Commit graph

321 commits

Author SHA1 Message Date
William Hirigoyen 079d807c7f evocheck: upstream release 23.02 2023-02-10 14:32:06 +01:00
William Hirigoyen 69ab1503b3 evocheck: upstream release 22.12 2023-02-10 11:47:40 +01:00
Jérémy Dubois 4b971b19fb base: doas is used for evomaintenance, not sudo ; wheel group mustn't be sudo because we use the evolinux-sudo group 2023-02-09 15:18:53 +01:00
Jérémy Dubois 328dc63d82 bgp, collectd, logsentry, ospf: update scripts 2023-02-06 16:10:40 +01:00
Jérémy Dubois cdc2546448 post-install: use basename of path in generateldif.sh to define file from elsewhere 2023-01-31 11:46:16 +01:00
Jérémy Dubois a5f0695bbb post-install: fix missing space in generateldif.sh script 2023-01-31 11:38:25 +01:00
Jérémy Dubois 9515c8639f nagios-nrpe: deleted unused variables and added a ntp check server variable 2022-12-15 16:24:12 +01:00
Jérémy Dubois 835371b861 base: rename install_url var with evobsd_install_url 2022-11-28 15:29:35 +01:00
Jérémy Dubois f43094e7b5 evocheck: upstream release 22.11 2022-11-28 14:55:14 +01:00
Jérémy Dubois 4ace413343 logsentry: update config files, add "[logsentry]" in subject, and simplify task 2022-11-21 17:29:52 +01:00
Jérémy Dubois dfaaa8e0da base : update header of profile file 2022-11-08 17:14:12 +01:00
Jérémy Dubois 22cb655f78 yamllint fix 2022-10-19 18:23:54 +02:00
Jérémy Dubois f71560a87b nagios-nrpe: grep in check_ipsecctl_critiques.sh was too large 2022-10-19 15:24:17 +02:00
Jérémy Dubois a458f51289 evocheck: upstream release 22.10 2022-10-14 10:45:32 +02:00
Jérémy Dubois d10b2c42b3 base: use a template for ntp configuration to ease the management of the different cases 2022-10-14 10:45:25 +02:00
Jérémy Dubois ec6de426d6 base: reordering default variable file and deleting unused one 2022-10-12 16:45:56 +02:00
Jérémy Dubois c0b1131f36 base: we can chose to deploy or not utils files 2022-10-12 16:44:29 +02:00
Jérémy Dubois c7bf4a461f base: fix typo 2022-10-12 16:33:39 +02:00
Jérémy Dubois 61c5f6810c base: configure "/usr/X11R6" and "/usr/local" for servers that have a mount on it 2022-10-12 16:15:40 +02:00
Jérémy Dubois 3c29a6ff10 base: fstab options can be activated or not 2022-10-12 16:05:25 +02:00
Jérémy Dubois c692105b5c base: use "servers" option instead of "server" option for ntpd.conf 2022-09-28 17:50:11 +02:00
Jérémy Dubois daaa33a10a base: use a variable for /etc/installurl content 2022-09-28 16:40:58 +02:00
Jérémy Dubois ce5e4a48de nagios-nrpe: multiples IP can now be checked with check_ipsecctl_critiques.sh 2022-09-12 14:31:30 +02:00
Jérémy Dubois 3d941a99a3 accounts: use a variable for sshd PermitRootLogin 2022-09-02 17:16:30 +02:00
Jérémy Dubois aed61c3df6 evomaintenance: also move defaults variables 2022-09-01 18:02:48 +02:00
Jérémy Dubois d9b757ca46 evomaintenance: fix location of a template file 2022-09-01 17:11:12 +02:00
Jérémy Dubois 5da921572e base: export evomaintenance and evobackup tasks into their own roles, resolves #35 2022-09-01 17:05:20 +02:00
Jérémy Dubois 28b946bd47 nagios-nrpe: add some information in check_connections_state.sh check 2022-09-01 14:44:40 +02:00
Jérémy Dubois c2e0809865 base: add munin files in newsyslog.conf by default 2022-08-25 17:12:23 +02:00
Jérémy Dubois 749f026f32 do not erase custom configuration of servers in nrpe.d/evolix.cfg, and do not use zzz_evolix.cfg anymore 2022-08-25 16:28:33 +02:00
Jérémy Dubois 97d1f90082 base: vmd and pass are not used in our infrastructure, deletion of autocompletion 2022-08-24 17:15:49 +02:00
Jérémy Dubois 9a4a906b23 base: do not erase custom configuration of servers in doas.conf 2022-08-11 17:01:37 +02:00
Jérémy Dubois 24180c31e4 nagios-nrpe: check_disk1 returns only alerts 2022-08-05 09:44:11 +02:00
Jérémy Dubois 891513d633 base: add entry in doas.conf for sd0 in case we have a hard raid 2022-08-04 18:25:08 +02:00
Jérémy Dubois 8e3b4b35cd etc-git: do not erase custom entries of servers in .gitignore files 2022-08-04 18:03:23 +02:00
