Ludovic Poujol
7a865b0ace
minifirewall: Properly detect alert5.sh to turn on firewall at boot
2020-02-17 16:36:48 +01:00
Ludovic Poujol
704b76e6de
minifirewall: Properly detect alert5.sh to turn on firewall at boot
2020-02-17 16:02:48 +01:00
Ludovic Poujol
02e8754d75
minifirewall: Backport changes from minifirewall (properly open outgoing smtp(s))
2020-02-17 10:56:38 +01:00
Patrick Marchand
fefd10ae2a
The GPG key for yarn changed
2020-02-11 10:20:12 -05:00
Jérémy Lecour
ca4c4adb59
certbot: commit all changes in /etc/.git
...
On some servers, certificates can be copied directly in final
directories over SSH.
2020-02-11 12:06:40 +01:00
Jérémy Lecour
f57af13349
minifirewall: better alert5 activation
2020-02-10 10:36:00 +01:00
Jérémy Lecour
68b7a88e63
apt: added buster backports prerferences
2020-02-10 10:35:18 +01:00
Patrick Marchand
896b8bd7e4
Merge branch 'evobackup-client' into unstable
...
Import evobackup client code into mainline.
2020-02-06 16:29:02 -05:00
Patrick Marchand
c195806918
Allow different postgres versions on buster and stretch
2020-02-06 16:06:34 -05:00
Jérémy Lecour
07fd68b6a4
apt: fix syntax
2020-02-04 18:37:00 +01:00
Jérémy Lecour
72f5dc70f8
apt: hold packages only if package is installed
2020-02-04 18:14:57 +01:00
Jérémy Lecour
dc7358bc4c
nagios-nrpe: change default haproxy socket path
2020-01-23 15:04:25 +01:00
Jérémy Lecour
02858692bb
evomaintenance: don't configure firewall for database if not necessary
2020-01-23 14:34:03 +01:00
Jérémy Lecour
71a2a19847
apache: the default VHost doesn't redirect to https for ".well-known" paths
2020-01-23 14:34:03 +01:00
Eric Morino
3740a6782b
Add packages dependencies for Postgis
2020-01-21 15:48:03 +01:00
Jérémy Lecour
adc1aad883
redis: data directory is configurable
2020-01-17 14:54:05 +01:00
Ludovic Poujol
d3dc98a778
Merge branch 'lpoujol/fpm-php' of evolix/ansible-roles into unstable
2020-01-16 15:56:29 +01:00
Ludovic Poujol
31df2d2fbc
php: Add a task to remove Debian's default FPM pool file (off by default)
...
Can be triggered by switching php_fpm_remove_default_pool to True.
2020-01-16 15:55:35 +01:00
Ludovic Poujol
ef5ed6911e
php: Change the default pool names to something more explicit (and same for the variables names)
...
Because it's more than just pure configuration, but a fpm pool
definition, I've changed the following variables in Ansible :
- php_fpm_defaults_conf_file to replaced by php_fpm_default_pool_file
- php_fpm_custom_conf_file to php_fpm_default_pool_custom_file.
On the FPM side, I've also changed the files names of the pool to make
them more explicit. No more z and zzz. It's the www pool, so let's put
www in the file name for coherence :
- z-evolinux-defaults.conf changes to www-evolinux-defaults.conf
- zzz-evolinux-custom.conf changes to www-evolinux-zcustom.conf
2020-01-16 15:55:25 +01:00
Ludovic Poujol
c9d3635cf8
php: Make sure the default pool we define can be fully functionnal witout debian's default pool file
2020-01-16 15:55:17 +01:00
Patrick Marchand
af61b7f97d
Temp fix for regression introduced by bkctld 2.x
...
The erroneous error codes returned by bkctld will make playbooks
fail even though the commands run succesfully.
