Jérémy Lecour
2c441f176a
mysql: mariadb-client-10.5 on Debian 11
2021-07-02 21:11:27 +02:00
Jérémy Lecour
c5bb8f06ae
mysql: use python3 with Debian 11 and later
2021-07-02 21:10:52 +02:00
Jérémy Lecour
51d4ec1bb2
php: remove php-gettext for 7.4
2021-07-02 21:10:04 +02:00
Jérémy Lecour
2f68ae5339
Preliminary support for Bullseye
2021-07-02 20:58:09 +02:00
Jérémy Lecour
90cbd17f9b
listupgrade: crontab is configurable
2021-07-02 14:01:46 +02:00
Jérémy Lecour
b0b24744d6
listupgrade: upstream release 21.06.3
2021-07-02 13:59:42 +02:00
Jérémy Lecour
11813c31a4
certbot: add script for manual deploy hooks execution
2021-06-30 14:29:03 +02:00
Jérémy Lecour
51462c724c
certbot: sync_remote excludes itself
2021-06-30 07:39:57 +02:00
Jérémy Lecour
2ed1dac16b
Release 10.6.0
2021-06-28 15:56:19 +02:00
Jérémy Lecour
0fe0244116
Update Galaxy metadata (company, platforms and galaxy_tags)
2021-06-28 15:26:28 +02:00
Jérémy Lecour
1890a79702
elasticsearch: inline YAML formatting of seed_hosts and initial_master_nodes
2021-06-23 22:38:24 +02:00
Jérémy Lecour
4c1ef1bd56
elasticsearch: recent versiond don't depend on external JRE
2021-06-23 22:38:24 +02:00
Jérémy Lecour
6190c66445
listupgrade: upstream release 21.06.2
2021-06-20 12:06:49 +02:00
Jérémy Lecour
dd32ab5688
listupgrade: upstream release 21.06.1
2021-06-20 10:32:16 +02:00
Jérémy Lecour
dbc853a815
listupgrade: upstream release 21.06
2021-06-17 18:23:13 +02:00
Jérémy Lecour
4c7fed77c4
squid: add Yarn apt repository in default whitelist
2021-06-17 18:19:20 +02:00
Jérémy Lecour
fe9b7ee5f7
evomaintenance: upstream release 0.6.4
2021-06-17 10:57:07 +02:00
Jérémy Lecour
3d715bae35
kvm-host: replace the "kvm-tools" package with scripts deployed by Ansible
2021-06-10 11:09:48 +02:00
Jérémy Lecour
ca40fad186
nodejs: change GPG key name
2021-06-08 11:19:26 +02:00
Jérémy Lecour
856d11aced
nodejs: update apt cache before installing the package
2021-06-07 13:03:18 +02:00
Jérémy Lecour
2c47871fa7
Add Elastic GPG key to kibana, filebeat, logstash, metricbeat roles
2021-05-25 15:10:04 +02:00
Jérémy Lecour
06b8314211
evolinux-base: fix motd lookup path
2021-05-19 17:02:20 +02:00
Jérémy Lecour
02451f1e67
add default (useless) value for file lookup
2021-05-19 14:35:08 +02:00
Jérémy Lecour
4d83f25ae6
fix pipefail option for shell invocations
2021-05-18 14:04:54 +02:00
Jérémy Lecour
cae0de17df
listupgrade: fix wget error + shellcheck cleanup
2021-05-17 23:05:18 +02:00
Jérémy Lecour
56af68e5b3
listupgrade: print error if wget fails
2021-05-17 12:19:57 +02:00
Jérémy Lecour
d823c8116a
update CHANGELOG
2021-05-09 23:21:21 +02:00
Jérémy Lecour
e5e4dc95fa
packweb-apache: install phpMyAdmin from buster-backports
2021-05-04 14:57:18 +02:00
Jérémy Lecour
e7ddf9d46c
Use 'loop' syntax instead of 'with_list'
2021-05-04 14:31:22 +02:00
Jérémy Lecour
485ec39674
Use 'loop' syntax instead of 'with_nested'
2021-05-04 14:29:50 +02:00
Jérémy Lecour
07fd6451e1
Use 'loop' syntax instead of 'with_dict'
2021-05-04 14:20:53 +02:00
Jérémy Lecour
5138065059
Use 'loop' syntax instead of 'with_items'
2021-05-04 14:19:18 +02:00
Jérémy Lecour
debc4a82ca
Use 'loop' syntax instead of 'with_first_found'
2021-05-04 13:39:47 +02:00
Jérémy Lecour
a7971abb04
apt: store keys in /etc/apt/trusted.gpg.d in ascii format
2021-05-03 12:02:31 +02:00
Jérémy Lecour
cc6acdbf34
certbot: sync_remote.sh is configurable
2021-05-03 11:25:24 +02:00
Jérémy Lecour
6eaeb90f6e
ldap: fix edge cases where passwords were not set/get properly
2021-05-02 23:28:09 +02:00
Jérémy Lecour
43c726e86a
spamassassin: change dependency on evomaintenance
...
