1037 Commits

Author	SHA1	Message	Date
Jérémy Lecour	54bf9c1854	evolinux-base: rename backup-server-state to dump-server-state	2022-03-27 09:18:15 +02:00
Jérémy Lecour	85d429295f	minifirewall: tail template follows symlinks	2022-03-25 18:12:24 +01:00
Jérémy Lecour	bbc1bae437	minifirewall: upstream release 22.03.4	2022-03-25 14:57:10 +01:00
Jérémy Dubois	d2fa14fb4f	backup-server-state: release 22.03.5	2022-03-24 18:15:56 +01:00
Jérémy Dubois	42782b7f3d	evolinux-base: fix show_help in backup-server-state.sh ... * --uname and --no-uname options were not in help * --services and --no-services were in help whereas --systemctl and --no-systemctl are used in options parsing	2022-03-24 17:57:58 +01:00
Mathieu Trossevin	1646cc99bf	redis: Remount /usr with RW when adding nagios plugin	2022-03-23 13:55:54 +01:00
Jérémy Dubois	b4f83e54d0	openvpn: use a subnet topology instead of the net30 default topology	2022-03-23 10:46:17 +01:00
Jérémy Dubois	c2f6ff5249	evocheck: upstream release 22.03.1	2022-03-22 11:03:26 +01:00
Jérémy Lecour	5895f5a99b	minifirewall: upstream release 22.03.3	2022-03-21 14:35:20 +01:00
Jérémy Lecour	e7594c6c86	evolinux-base: backup-server-state release 22.03.2	2022-03-21 11:32:08 +01:00
Mathieu Trossevin	444bd72944	generate-ldif: Correct generated entries for php-fpm in containers	2022-03-17 17:36:35 +01:00
Jérémy Lecour	fb41c81e99	backup-server-state: release 22.03.2 ... update documentation for --dpkg-full vs. --dpkg-status	2022-03-17 10:45:44 +01:00
Jérémy Lecour	8a9faa0250	* minifirewall: upstream release 22.03.2	2022-03-16 23:49:34 +01:00
Jérémy Lecour	545226f6f6	evocheck: upstream release 22.03	2022-03-15 23:25:15 +01:00
Jérémy Lecour	ba90203f21	minifirewall: upstream release 22.03.1 and use includes directory	2022-03-15 23:07:33 +01:00
Ludovic Poujol	17f884b04a	evolinux-base: Add non-free repos & install non-free firmware on dedicated hardware	2022-03-15 11:35:20 +01:00
Ludovic Poujol	913e6d96e8	generate-ldif: Add services check for bkctld	2022-03-15 10:53:16 +01:00
Jérémy Lecour	a733e2794f	evolinux-base: backup-server-state release 22.03	2022-03-08 16:49:53 +01:00
Mathieu Trossevin	9c84e95182	Repair keepalived role	2022-03-02 16:23:01 +01:00
Jérémy Lecour	e5dc503cfd	Release 22.03	2022-03-02 09:42:12 +01:00
Jérémy Lecour	270d03b6a6	evolinx-users: optimize sudo configuration	2022-03-02 09:40:52 +01:00
Jérémy Lecour	1dc4d0e133	redis: always install check_redis_instances	2022-03-01 14:04:05 +01:00
Jérémy Lecour	c8ef7e9b75	redis: check_redis_instances tolerates absence of instances	2022-03-01 14:02:22 +01:00
Jérémy Lecour	d9e95218ce	apt_hold_packages: broadcast message with wall, if present	2022-02-24 11:49:12 +01:00
Ludovic Poujol	39949ea921	generate-ldif: Add support for php-fpm in containers	2022-02-21 11:31:00 +01:00
Ludovic Poujol	e79141d2d2	lxc: Fail if /var is nosuid	2022-02-17 16:25:20 +01:00
Jérémy Lecour	799466788f	lxc-php: preliminary support for PHP 8.1 container	2022-02-17 14:50:21 +01:00
Jérémy Dubois	f3c443d076	openvpn: now check that openvpn has been restarted since last certificates renewal	2022-02-15 15:52:21 +01:00
Ludovic Poujol	9995fca35d	varnish: update munin plugin to work with recent varnish versions	2022-02-08 16:16:24 +01:00
Ludovic Poujol	a2f73bb7df	elasticsearch: Use `/etc/elasticsearch/jvm.options.d/evolinux` instead of default `/etc/elasticsearch/jvm.options`	2022-02-07 15:18:46 +01:00
Jérémy Dubois	981128dc17	openvpn: make it compatible with OpenBSD and add some improvements	2022-02-03 18:35:16 +01:00
Jérémy Lecour	0cbdda840d	Explicit permissions for systemd overrides	2022-02-03 14:18:20 +01:00
Jérémy Lecour	9e27d9707b	kvm-host: add missing default value	2022-02-03 14:16:45 +01:00
Jérémy Lecour	5153b88d01	evolinux-base: option to bypass raid-related tasks	2022-02-03 14:15:33 +01:00
Jérémy Lecour	3dd78fbf7e	Release 22.01.3	2022-01-31 11:57:21 +01:00
Jérémy Lecour	fcb0b8c80f	backup-server-state: 22.01.3	2022-01-28 16:27:39 +01:00
Jérémy Lecour	cd26081add	rbenv: install Ruby 3.1.0 by default	2022-01-28 16:27:20 +01:00
Jérémy Lecour	bb30402df3	Release 22.01.2	2022-01-27 14:12:40 +01:00
Jérémy Lecour	6ccd0ea440	Release 22.01.1	2022-01-27 14:04:41 +01:00
Jérémy Lecour	2849039fad	remount-usr: use findmnt to find if usr is a readonly partition	2022-01-27 11:21:19 +01:00
Jérémy Lecour	80f8a94798	evolinux-base: many improvements for backup-server-state script	2022-01-27 10:29:08 +01:00
Jérémy Lecour	bff8fcfebb	apt: upgrade packages after all the configuration is done	2022-01-25 18:25:47 +01:00
Jérémy Lecour	0e34d4cd4b	Merge remote-tracking branch 'origin/bullseye-swap-top' into unstable	2022-01-25 15:15:05 +01:00
Jérémy Lecour	1f4ee2de79	Prepare CHANGELOG for 22.01 release	2022-01-25 15:00:03 +01:00
Mathieu Trossevin	1902c40c3c	lxc-php: Fix config for opensmtpd on bullseye	2022-01-25 11:57:41 +01:00
Jérémy Dubois	3822696db6	Update CHANGELOG for new openvpn role	2022-01-24 19:23:26 +01:00
Jérémy Lecour	ca1f465aaa	nodejs: default to version 16 LTS	2022-01-12 13:04:22 +01:00
Jérémy Lecour	ec346a42a5	munin: systemd override to unprotect home directory	2021-12-23 16:56:23 +01:00
Mathieu Trossevin	d3eef71127	nagios-nrpe: Fix check_nfsserver for buster and bullseye ... From buster onward the nfs server doesn't run NFSv4 over UDP (it is out of spec, see RFC 7530). As such the check broke as it attempt to check the availability of NFSv4 over UDP. Right now the check doesn't check for NFSv2 over UDP as it would need to check if it exist first, as on bullseye it isn't supported by default anymore.	2021-11-24 11:11:39 +01:00
Jérémy Lecour	e4bb0c6f55	filebeat/metricbeat: version 7.x y default	2021-11-12 10:07:43 +01:00
Jérémy Lecour	039c740ef3	mysql: add evomariabackup 21.11	2021-11-01 10:16:55 +01:00
