Commit Graph

210 Commits

Author SHA1 Message Date
Tristan Pilat 1efd405989 Merge branch 'master' into dev 2021-05-06 15:37:36 +02:00
Tristan Pilat 8d8e97f74d Bump to version 6.9.0 2021-05-06 15:10:33 +02:00
Tristan Pilat 1364451198 Following the release of OpenBSD 6.9, the VERBOSESTATUS variable is no longer valid in the daily.local configuration file 2021-05-06 15:03:37 +02:00
Jérémy Dubois 2dae2d1ae4 Fix typo
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
2021-02-15 18:56:24 +01:00
Jérémy Dubois 119118ad06 Update CHANGELOG
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
2021-02-15 18:28:46 +01:00
Jérémy Dubois b3496692b2 Fix motd-carp-state.sh
Update the OpenBSD release in our customized motd
2021-02-15 18:25:52 +01:00
Jérémy Dubois 7fc4e0c7d7 Update CHANGELOG
continuous-integration/drone/pr Build is failing Details
continuous-integration/drone/push Build is failing Details
2021-02-15 17:33:12 +01:00
Jérémy Dubois 54455a63df Fix check_free_mem.sh : cached RAM now is free RAM 2021-02-15 17:30:25 +01:00
Jérémy Dubois d7a427bd7f check_openvpn_certificates.sh : fix date format
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
2021-02-08 17:29:46 +01:00
Jérémy Dubois 0c55f87727 Update CHANGELOG and add a check_openvpn_certificates
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
2021-02-08 16:30:05 +01:00
Jérémy Dubois 60103070f2 Fix NRPE check_mem
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
The percentage sign must be precised. Without it, the check is done checking
the memory in MB.
2021-02-03 11:57:47 +01:00
Jérémy Dubois 7f5627f6bd Import last version of zzz_evobackup file
continuous-integration/drone/pr Build is failing Details
continuous-integration/drone/push Build is failing Details
2021-01-07 09:48:38 +01:00
Jérémy Dubois 55745e1a62 nagios-nrpe role : change variables name
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
2020-12-10 19:36:00 +01:00
Jérémy Dubois 8a2111561f Improve PacketFilter role
Replace hards IP with variable
Add a README file
2020-12-10 19:23:18 +01:00
Tristan PILAT 48ea75957d Add new exceptions to Logsentry ignore files
continuous-integration/drone/pr Build is failing Details
continuous-integration/drone/push Build is failing Details
2020-12-02 17:45:38 +01:00
Tristan PILAT 7d24b11fa9 Add tasks to copy customized configuration files 2020-11-24 16:27:29 +01:00
Tristan PILAT 6782746f3c Add customized logsentry configuration 2020-11-24 16:26:02 +01:00
Jérémy Dubois 389f1a8eae Import last zzz_evobackup file version
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
2020-11-16 11:24:47 +01:00
Jérémy Dubois 8cddc5e9ae Fix logsentry.sh file name in task
continuous-integration/drone/pr Build is failing Details
continuous-integration/drone/push Build is failing Details
2020-10-30 10:49:23 +01:00
Tristan PILAT 7b7edb67c7 Update CHANGELOG and bump to version 6.8.2
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
2020-10-30 10:09:37 +01:00
Tristan PILAT d84fc581d8 Add a new role - Logsentry is a tool that scans system logs to report suspicious/unusual activity 2020-10-30 10:06:36 +01:00
Jérémy Dubois e9a1373a30 Add file to .gitignore
continuous-integration/drone/pr Build is failing Details
continuous-integration/drone/push Build is failing Details
This file is frequently updated after a user connection to OpenVPN, so we do
not want to track it.
2020-10-27 11:05:46 +01:00
Jérémy Dubois 9a07552731 Import last zzz_evobackup file version
continuous-integration/drone/pr Build is failing Details
continuous-integration/drone/push Build is failing Details
2020-10-27 10:45:11 +01:00
Jérémy Dubois c242733808 Update README with new version
continuous-integration/drone/pr Build is failing Details
continuous-integration/drone/push Build is failing Details
2020-10-26 17:20:07 +01:00
Jérémy Dubois 563b17d5cd Update CHANGELOG and bump to version 6.8.1
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
2020-10-26 16:48:02 +01:00
Jérémy Dubois 381aa50e37 Deletion of simple quotes preventing the task to be correctly executed
continuous-integration/drone/push Build is failing Details
2020-10-26 16:40:53 +01:00
Jérémy Lecour f89751669f Merge pull request 'Release of EvoBSD 6.8.0' (#37) from dev into master
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/tag Build is failing Details
Reviewed-on: #37
Reviewed-by: Jérémy Lecour <jlecour@noreply.gitea.evolix.org>
2020-10-23 12:13:26 +02:00
Tristan PILAT c54d0decb8 Update README file - amend version number and command examples
continuous-integration/drone/push Build is failing Details
continuous-integration/drone/pr Build is failing Details
2020-10-23 11:40:22 +02:00
Tristan PILAT 864f85a49a Change default Python version to 3.x 2020-10-23 11:38:56 +02:00
Tristan PILAT fd4bdf9dcc Update CHANGELOG and bump to version 6.8.0
continuous-integration/drone/push Build is failing Details
2020-10-23 11:29:31 +02:00
Jérémy Dubois 6613c70446 Revert "Add user with legacy hash ($2a…) instead of current hash ($2b…) for OpenBSD versions older than 5.7"
continuous-integration/drone/push Build is failing Details
This reverts commit 4012a014ce.
Versions older than 5.7 are … old.
We do not handle versions that old.
2020-10-23 10:17:12 +02:00
Jérémy Dubois a26d6e13cb yamllint line-lenght and empty-line
continuous-integration/drone/push Build is failing Details
2020-10-23 10:15:57 +02:00
Jérémy Dubois 5540aea87d Add empty vars_files for them not to generate errors
continuous-integration/drone/push Build is failing Details
2020-10-23 10:02:26 +02:00
Jérémy Dubois f648f332dd Import 6.7.7 evocheck version
continuous-integration/drone/push Build is failing Details
2020-10-22 18:18:28 +02:00
Jérémy Dubois 4012a014ce Add user with legacy hash ($2a…) instead of current hash ($2b…) for OpenBSD versions older than 5.7
continuous-integration/drone/push Build is failing Details
2020-10-22 11:52:54 +02:00
Jérémy Dubois 4db9d006a2 Allow evolinux-sudo group to sudo
continuous-integration/drone/push Build is failing Details
evolinux-sudo group can already use doas, it should also
be allowed to use sudo
2020-10-22 11:28:06 +02:00
Jérémy Dubois d7701d32da Comment on checks that cannot be used as is - v3
continuous-integration/drone/push Build is failing Details
2020-10-22 10:34:13 +02:00
Jérémy Dubois 42f5d2c10e Add "create; true" to other task, needed when running in check mode
continuous-integration/drone/push Build is failing Details
2020-10-21 15:47:23 +02:00
Jérémy Dubois 44d145e33b Add "create; true" to task, needed when running in check mode
continuous-integration/drone/push Build is failing Details
2020-10-21 10:52:39 +02:00
Jérémy Dubois 5ef4a403d2 We should be able to execute evomaintence.sh as soon as we can SSH to the server 2020-10-20 15:57:35 +02:00
Jérémy Dubois 9eeba0c0ab Add a doas authorization for NRPE 2020-10-20 15:10:12 +02:00
Jérémy Dubois 78686b8730 Stricter ssh and doas access - two separate groups actually needed
Fix #34 again

