Commit graph

  • a5e76c5248 Fix error in handlers filename. Gregory Colpart 2017-09-18 21:46:27 +0200
  • d96e2ea5bf evoacme: renew certs 30 days before expiration by default Victor LABORIE 2017-09-18 15:02:20 +0200
  • 3207d837cb etc-git: better commit author composition Jérémy Lecour 2017-09-15 16:03:49 +0200
  • accce99e05 mysql: fix slow_log config Jérémy Lecour 2017-09-15 11:30:33 +0200
  • b41c4f1567 mysql: custom config file must be world readable Jérémy Lecour 2017-09-15 11:30:08 +0200
  • 0e89d5ea56 Add files for MariaDB Gregory Colpart 2017-09-14 22:04:33 +0200
  • 8e4d7e484a wording Gregory Colpart 2017-09-14 19:34:04 +0200
  • ba7c7e0927 add systemd override for MariaDB Gregory Colpart 2017-09-14 19:32:24 +0200
  • 139a27383d Use /etc/systemd/system/*.service.d/evolinux.conf and fix systemd unit Gregory Colpart 2017-09-14 19:30:59 +0200
  • 3882a366e4 Revert "squid: consistent version switch" because we use == jessie everywhere Gregory Colpart 2017-09-14 19:13:59 +0200
  • 76dda62001 remove interface ignore wildcard because it breaks ntp sync with external servers Gregory Colpart 2017-09-14 19:09:22 +0200
  • dbbd0e1783 Patch MySQL 5.5.53, set secure-file-priv to empty value. Benoît.S 2017-09-14 15:19:26 +0200
  • 685282bf93 minifirewall: fallback when no trusted ip is provided Jérémy Lecour 2017-09-14 14:26:44 +0200
  • 3a9b95cedc evolinux-base: fallback with warning for ssh without addresses Jérémy Lecour 2017-09-14 14:26:00 +0200
  • 82fda57cdb squid: don't overwrite whitelist for Debian 8 Jérémy Lecour 2017-09-14 09:29:22 +0200
  • b4cf781dd1 squid: append whitelist for Debian 8 too Jérémy Lecour 2017-09-14 09:19:15 +0200
  • c44896d433 squid: consistent version switch Jérémy Lecour 2017-09-14 09:19:00 +0200
  • ca2048f9e3 squid: fix variable name Jérémy Lecour 2017-09-14 08:55:15 +0200
  • 8a139b07b2 evoacme: fix SRV_IP overriding in make-csr Victor LABORIE 2017-09-13 11:38:38 +0200
  • a1188c7823 add default_charset example in php custom files Gregory Colpart 2017-09-12 20:14:56 +0200
  • f5fdd71681 evoacme: fix invalid domain printing in make-csr Victor LABORIE 2017-09-12 15:49:29 +0200
  • 81aabdbe5e nginx: apt preferences for libnginx packages Jérémy Lecour 2017-09-12 15:15:31 +0200
  • 0438ece246 php: comments starting with '#' are deprecated Victor LABORIE 2017-09-12 10:41:47 +0200
  • 069e675c6b evoacme: add basic check to evoacme.sh Victor LABORIE 2017-09-11 14:18:20 +0200
  • ab177c2dad evoacme: add pem extension to dhparam file Victor LABORIE 2017-09-11 12:12:43 +0200
  • 6c399ca60e evoacme: fix live link path Victor LABORIE 2017-09-11 11:54:22 +0200
  • 1fbcb61559 evoacme: fix typo Victor LABORIE 2017-09-11 11:48:17 +0200
  • ff392d8e26 evoacme: fix symlink generation Victor LABORIE 2017-09-05 13:40:01 +0200
  • 0726d29796 evoacme: purge same day cert before recreating it Victor LABORIE 2017-09-01 11:14:33 +0200
  • 740b60d838 evoacme: make-csr stdout is more verbose Victor LABORIE 2017-09-01 10:55:07 +0200
  • e16eafc1a0 evoacme: complete refactoring of make-csr.sh Victor LABORIE 2017-08-25 18:13:32 +0200
  • 05afeea894 evoacme: remove obsolete sudoers file Victor LABORIE 2017-08-25 14:40:00 +0200
  • 8d7cbab3a9 evoacme: refactoring of certbot.cron Victor LABORIE 2017-08-25 14:32:58 +0200
  • 9deb594834 evoacme: move scripts in /usr/local/sbin Victor LABORIE 2017-08-24 19:27:07 +0200
