Jérémy Lecour
94a5d7daa2
mysql: variable to disable myadd script overwrite (default: True)
2021-04-23 14:59:29 +02:00
Jérémy Lecour
eab68545fe
evolinux-base: add default motd template
2021-04-23 11:41:27 +02:00
Ludovic Poujol
3457b14fed
ntpd: Add leapfile configuration setting to ntpd on debian 10+
2021-04-21 17:22:45 +02:00
Ludovic Poujol
d56c545183
apache: new variable for mpm mode (+ updated default config accordingly)
...
Also, itk package will only be installed if required
2021-04-19 17:35:49 +02:00
Jérémy Lecour
5e0ca0e3ff
Release 10.5.1
2021-04-13 15:56:09 +02:00
Ludovic Poujol
0f8804a8ab
etc-git: commit in /usr/share/scripts when there's an active repository
2021-04-08 16:07:49 +02:00
Jérémy Lecour
a5a2c6e335
haproxy: dedicated internal address/binding (without SSL)
2021-04-06 14:41:03 +02:00
Jérémy Lecour
2686eea2b1
Release 10.5.0
2021-04-01 15:38:10 +02:00
Jérémy Lecour
7041a70eeb
elasticsearch: log rotation is more readable/maintainable
2021-04-01 15:36:34 +02:00
Bruno TATU
33837844ee
Compress logs about garbage collector for elasticsearch
...
Whitout this improvement, this logs cannot be compressed:
/var/log/elasticsearch/gc.log.02
/var/log/elasticsearch/gc.log.29
/var/log/elasticsearch/gc.log.12
/var/log/elasticsearch/gc.log.18
2021-04-01 15:36:34 +02:00
Ludovic Poujol
32f2a29161
lxc-php: No need of apt-key for php7.4
2021-03-31 11:51:26 +02:00
Ludovic Poujol
f2ebe2d878
lxc-php: Add php 7.4 support
2021-03-31 10:57:29 +02:00
Jérémy Lecour
d7d057e435
filebeat: fix Ansible syntax error
2021-03-23 16:29:03 +01:00
Jérémy Lecour
2593784ab0
metricbeat: new variables to configure SSL mode
2021-03-23 16:28:14 +01:00
Jérémy Lecour
3a3cf1395e
listupgrade: update script from upstream
2021-03-23 16:27:15 +01:00
Jérémy Lecour
5a4bd28eaf
nagios-nrpe: libfcgi-client-perl is not available before Debian 10
2021-03-18 15:16:23 +01:00
Jérémy Lecour
5582d6e724
redis: socket/pid directories have the correct permissions
2021-03-18 15:15:39 +01:00
Ludovic Poujol
c7c75d3206
Nodejs : Update yarn gpg repo key
2021-03-11 10:07:05 +01:00
Patrick Marchand
e5511eafc6
Revert changes to bind log path from apparmor fix
...
I realised it wasnt the best idea to change the path we are used to using just for this, so I overwrite the apparmor configuration instead.
2021-03-09 16:58:14 -05:00
Patrick Marchand
ffd3ff97f1
Fix conflict in changelog
2021-03-09 12:28:01 -05:00
Patrick Marchand
7da22e243e
Changed log directory for bind9
...
It is now /var/log/named, this is what debian 10 and apparmor expect by default. This fixes the bind9 service crashing at start.