After some discussions, with actually need two separates groups :
- One group for ssh access (evobsd_ssh_group)
- One group for sudo/doas access (evobsd_sudo_group)

We won't need any client group. A client user will be added to the ssh group,
so that we won't have to think about what specific group a user need to be
added in.
2020-10-15 11:01:52 +02:00
Jérémy Dubois 4a0e552691 Import evocheck v.6.7.6 2020-10-15 10:21:02 +02:00
Jérémy Dubois a7b96d9f67 Fstab : we now also add noatime to each partitions 2020-10-15 09:57:02 +02:00
Jérémy Dubois 4c902eda5a Fstab : change only ffs file system 2020-10-14 18:05:29 +02:00
Jérémy Dubois 4610661299 Fix add of multiple motd cron
Do not add motd cron again if the same line is already there but uncommented
2020-10-14 17:39:23 +02:00
Jérémy Dubois ff1f728102 Doas authorization for collectd
We put the doas authorization for collectd in the global file and we let it if
collectd is not there, because otherwise the authorization would be removed if
the base role was run without the collectd role, even if collectd was still
running. Collectd would have been broken.
2020-10-14 17:39:23 +02:00
Jérémy Dubois cc80aefac7 NRPE plugins dir was not created 2020-10-14 17:39:23 +02:00
Jérémy Dubois 6dd4b6b8aa Syspatch is not available before OpenBSD 6.1 2020-10-14 17:39:23 +02:00
Jérémy Dubois 556d98c170 Variable ansible_fqdn is often not the name of the server 2020-10-14 17:39:23 +02:00