See evolix/evobackup#31
2020-01-16 12:18:51 +01:00
Jérémy Lecour
80081aa26e
evolinux-base: remove the chrony package
2020-01-16 10:57:47 +01:00
Eric Morino
c4ede03f3a
Add package list in board for compatibility Ansible 2.7
2020-01-09 15:40:47 +01:00
Eric Morino
12cdf35126
Add multi: "" patch
2020-01-09 15:40:46 +01:00
Jérémy Lecour
65d914098c
whitespaces
2020-01-09 15:05:44 +01:00
Jérémy Lecour
e7952dc3c8
etc-git: fix warnings ansible-lint
2020-01-08 17:19:36 +01:00
Jérémy Lecour
bf7de332ea
minifirewall: fix warnings ansible-lint
2020-01-08 17:19:13 +01:00
Jérémy Lecour
f79b30eeb4
update changelog
2020-01-03 16:40:53 +01:00
Jérémy Lecour
6801f4e00e
Add names to many blocks
2019-12-31 16:56:03 +01:00
Jérémy Lecour
3b258cc43e
tomcat: package version derived from Debian version if missing
2019-12-31 16:43:51 +01:00
Jérémy Lecour
b8bdedaa2e
packweb-apache: update phpmyadmin package for Debian 10+
...
phpmyadmin_4.6.6-5_all.deb is no longer available, let's use 4.6.6-4
2019-12-31 16:27:05 +01:00
Jérémy Lecour
27e217467e
Change "|changed" with "is changed"
2019-12-31 16:18:56 +01:00
Jérémy Lecour
eded11f88f
Change "|search" with "is search"
2019-12-31 16:18:56 +01:00
Jérémy Lecour
e04d881988
replace "with_items" in apt modules
2019-12-31 16:18:56 +01:00
Jérémy Lecour
79bb6103b8
Change "|version_compare" with "is version_compare"
2019-12-31 10:18:19 +01:00
Jérémy Lecour
5b847ec91c
whitespace
2019-12-31 09:54:59 +01:00
Eric Morino
270e42ac77
Remove hooks directories if debian 10 and superior
2019-12-30 17:32:08 +01:00
Eric Morino
be2ea39158
Add buster for RabbitMQ
2019-12-30 17:27:39 +01:00
Eric Morino
1bf271a4f4
Add install PostGIS in postgresql rôle
2019-12-26 16:16:05 +01:00
Patrick Marchand
20191c8873
Fixed regression introduced by commit 276177900b
...
The default behavior for ansible template is to overwrite the
targeted file. Since we dont always want to overwrite a file when
we play this role, we set `force` to `False` by default. This means
that if the `dest` already exists, ansible will not overwrite it
with it's given template.
This is fine for most of the tasks in this role, but in the case
of `{{ evoadmin_scripts_dir }}/web-mail.tpl`,the file is created
by a task that runs prior to the template task, so setting it to
`False` by default means it never gets updated and clients dont get
notified when they create new websites.
2019-12-24 14:10:24 -05:00
Patrick Marchand
0b4095d8dd
bkctld restart works better than bkctld start
...
a simple start will fail if the jail is already started, there is potential for a race condition.
2019-12-19 10:30:58 -05:00
Victor LABORIE
2a1e0b7ef6
evolinux-base: install ssacli for HP Smart Array
2019-12-13 11:00:20 +01:00
Jérémy Lecour
ce45a39b8b
redis: manage runtime directories manually on Jessie
2019-12-13 10:44:44 +01:00
Jérémy Lecour
607ee119ec
redis: sudo nopasswd for nagios check
2019-12-13 10:44:44 +01:00
Jérémy Lecour
e557a3eaae
apache: improve permissions in save_apache_status script
2019-12-13 10:44:44 +01:00
Eric Morino
8b6c1341f9
Fix logrotate configuration
2019-12-10 14:29:57 +01:00
Victor LABORIE
1b74db194a
Add missing evolix prefix to role dependencies
2019-12-03 14:32:34 +01:00
Victor LABORIE
0873bb49e0
Add evolix prefix to role dependencies
2019-11-29 14:19:52 +01:00
Victor LABORIE
6f5e13f8b8
Add evolix prefix to include_role
2019-11-29 14:00:25 +01:00
Ludovic Poujol
6e918d166e
evolinux-base: Don't make alert5.service executable
...
Every 3 mins, systemd complain that the service file is marked as
executable, and asks the executable bit to be remove.
Nov 27 01:35:11 foo systemd[1]: Configuration file /etc/systemd/system/alert5.service is marked executable. Please remove executable permission bits. Proceeding anyway.
2019-11-28 10:59:29 +01:00