2021-03-09 12:25:15 -05:00
Jérémy Lecour
3103af67a7
redis: escape password in Munin configuration
2021-03-09 18:24:15 +01:00
Ludovic Poujol
3cb18faf28
evolinux-users: Add sudo rights for nagios for multi-php lxc
2021-03-04 16:48:55 +01:00
Jérémy Lecour
1f4079b1b3
haproxy: possible admin access with login/pass
2021-02-27 18:43:59 +01:00
Jérémy Lecour
92b7ce0acd
postfix: always enable sasl authentified for relay
2021-02-23 10:05:08 +01:00
Ludovic Poujol
df9db31725
deny requests to ^/evolinux_fpm_status-.*
2021-02-22 16:06:57 +01:00
Jérémy Lecour
3709808fdc
redis: use /run instead or /var/run
2021-02-18 16:42:54 +01:00
Ludovic Poujol
ddd3e1aa06
nagios-nrpe: new script check_phpfpm_multi
2021-02-17 17:23:11 +01:00
Jérémy Lecour
f862ffc42e
beats packages can be upgraded to latest (default: False)
2021-02-16 16:35:25 +01:00
Tristan PILAT
22a19519b3
Add NRPE related configuration tasks
2021-02-16 11:41:05 +01:00
Tristan PILAT
41e3fb0982
Add check_keepalived NRPE script
2021-02-16 11:40:20 +01:00
Tristan PILAT
3e11b1d31f
Add notify parameter for NRPE check
2021-02-16 11:39:52 +01:00
Tristan PILAT
2889720902
Add restart nagios-nrpe-server handler
2021-02-16 11:37:33 +01:00
Jérémy Lecour
0e3ecccb7f
postfix: restore permit_sasl_authenticated on packmail
2021-02-12 18:29:22 +01:00
Jérémy Lecour
622bbca4c2
apache: rotate logs daily instead of weekly
2021-02-12 18:05:47 +01:00
Ludovic Poujol
b0cb14eb5b
* nagios-nrpe: update check_phpfpm_status.pl & install perl dependencies
2021-02-12 15:22:57 +01:00
Jérémy Lecour
2b328dc764
postfix: add smtpd_relay_restrictions in configuration
2021-02-12 14:10:04 +01:00
Tristan PILAT
58f82046cc
Add first version of Keepalived role
2021-02-11 17:32:23 +01:00
Jérémy Lecour
17f1a1a55e
update changelog
2021-02-11 12:09:32 +01:00
Jérémy Lecour
f940bc3866
cerbot: use the legacy script on Debian 8 and 9
2021-02-04 16:34:24 +01:00
Jérémy Lecour
dde2672715
nginx: no more "minimal" mode, but the package remains customizable.
2021-02-04 11:31:36 +01:00
Jérémy Lecour
cff309ff41
nginx: add access to server status on default VHost
2021-02-04 11:30:32 +01:00
Jérémy Lecour
e1458e6a35
Mention the CHANGELOG in the README
2021-02-04 11:13:05 +01:00
Jérémy Lecour
5588ed6009
minifirewall: change some defaults
...
Only SSH (22) is open on privilegied IPs
Remove volatile.debian.org domain
2021-02-04 10:55:31 +01:00
Jérémy Lecour
6c84ada361
redis: s/content/block/ to workaround the blockinfile bug
2021-02-04 10:55:31 +01:00
Brice Waegeneire
1785e6a500
nginx: fix server-status
2021-02-03 16:25:08 +01:00
Jérémy Dubois
02ba81884d
MàJ IPs Evolix minifirewall + spamassassin
2021-01-20 15:45:04 +01:00
Mathieu Trossevin
633d5644cb
Merge pull request 'lxc-php: Do not bind the mysql socket by default' ( #122 ) from mtrossevin/ansible-roles:packweb-multi-php2_patch into unstable
...
Reviewed-on: evolix/ansible-roles#122
2021-01-11 15:27:33 +01:00
Mathieu Trossevin
2e29dc2440
lxc-php: Do not bind the mysql socket by default
...
The lxc-php role can be run on a server without mysql. Attempting to
bindmount the mysql socket in such a case cause the lxc container to
fail to start.
This commit add a variable, lxc_php_create_mysql_link defaulting to
false telling ansible if it should bindmount the MySQL socket to the
container.
2021-01-11 15:20:25 +01:00
Brice Waegeneire
1576375417
postgresql: Fix postgresql@.service customization
2021-01-08 14:46:38 +01:00