Jérémy Lecour	6cf8195744	evolinux-base: fix alert5.service dependency syntax	2021-10-29 07:52:38 +02:00
Jérémy Lecour	dcfea674a4	listupgrade: old-kernel-removal version 21.10	2021-10-25 14:23:52 +02:00
Jérémy Lecour	646a7b1813	evocheck: package install is not supported anymore	2021-10-25 10:08:40 +02:00
Jérémy Lecour	dd53c01027	evocheck: upstream release 21.10.4	2021-10-25 10:02:12 +02:00
Jérémy Dubois	90acb99c2a	nagios-nrpe: new check influxdb	2021-10-22 14:51:57 +02:00
Jérémy Lecour	ca28df1b75	evocheck: upstream release 21.10.3	2021-10-22 13:57:56 +02:00
Jérémy Lecour	1706361e8d	evocheck: upstream release 21.10.2	2021-10-22 13:43:43 +02:00
Jérémy Lecour	dcdde5f7f6	evocheck: upstream release 21.10.1	2021-10-21 17:32:11 +02:00
Ludovic Poujol	9b3bb39bd0	mysql : Create a default ~root/.my.cnf for compatibility reasons	2021-10-20 16:31:05 +02:00
Ludovic Poujol	b120a92203	evolinux-users + nagios-nrpe: Add support for php-fpm80 in lxc	2021-10-20 15:59:20 +02:00
Ludovic Poujol	a9d0d0958d	packweb-apache : Support php 8.0	2021-10-18 18:30:47 +02:00
Jérémy Dubois	d38119eb0f	nginx : fix variable name and debug ... nginx_minimal defined the nginx_package_name_default variable which was not used instead of the nginx_default_package_name variable also fixed debug which was reversed, and add another one to be sure which mode is used	2021-10-18 15:01:59 +02:00
Jérémy Lecour	bbd16dc5b4	evolinux-base: add script backup-server-state	2021-10-15 10:50:42 +02:00
Ludovic Poujol	73d6979e72	Various changes on mongodb (support 5.0) + fixes & compatibility ... * mongodb: Deny the install on Debian 11 « Bullseye » when the version is unsupported * mongodb: Support version 5.0 (for buster) * mongodb: Allow to specify a mongodb version for buster & bullseye * mongodb: Add missing remount-usr for munin plugins	2021-10-05 15:49:47 +02:00
Jérémy Lecour	7d63f20336	evoacme: exclude renewal-hooks directory from cron	2021-10-05 08:28:47 +02:00
Jérémy Lecour	7b14296503	etc-git: optimize maintenance tasks ... * manage commits with an optimized shell script instead of many slow Ansible tasks * centralize cron jobs in dedicated crontab	2021-10-02 12:50:01 +02:00
Jérémy Lecour	e089ddf091	evocheck: upstream release 21.10	2021-10-01 18:27:44 +02:00
Jérémy Lecour	b293cf2cf9	Install python 2 or 3 libraries according to running python version	2021-09-30 17:05:10 +02:00
Jérémy Lecour	5cbfda8f52	docker-host: install additional dependencies	2021-09-30 12:09:11 +02:00
Jérémy Lecour	9b479f9c05	evolinux-base: logs are rotated with dateext by default	2021-09-30 12:07:02 +02:00
Jérémy Lecour	4a035d248d	evocheck: upstream release 21.09	2021-09-30 10:45:07 +02:00
Jérémy Lecour	3de5de5304	mysql: improve Bullseye compatibility	2021-09-30 10:13:11 +02:00
Jérémy Lecour	0eb7332a34	php: enforce Debian version with assert instead of fail	2021-09-29 16:43:55 +02:00
Jérémy Lecour	73efee9caa	etc-git: purge old .git/index.lock (default: True)	2021-09-23 14:45:24 +02:00
Jérémy Lecour	1d55965527	logstash: no more dependency on Java	2021-09-21 14:43:58 +02:00
Jérémy Lecour	8233264d2a	logstash: logging to syslog is configurable (default: True)	2021-09-21 14:43:58 +02:00
Jérémy Lecour	ef1472cbba	logstash: elastic_stack_version = 7.x	2021-09-21 14:43:58 +02:00
Ludovic Poujol	f75354bb84	generate-ldif: detect mdadm	2021-09-16 17:26:58 +02:00
Ludovic Poujol	de4d814d74	generate-ldif: detect hardware raid card	2021-09-16 17:17:32 +02:00
Ludovic Poujol	6a2cd59e6d	nagios-nrpe + evolinux-users: new check ipmi	2021-09-16 16:48:03 +02:00
Ludovic Poujol	51fd2337f0	nagios-nrpe + evolinux-users: new check raid (soft + hard)	2021-09-16 16:40:57 +02:00
Ludovic Poujol	fa0c668cec	evolinux-base: install freeipmi by default on dedicated hw	2021-09-16 15:58:10 +02:00
Jérémy Lecour	2b549af7d9	evolinux-base: split dpkg logrotate configuration	2021-09-09 10:23:53 +02:00
Jérémy Lecour	e429f7aecb	squid: add *.o.lencr.org to default whitelist	2021-09-07 14:01:52 +02:00
Jérémy Lecour	e45ee59801	mysql: script "mysql-queries-killer.sh" to kill MySQL queries	2021-08-30 14:05:15 +02:00
Jérémy Lecour	65750d2aa6	evomaintenance: extract a config.yyml tasks file	2021-08-30 09:24:57 +02:00
Jérémy Lecour	ecba57ad75	evolinux-base: install molly-guard by default	2021-08-25 17:57:38 +02:00
Jérémy Lecour	2c7380240c	nagios-nrpe + evolinux-users: new checks for bkctld	2021-08-25 11:56:26 +02:00
Jérémy Lecour	066baf3538	Revert "bullseye-detect: this role is obsolete, Debian 11 has been fully released" ... This reverts commit c9f25f4638.	2021-08-17 15:33:06 +02:00
Jérémy Lecour	ad457dd7ba	apt: use the new security repository for Bullseye	2021-08-16 14:12:31 +02:00
Jérémy Lecour	969a5bce7d	apt: remove workaround for Evolix public repositories with Debian 11	2021-08-16 13:50:53 +02:00
Jérémy Lecour	d186e21239	evoadmin-web: simpler PHP packages lists	2021-08-16 13:49:13 +02:00
Jérémy Lecour	c9f25f4638	bullseye-detect: this role is obsolete, Debian 11 has been fully released	2021-08-16 13:47:33 +02:00
Jérémy Lecour	139b342fbd	certbot: silence letsencrypt deprecation warnings	2021-07-20 17:19:57 +02:00
Jérémy Lecour	bf49ec8df5	mysql: script "mysql_connections" to display a compact list of connections	2021-07-08 15:10:35 +02:00
Jérémy Lecour	32b5efa30e	evocheck: upstream release 21.07	2021-07-07 15:20:24 +02:00
Jérémy Lecour	29ec7bdcf2	Remove embedded GPG keys only if legacy keyring is present	2021-07-04 22:08:47 +02:00
Jérémy Lecour	ffd7d0e504	evolinux-base: alert5 comes after the network	2021-07-04 22:07:51 +02:00
Jérémy Lecour	4167b6d2a9	fix CHANGELOG	2021-07-03 09:10:22 +02:00
Jérémy Lecour	3721c2ab38	squid: improve default whitelist	2021-07-03 08:56:23 +02:00
Jérémy Lecour	5905751a82	squid: must be started in foreground mode for systemd	2021-07-02 23:45:42 +02:00
