Commit graph

68 commits

Author SHA1 Message Date
Jérémy Dubois 84e6ccec4f base: doas configuration for _collectd user is managed in collectd role, not needed to have it by default 2023-02-17 16:20:32 +01:00
Jérémy Dubois 4b971b19fb base: doas is used for evomaintenance, not sudo ; wheel group mustn't be sudo because we use the evolinux-sudo group 2023-02-09 15:18:53 +01:00
Jérémy Dubois 835371b861 base: rename install_url var with evobsd_install_url 2022-11-28 15:29:35 +01:00
Jérémy Dubois 22cb655f78 yamllint fix 2022-10-19 18:23:54 +02:00
Jérémy Dubois d10b2c42b3 base: use a template for ntp configuration to ease the management of the different cases 2022-10-14 10:45:25 +02:00
Jérémy Dubois c0b1131f36 base: we can chose to deploy or not utils files 2022-10-12 16:44:29 +02:00
Jérémy Dubois c7bf4a461f base: fix typo 2022-10-12 16:33:39 +02:00
Jérémy Dubois 61c5f6810c base: configure "/usr/X11R6" and "/usr/local" for servers that have a mount on it 2022-10-12 16:15:40 +02:00
Jérémy Dubois 3c29a6ff10 base: fstab options can be activated or not 2022-10-12 16:05:25 +02:00
Jérémy Dubois c692105b5c base: use "servers" option instead of "server" option for ntpd.conf 2022-09-28 17:50:11 +02:00
Jérémy Dubois daaa33a10a base: use a variable for /etc/installurl content 2022-09-28 16:40:58 +02:00
Jérémy Dubois 5da921572e base: export evomaintenance and evobackup tasks into their own roles, resolves #35 2022-09-01 17:05:20 +02:00
Jérémy Dubois 9a4a906b23 base: do not erase custom configuration of servers in doas.conf 2022-08-11 17:01:37 +02:00
Jérémy Dubois 48066052ac base: use a variable to define ntpd server 2022-07-21 17:27:25 +02:00
Jérémy Dubois 62f31f519e base: loop over fstab entries instead of copying the same task for each entries 2022-07-21 16:46:24 +02:00
Jérémy Dubois 91922175cd etc-git: chmod 600 for local periodic files (daily, weekly, monthly) - forgotten ones 2022-07-12 10:30:23 +02:00
Jérémy Dubois 674a4aa836 update of tags for each tasks and ease the update of scripts 2022-06-23 18:35:39 +02:00
Jérémy Dubois 6667c4b9e8 Syntax : have all task name between quotes 2022-06-23 16:17:42 +02:00
Jérémy Dubois ab7cc1189f base: add update-evobackup-canary script 2022-06-09 15:07:38 +02:00
Jérémy Dubois f57e9934ff Applying fix from yamllint and ansible-lint 2022-04-13 16:57:39 +02:00
Jérémy Dubois 04bdff87f4 base: add a "next_part" before executing evobackup in daily.local file 2022-04-13 16:19:41 +02:00
Jérémy Dubois 07f4dadd0e base: import dump-server-state.sh script 2022-03-31 18:18:10 +02:00
Jérémy Dubois fe6235f8fb Multiple fixes
- accounts : the user.yml task has a loop in a loop, var name need to be changed
- base, kshrc : fix a previously deleted command on which is based the command that follows
- base, ntp : do not display this task as a change, it only gets some information
2022-01-25 17:28:28 +01:00
Jérémy Dubois 7b337c2db1 Update README, change needed vars files, edit .gitignore and remove unneeded environment variable 2021-12-17 16:22:31 +01:00
Jérémy Dubois 3ccc0ca924 Force task to run in check mode for NTP configuration 2021-10-14 18:06:50 +02:00
Jérémy Dubois 7046e193e0 Configure the ntpd.conf file and bump version 2021-07-19 15:27:57 +02:00
Jérémy Dubois a0f8339705 Change evomaintenance files mode 2021-05-17 11:36:36 +02:00
Tristan Pilat 1364451198 Following the release of OpenBSD 6.9, the VERBOSESTATUS variable is no longer valid in the daily.local configuration file 2021-05-06 15:03:37 +02:00
Jérémy Dubois a26d6e13cb yamllint line-lenght and empty-line
Some checks failed
continuous-integration/drone/push Build is failing
2020-10-23 10:15:57 +02:00
Jérémy Dubois 4db9d006a2 Allow evolinux-sudo group to sudo
Some checks failed
continuous-integration/drone/push Build is failing
evolinux-sudo group can already use doas, it should also
be allowed to use sudo
2020-10-22 11:28:06 +02:00
Jérémy Dubois a7b96d9f67 Fstab : we now also add noatime to each partitions 2020-10-15 09:57:02 +02:00
Jérémy Dubois 4c902eda5a Fstab : change only ffs file system 2020-10-14 18:05:29 +02:00
Jérémy Dubois 7ecf7be4a4 Do not remove line that would have a customized subject 2020-10-14 17:39:09 +02:00
Jérémy Dubois 68586d6450 Fstab role : do not change lines beggining with "#"
Some checks failed
continuous-integration/drone/push Build is failing
2020-10-14 12:14:58 +02:00
Jérémy Dubois a9ae1b57d4 Do not use litteral tab in configuration
Use "\t" instead of a litteral tab which can easily be broken. Also add a
deletion of line with spaces.
