Jérémy Dubois
2dae2d1ae4
Fix typo
2 months ago
Jérémy Dubois
119118ad06
Update CHANGELOG
2 months ago
Jérémy Dubois
b3496692b2
Fix motd-carp-state.sh
Update the OpenBSD release in our customized motd
2 months ago
Jérémy Dubois
7fc4e0c7d7
Update CHANGELOG
2 months ago
Jérémy Dubois
54455a63df
Fix check_free_mem.sh : cached RAM now is free RAM
2 months ago
Jérémy Dubois
d7a427bd7f
check_openvpn_certificates.sh : fix date format
2 months ago
Jérémy Dubois
0c55f87727
Update CHANGELOG and add a check_openvpn_certificates
2 months ago
Jérémy Dubois
60103070f2
Fix NRPE check_mem
The percentage sign must be precised. Without it, the check is done checking
the memory in MB.
2 months ago
Jérémy Dubois
7f5627f6bd
Import last version of zzz_evobackup file
3 months ago
Jérémy Dubois
55745e1a62
nagios-nrpe role : change variables name
4 months ago
Jérémy Dubois
8a2111561f
Improve PacketFilter role
Replace hards IP with variable
Add a README file
4 months ago
Tristan Pilat
48ea75957d
Add new exceptions to Logsentry ignore files
5 months ago
Tristan Pilat
7d24b11fa9
Add tasks to copy customized configuration files
5 months ago
Tristan Pilat
6782746f3c
Add customized logsentry configuration
5 months ago
Jérémy Dubois
389f1a8eae
Import last zzz_evobackup file version
5 months ago
Jérémy Dubois
8cddc5e9ae
Fix logsentry.sh file name in task
6 months ago
Tristan Pilat
7b7edb67c7
Update CHANGELOG and bump to version 6.8.2
6 months ago
Tristan Pilat
d84fc581d8
Add a new role - Logsentry is a tool that scans system logs to report suspicious/unusual activity
6 months ago
Jérémy Dubois
e9a1373a30
Add file to .gitignore
This file is frequently updated after a user connection to OpenVPN, so we do
not want to track it.
6 months ago
Jérémy Dubois
9a07552731
Import last zzz_evobackup file version
6 months ago
Jérémy Dubois
c242733808
Update README with new version
6 months ago
Jérémy Dubois
563b17d5cd
Update CHANGELOG and bump to version 6.8.1
6 months ago
Jérémy Dubois
381aa50e37
Deletion of simple quotes preventing the task to be correctly executed
6 months ago
Tristan Pilat
c54d0decb8
Update README file - amend version number and command examples
6 months ago
Tristan Pilat
864f85a49a
Change default Python version to 3.x
6 months ago
Tristan Pilat
fd4bdf9dcc
Update CHANGELOG and bump to version 6.8.0
6 months ago
Jérémy Dubois
6613c70446
Revert "Add user with legacy hash ($2a…) instead of current hash ($2b…) for OpenBSD versions older than 5.7"
This reverts commit 4012a014ce
6 months ago
Jérémy Dubois
a26d6e13cb
yamllint line-lenght and empty-line
6 months ago
Jérémy Dubois
5540aea87d
Add empty vars_files for them not to generate errors
6 months ago
Jérémy Dubois
f648f332dd
Import 6.7.7 evocheck version
6 months ago
Jérémy Dubois
4012a014ce
Add user with legacy hash ($2a…) instead of current hash ($2b…) for OpenBSD versions older than 5.7
6 months ago
Jérémy Dubois
4db9d006a2
Allow evolinux-sudo group to sudo
evolinux-sudo group can already use doas, it should also
be allowed to use sudo
6 months ago
Jérémy Dubois
d7701d32da
Comment on checks that cannot be used as is - v3
6 months ago
Jérémy Dubois
42f5d2c10e
Add "create; true" to other task, needed when running in check mode
6 months ago
Jérémy Dubois
44d145e33b
Add "create; true" to task, needed when running in check mode
6 months ago
Jérémy Dubois
5ef4a403d2
We should be able to execute evomaintence.sh as soon as we can SSH to the server
6 months ago
Jérémy Dubois
9eeba0c0ab
Add a doas authorization for NRPE
6 months ago
Jérémy Dubois
78686b8730
Stricter ssh and doas access - two separate groups actually needed
Fix #34 again
After some discussions, with actually need two separates groups :
- One group for ssh access (evobsd_ssh_group)
- One group for sudo/doas access (evobsd_sudo_group)
We won't need any client group. A client user will be added to the ssh group,
so that we won't have to think about what specific group a user need to be
added in.
6 months ago
Jérémy Dubois
4a0e552691
Import evocheck v.6.7.6
6 months ago
Jérémy Dubois
a7b96d9f67
Fstab : we now also add noatime to each partitions
6 months ago
Jérémy Dubois
4c902eda5a
Fstab : change only ffs file system
6 months ago
Jérémy Dubois
4610661299
Fix add of multiple motd cron
Do not add motd cron again if the same line is already there but uncommented
6 months ago
Jérémy Dubois
ff1f728102
Doas authorization for collectd
We put the doas authorization for collectd in the global file and we let it if
collectd is not there, because otherwise the authorization would be removed if
the base role was run without the collectd role, even if collectd was still
running. Collectd would have been broken.
6 months ago
Jérémy Dubois
cc80aefac7
NRPE plugins dir was not created
6 months ago
Jérémy Dubois
6dd4b6b8aa
Syspatch is not available before OpenBSD 6.1
6 months ago
Jérémy Dubois
556d98c170
Variable ansible_fqdn is often not the name of the server
6 months ago
Jérémy Dubois
7ecf7be4a4
Do not remove line that would have a customized subject
6 months ago
Jérémy Dubois
213e4a7bcd
Comment on checks that cannot be used as is - v2
6 months ago
Jérémy Dubois
592a2f8337
Comment on checks that cannot be used as is
6 months ago
Jérémy Dubois
68586d6450
Fstab role : do not change lines beggining with "#"
6 months ago
