Commit graph

3035 commits

Author SHA1 Message Date
William Hirigoyen (Evolix) 4b39f5a998 [webapps/evoadmin-mail] Ajout remount RW manquant 2022-07-25 17:58:51 +02:00
William Hirigoyen (Evolix) 3f9ac05b13 Homogénéisation du port OpenDKIM par défaut du rôle postfix avec celui du rôle OpenDKIM 2022-07-25 17:29:19 +02:00
William Hirigoyen (Evolix) fa5eb5aa5c Avoid find warning global options are not positional (-maxdepth after the argument -type) 2022-07-20 11:02:44 +02:00
David Prevot d67e03e5a2 packweb-apache/files/userlogrotate: tfix (comments). 2022-07-19 17:24:04 +02:00
William Hirigoyen (Evolix) 66563d0bf3 [packweb-apache] #66841 : ajout tâche update_userlogrotate.yml 2022-07-19 17:19:58 +02:00
Alexis Ben Miloud--Josselin 8cdaee9658 [php] Corriger installation sury pour les packweb en bullseye 2022-07-19 15:49:25 +02:00
William Hirigoyen (Evolix) 9742ec078e [packweb-apache] Fix unsecable spaces 2022-07-19 15:04:25 +02:00
William Hirigoyen (Evolix) 2e54944a24 [packweb-apache] Do gzip logs after web server reload instead of before to address 'file size changed while zipping' error. 2022-07-19 15:02:54 +02:00
Jérémy Lecour 0b41efd188 mongodb: replace version_compare() with version() 2022-07-18 15:54:42 +02:00
Bruno TATU 213c6dd6ac Add change for fail2ban role 2022-07-08 11:28:29 +02:00
Bruno TATU e0c95b4c78 Ensure apply dbpurgeage from stretch and buster for fail2ban 2022-07-08 11:26:00 +02:00
Jérémy Lecour 53847d9919 Release 22.07 2022-07-06 18:02:42 +02:00
Jérémy Lecour a387304483 Fix CHANGELOG 2022-07-06 14:26:13 +02:00
Jérémy Lecour 0a3bfd7f27 evolinux-base: session timeout is configurable 2022-07-06 14:24:41 +02:00
Brice Waegeneire 6d73acc866 Add nagios check mount rw 2022-07-05 16:00:22 +02:00
Brice Waegeneire 4d50bab03b base: Extract dump-server-state in task file 2022-07-05 15:57:41 +02:00
Brice Waegeneire 71879b999c nginx: Start server once.
Nginx is already started at the end of the main task. Starting the
service before we configure it correctly can put the role as failed if
the default configuration don't work on the host.
2022-07-05 15:57:41 +02:00
Ludovic Poujol e198cf67dc evoadmin-web: Update comment in template on how password hashes should be generated 2022-07-05 11:26:40 +02:00
Eric Morino 028bfe209a Add change in kvm-host 2022-07-05 10:18:49 +02:00
Eric Morino 34a3591192 Fix depreciation of drbd-overview by drbdadm status 2022-07-05 10:16:47 +02:00
Jérémy Dubois 68ac8fc058 openvpn: configure logrotate 2022-06-30 10:12:36 +02:00
Jérémy Dubois 07c3c0226f openvpn: minimal rights on /etc/shellpki/ and crl.pem 2022-06-29 16:09:04 +02:00
David Prevot 835072c1e2 CI: Support Jenkins
Some checks failed
continuous-integration/drone/push Build is passing
test dprevot/ansible-roles/pipeline/pr-unstable This commit looks good
continuous-integration/drone/pr Build is failing
2022-06-29 15:07:29 +02:00
Jérémy Lecour 205e699355 minifirewall: docker mode is configurable 2022-06-22 17:20:15 +02:00
Jérémy Lecour abb14e5b52 haproxy: add haproxy_allow_ip_nonlocal_bind to set sysctl value 2022-06-22 15:32:10 +02:00
Ludovic Poujol 519ef930df Update PermitRootLogin task to work on Debian 11 2022-06-21 15:13:38 +02:00
Jérémy Lecour 050c61c220 Release 22.06.3 2022-06-17 11:00:51 +02:00
Brice Waegeneire adc89a1b65 Add nagios check for Redis Sentinel synchro 2022-06-17 10:59:17 +02:00
Jérémy Lecour a1995f0e74 WIP: add vrrp addresses via Ansible 2022-06-17 10:54:26 +02:00
Eric Morino a38a174b83 Add create: yes for file 0-blacklist 2022-06-16 16:08:10 +02:00
Jérémy Lecour 57ecac01ba evolinux-base: blacklist and do not install megaclisas-status package on incompatible servers 2022-06-16 15:19:44 +02:00
William Hirigoyen (Evolix) 3623363b94 Update changelog for version 22.06 2022-06-13 17:35:31 +02:00
Jérémy Lecour 556719bbf2 Release 22.06.2 2022-06-10 11:11:44 +02:00
Ludovic Poujol b3ac39decd postgresql: Fix task order when using pgdg repo & Install the right pg version 2022-06-09 10:33:28 +02:00
Jérémy Lecour 31c49a125b evocheck: manual fix of find syntax 2022-06-09 07:47:00 +02:00
Jérémy Lecour cea1408bba evocheck: upstream release 22.06.2 2022-06-09 07:42:29 +02:00
Jérémy Lecour 4d1d77faaf postgresql: add variable to configure binding addresses (default: 127.0.0.1) 2022-06-09 07:41:52 +02:00
Ludovic Poujol 1e19418fb0 Fail2ban: Multiple changes & improvements :
* Give the possibility to override jail.local (with fail2ban_override_jaillocal)
* If jail.local was overriden, add a warning
* Allow to tune some jail settings (maxretry, bantime, findtime) with ansible
* Allow to tune the default action with ansible
* Change default action to ban only (instead of ban + mail with whois report)
* Configure recidive jail (off by default) + extend dbpurgeage
2022-06-08 17:55:58 +02:00
Jérémy Lecour bcaacdf57f postgresql: fix nested loop for Munin plugins 2022-06-08 15:39:34 +02:00
Jérémy Lecour e6ea44ff29 Explicit loop variable names 2022-06-08 15:38:48 +02:00
Jérémy Lecour cbe7985814 Enforce String notation for mode 2022-06-08 15:38:21 +02:00
Jérémy Lecour b677defd97 redis: binding is possible on multiple interfaces 2022-06-08 15:36:47 +02:00
Jérémy Lecour 1895c549d4 Release 22.06.1 2022-06-06 15:07:10 +02:00
Jérémy Lecour 3d70438f7e evocheck: upstream release 22.06.1 2022-06-06 15:05:59 +02:00
Jérémy Lecour 16cdd6b326 evolinux-base: dir-check makes a file named after the reference directory 2022-06-06 14:43:18 +02:00
Jérémy Lecour 4cd7e0f4a1 minifirewall: upstream release 22.06 2022-06-06 14:42:22 +02:00
Jérémy Lecour 56c2c19d61 evomariabackup: release 22.06.1 2022-06-05 21:49:23 +02:00
Jérémy Lecour 6d0e49ba90 mysql: reorganize evomariabackup to use mtree instead of our own dir-check 2022-06-05 21:48:04 +02:00
William Hirigoyen (Evolix) c4023a4f49 Détecte automatiquement si le serveur est baremetal pour installer les outils hw, suppression de la variable evolinux_packages_hardware inutile 2022-06-03 16:22:56 +02:00
Jérémy Lecour 36b11c4455 evolinux-base: improve dir-check logging 2022-06-03 11:26:13 +02:00