Jérémy Lecour	a5658b7f26	packweb-apache: install phpMyAdmin from buster-backports	2021-07-02 21:18:06 +02:00
Jérémy Lecour	5c1ae6ed0c	spamassassin: change dependency on evomaintenance ... Fail with an error if evomaintenance config is missing instead of trying to install a package that doesn't exist anymore.	2021-07-02 21:16:43 +02:00
Jérémy Lecour	8a784c39ab	mongodb: create munin plugins directory if missing	2021-07-02 21:16:40 +02:00
Jérémy Lecour	9c8dd743c8	Use python3 packages on Debian 11 and later	2021-07-02 21:16:15 +02:00
Jérémy Lecour	6b87ead5b4	update changelog	2021-07-02 21:16:12 +02:00
Jérémy Lecour	e8a8e85819	redis: instance service for Debian 11	2021-07-02 21:13:42 +02:00
Jérémy Lecour	c5ab0c0ff9	squid: remove obsolete variable on Squid 4	2021-07-02 21:13:05 +02:00
Jérémy Lecour	f673ea85d1	Force Debian version to buster for Evolix repository	2021-07-02 21:12:33 +02:00
Jérémy Lecour	2c441f176a	mysql: mariadb-client-10.5 on Debian 11	2021-07-02 21:11:27 +02:00
Jérémy Lecour	c5bb8f06ae	mysql: use python3 with Debian 11 and later	2021-07-02 21:10:52 +02:00
Jérémy Lecour	51d4ec1bb2	php: remove php-gettext for 7.4	2021-07-02 21:10:04 +02:00
Jérémy Lecour	2f68ae5339	Preliminary support for Bullseye	2021-07-02 20:58:09 +02:00
Jérémy Lecour	90cbd17f9b	listupgrade: crontab is configurable	2021-07-02 14:01:46 +02:00
Jérémy Lecour	b0b24744d6	listupgrade: upstream release 21.06.3	2021-07-02 13:59:42 +02:00
Jérémy Lecour	11813c31a4	certbot: add script for manual deploy hooks execution	2021-06-30 14:29:03 +02:00
Jérémy Lecour	51462c724c	certbot: sync_remote excludes itself	2021-06-30 07:39:57 +02:00
Jérémy Lecour	2ed1dac16b	Release 10.6.0	2021-06-28 15:56:19 +02:00
Jérémy Lecour	0fe0244116	Update Galaxy metadata (company, platforms and galaxy_tags)	2021-06-28 15:26:28 +02:00
Jérémy Lecour	1890a79702	elasticsearch: inline YAML formatting of seed_hosts and initial_master_nodes	2021-06-23 22:38:24 +02:00
Jérémy Lecour	4c1ef1bd56	elasticsearch: recent versiond don't depend on external JRE	2021-06-23 22:38:24 +02:00
Jérémy Lecour	6190c66445	listupgrade: upstream release 21.06.2	2021-06-20 12:06:49 +02:00
Jérémy Lecour	dd32ab5688	listupgrade: upstream release 21.06.1	2021-06-20 10:32:16 +02:00
Jérémy Lecour	dbc853a815	listupgrade: upstream release 21.06	2021-06-17 18:23:13 +02:00
Jérémy Lecour	4c7fed77c4	squid: add Yarn apt repository in default whitelist	2021-06-17 18:19:20 +02:00
Jérémy Lecour	fe9b7ee5f7	evomaintenance: upstream release 0.6.4	2021-06-17 10:57:07 +02:00
Jérémy Lecour	3d715bae35	kvm-host: replace the "kvm-tools" package with scripts deployed by Ansible	2021-06-10 11:09:48 +02:00
Jérémy Lecour	ca40fad186	nodejs: change GPG key name	2021-06-08 11:19:26 +02:00
Jérémy Lecour	856d11aced	nodejs: update apt cache before installing the package	2021-06-07 13:03:18 +02:00
Jérémy Lecour	2c47871fa7	Add Elastic GPG key to kibana, filebeat, logstash, metricbeat roles	2021-05-25 15:10:04 +02:00
Jérémy Lecour	06b8314211	evolinux-base: fix motd lookup path	2021-05-19 17:02:20 +02:00
Jérémy Lecour	02451f1e67	add default (useless) value for file lookup	2021-05-19 14:35:08 +02:00
Jérémy Lecour	4d83f25ae6	fix pipefail option for shell invocations	2021-05-18 14:04:54 +02:00
Jérémy Lecour	cae0de17df	listupgrade: fix wget error + shellcheck cleanup	2021-05-17 23:05:18 +02:00
Jérémy Lecour	56af68e5b3	listupgrade: print error if wget fails	2021-05-17 12:19:57 +02:00
Jérémy Lecour	d823c8116a	update CHANGELOG	2021-05-09 23:21:21 +02:00
Jérémy Lecour	e5e4dc95fa	packweb-apache: install phpMyAdmin from buster-backports	2021-05-04 14:57:18 +02:00
Jérémy Lecour	e7ddf9d46c	Use 'loop' syntax instead of 'with_list'	2021-05-04 14:31:22 +02:00
Jérémy Lecour	485ec39674	Use 'loop' syntax instead of 'with_nested'	2021-05-04 14:29:50 +02:00
Jérémy Lecour	07fd6451e1	Use 'loop' syntax instead of 'with_dict'	2021-05-04 14:20:53 +02:00
Jérémy Lecour	5138065059	Use 'loop' syntax instead of 'with_items'	2021-05-04 14:19:18 +02:00
Jérémy Lecour	debc4a82ca	Use 'loop' syntax instead of 'with_first_found'	2021-05-04 13:39:47 +02:00
Jérémy Lecour	a7971abb04	apt: store keys in /etc/apt/trusted.gpg.d in ascii format	2021-05-03 12:02:31 +02:00
Jérémy Lecour	cc6acdbf34	certbot: sync_remote.sh is configurable	2021-05-03 11:25:24 +02:00
Jérémy Lecour	6eaeb90f6e	ldap: fix edge cases where passwords were not set/get properly	2021-05-02 23:28:09 +02:00
Jérémy Lecour	43c726e86a	spamassassin: change dependency on evomaintenance ... Fail with an error if evomaintenance config is missing instead of trying to install a package that doesn't exist anymore.	2021-05-02 01:24:03 +02:00
Jérémy Lecour	920cb7eaeb	update changelog	2021-05-01 16:51:20 +02:00
Jérémy Lecour	5d79c31dc3	kvm-host: add migrate-vm script	2021-04-28 15:53:38 +02:00
Jérémy Lecour	94a5d7daa2	mysql: variable to disable myadd script overwrite (default: True)	2021-04-23 14:59:29 +02:00
Jérémy Lecour	eab68545fe	evolinux-base: add default motd template	2021-04-23 11:41:27 +02:00
Ludovic Poujol	3457b14fed	ntpd: Add leapfile configuration setting to ntpd on debian 10+	2021-04-21 17:22:45 +02:00
Ludovic Poujol	d56c545183	apache: new variable for mpm mode (+ updated default config accordingly) ... Also, itk package will only be installed if required	2021-04-19 17:35:49 +02:00
Jérémy Lecour	5e0ca0e3ff	Release 10.5.1	2021-04-13 15:56:09 +02:00
Ludovic Poujol	0f8804a8ab	etc-git: commit in /usr/share/scripts when there's an active repository	2021-04-08 16:07:49 +02:00
Jérémy Lecour	a5a2c6e335	haproxy: dedicated internal address/binding (without SSL)	2021-04-06 14:41:03 +02:00
Jérémy Lecour	2686eea2b1	Release 10.5.0	2021-04-01 15:38:10 +02:00
Jérémy Lecour	7041a70eeb	elasticsearch: log rotation is more readable/maintainable	2021-04-01 15:36:34 +02:00