2020-10-13 12:01:18 +02:00
Jérémy Dubois 57acbd6091 Add jinja2 variable for PATH variable environment 2020-10-13 11:44:53 +02:00
Jérémy Dubois a40e2b4750 Merge branch 'dev' into customize_fstab
Some checks failed
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
2020-10-12 14:47:02 +02:00
Jérémy Dubois 6b7c7b80c4 yamllint
Some checks failed
continuous-integration/drone/push Build is failing
2020-10-12 14:20:59 +02:00
Jérémy Dubois bd22b0545b sudoers configuration : the tab was broken 2020-10-12 14:16:00 +02:00
Jérémy Dubois c1f66a92e2 Fix add of multiple evobackup cron
Some checks failed
continuous-integration/drone/push Build is failing
Do not add evobackup cron again if the same line
is already there but uncommented
2020-10-09 16:14:52 +02:00
Jérémy Dubois 92837424fb Fix weird commits
Some checks failed
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
2020-10-09 15:35:23 +02:00
Jérémy Dubois 5fa8e0c9bb Customize fstab with noexec and softdep
Some checks failed
continuous-integration/drone/pr Build is failing
continuous-integration/drone/push Build is failing
Add softdep to each partitions
Add noexec to /tmp and remount it if necessary
2020-10-09 15:21:10 +02:00
Jérémy Dubois bd4748b403 Customize root crontab and daily.local
Add custome PATH to root crontab
Add environment variable to daily.local
Add a "next_part" before the evocheck line in daily.local
2020-10-09 15:21:09 +02:00
Jérémy Dubois 0a4e970ab8 Customize fstab with noexec and softdep
Add softdep to each partitions
Add noexec to /tmp and remount it if necessary
2020-10-09 15:21:08 +02:00
Jérémy Dubois 4f201d3a73 Customize root crontab and daily.local
Add custome PATH to root crontab
Add environment variable to daily.local
Add a "next_part" before the evocheck line in daily.local
2020-10-09 15:21:07 +02:00
Jérémy Dubois e019b79723 yamllint + correction /tmp softdep
softdep is not added anymore if noexec is
already defined after rw
2020-10-09 15:21:06 +02:00
Jérémy Dubois 88df904282 Customize fstab with noexec and softdep
Add softdep to each partitions
Add noexec to /tmp and remount it if necessary
2020-10-09 15:21:06 +02:00
Jérémy Dubois c9d1bff1c6 Customize root crontab and daily.local
Some checks failed
continuous-integration/drone/push Build is failing
Add custome PATH to root crontab
Add environment variable to daily.local
Add a "next_part" before the evocheck line in daily.local
2020-10-09 14:15:46 +02:00
Jérémy Dubois 07d83d4994 Delete empty line - yamllint
Some checks failed
continuous-integration/drone/push Build is failing
2020-10-09 10:45:23 +02:00
Jérémy Dubois fa497b280e Configure sudoers umask
Some checks failed
continuous-integration/drone/push Build is failing
This configuration is checked by evocheck,
so it should be present by default
2020-10-08 15:42:52 +02:00