Jérémy Dubois 534efdcc01 evocheck: upstream release 22.08 2022-08-04 15:37:10 +02:00
Jérémy Dubois 48066052ac base: use a variable to define ntpd server 2022-07-21 17:27:25 +02:00
Jérémy Dubois 62f31f519e base: loop over fstab entries instead of copying the same task for each entries 2022-07-21 16:46:24 +02:00
Jérémy Dubois 7a9d60b397 evocheck : fix evocheck cron lines order 2022-07-21 15:02:50 +02:00
Jérémy Dubois 48f25bbe7c base: session timeout is configurable 2022-07-19 17:26:44 +02:00
Jérémy Dubois 7a92c25e27 yamllint : disable rule:line-length for base/defaults/main.yml 2022-07-19 17:22:30 +02:00
Jérémy Dubois 2d95820de9 Add "tags: always" to commit task so it always runs when using tags 2022-07-15 14:22:51 +02:00
Jérémy Dubois 91922175cd etc-git: chmod 600 for local periodic files (daily, weekly, monthly) - forgotten ones 2022-07-12 10:30:23 +02:00
Jérémy Dubois 0e9df878e1 etc-git: chmod 600 for local periodic files (daily, weekly, monthly) 2022-07-12 10:16:27 +02:00
Jérémy Dubois 12c8f02884 evocheck: execute evocheck without --cron the first of the month 2022-07-12 09:38:00 +02:00
Jérémy Dubois 17ac3a3a36 etc-git: ansible-commit upstream release 22.05 2022-06-30 17:53:06 +02:00
Jérémy Dubois 8bfc0b1aea base: evomaintenance upstream update 2022-06-30 17:52:35 +02:00
Jérémy Dubois 674a4aa836 update of tags for each tasks and ease the update of scripts 2022-06-23 18:35:39 +02:00
Jérémy Dubois 6667c4b9e8 Syntax : have all task name between quotes 2022-06-23 16:17:42 +02:00
Jérémy Dubois e5d1dc96bb Fix various shellcheck violations 2022-06-16 17:25:52 +02:00
Jérémy Dubois 962eefe3d7 evocheck: upstream release 22.06 2022-06-16 17:23:16 +02:00
Jérémy Dubois 0e5922c8d8 base: import last dump-server-state.sh upstream version 2022-06-09 17:12:32 +02:00
Jérémy Dubois e2d0256946 base: import last update-evobackup-canary upstream version 2022-06-09 16:18:43 +02:00
Jérémy Dubois ab7cc1189f base: add update-evobackup-canary script 2022-06-09 15:07:38 +02:00
Jérémy Dubois f4e07b4578 pf : reorder some rules, more details on some comments 2022-05-18 09:57:56 +02:00
Jérémy Dubois b220c1934d yamllint 2022-05-18 09:56:07 +02:00
Jérémy Dubois 19a0ebb8ea base: import last zzz_evobackup upstream version 2022-05-18 09:53:21 +02:00
Jérémy Dubois 950dbaec21 post-install: ignore errors from syspatch 2022-05-03 17:22:20 +02:00
Jérémy Dubois 1f07862c84 etc-git: use "ansible-commit" to efficiently commit all available repositories from Ansible
Using ansible-commit script from ansible-roles
2022-05-03 15:55:45 +02:00
Jérémy Dubois 6ef04839c4 fix copyright evocommit 2022-05-03 15:22:18 +02:00
Jérémy Dubois 335969ed42 post-install: group root does not exist, fix 2022-04-27 17:14:11 +02:00
Jérémy Dubois 445c6afe1f etc-git: fix when condition for /usr/share/scripts dir 2022-04-27 17:13:44 +02:00
Jérémy Dubois 2dc7d3073f post-install: fix syntax error 2022-04-26 18:06:55 +02:00
Jérémy Dubois be9f183359 Import last evocheck.sh version 2022-04-14 09:54:58 +02:00
Jérémy Dubois bb43bc5370 etc-git: add quote to numerical value so that it is seen as a string 2022-04-13 18:08:15 +02:00
Jérémy Dubois 490b733f1a etc-git: create gitignore files differently so that it stays idempotent 2022-04-13 17:53:09 +02:00
Jérémy Dubois e1ae8fefb9 post-install: add the date into the ldif generated file 2022-04-13 17:26:59 +02:00
Jérémy Dubois 46b9baf601 base: import last zzz_evobackup upstream version 2022-04-13 17:10:52 +02:00
Jérémy Dubois f57e9934ff Applying fix from yamllint and ansible-lint 2022-04-13 16:57:39 +02:00
Jérémy Dubois 1939ca3142 renamed install.yml to main.yml and add evocheck cron at the beginning of the daily.local file 2022-04-13 16:22:26 +02:00
Jérémy Dubois 04bdff87f4 base: add a "next_part" before executing evobackup in daily.local file 2022-04-13 16:19:41 +02:00
Jérémy Dubois 5481bb4698 evocheck: upstream release 22.04 2022-04-13 15:58:25 +02:00