Ludovic Poujol	f2ebe2d878	lxc-php: Add php 7.4 support	2021-03-31 10:57:29 +02:00
Jérémy Lecour	d7d057e435	filebeat: fix Ansible syntax error	2021-03-23 16:29:03 +01:00
Jérémy Lecour	2593784ab0	metricbeat: new variables to configure SSL mode	2021-03-23 16:28:14 +01:00
Jérémy Lecour	3a3cf1395e	listupgrade: update script from upstream	2021-03-23 16:27:15 +01:00
Jérémy Lecour	5a4bd28eaf	nagios-nrpe: libfcgi-client-perl is not available before Debian 10	2021-03-18 15:16:23 +01:00
Jérémy Lecour	5582d6e724	redis: socket/pid directories have the correct permissions	2021-03-18 15:15:39 +01:00
Patrick Marchand	e5511eafc6	Revert changes to bind log path from apparmor fix ... I realised it wasnt the best idea to change the path we are used to using just for this, so I overwrite the apparmor configuration instead.	2021-03-09 16:58:14 -05:00
Patrick Marchand	ffd3ff97f1	Fix conflict in changelog	2021-03-09 12:28:01 -05:00
Patrick Marchand	7da22e243e	Changed log directory for bind9 ... It is now /var/log/named, this is what debian 10 and apparmor expect by default. This fixes the bind9 service crashing at start.	2021-03-09 12:25:15 -05:00
Jérémy Lecour	3103af67a7	redis: escape password in Munin configuration	2021-03-09 18:24:15 +01:00
Ludovic Poujol	3cb18faf28	evolinux-users: Add sudo rights for nagios for multi-php lxc	2021-03-04 16:48:55 +01:00
Jérémy Lecour	1f4079b1b3	haproxy: possible admin access with login/pass	2021-02-27 18:43:59 +01:00
Ludovic Poujol	df9db31725	deny requests to ^/evolinux_fpm_status-.*	2021-02-22 16:06:57 +01:00
Jérémy Lecour	3709808fdc	redis: use /run instead or /var/run	2021-02-18 16:42:54 +01:00
Ludovic Poujol	ddd3e1aa06	nagios-nrpe: new script check_phpfpm_multi	2021-02-17 17:23:11 +01:00
Jérémy Lecour	f862ffc42e	beats packages can be upgraded to latest (default: False)	2021-02-16 16:35:25 +01:00
Jérémy Lecour	622bbca4c2	apache: rotate logs daily instead of weekly	2021-02-12 18:05:47 +01:00
Ludovic Poujol	b0cb14eb5b	* nagios-nrpe: update check_phpfpm_status.pl & install perl dependencies	2021-02-12 15:22:57 +01:00
Jérémy Lecour	2b328dc764	postfix: add smtpd_relay_restrictions in configuration	2021-02-12 14:10:04 +01:00
Jérémy Lecour	17f1a1a55e	update changelog	2021-02-11 12:09:32 +01:00
Jérémy Lecour	dde2672715	nginx: no more "minimal" mode, but the package remains customizable.	2021-02-04 11:31:36 +01:00
Jérémy Lecour	cff309ff41	nginx: add access to server status on default VHost	2021-02-04 11:30:32 +01:00
Jérémy Lecour	5588ed6009	minifirewall: change some defaults ... Only SSH (22) is open on privilegied IPs Remove volatile.debian.org domain	2021-02-04 10:55:31 +01:00
Jérémy Lecour	024d30ea43	evoacme: upstream release 21.01	2021-01-07 19:16:06 +01:00
Jérémy Lecour	0e32e0d2aa	certbot: use a fixed 1.9.0 version of the certbot-auto script (renamed "letsencrypt-auto")	2021-01-07 18:55:44 +01:00
Jérémy Lecour	8c54fd8c16	apache: new variables for logrotate + server-status	2021-01-05 17:47:56 +01:00
Jérémy Lecour	19da5ea1f7	Release 10.4.0	2020-12-24 14:00:37 +01:00
Jérémy Lecour	7ec0748383	certbot: detect domains if missing	2020-12-24 13:56:43 +01:00
Jérémy Lecour	442e9bcda8	cerbot: hook to sync certificates to remote servers	2020-12-24 13:56:43 +01:00
Jérémy Lecour	4dbd1b0bee	certbot: disable auth for Let's Encrypt challenge	2020-12-24 10:33:48 +01:00
Jérémy Lecour	1d56e002b4	nginx: change from "nginx_status-XXX" to "server-status-XXX"	2020-12-23 15:53:36 +01:00
Jérémy Lecour	66a6e67de2	varnish: variable for jail configuration	2020-12-21 23:33:14 +01:00
Jérémy Lecour	1922b51fbe	Release 10.3.0	2020-12-21 16:03:49 +01:00
Jérémy Lecour	67ce8de85e	varnish: custom reload script is now useless	2020-12-20 23:25:34 +01:00
Jérémy Lecour	3e72d6961c	varnish: no threadpool delay by default	2020-12-20 23:03:37 +01:00
Jérémy Lecour	8861169a04	varnish: config file name is configurable	2020-12-20 23:03:10 +01:00
Jérémy Lecour	81fbd98a5f	evolinux-users: improve uid/login checks	2020-12-17 15:25:48 +01:00
Jérémy Lecour	0b528f15da	tomcat-instance: fail if uid already exists	2020-12-17 08:06:44 +01:00
Jérémy Lecour	5b2d3b09d0	Create system users for vmail (dovecot) and evoadmin	2020-12-17 08:05:16 +01:00
Jérémy Lecour	3c4986275c	evocheck: upstream release 20.12	2020-12-08 11:07:42 +01:00
Jérémy Lecour	772bce8c0b	dovecot: vmail uid/gid are configurable	2020-12-07 17:26:45 +01:00
Jérémy Lecour	4d6f88f0f4	minifirewall: add variables to force upgrade the script and the config (default: False)	2020-12-07 17:23:37 +01:00
Jérémy Lecour	98f798b9fb	cerbot: parse HAProxy config file only if HAProxy is found	2020-12-03 17:26:16 +01:00
Jérémy Lecour	fc71bb5945	minifirewall: upstream release 20.12	2020-12-01 22:57:13 +01:00
Jérémy Lecour	9aa24f4cde	minifirewall: Docker support	2020-12-01 22:47:38 +01:00
Jérémy Lecour	b6817cb62c	evoacme: upstream release 20.12	2020-12-01 22:27:05 +01:00
Jérémy Lecour	18ac1e7279	redis: check maxmemory in NRPE check ... If "maxmemory" is set and "maxmemory-policy" is missing or set to "noeviction" then we enforce the "maxmemory" limit	2020-12-01 19:02:42 +01:00
Jérémy Lecour	86d59cbb5f	mysql: install save_mysql_processlist script	2020-11-24 13:59:04 +01:00
Ludovic Poujol	1d8b7c3bea	apt: disable APT Periodic ... This interfere with our usual workflow (listupgrade) Note : Using 0 instead of false is intentional, The value is used by the apt-daily script that except a "0" to disable itself.	2020-11-24 11:19:18 +01:00
Jérémy Lecour	592030ee9a	evoacme: variable to disable Debian version check (default: False)	2020-11-21 09:59:10 +01:00
Jérémy Lecour	b43d0f3629	evoacme: upstream release 20.11	2020-11-19 21:21:07 +01:00
Ludovic Poujol	15154169cf	kvm-host: Add drbd role dependency (toggleable with kvm_install_drbd)	2020-10-30 11:56:24 +01:00
