Commit graph

88 commits

Author SHA1 Message Date
Jérémy Dubois 5ca86431eb base: add evobsd_alias_fwupdate variable and make kshrc file a template so we can set or not a fw_update alias to servers that need it 2023-06-20 10:17:00 +02:00
Jérémy Dubois 8a63c8336f evocheck: upstream release 23.06 2023-06-05 11:46:12 +02:00
Jérémy Dubois d2574faaef base: dump-server-state.sh upstream release 23.06 2023-06-05 10:46:53 +02:00
Jérémy Dubois f43405991e base: install ncdu and htop often used as diagnostic tools 2023-05-30 11:09:50 +02:00
Jérémy Dubois e4bc6c1d97 collectd: modified collectd scripts directory and scripts files right so that only _collectd group can execute them 2023-04-25 10:12:44 +02:00
Jérémy Dubois 6f97857b91 post-install: execute motd-carp-state.sh only once an hour 2023-04-13 17:57:54 +02:00
Jérémy Dubois 264c58a03d evobackup: execute canary script before executing backup script 2023-03-23 11:41:28 +01:00
Jérémy Dubois 7ab102376f base: dump-server-state.sh upstream release 23.03 2023-03-23 11:41:27 +01:00
Jérémy Dubois 81d8774885 evobackup: zzz_evobackup upstream release 22.12, and call zzz_evobackup with bash ; base: install bash, now needed for zzz_evobackup script 2023-03-23 11:41:27 +01:00
Jérémy Dubois 9c450ff11b nagios-nrpe: fix allowed_hosts configuration: keep potential added IP, but we cannot use backrefs if the line does not exist yet 2023-03-23 11:41:21 +01:00
Jérémy Dubois f801218789 nagios-nrpe: allow older cipher suites for older Icinga version 2023-03-15 16:13:41 +01:00
Jérémy Dubois a045995c01 post-install: add the pf_states check by default in generateldif.sh script 2023-03-15 16:03:58 +01:00
Jérémy Dubois c7e3b2d9ac base: set the lookup option so that resolv.conf searches /etc/hosts before querying a domain name server; the default is the opposite 2023-03-15 15:55:41 +01:00
Jérémy Dubois f42477c8fb nagios-nrpe: check_ipsecctl.sh is never used standalone for check_vpn, always called by check_ipsecctl_critiques.sh 2023-03-15 15:27:04 +01:00
Jérémy Dubois 3a0db4bfb4 nagios-nrpe: changed check_load to make it more relevant 2023-03-03 16:28:43 +01:00
Jérémy Dubois 394b71c947 ospf: do not repeat use of command, use variable instead with output of command 2023-03-01 14:57:22 +01:00
Jérémy Dubois ccdd16c523 collectd: improve dns_stats.sh script for more metrics 2023-02-17 16:21:36 +01:00
Jérémy Dubois 84e6ccec4f base: doas configuration for _collectd user is managed in collectd role, not needed to have it by default 2023-02-17 16:20:32 +01:00
Jérémy Dubois 7258d99d13 logsentry: delete unused default file that we put in /usr/share/scripts 2023-02-16 16:44:06 +01:00
Jérémy Dubois 60fd0e1e38 logsentry: fix variables for configuration files 2023-02-16 16:40:53 +01:00
Jérémy Dubois e7ff98662f ospf: precise in the readme file that no daemon is configured/activated 2023-02-16 16:31:17 +01:00
Jérémy Dubois 4b971b19fb base: doas is used for evomaintenance, not sudo ; wheel group mustn't be sudo because we use the evolinux-sudo group 2023-02-09 15:18:53 +01:00
Jérémy Dubois 328dc63d82 bgp, collectd, logsentry, ospf: update scripts 2023-02-06 16:10:40 +01:00
Jérémy Dubois cdc2546448 post-install: use basename of path in generateldif.sh to define file from elsewhere 2023-01-31 11:46:16 +01:00
Jérémy Dubois a5f0695bbb post-install: fix missing space in generateldif.sh script 2023-01-31 11:38:25 +01:00
Jérémy Dubois 9515c8639f nagios-nrpe: deleted unused variables and added a ntp check server variable 2022-12-15 16:24:12 +01:00
Jérémy Dubois 4ace413343 logsentry: update config files, add "[logsentry]" in subject, and simplify task 2022-11-21 17:29:52 +01:00
Jérémy Dubois f71560a87b nagios-nrpe: grep in check_ipsecctl_critiques.sh was too large 2022-10-19 15:24:17 +02:00
Jérémy Dubois d10b2c42b3 base: use a template for ntp configuration to ease the management of the different cases 2022-10-14 10:45:25 +02:00
Jérémy Dubois ec6de426d6 base: reordering default variable file and deleting unused one 2022-10-12 16:45:56 +02:00
Jérémy Dubois c0b1131f36 base: we can chose to deploy or not utils files 2022-10-12 16:44:29 +02:00
Jérémy Dubois 61c5f6810c base: configure "/usr/X11R6" and "/usr/local" for servers that have a mount on it 2022-10-12 16:15:40 +02:00
Jérémy Dubois 3c29a6ff10 base: fstab options can be activated or not 2022-10-12 16:05:25 +02:00
Jérémy Dubois c692105b5c base: use "servers" option instead of "server" option for ntpd.conf 2022-09-28 17:50:11 +02:00
Jérémy Dubois daaa33a10a base: use a variable for /etc/installurl content 2022-09-28 16:40:58 +02:00
Jérémy Dubois b070e4bac0 Fix CHANGELOG : "*" instead of "-" for list 2022-09-12 14:31:46 +02:00
Jérémy Dubois ce5e4a48de nagios-nrpe: multiples IP can now be checked with check_ipsecctl_critiques.sh 2022-09-12 14:31:30 +02:00
Jérémy Dubois 5da921572e base: export evomaintenance and evobackup tasks into their own roles, resolves #35 2022-09-01 17:05:20 +02:00
Jérémy Dubois 28b946bd47 nagios-nrpe: add some information in check_connections_state.sh check 2022-09-01 14:44:40 +02:00
Jérémy Dubois c2e0809865 base: add munin files in newsyslog.conf by default 2022-08-25 17:12:23 +02:00
Jérémy Dubois 749f026f32 do not erase custom configuration of servers in nrpe.d/evolix.cfg, and do not use zzz_evolix.cfg anymore 2022-08-25 16:28:33 +02:00
Jérémy Dubois 97d1f90082 base: vmd and pass are not used in our infrastructure, deletion of autocompletion 2022-08-24 17:15:49 +02:00
Jérémy Dubois 9a4a906b23 base: do not erase custom configuration of servers in doas.conf 2022-08-11 17:01:37 +02:00
Jérémy Dubois 24180c31e4 nagios-nrpe: check_disk1 returns only alerts 2022-08-05 09:44:11 +02:00
Jérémy Dubois 891513d633 base: add entry in doas.conf for sd0 in case we have a hard raid 2022-08-04 18:25:08 +02:00
Jérémy Dubois 8e3b4b35cd etc-git: do not erase custom entries of servers in .gitignore files 2022-08-04 18:03:23 +02:00
Jérémy Dubois 48066052ac base: use a variable to define ntpd server 2022-07-21 17:27:25 +02:00
Jérémy Dubois 62f31f519e base: loop over fstab entries instead of copying the same task for each entries 2022-07-21 16:46:24 +02:00
Jérémy Dubois 56682b1646 add a update-utils.yml playbook to update scripts 2022-07-21 14:45:06 +02:00
Jérémy Dubois 48f25bbe7c base: session timeout is configurable 2022-07-19 17:26:44 +02:00