad024b
Fix right problem in mysql replication
...
The configuration file was not set to 0644, which caused the file
to be ignored by mysql and it's configuration not to be set.
2020-08-21 14:51:30 +02:00
Patrick Marchand
c142af69f0
Added some mysql variables and allowed forcing config update
...
The default behaviour is kept, but this way we can manage a mysql
installation from ansible.
2020-08-21 14:51:30 +02:00
Patrick Marchand
18878d58e8
Replication should set a binlog format
...
This could possible be better served in the base config file, but
for now I'll keep it here.
2020-08-21 14:51:30 +02:00
Patrick Marchand
8778d69102
Removed redundant nagios checks
...
They are already installed by the base roles.
2020-08-21 14:51:30 +02:00
Patrick Marchand
c39f63048c
Removed useless dbadmin script from mysql replication tasks
...
It was used by a very specific client case and is not needed for a
general role.
2020-08-21 14:51:30 +02:00
Patrick Marchand
df99e9ac4f
Make it possible for mysql role to copy evolix scripts
...
Based myself off of the webapps/evoadmin-web role, but I'm not sure
we still consider this a hack or not. We use a read only /usr fs,
so we need to remount it to add scripts in /usr/local/share.
2020-08-21 14:51:30 +02:00
Patrick Marchand
6a264a3179
Added option to prepare mysql servers for replication
2020-08-21 14:51:30 +02:00