  • e210de5f53 evoacme: complete refactoring of evoacme.sh Victor LABORIE 2017-08-24 18:25:42 +0200
  • 1cc4ea65df nginx: fix default link in minimal install Victor LABORIE 2017-09-08 15:04:58 +0200
  • db4331b98f we don't need anymore shadow group in Debian 9 or later Gregory Colpart 2017-09-08 04:03:04 +0200
  • 62189dbca8 Merge branch 'unstable' into stable Gregory Colpart 2017-09-08 02:02:53 +0200
  • 27f0369c5b esthetic changes: add version condition in name: Gregory Colpart 2017-09-08 02:01:26 +0200
  • 06184a44bf remove *ssl_subject vars to avoid errors Gregory Colpart 2017-09-08 01:24:58 +0200
  • d4e800a263 enable evoadmin-web link in default site index Gregory Colpart 2017-09-08 01:24:14 +0200
  • 04239e3350 use replace instead of lineinfile Gregory Colpart 2017-09-08 01:10:08 +0200
  • a074f6488a we use now evolinux-sudo group to set sudo rights Gregory Colpart 2017-09-08 00:15:53 +0200
  • 9f01e1869d Add info.php Gregory Colpart 2017-09-07 23:16:41 +0200
  • 87ef758891 we need force=no for files who will be lineinfile/blockinfile Gregory Colpart 2017-09-07 02:25:16 +0200
  • 26b76aed17 review default vhost Gregory Colpart 2017-09-07 01:20:12 +0200
  • be4e811c47 phpMyAdmin configuration Gregory Colpart 2017-09-07 01:16:45 +0200
  • 94625a73c2 Prepare phpMyAdmin config if needed Gregory Colpart 2017-09-06 19:34:04 +0200
  • 4f3b04e97d Centralize restrictions to fhs_retrictions.yml Gregory Colpart 2017-09-06 19:30:21 +0200
  • af5427e077 Add flavor for installing Symfony Gregory Colpart 2017-09-06 19:28:37 +0200
  • 521fe2e9f3 Fix custom config file name for PHP ini values Gregory Colpart 2017-09-06 15:34:11 +0200
  • 6241bdc8ce Easy activation of Access-Control-Allow-Origin for eot|ttf|otf|woff files Gregory Colpart 2017-09-06 14:57:14 +0200
  • 5d549af643 evomainteance should not install the trap itself Jérémy Lecour 2017-09-05 15:24:51 +0200
  • a18fdd0ab2 Merge branch 'hotfix-mongodb' into unstable Jérémy Lecour 2017-09-04 17:19:02 +0200
  • fc23090fca MongoDB: fix syntax mistake Jérémy Lecour 2017-09-04 17:17:51 +0200
  • 2f2192e5cf apache is compatible with Stretch Jérémy Lecour 2017-07-21 10:08:55 +0200
  • d4a47346ef In Stretch, we have now /etc/mysql/mariadb.conf.d/ dir then we need use it for our conf files Gregory Colpart 2017-09-01 03:58:19 +0200
  • d1b290f864 Typos + add info Gregory Colpart 2017-09-01 03:51:28 +0200
  • 4a0d473e84 clean gpg key Gregory Colpart 2017-09-01 02:44:36 +0200
  • e38f4bc0c3 redmine: don't change when touch nginx log files Victor LABORIE 2017-08-31 11:07:59 +0200
  • 716b0a2ed8 redmine: use tasks instead of handlers Victor LABORIE 2017-08-31 10:55:08 +0200
  • f47947f489 Add a redmine role Victor LABORIE 2017-08-31 09:47:07 +0200
  • 64c1dc3d45 Fix mytop install with https://wiki.evolix.org/HowtoMySQL#mytop Gregory Colpart 2017-08-31 04:40:49 +0200
  • 6ac4bdf734 Merge branch 'unstable' into stable Gregory Colpart 2017-08-31 04:07:54 +0200
  • 409ac0d503 ajust minfirewall default config (mostly let port 22 in public port to avoid failure during Ansible connection) Gregory Colpart 2017-08-31 04:05:33 +0200
  • 4eb891b8b7 use role ntpd in evolinux-base Gregory Colpart 2017-08-31 03:31:00 +0200
  • 5d3870f20f using ntp.evolix.net by default Gregory Colpart 2017-08-31 03:23:59 +0200
