Jérémy Dubois
99ff7284a3
base, collectd, etc-git, logsentry, nagios-nrpe: install packages manually
...
Because openbsd_pkg module is broken since OpenBSD 7.4 with the version of Ansible we currently use
2024-03-13 15:17:20 +01:00
Jérémy Dubois
6a2faf5649
Use a new evobsd_ssl_cert_hostname var instead of ansible_fqdn
...
On OpenBSD, ansible_fqdn is the reverse of the IP, which is not always properly configured
2024-02-20 15:30:25 +01:00
Ludovic Poujol
9fe7825499
base: Generate default (self-signed) certificate
...
Create /etc/ssl/certs on OpenBSD to follow Linux/Debian
Don't change the owner/group of generated files (for now)
2024-02-16 10:45:32 +01:00
Ludovic Poujol
f7b29deda3
base: Generate default (self-signed) certificate
2024-02-15 12:18:29 +01:00
Jérémy Dubois
aee18bfde9
base: configure "/var/log" for servers that have a mount on it
2023-11-13 16:01:47 +01:00
Jérémy Dubois
aed20187de
use Fully Qualified Collection Name everywhere
2023-10-23 09:33:54 +02:00
Jérémy Dubois
a217bb2e56
base: deactivate insults in sudo
2023-10-13 11:52:41 +02:00
Jérémy Dubois
832e93da0d
base: ignore errors on packages installation because it fails for some packages when run in check mode
2023-10-13 11:52:40 +02:00
Jérémy Dubois
7aa588528c
base: doas configuration for ipmi_sensor NRPE check
2023-10-13 11:52:22 +02:00
Jérémy Dubois
b4e1afa698
base: rename sudo task
2023-06-20 10:21:18 +02:00
Jérémy Dubois
5ca86431eb
base: add evobsd_alias_fwupdate variable and make kshrc file a template so we can set or not a fw_update alias to servers that need it
2023-06-20 10:17:00 +02:00
Jérémy Dubois
f43405991e
base: install ncdu and htop often used as diagnostic tools
2023-05-30 11:09:50 +02:00
Jérémy Dubois
81d8774885
evobackup: zzz_evobackup upstream release 22.12, and call zzz_evobackup with bash ; base: install bash, now needed for zzz_evobackup script
2023-03-23 11:41:27 +01:00
Jérémy Dubois
c7e3b2d9ac
base: set the lookup option so that resolv.conf searches /etc/hosts before querying a domain name server; the default is the opposite
2023-03-15 15:55:41 +01:00
Jérémy Dubois
84e6ccec4f
base: doas configuration for _collectd user is managed in collectd role, not needed to have it by default
2023-02-17 16:20:32 +01:00
Jérémy Dubois
4b971b19fb
base: doas is used for evomaintenance, not sudo ; wheel group mustn't be sudo because we use the evolinux-sudo group
2023-02-09 15:18:53 +01:00
Jérémy Dubois
835371b861
base: rename install_url var with evobsd_install_url
2022-11-28 15:29:35 +01:00
Jérémy Dubois
22cb655f78
yamllint fix
2022-10-19 18:23:54 +02:00
Jérémy Dubois
d10b2c42b3
base: use a template for ntp configuration to ease the management of the different cases
2022-10-14 10:45:25 +02:00
Jérémy Dubois
c0b1131f36
base: we can chose to deploy or not utils files
2022-10-12 16:44:29 +02:00
Jérémy Dubois
c7bf4a461f
base: fix typo
2022-10-12 16:33:39 +02:00
Jérémy Dubois
61c5f6810c
base: configure "/usr/X11R6" and "/usr/local" for servers that have a mount on it
2022-10-12 16:15:40 +02:00
Jérémy Dubois
3c29a6ff10
base: fstab options can be activated or not
2022-10-12 16:05:25 +02:00
Jérémy Dubois
c692105b5c
base: use "servers" option instead of "server" option for ntpd.conf
2022-09-28 17:50:11 +02:00
Jérémy Dubois
daaa33a10a
base: use a variable for /etc/installurl content