Mathieu Trossevin	71f85a5863	Merge branch 'unstable' into packweb-multi-php2	2020-10-20 17:41:36 +02:00
Mathieu Trossevin	2ea4745f93	lxc-php: Update changelog	2020-10-20 17:27:34 +02:00
Ludovic Poujol	c8d4da532f	evoacme: Don't ignore hooks with . in the name (ignore when it's ".disable")	2020-10-20 10:58:51 +02:00
Ludovic Poujol	9e5d041210	dovecot: Update munin plugin & configure it	2020-10-20 10:56:41 +02:00
Jérémy Lecour	d80461e39a	redis: variable to force use of port 6379 in instances mode	2020-10-19 16:03:58 +02:00
Ludovic Poujol	929f258bf8	nextcloud: New role	2020-10-02 16:51:05 +02:00
Jérémy Lecour	8b48552e36	Release 10.2.0	2020-09-17 14:06:46 +02:00
Jérémy Lecour	3e67d92fd3	certbot: an empty change shouldn't raise an exception	2020-09-16 12:07:27 +02:00
Jérémy Lecour	48174ad618	evoacme: remount /usr if necessary	2020-09-14 11:31:47 +02:00
Jérémy Lecour	b818c348c2	evoacme: remove Debian 9 support	2020-09-11 11:09:45 +02:00
Ludovic Poujol	f9d6fe0ad4	evolinux-base: install wget	2020-09-10 14:59:19 +02:00
Jérémy Lecour	c7151a8de8	certbot: fix "no-self-upgrade" option	2020-09-08 10:02:15 +02:00
Jérémy Lecour	37ed5dd393	evolinux-base: swappiness is customizable	2020-09-01 14:08:39 +02:00
Jérémy Lecour	afa0fd35c8	Change default public SSH/SFTP port from 2222 to 22222	2020-08-28 18:32:47 +02:00
Jérémy Lecour	d0622c6b20	tomcat: root directory owner/group are configurable	2020-08-27 17:12:34 +02:00
Jérémy Lecour	7413a242a8	Release 10.1.0	2020-08-21 14:50:17 +02:00
Jérémy Lecour	1e6d6cdd13	sort lines in CHANGELOG	2020-08-21 14:03:41 +02:00
Jérémy Lecour	a60deb276b	evoacme: upstream release 20.08	2020-08-21 14:01:06 +02:00
Jérémy Lecour	8ea1bac000	evoacme: update for new certbot role ... * certbot is installed by the certbot role * Apache/Nginx configuration is delegated to the certbot role * No more "acme" user, everything is done with "root".	2020-08-21 13:36:24 +02:00
Benoît S.	a8095b1c36	Updated CHANGELOG.md with recent merges	2020-08-20 15:49:22 +09:00
Jérémy Lecour	57ac4e467c	metricbeat: allow using a template	2020-08-18 14:01:09 +02:00
Jérémy Lecour	ce35f7292f	filebeat: allow using a template	2020-08-18 14:00:46 +02:00
Jérémy Lecour	d3e69eeeb5	certbot: fix haproxy hook (ssl cert directory detection) ... It was matching additional parameters. Now it matches on the first argument after "crt"	2020-07-21 10:46:01 +02:00
Jérémy Lecour	21b8104654	elasticsearch: configure cluster with seed hosts and initial masters	2020-07-19 11:40:59 +02:00
Jérémy Lecour	9270852349	elasticsearch: set tmpdir before datadir	2020-07-19 11:30:00 +02:00
Jérémy Lecour	8aa7f6cf33	mongodb: install custom munin plugins	2020-07-17 13:48:18 +02:00
Jérémy Lecour	9bdd5ad9e7	haproxy: rotate logs with date extension and immediate compression	2020-06-22 19:02:29 +02:00
Jérémy Lecour	977c28c720	varnish: fix start command when multiple addresses are present	2020-06-16 13:51:07 +02:00
Jérémy Lecour	ce7468816f	haproxy: deport SSL tuning to Mozilla SSL generator ... There are too many combinations and they change every so often. It's better to direct the user to the generator to have a good configuration.	2020-06-15 22:47:08 +02:00
Jérémy Lecour	30cdbae981	haproxy: split stats variables	2020-06-15 22:45:22 +02:00
Jérémy Lecour	011761eb8f	haproxy: add deny_ips file to reject connections	2020-06-14 23:28:29 +02:00
Jérémy Lecour	8465743973	haproxy: add some comments to default config	2020-06-14 23:27:50 +02:00
Jérémy Lecour	4bf5b1daa6	nginx: read server-status values before changing the config	2020-06-14 12:49:10 +02:00
Jérémy Lecour	f47af9f54f	haproxy: preconfigure SSL with defaults	2020-06-14 12:37:04 +02:00
Jérémy Lecour	7f54b8ab60	haproxy: adapt backports installed package list to distibution	2020-06-14 12:37:04 +02:00
Jérémy Lecour	e5d4ea3c18	nginx: make default vhost configurable	2020-06-14 12:37:04 +02:00
Jérémy Lecour	ce0d61bcbd	certbot: detect HAProxy cert directory	2020-06-14 12:37:04 +02:00
Jérémy Lecour	a8887aaa8e	update changelog	2020-06-09 11:45:19 +02:00
Jérémy Lecour	4c71ea2012	haproxy: enable stats frontend with access lists	2020-06-09 11:41:33 +02:00
Patrick Marchand	c9daa8ba35	evobackup-client: Fix ssh connection test in zzz_evobackup.sh ... When I made the ssh key name a variable and defaulted it to id_ed25519, I forgot to change the hardcoded value for the ssh test in evobackup-client/templates/zzz_evobackup.default.sh.j2	2020-06-08 17:22:18 -04:00
Jérémy Lecour	1ade990526	mongodb: fix logrotate patterm on Debian buster	2020-06-05 11:02:54 +02:00
Jérémy Lecour	7f0931510f	evoacme: upstream release 20.06.1	2020-06-05 11:01:42 +02:00
Ludovic Poujol	ebffccae59	lxc-php: Do --no-install-recommends for ssmtp/opensmtpd	2020-06-05 11:01:22 +02:00
Ludovic Poujol	186f3d90b9	lxc-php: Install opensmtpd as intended	2020-06-05 10:57:49 +02:00
Ludovic Poujol	0dfb92360f	php: Don't disable putenv() by default in PHP settings	2020-06-04 11:52:04 +02:00
Ludovic Poujol	90704dc712	lxc-php: Don't disable putenv() by default in PHP settings	2020-06-04 11:51:25 +02:00
Ludovic Poujol	ead0b7fd88	lxc-php: Install php-sqlite by default	2020-06-04 11:42:17 +02:00
Ludovic Poujol	8c883c44dd	php: Install php-sqlite by default	2020-06-04 11:39:51 +02:00
Ludovic Poujol	c7d456471b	packweb-apache: Install zip & unzip by default	2020-06-04 11:34:26 +02:00
Jérémy Lecour	3bd0a4ffb3	certbot: restore compatibility with old Nginx	2020-06-04 11:22:58 +02:00
Jérémy Lecour	9aed38b637	certbot: install certbot dependencies non-interactively for jessie	2020-06-04 11:22:58 +02:00
Jérémy Lecour	1d5a30b144	evoacme: upstream release 20.06	2020-06-03 12:09:58 +02:00
Patrick Marchand	c8cd119a18	Merge pull request 'Make it possible to setup mysql replication' (#102) from mysql_replication into unstable	2020-06-02 17:31:13 +02:00