Fail with an error if evomaintenance config is missing
instead of trying to install a package that doesn't exist anymore.
2021-05-02 01:24:03 +02:00
Jérémy Lecour
920cb7eaeb
update changelog
2021-05-01 16:51:20 +02:00
Jérémy Lecour
5d79c31dc3
kvm-host: add migrate-vm script
2021-04-28 15:53:38 +02:00
Jérémy Lecour
94a5d7daa2
mysql: variable to disable myadd script overwrite (default: True)
2021-04-23 14:59:29 +02:00
Jérémy Lecour
eab68545fe
evolinux-base: add default motd template
2021-04-23 11:41:27 +02:00
Ludovic Poujol
3457b14fed
ntpd: Add leapfile configuration setting to ntpd on debian 10+
2021-04-21 17:22:45 +02:00
Ludovic Poujol
d56c545183
apache: new variable for mpm mode (+ updated default config accordingly)
...
Also, itk package will only be installed if required
2021-04-19 17:35:49 +02:00
Jérémy Lecour
5e0ca0e3ff
Release 10.5.1
2021-04-13 15:56:09 +02:00
Ludovic Poujol
0f8804a8ab
etc-git: commit in /usr/share/scripts when there's an active repository
2021-04-08 16:07:49 +02:00
Jérémy Lecour
a5a2c6e335
haproxy: dedicated internal address/binding (without SSL)
2021-04-06 14:41:03 +02:00
Jérémy Lecour
2686eea2b1
Release 10.5.0
2021-04-01 15:38:10 +02:00
Jérémy Lecour
7041a70eeb
elasticsearch: log rotation is more readable/maintainable
2021-04-01 15:36:34 +02:00
Ludovic Poujol
f2ebe2d878
lxc-php: Add php 7.4 support
2021-03-31 10:57:29 +02:00
Jérémy Lecour
d7d057e435
filebeat: fix Ansible syntax error
2021-03-23 16:29:03 +01:00
Jérémy Lecour
2593784ab0
metricbeat: new variables to configure SSL mode
2021-03-23 16:28:14 +01:00
Jérémy Lecour
3a3cf1395e
listupgrade: update script from upstream
2021-03-23 16:27:15 +01:00
Jérémy Lecour
5a4bd28eaf
nagios-nrpe: libfcgi-client-perl is not available before Debian 10
2021-03-18 15:16:23 +01:00
Jérémy Lecour
5582d6e724
redis: socket/pid directories have the correct permissions
2021-03-18 15:15:39 +01:00
Patrick Marchand
e5511eafc6
Revert changes to bind log path from apparmor fix
...
I realised it wasnt the best idea to change the path we are used to using just for this, so I overwrite the apparmor configuration instead.
2021-03-09 16:58:14 -05:00
Patrick Marchand
ffd3ff97f1
Fix conflict in changelog
2021-03-09 12:28:01 -05:00
Patrick Marchand
7da22e243e
Changed log directory for bind9
...
It is now /var/log/named, this is what debian 10 and apparmor expect by default. This fixes the bind9 service crashing at start.
2021-03-09 12:25:15 -05:00
Jérémy Lecour
3103af67a7
redis: escape password in Munin configuration
2021-03-09 18:24:15 +01:00
Ludovic Poujol
3cb18faf28
evolinux-users: Add sudo rights for nagios for multi-php lxc
2021-03-04 16:48:55 +01:00
Jérémy Lecour
1f4079b1b3
haproxy: possible admin access with login/pass
2021-02-27 18:43:59 +01:00
Ludovic Poujol
df9db31725
deny requests to ^/evolinux_fpm_status-.*
2021-02-22 16:06:57 +01:00
Jérémy Lecour
3709808fdc
redis: use /run instead or /var/run
2021-02-18 16:42:54 +01:00
Ludovic Poujol
ddd3e1aa06
nagios-nrpe: new script check_phpfpm_multi
2021-02-17 17:23:11 +01:00
Jérémy Lecour
f862ffc42e
beats packages can be upgraded to latest (default: False)
2021-02-16 16:35:25 +01:00
Jérémy Lecour
622bbca4c2
apache: rotate logs daily instead of weekly
2021-02-12 18:05:47 +01:00
Ludovic Poujol
b0cb14eb5b
* nagios-nrpe: update check_phpfpm_status.pl & install perl dependencies
2021-02-12 15:22:57 +01:00
Jérémy Lecour
2b328dc764
postfix: add smtpd_relay_restrictions in configuration
2021-02-12 14:10:04 +01:00
Jérémy Lecour
17f1a1a55e
update changelog
2021-02-11 12:09:32 +01:00
Jérémy Lecour
dde2672715
nginx: no more "minimal" mode, but the package remains customizable.