2022-09-28 16:40:58 +02:00
Jérémy Dubois
5da921572e
base: export evomaintenance and evobackup tasks into their own roles, resolves #35
2022-09-01 17:05:20 +02:00
Jérémy Dubois
9a4a906b23
base: do not erase custom configuration of servers in doas.conf
2022-08-11 17:01:37 +02:00
Jérémy Dubois
48066052ac
base: use a variable to define ntpd server
2022-07-21 17:27:25 +02:00
Jérémy Dubois
62f31f519e
base: loop over fstab entries instead of copying the same task for each entries
2022-07-21 16:46:24 +02:00
Jérémy Dubois
91922175cd
etc-git: chmod 600 for local periodic files (daily, weekly, monthly) - forgotten ones
2022-07-12 10:30:23 +02:00
Jérémy Dubois
674a4aa836
update of tags for each tasks and ease the update of scripts
2022-06-23 18:35:39 +02:00
Jérémy Dubois
6667c4b9e8
Syntax : have all task name between quotes
2022-06-23 16:17:42 +02:00
Jérémy Dubois
ab7cc1189f
base: add update-evobackup-canary script
2022-06-09 15:07:38 +02:00
Jérémy Dubois
f57e9934ff
Applying fix from yamllint and ansible-lint
2022-04-13 16:57:39 +02:00
Jérémy Dubois
04bdff87f4
base: add a "next_part" before executing evobackup in daily.local file
2022-04-13 16:19:41 +02:00
Jérémy Dubois
07f4dadd0e
base: import dump-server-state.sh script
2022-03-31 18:18:10 +02:00
Jérémy Dubois
fe6235f8fb
Multiple fixes
...
- accounts : the user.yml task has a loop in a loop, var name need to be changed
- base, kshrc : fix a previously deleted command on which is based the command that follows
- base, ntp : do not display this task as a change, it only gets some information
2022-01-25 17:28:28 +01:00
Jérémy Dubois
7b337c2db1
Update README, change needed vars files, edit .gitignore and remove unneeded environment variable
2021-12-17 16:22:31 +01:00
Jérémy Dubois
3ccc0ca924
Force task to run in check mode for NTP configuration
2021-10-14 18:06:50 +02:00
Jérémy Dubois
7046e193e0
Configure the ntpd.conf file and bump version
2021-07-19 15:27:57 +02:00
Jérémy Dubois
a0f8339705
Change evomaintenance files mode
2021-05-17 11:36:36 +02:00
Tristan Pilat
1364451198
Following the release of OpenBSD 6.9, the VERBOSESTATUS variable is no longer valid in the daily.local configuration file
2021-05-06 15:03:37 +02:00
Jérémy Dubois
a26d6e13cb
yamllint line-lenght and empty-line
continuous-integration/drone/push Build is failing
2020-10-23 10:15:57 +02:00
Jérémy Dubois
4db9d006a2
Allow evolinux-sudo group to sudo
...
continuous-integration/drone/push Build is failing
evolinux-sudo group can already use doas, it should also
be allowed to use sudo
2020-10-22 11:28:06 +02:00
Jérémy Dubois
a7b96d9f67
Fstab : we now also add noatime to each partitions
2020-10-15 09:57:02 +02:00
Jérémy Dubois
4c902eda5a
Fstab : change only ffs file system
2020-10-14 18:05:29 +02:00
Jérémy Dubois
7ecf7be4a4
Do not remove line that would have a customized subject
2020-10-14 17:39:09 +02:00
Jérémy Dubois
68586d6450
Fstab role : do not change lines beggining with "#"
continuous-integration/drone/push Build is failing
2020-10-14 12:14:58 +02:00
Jérémy Dubois
a9ae1b57d4
Do not use litteral tab in configuration
...
Use "\t" instead of a litteral tab which can easily be broken. Also add a
deletion of line with spaces.
2020-10-13 12:01:18 +02:00
Jérémy Dubois
57acbd6091
Add jinja2 variable for PATH variable environment
2020-10-13 11:44:53 +02:00