Jérémy Lecour	4cf438c8ff	redis: raise an error is port 6379 is used in "instance" mode	2020-06-02 11:22:56 +02:00
Jérémy Lecour	8a87fecbe4	redis: new syntax for match filter	2020-06-02 11:00:06 +02:00
Jérémy Lecour	47d11308ba	redis: create sudoers file if missing	2020-06-02 10:59:51 +02:00
Jérémy Lecour	86cab2ab94	haproxy: chroot and socket path are configurable	2020-06-02 10:58:10 +02:00
Patrick Marchand	8c1e40c1a9	Add option to make a mysql install read only ... Rebased on unstable	2020-06-01 12:03:23 -04:00
Ludovic Poujol	09371b095f	packweb-apache: Don't turn on mod-evasive emails by default	2020-05-18 12:03:34 +02:00
Jérémy Lecour	4016387ca8	Release 10.0.0	2020-05-13 11:20:45 +02:00
Jérémy Lecour	ac7ee86a9c	minifirewall: /bin/true command doesn't report "changed" anymore	2020-05-11 15:23:52 +02:00
Jérémy Lecour	849ec405d5	evocheck: upstream version 20.04.4	2020-04-28 16:00:45 +02:00
Jérémy Lecour	57e5791728	networkd-to-ifconfig: add variables for configuration by variables	2020-04-26 18:39:25 +02:00
Jérémy Lecour	2f77100b47	evocheck: upstream version 20.04.3	2020-04-26 10:54:49 +02:00
Jérémy Lecour	d013a65cf6	Merge branch 'unstable' into lpoujol/better-multiphp	2020-04-17 12:23:56 +02:00
Jérémy Lecour	6764418e75	evocheck: upstream release 20.04.2	2020-04-15 18:01:55 +02:00
Jérémy Lecour	257a3476f1	evocheck: upstream release 20.04.1	2020-04-12 22:30:07 +02:00
Jérémy Lecour	f2613e91aa	evolinux-base: configure cciss-vol-statusd in the proper file ... The default file should be used for configuration instead of the init script.	2020-04-10 11:36:03 +02:00
Ludovic Poujol	93c043c8e0	(fix) lxc: Fix container existance check to be able to run in check_mode	2020-04-08 17:57:46 +02:00
Ludovic Poujol	bd63e7037f	packweb-apache: Do the install & conffigure phpContainer script (instead of evoadmin-web role)	2020-04-08 17:54:43 +02:00
Ludovic Poujol	f135f67cd0	(change) php: Cleanup CLI Settings. Also, allow url fopen and don't disable functions (in CLI only) ... Closes #98	2020-04-01 18:22:46 +02:00
Ludovic Poujol	7fc260a17b	(fix) php: update surry_post.yml to match current latest PHP release	2020-04-01 18:08:57 +02:00
Ludovic Poujol	f442239cec	(fix) packweb-apache: Don't try to install PHPMyAdmin on Buster as it's not available	2020-04-01 18:05:20 +02:00
Ludovic Poujol	135a089341	(change) lxc-php: Use OpenSMTPD for Stretch/Buster containers, and ssmtp for Jessie containers	2020-04-01 17:23:39 +02:00
Ludovic Poujol	a21fcaf663	(fix) php: Chose the debian version repo archive for packages.sury.org	2020-04-01 17:23:39 +02:00
Ludovic Poujol	a680399608	packweb-apache: Add missing dependency to evoacme role	2020-04-01 17:23:39 +02:00
Ludovic Poujol	9b80db3772	lxc: Don't stop the container if it already exists	2020-04-01 17:17:00 +02:00
Jérémy Lecour	5b5b8944c5	java: add Java 11 as possible version to install	2020-03-21 19:07:26 +01:00
Patrick Marchand	d5731f90e0	Merge branch 'bind9_evocheck_fix' into unstable	2020-03-10 13:48:52 -04:00
Jérémy Lecour	ac98aa2d18	evolinux-base: install Evocheck (default: `True`)	2020-03-09 17:02:23 +01:00
Jérémy Lecour	92dcbf1ab5	rbenv: change default Ruby version to 2.7.0	2020-03-09 17:02:23 +01:00
Jérémy Lecour	ac6414076c	nodejs: change default version to 12 (new LTS)	2020-03-09 17:02:23 +01:00
Jérémy Lecour	ec54af596c	evolinux-base: Don't customize the logcheck recipient by default. ... By default the package sends its messages to the logcheck user. By default we alias the "logcheck" user to "root" which is redirected to our custom address.	2020-03-04 14:03:18 +01:00
Jérémy Lecour	783dcb9890	evomaintenance: upstream release 0.6.3	2020-03-02 22:12:58 +01:00
Jérémy Lecour	68a1d4eb27	update changelog	2020-03-02 20:53:54 +01:00
Jérémy Lecour	af53a6b2ec	evomaintenance: upstream release 0.6.2	2020-03-02 14:45:41 +01:00
Jérémy Lecour	eb74bda22a	nagios-nrpe: check_mode per cpu dynamically	2020-02-28 12:14:20 +01:00
Jérémy Lecour	1b29f2d793	update listupgrade from upstream	2020-02-27 13:41:04 +01:00
Jérémy Lecour	d31dddc9aa	evocheck: upstream verison 20.02.1	2020-02-27 11:37:01 +01:00
Jérémy Lecour	65bc2c657d	certbot: commit hook must be executed at the end	2020-02-25 10:46:21 +01:00
Jérémy Lecour	7283e34077	Replace version_compare() with version()	2020-02-25 10:45:35 +01:00
Jérémy Lecour	ff7f8669ef	evomaintenance: install PG dependencies only when needed	2020-02-25 10:43:23 +01:00
Ludovic Poujol	704b76e6de	minifirewall: Properly detect alert5.sh to turn on firewall at boot	2020-02-17 16:02:48 +01:00
Ludovic Poujol	02e8754d75	minifirewall: Backport changes from minifirewall (properly open outgoing smtp(s))	2020-02-17 10:56:38 +01:00
Jérémy Lecour	f57af13349	minifirewall: better alert5 activation	2020-02-10 10:36:00 +01:00
Jérémy Lecour	68b7a88e63	apt: added buster backports prerferences	2020-02-10 10:35:18 +01:00
Patrick Marchand	896b8bd7e4	Merge branch 'evobackup-client' into unstable ... Import evobackup client code into mainline.	2020-02-06 16:29:02 -05:00
Jérémy Lecour	72f5dc70f8	apt: hold packages only if package is installed	2020-02-04 18:14:57 +01:00
Jérémy Lecour	dc7358bc4c	nagios-nrpe: change default haproxy socket path	2020-01-23 15:04:25 +01:00
Jérémy Lecour	02858692bb	evomaintenance: don't configure firewall for database if not necessary	2020-01-23 14:34:03 +01:00
Jérémy Lecour	71a2a19847	apache: the default VHost doesn't redirect to https for ".well-known" paths	2020-01-23 14:34:03 +01:00
Ludovic Poujol	31df2d2fbc	php: Add a task to remove Debian's default FPM pool file (off by default) ... Can be triggered by switching php_fpm_remove_default_pool to True.	2020-01-16 15:55:35 +01:00