2021-02-04 11:31:36 +01:00
Jérémy Lecour
cff309ff41
nginx: add access to server status on default VHost
2021-02-04 11:30:32 +01:00
Jérémy Lecour
5588ed6009
minifirewall: change some defaults
...
Only SSH (22) is open on privilegied IPs
Remove volatile.debian.org domain
2021-02-04 10:55:31 +01:00
Jérémy Lecour
024d30ea43
evoacme: upstream release 21.01
2021-01-07 19:16:06 +01:00
Jérémy Lecour
0e32e0d2aa
certbot: use a fixed 1.9.0 version of the certbot-auto script (renamed "letsencrypt-auto")
2021-01-07 18:55:44 +01:00
Jérémy Lecour
8c54fd8c16
apache: new variables for logrotate + server-status
2021-01-05 17:47:56 +01:00
Jérémy Lecour
19da5ea1f7
Release 10.4.0
2020-12-24 14:00:37 +01:00
Jérémy Lecour
7ec0748383
certbot: detect domains if missing
2020-12-24 13:56:43 +01:00
Jérémy Lecour
442e9bcda8
cerbot: hook to sync certificates to remote servers
2020-12-24 13:56:43 +01:00
Jérémy Lecour
4dbd1b0bee
certbot: disable auth for Let's Encrypt challenge
2020-12-24 10:33:48 +01:00
Jérémy Lecour
1d56e002b4
nginx: change from "nginx_status-XXX" to "server-status-XXX"
2020-12-23 15:53:36 +01:00
Jérémy Lecour
66a6e67de2
varnish: variable for jail configuration
2020-12-21 23:33:14 +01:00
Jérémy Lecour
1922b51fbe
Release 10.3.0
2020-12-21 16:03:49 +01:00
Jérémy Lecour
67ce8de85e
varnish: custom reload script is now useless
2020-12-20 23:25:34 +01:00
Jérémy Lecour
3e72d6961c
varnish: no threadpool delay by default
2020-12-20 23:03:37 +01:00
Jérémy Lecour
8861169a04
varnish: config file name is configurable
2020-12-20 23:03:10 +01:00
Jérémy Lecour
81fbd98a5f
evolinux-users: improve uid/login checks
2020-12-17 15:25:48 +01:00
Jérémy Lecour
0b528f15da
tomcat-instance: fail if uid already exists
2020-12-17 08:06:44 +01:00
Jérémy Lecour
5b2d3b09d0
Create system users for vmail (dovecot) and evoadmin
2020-12-17 08:05:16 +01:00
Jérémy Lecour
3c4986275c
evocheck: upstream release 20.12
2020-12-08 11:07:42 +01:00
Jérémy Lecour
772bce8c0b
dovecot: vmail uid/gid are configurable
2020-12-07 17:26:45 +01:00
Jérémy Lecour
4d6f88f0f4
minifirewall: add variables to force upgrade the script and the config (default: False)
2020-12-07 17:23:37 +01:00
Jérémy Lecour
98f798b9fb
cerbot: parse HAProxy config file only if HAProxy is found
2020-12-03 17:26:16 +01:00
Jérémy Lecour
fc71bb5945
minifirewall: upstream release 20.12
2020-12-01 22:57:13 +01:00
Jérémy Lecour
9aa24f4cde
minifirewall: Docker support
2020-12-01 22:47:38 +01:00
Jérémy Lecour
b6817cb62c
evoacme: upstream release 20.12
2020-12-01 22:27:05 +01:00
Jérémy Lecour
18ac1e7279
redis: check maxmemory in NRPE check
...
If "maxmemory" is set and "maxmemory-policy" is missing or set to
"noeviction" then we enforce the "maxmemory" limit
2020-12-01 19:02:42 +01:00
Jérémy Lecour
86d59cbb5f
mysql: install save_mysql_processlist script
2020-11-24 13:59:04 +01:00
Ludovic Poujol
1d8b7c3bea
apt: disable APT Periodic
...
This interfere with our usual workflow (listupgrade)
Note : Using 0 instead of false is intentional, The value is used by the
apt-daily script that except a "0" to disable itself.
2020-11-24 11:19:18 +01:00
Jérémy Lecour
592030ee9a
evoacme: variable to disable Debian version check (default: False)
2020-11-21 09:59:10 +01:00
Jérémy Lecour
b43d0f3629
evoacme: upstream release 20.11
2020-11-19 21:21:07 +01:00
Ludovic Poujol
15154169cf
kvm-host: Add drbd role dependency (toggleable with kvm_install_drbd)
2020-10-30 11:56:24 +01:00