87 commits

Author	SHA1	Message	Date
Jérémy Dubois	46b9baf601	base: import last zzz_evobackup upstream version	2022-04-13 17:10:52 +02:00
Jérémy Dubois	f57e9934ff	Applying fix from yamllint and ansible-lint	2022-04-13 16:57:39 +02:00
Jérémy Dubois	04bdff87f4	base: add a "next_part" before executing evobackup in daily.local file	2022-04-13 16:19:41 +02:00
Jérémy Dubois	07f4dadd0e	base: import dump-server-state.sh script	2022-03-31 18:18:10 +02:00
Jérémy Dubois	eb96fd41b2	base: zzz_evobackup upstream release 22.03	2022-03-25 18:09:08 +01:00
Jérémy Dubois	ecacb00018	Import last evomaintenance and evobackup scripts	2022-02-08 10:19:46 +01:00
Jérémy Dubois	576e13db78	base: set the title of the terminal when connecting to a server	2022-02-07 11:05:36 +01:00
Jérémy Dubois	fe6235f8fb	Multiple fixes ... - accounts : the user.yml task has a loop in a loop, var name need to be changed - base, kshrc : fix a previously deleted command on which is based the command that follows - base, ntp : do not display this task as a change, it only gets some information	2022-01-25 17:28:28 +01:00
Jérémy Dubois	93f21a947c	base: fix shell configuration, increase $HISTSIZE, and change history alias so it displays full history ... "set -A" options are for ksh only	2022-01-07 18:12:09 +01:00
Jérémy Dubois	7b337c2db1	Update README, change needed vars files, edit .gitignore and remove unneeded environment variable	2021-12-17 16:22:31 +01:00
Jérémy Dubois	798a87b0ff	Configure locale to en_US.UTF-8, use vim as default git edit, and bump EvoBSD version ... Configure locale to en_US.UTF-8 in .profile file so that "git log" displays the accents correctly Use vim as default git editor for the same reason, and because its better than vi Bump EvoBSD version : OpenBSD 7.0 is out	2021-12-09 11:03:38 +01:00
Jérémy Dubois	3ccc0ca924	Force task to run in check mode for NTP configuration	2021-10-14 18:06:50 +02:00
Jérémy Dubois	c5f478c584	Update NRPE and doas configuration for checks mailq and openvpn_certificates ... - Fix check_mailq : the check from monitoring-plugins current version is not compatible with opensmtpd. I picked the last version from the GIT repository, and adjusted nrpe and doas configuration - Add doas configuration for check_openvpn_certificates.sh : some servers need doas, others don't. Better to set it everywhere.	2021-07-27 18:02:49 +02:00
Jérémy Dubois	1abf0f636c	Fix check_dhcpd ... /usr/local/libexec/nagios/check_dhcp does not work on server itself Using back /usr/local/libexec/nagios/check_procs -c1: -C dhcpd And removing doas configuration	2021-07-23 16:34:34 +02:00
Jérémy Dubois	7046e193e0	Configure the ntpd.conf file and bump version	2021-07-19 15:27:57 +02:00
Jérémy Dubois	8cd6b0bda6	Import last version of zzz_evobackup and evocheck.sh scripts	2021-05-25 21:09:23 +02:00
Jérémy Dubois	a0f8339705	Change evomaintenance files mode	2021-05-17 11:36:36 +02:00
Tristan Pilat	1364451198	Following the release of OpenBSD 6.9, the VERBOSESTATUS variable is no longer valid in the daily.local configuration file	2021-05-06 15:03:37 +02:00
Jérémy Dubois	7f5627f6bd	Import last version of zzz_evobackup file	2021-01-07 09:48:38 +01:00
Jérémy Dubois	389f1a8eae	Import last zzz_evobackup file version	2020-11-16 11:24:47 +01:00
Jérémy Dubois	9a07552731	Import last zzz_evobackup file version	2020-10-27 10:45:11 +01:00
Jérémy Dubois	a26d6e13cb	yamllint line-lenght and empty-line	2020-10-23 10:15:57 +02:00
Jérémy Dubois	4db9d006a2	Allow evolinux-sudo group to sudo ... evolinux-sudo group can already use doas, it should also be allowed to use sudo	2020-10-22 11:28:06 +02:00
Jérémy Dubois	5ef4a403d2	We should be able to execute evomaintence.sh as soon as we can SSH to the server	2020-10-20 15:57:35 +02:00
Jérémy Dubois	9eeba0c0ab	Add a doas authorization for NRPE	2020-10-20 15:10:12 +02:00
Jérémy Dubois	78686b8730	Stricter ssh and doas access - two separate groups actually needed ... Fix #34 again After some discussions, with actually need two separates groups : - One group for ssh access (evobsd_ssh_group) - One group for sudo/doas access (evobsd_sudo_group) We won't need any client group. A client user will be added to the ssh group, so that we won't have to think about what specific group a user need to be added in.	2020-10-15 11:01:52 +02:00