Ludovic Poujol	ef5ed6911e	php: Change the default pool names to something more explicit (and same for the variables names) ... Because it's more than just pure configuration, but a fpm pool definition, I've changed the following variables in Ansible : - php_fpm_defaults_conf_file to replaced by php_fpm_default_pool_file - php_fpm_custom_conf_file to php_fpm_default_pool_custom_file. On the FPM side, I've also changed the files names of the pool to make them more explicit. No more z and zzz. It's the www pool, so let's put www in the file name for coherence : - z-evolinux-defaults.conf changes to www-evolinux-defaults.conf - zzz-evolinux-custom.conf changes to www-evolinux-zcustom.conf	2020-01-16 15:55:25 +01:00
Ludovic Poujol	c9d3635cf8	php: Make sure the default pool we define can be fully functionnal witout debian's default pool file	2020-01-16 15:55:17 +01:00
Jérémy Lecour	80081aa26e	evolinux-base: remove the chrony package	2020-01-16 10:57:47 +01:00
Jérémy Lecour	e7952dc3c8	etc-git: fix warnings ansible-lint	2020-01-08 17:19:36 +01:00
Jérémy Lecour	bf7de332ea	minifirewall: fix warnings ansible-lint	2020-01-08 17:19:13 +01:00
Jérémy Lecour	f79b30eeb4	update changelog	2020-01-03 16:40:53 +01:00
Jérémy Lecour	3b258cc43e	tomcat: package version derived from Debian version if missing	2019-12-31 16:43:51 +01:00
Patrick Marchand	20191c8873	Fixed regression introduced by commit 276177900b ... The default behavior for ansible template is to overwrite the targeted file. Since we dont always want to overwrite a file when we play this role, we set `force` to `False` by default. This means that if the `dest` already exists, ansible will not overwrite it with it's given template. This is fine for most of the tasks in this role, but in the case of `{{ evoadmin_scripts_dir }}/web-mail.tpl`,the file is created by a task that runs prior to the template task, so setting it to `False` by default means it never gets updated and clients dont get notified when they create new websites.	2019-12-24 14:10:24 -05:00
Victor LABORIE	2a1e0b7ef6	evolinux-base: install ssacli for HP Smart Array	2019-12-13 11:00:20 +01:00
Jérémy Lecour	e557a3eaae	apache: improve permissions in save_apache_status script	2019-12-13 10:44:44 +01:00
Ludovic Poujol	6e918d166e	evolinux-base: Don't make alert5.service executable ... Every 3 mins, systemd complain that the service file is marked as executable, and asks the executable bit to be remove. Nov 27 01:35:11 foo systemd[1]: Configuration file /etc/systemd/system/alert5.service is marked executable. Please remove executable permission bits. Proceeding anyway.	2019-11-28 10:59:29 +01:00
Ludovic Poujol	0e58f34e18	certbot: Properly evaluate when apache is installed ... Checking the existence of /etc/apache2 is not enough as a condition to validate the presence of apache. Indeed, some packages (including certbot!!!), put some files in /etc/apache2/conf-available even if apache isn't installed. In those cases, the check is not correct, and we'll enter in the apache block, and fail when we try to enable the configuration. With this commit, we now validate the presence apache with the presence of /usr/sbin/apachectl	2019-11-26 11:58:52 +01:00
Ludovic Poujol	dc1c78e08a	evolinux-base: Fix our zsyslog rotate config that doesn't work on Debian 10 ... I've noticed that some log files, especially /var/log/syslog were empty. After investigating, I've realized that it was happening after a log rotation by logrotate. The old mechanism, `invoke-rc.d rsyslog rotate` isn't working anymore on Debian 10. It will fail with a not so explicit message : [FAIL] Closing open files: rsyslogd failed! Long story short, it seems that the pid file (`/run/rsyslogd.pid`) isn't created any more, so start-stop-daemon as used by /etc/init.d/rsyslog will fail. Explaining the error message. Debian 10 rsyslog now brings `/usr/lib/rsyslog/rsyslog-rotate` that is used by logrotate. It will send the signal HUP the 'right' way, so rsyslog will be aware of the log rotation. Sadly, this script isn't present in Debian 9 nor 8, so the logrotate configuration for rsyslog is now a template, using the right command for the right version.	2019-11-22 16:48:19 +01:00
Jérémy Lecour	473bcb4cd6	apt: verify that /etc/evolinux is present	2019-11-20 11:34:47 +01:00
Jérémy Lecour	26dd244ae0	nagios-nrpe: update check_redis_instances	2019-11-13 09:47:23 +01:00
Jérémy Lecour	7f6ad406a5	evocheck: upstream version 19.11.2	2019-11-07 10:38:32 +01:00
Jérémy Lecour	767760cbe0	evocheck: upstream version 19.11.1	2019-11-06 07:50:45 +01:00
Jérémy Lecour	049d36ab8f	etc-git: add versioning for /usr/share/scripts on Debian 10+ ... The repository.yml task file is generic and can be called for vrious repositories. On Debian 10, /usr/share/scripts is versioned	2019-11-05 17:00:22 +01:00
Jérémy Lecour	6b77372f24	evocheck: upstream version 19.11	2019-11-05 16:20:07 +01:00
Jérémy Lecour	a55e29186f	evomaintenance: upstream version 0.6.0	2019-11-05 14:52:59 +01:00
Jérémy Lecour	ab8c6b13b8	evoacme: upstream version 19.11	2019-11-05 14:08:02 +01:00
Jérémy Lecour	7e50a460a8	minifirewall: add a variable to force the check scripts update	2019-11-05 10:52:14 +01:00
Jérémy Lecour	5476538eb1	minifirewall: no http filtering by default	2019-10-30 14:37:22 +01:00
Jérémy Lecour	f2dacac139	evolinux-base: add /usr/share/scripts in root's PATH (Debian 10+)	2019-10-30 14:32:32 +01:00
Jérémy Lecour	8679da4cb6	evolinux-base: install /sbin/deny	2019-10-30 14:32:32 +01:00
Jérémy Lecour	772c333623	apt: remove jessie/buster sources from Gandi servers	2019-10-30 14:32:32 +01:00
Jérémy Lecour	e80e4197c2	evocheck: upstream version 19.10	2019-10-25 13:17:16 +02:00
Jérémy Lecour	d5a6487315	Merge branch 'mongodb-buster' into unstable	2019-10-24 17:23:53 +02:00
Jérémy Lecour	27adad616f	squid: compatibility wit Debian 10	2019-10-24 16:23:48 +02:00