Jérémy Dubois bd1d29b1bd nagios-nrpe: add a wraper to check_dhcpd to define the number of dhcpd processes that must be running depending on the CARP state 2022-04-13 15:41:47 +02:00
Jérémy Dubois bbe56e3422 etc-git: manage commits with an optimized shell script instead of many slow Ansible tasks + add versioning for /usr/share/scripts 2022-04-13 15:28:10 +02:00
Jérémy Dubois e0c27ff083 collectd: add dhcp_pool.pl script 2022-04-08 16:48:02 +02:00
Jérémy Dubois 07f4dadd0e base: import dump-server-state.sh script 2022-03-31 18:18:10 +02:00
Jérémy Dubois ce886fdc1d post-install : improve management of ldif file for ldap 2022-03-31 16:05:19 +02:00
Jérémy Dubois bdda2b7b79 nagios-nrpe : add a check dhcp_pool 2022-03-31 11:57:45 +02:00
Jérémy Dubois 40ed5b0437 nagios-nrpe : handle the case where cached_mem is in GB to convert it in MB in check_free_mem.sh 2022-03-31 10:07:40 +02:00
Jérémy Dubois eb96fd41b2 base: zzz_evobackup upstream release 22.03 2022-03-25 18:09:08 +01:00
Jérémy Dubois 30a601b2e1 Import last evocheck.sh version 2022-03-10 16:48:19 +01:00
Jérémy Dubois b114d139d4 post-install: add a version number to motd-carp-state.sh 2022-03-10 15:59:28 +01:00
Jérémy Dubois ecacb00018 Import last evomaintenance and evobackup scripts 2022-02-08 10:19:46 +01:00
Jérémy Dubois 576e13db78 base: set the title of the terminal when connecting to a server 2022-02-07 11:05:36 +01:00
Jérémy Dubois a34f3d606b Fix motd-carp-state.sh
The current release is not necessarily the first line of dmesg.boot
2022-01-26 14:54:11 +01:00
Jérémy Dubois fe6235f8fb Multiple fixes
- accounts : the user.yml task has a loop in a loop, var name need to be changed
- base, kshrc : fix a previously deleted command on which is based the command that follows
- base, ntp : do not display this task as a change, it only gets some information
2022-01-25 17:28:28 +01:00
Jérémy Dubois 66c84dca6c Delete the deprecated OpenVPN role 2022-01-24 19:11:37 +01:00
Jérémy Dubois 93f21a947c base: fix shell configuration, increase $HISTSIZE, and change history alias so it displays full history
"set -A" options are for ksh only
2022-01-07 18:12:09 +01:00
Jérémy Dubois 4506c835c5 Improve syntax of accounts role and fix missing tags 2022-01-06 12:01:22 +01:00
Jérémy Dubois f0ecc79696 accounts: use "evobsd_internal_group" for SSH authentication 2022-01-05 11:16:18 +01:00
Jérémy Dubois 7b337c2db1 Update README, change needed vars files, edit .gitignore and remove unneeded environment variable 2021-12-17 16:22:31 +01:00
Jérémy Dubois 4522546edd Add NRPE check bioctl for RAID devices and fix CHANGELOG and README syntax 2021-12-15 16:34:34 +01:00
Jérémy Dubois 798a87b0ff Configure locale to en_US.UTF-8, use vim as default git edit, and bump EvoBSD version
Configure locale to en_US.UTF-8 in .profile file so that "git log" displays the accents correctly
Use vim as default git editor for the same reason, and because its better than vi
Bump EvoBSD version : OpenBSD 7.0 is out
2021-12-09 11:03:38 +01:00
Jérémy Dubois 85fe9f6703 Comment out default check_bgpd in NRPE role
This check is not used as is and must be customized.
I comment it out so we do not confuse it with the customized one.
2021-12-09 10:31:51 +01:00
Jérémy Dubois e6e05268e5 Fix check_ipsecctl_critiques.sh 2021-11-18 14:53:45 +01:00
Jérémy Dubois 218568fc13 Add comment to check_ipsecctl_critiques.sh : how to use 2021-10-20 16:05:27 +02:00
Jérémy Dubois fe3d2035f5 Add full ipsecctl check script
Different ipsecctl checks are currently used one the servers with no convention,
so I created one template with all that has to be checked.
2021-10-15 11:55:46 +02:00
Jérémy Dubois 9269b13123 Convert values in string 2021-10-14 18:07:54 +02:00
Jérémy Dubois 3ccc0ca924 Force task to run in check mode for NTP configuration 2021-10-14 18:06:50 +02:00
Jérémy Dubois 1bfa1d61f0 Import last evocheck.sh version 2021-10-07 15:02:26 +02:00