  • b801c883ac minor fix: true -> True Gregory Colpart 2017-08-31 03:23:07 +0200
  • d72cd0184d minor fix. true -> True Gregory Colpart 2017-08-31 03:21:57 +0200
  • 4e4cbdb3c9 ntpd: listen only on localhost by default Victor LABORIE 2017-08-30 14:25:46 +0200
  • 1524146f10 force own:group for config.local.php Gregory Colpart 2017-08-30 04:06:46 +0200
  • ca4b0d5b1d log2mail need to be started and not restarted each time Gregory Colpart 2017-08-30 03:46:34 +0200
  • 251d323662 Fix: forgot an include in main squid config file Gregory Colpart 2017-08-30 03:37:38 +0200
  • 859822709d Revert "Fix: openssl req -subj arg need to be "/CN="" because bad var during test Gregory Colpart 2017-08-29 23:21:58 +0200
  • 03f4eaf269 fix example Daniel Jakots 2017-08-29 11:22:21 -0400
  • 4a81d12d03 Delete OpenBSD stuff (mv to another repo), ansible-roles is now Linux-specific (even Debian-specific) Gregory Colpart 2017-08-29 03:09:57 +0200
  • ca795dc8c3 Merge branch 'unstable' into stable Gregory Colpart 2017-08-29 02:35:47 +0200
  • 8cfa0a6ef2 Fix: openssl req -subj arg need to be "/CN=" Gregory Colpart 2017-08-29 02:32:20 +0200
  • aca83c50a9 need libssl1.0.0 backport for haproxy in jessie-backports Gregory Colpart 2017-08-29 00:05:36 +0200
  • df6170404f typo in include file Gregory Colpart 2017-08-29 00:00:59 +0200
  • b02e49073a don't crash when use in root (no SUDO_USER) Gregory Colpart 2017-08-28 19:44:11 +0200
  • 1b80956043 remove OpenBSD tentacles, requested by gcolpart Daniel Jakots 2017-08-28 14:05:27 -0400
  • 58bc7940ac Add LimitUIDRange. Fix sudo calls from evoadmin Romain Dessort 2017-08-24 12:56:12 -0400
  • 8ed1aaf160 Fix multiple bugs in lxc role after testing Romain Dessort 2017-08-24 12:07:16 -0400
  • 9aec7c8891 First step to use new evoadmin / FPM Gregory Colpart 2017-08-23 04:28:21 +0200
  • 5bbec8f829 first step to improve userlogrotate in Debian 9 Gregory Colpart 2017-08-23 03:30:38 +0200
  • e10e971dbe move FHS restrictions to a new file Gregory Colpart 2017-08-23 03:23:16 +0200
  • 453b78a59b do not remove old log files Gregory Colpart 2017-08-23 03:17:07 +0200
  • f480ae461c add main.cf hash for stretch Gregory Colpart 2017-08-23 03:13:04 +0200
  • 8e0aa59e47 download gpg in repo, we want to be independant from network as possible Gregory Colpart 2017-08-23 02:50:17 +0200
  • 41d6fa4df2 test jenkins role on Debian 8 and 9 Gregory Colpart 2017-08-23 02:00:42 +0200
  • 207a2f6011 Improve distribution verification Gregory Colpart 2017-08-23 01:49:27 +0200
  • a5db321717 quick review of mongodb role, few improvments and disable it for stretch because not ready Gregory Colpart 2017-08-23 01:44:07 +0200
  • 41329af173 Remove dynamic add of whitelist Squid proxy Gregory Colpart 2017-08-23 01:26:57 +0200
  • 32bcec3cc8 review squid role whith https://wiki.evolix.org/HowtoSquid Gregory Colpart 2017-08-23 01:03:07 +0200
  • 6526e88b9c install phpmailer by default (now in HowtoPHP) + fix name of package for ssh module in jessie Gregory Colpart 2017-08-22 18:18:23 +0200
  • 5ba32d4c5f Add README to lxc role Romain Dessort 2017-08-22 12:58:13 -0400
  • 39bc3d27fb Add role for LXC Romain Dessort 2017-08-22 11:32:32 -0400
  • 1af13e40c1 nginx: disable spdy in default vhost Victor LABORIE 2017-08-04 18:58:24 +0200
  • 9832284050 Merge branch 'php' into unstable Gregory Colpart 2017-08-22 06:32:34 +0200