Jérémy Dubois	a7b96d9f67	Fstab : we now also add noatime to each partitions	2020-10-15 09:57:02 +02:00
Jérémy Dubois	4c902eda5a	Fstab : change only ffs file system	2020-10-14 18:05:29 +02:00
Jérémy Dubois	ff1f728102	Doas authorization for collectd ... We put the doas authorization for collectd in the global file and we let it if collectd is not there, because otherwise the authorization would be removed if the base role was run without the collectd role, even if collectd was still running. Collectd would have been broken.	2020-10-14 17:39:23 +02:00
Jérémy Dubois	7ecf7be4a4	Do not remove line that would have a customized subject	2020-10-14 17:39:09 +02:00
Jérémy Dubois	68586d6450	Fstab role : do not change lines beggining with "#"	2020-10-14 12:14:58 +02:00
Jérémy Dubois	2bf8a7e872	Stricter ssh and doas access - better version ... Fix #34 We now use a unique evobsd_group (evolix by default). Each user has 2 groups : evobsd_group and user.name. Only evobsd_group can ssh to server and use doas. I also added a password restrictions block for IPs/group. And we make sure the home folder is only readable by owner.	2020-10-13 16:03:54 +02:00
Jérémy Dubois	a9ae1b57d4	Do not use litteral tab in configuration ... Use "\t" instead of a litteral tab which can easily be broken. Also add a deletion of line with spaces.	2020-10-13 12:01:18 +02:00
Jérémy Dubois	57acbd6091	Add jinja2 variable for PATH variable environment	2020-10-13 11:44:53 +02:00
Jérémy Dubois	a40e2b4750	Merge branch 'dev' into customize_fstab	2020-10-12 14:47:02 +02:00
Jérémy Dubois	6b7c7b80c4	yamllint	2020-10-12 14:20:59 +02:00
Jérémy Dubois	bd22b0545b	sudoers configuration : the tab was broken	2020-10-12 14:16:00 +02:00
Jérémy Dubois	c1f66a92e2	Fix add of multiple evobackup cron ... Do not add evobackup cron again if the same line is already there but uncommented	2020-10-09 16:14:52 +02:00
Jérémy Dubois	92837424fb	Fix weird commits	2020-10-09 15:35:23 +02:00
Jérémy Dubois	5fa8e0c9bb	Customize fstab with noexec and softdep ... Add softdep to each partitions Add noexec to /tmp and remount it if necessary	2020-10-09 15:21:10 +02:00
Jérémy Dubois	bd4748b403	Customize root crontab and daily.local ... Add custome PATH to root crontab Add environment variable to daily.local Add a "next_part" before the evocheck line in daily.local	2020-10-09 15:21:09 +02:00
Jérémy Dubois	0a4e970ab8	Customize fstab with noexec and softdep ... Add softdep to each partitions Add noexec to /tmp and remount it if necessary	2020-10-09 15:21:08 +02:00
Jérémy Dubois	4f201d3a73	Customize root crontab and daily.local ... Add custome PATH to root crontab Add environment variable to daily.local Add a "next_part" before the evocheck line in daily.local	2020-10-09 15:21:07 +02:00
Jérémy Dubois	e019b79723	yamllint + correction /tmp softdep ... softdep is not added anymore if noexec is already defined after rw	2020-10-09 15:21:06 +02:00
Jérémy Dubois	88df904282	Customize fstab with noexec and softdep ... Add softdep to each partitions Add noexec to /tmp and remount it if necessary	2020-10-09 15:21:06 +02:00
Jérémy Dubois	c9d1bff1c6	Customize root crontab and daily.local ... Add custome PATH to root crontab Add environment variable to daily.local Add a "next_part" before the evocheck line in daily.local	2020-10-09 14:15:46 +02:00
Jérémy Dubois	07d83d4994	Delete empty line - yamllint	2020-10-09 10:45:23 +02:00
Jérémy Dubois	fa497b280e	Configure sudoers umask ... This configuration is checked by evocheck, so it should be present by default	2020-10-08 15:42:52 +02:00
Jérémy Dubois	12b2f3d280	Delete evobackup root crontab replaced by daily.local cron	2020-10-08 15:39:50 +02:00
Jérémy Dubois	f97317b767	Better rc.local configuration ... Add line before the "echo '.'" line instead of the end Delete old entry not precising the hostname if still there	2020-10-08 15:19:52 +02:00