Jérémy Lecour	85b0e36f33	CHANGELOG: sort alphabetically	2019-10-24 15:37:58 +02:00
Jérémy Lecour	76864f226e	WIP mongodb: compatibility with Debian 10	2019-10-24 15:36:51 +02:00
Jérémy Lecour	ee72dd07ff	rbenv: install Ruby 2.6.5 by default	2019-10-22 15:03:45 +02:00
Jérémy Lecour	2ea88dc385	mysql-oracle: backport tasks from mysql role	2019-10-21 16:32:59 +02:00
Jérémy Lecour	12cebfa71c	lxc-php: refactor tasks for better maintainability	2019-10-21 15:26:03 +02:00
Ludovic Poujol	2d2889ac16	php: Don't set a chroot for the default fpm pool	2019-10-16 15:59:33 +02:00
Ludovic Poujol	0a7262081a	php: add missing handler for php7.3-fpm	2019-10-16 15:17:35 +02:00
Jérémy Lecour	edb5ace762	haproxy: add a variable to keep the existing configuration	2019-10-10 11:27:39 +02:00
Patrick Marchand	c6804e73e7	Adapted the bind role to respect the evocheck warnings ... The required munin plugins and the logging necessary for them to work is now activated depending on the type of resolver and the logrotate file is changed from bind to bind9.	2019-10-09 11:54:30 -04:00
Ludovic Poujol	4aaeb4590b	lxc: rely on lxc_container module instead of command module	2019-10-02 16:32:20 +02:00
Ludovic Poujol	e985f5778c	evoadmin-web: Put the php config at the right place for Buster	2019-10-02 15:48:03 +02:00
Ludovic Poujol	a5378c783e	lxc: update our default template to be compatible with Debian 10	2019-10-01 17:54:13 +02:00
Ludovic Poujol	ae97276e13	lxc: remove useless loop in apt execution	2019-10-01 17:54:13 +02:00
Jérémy Lecour	a478c773eb	apt: check if cron is installed before adding a cron job	2019-09-30 14:12:38 +02:00
Jérémy Lecour	394e28b815	WIP: new certbot role	2019-09-27 00:21:29 +02:00
Jérémy Lecour	e3e908dd4c	Merge branch 'redis-instances' into unstable	2019-09-25 22:25:42 +02:00
Gregory Colpart	6fe86a76c5	remove reload-vcl.sh (Custom Varnish ExecReload script) when Debian >= 10	2019-09-24 14:00:22 +02:00
Jérémy Lecour	f09a405d84	mongodb: still incompatible with Debian 10	2019-09-23 22:18:52 +02:00
Jérémy Lecour	bea11352be	Merge branch 'buster' into unstable	2019-09-23 18:34:35 +02:00
Jérémy Lecour	45d48eedb0	changelog cleanup	2019-09-23 13:47:19 +02:00
Jérémy Lecour	3999e7d4f8	listupgrade: install old-kernel-autoremoval script	2019-09-23 13:46:29 +02:00
Jérémy Lecour	0829efc8a6	evocheck: upstream version 19.09	2019-09-23 09:22:58 +02:00
Jérémy Lecour	9f619adf68	evocheck: cron jobs execute in verbose	2019-09-23 09:22:40 +02:00
Jérémy Lecour	1a647d0546	evocheck : update (version 19.09) from upstream	2019-09-22 22:41:03 +02:00
Jérémy Lecour	b31159c9d2	evolinux-base: use "evolinux_internal_group" for SSH authentication	2019-09-22 22:26:21 +02:00
Jérémy Lecour	8f868b8612	evolinux-base: default value for "evolinux_ssh_group"	2019-09-22 22:25:30 +02:00
Jérémy Lecour	2d249f1815	squid: split systemd tasks into own file	2019-09-22 22:18:09 +02:00
Patrick Marchand	a358db065b	Merge branch 'htpasswd_evoadmin' into unstable	2019-09-20 10:06:20 -04:00
Patrick Marchand	0009272462	Allow setting a custom mysql server_id	2019-09-12 11:46:12 -04:00
Patrick Marchand	109191ccd8	Added mysql_log_bin variable to enable binary logs	2019-09-12 08:54:18 -04:00
Jérémy Lecour	442353ce73	Update changelog	2019-09-06 16:04:47 +02:00
Jérémy Lecour	4acd61a072	generate-ldif: support MariaDB 10.3	2019-09-02 10:39:49 +02:00
Patrick Marchand	1c12827c9c	Added evobackup-client role	2019-08-30 14:43:52 -04:00
Patrick Marchand	d75846ed28	Make it possible to add an htpasswd file to evoadmin	2019-08-30 10:32:44 -04:00
Jérémy Lecour	5925a12b3d	evocheck: upstream version 19.08	2019-08-30 14:23:35 +02:00
Jérémy Lecour	6db519c2b0	redis: max clients is configurable	2019-08-30 08:53:12 +02:00
Jérémy Lecour	2c2f13e17f	update CHANGELOG	2019-08-30 08:52:08 +02:00
Patrick Marchand	276177900b	Merge branch 'evoadmin-web-template-override' into unstable ... I had to apply some of the yamllint fixes to the new multi-php tasks as well. Notably it removes the need to explicitely check for the truthy "True"	2019-08-27 10:23:04 -04:00
Ludovic Poujol	8d71965ec9	nginx: fix munin fcgi not working (missing chmod 660 on logs)	2019-08-22 14:47:32 +02:00
Ludovic Poujol	e2fd56bdcd	php: By default, allow 128M for OpCache (instead of 64M)	2019-08-21 15:56:35 +02:00
Jérémy Lecour	f5f4a82114	evomaintenance: upstream version 0.5.1	2019-08-21 15:40:15 +02:00
Ludovic Poujol	b116c47b58	packweb-apache: Deploy opcache.php to give some insights on PHP's opcache status	2019-08-21 15:24:58 +02:00
Jérémy Lecour	c0ed2fa620	php: variable to install the mysqlnd module instead of the default mysql module	2019-08-16 10:11:23 +02:00
Ludovic Poujol	6d2db1341f	evomaintenance: Turn on API by default (instead of DB)	2019-08-07 15:42:23 +02:00
Ludovic Poujol	b7844dd804	squid: Remove wait time when we turn off squid	2019-08-06 10:26:47 +02:00
Ludovic Poujol	f630d93587	evolinux-base: On debian 10 and later, add noexec on /dev/shm	2019-07-23 18:18:29 +02:00
Victor LABORIE	cb8116fff0	tomcat: fix typo for default tomcat_version	2019-07-12 15:29:05 +02:00
Victor LABORIE	031c4c29b9	roundcube: fix typo for roundcube vhost	2019-07-08 15:35:05 +02:00
Jérémy Lecour	11a039bfac	elasticsearch: listen on local interface only by default	2019-07-01 17:17:32 +02:00
Ludovic Poujol	e13543bf07	lxc-php: Don't remove the default pool - That's making PHP-FPM sad :(	2019-06-26 11:10:23 +02:00
Jérémy Lecour	16bdd6893d	Release 9.10.1	2019-06-21 14:36:20 +02:00
Jérémy Lecour	a5ee2771ca	evocheck : update (version 19.06) from upstream	2019-06-21 14:35:59 +02:00
Jérémy Lecour	39d0167408	Release 9.10.0	2019-06-21 10:46:08 +02:00
Jérémy Lecour	bb0189e5a4	rbenv: install Ruby 2.6.3 by default	2019-06-21 10:43:20 +02:00
Jérémy Lecour	8420791224	fluentd: store gpg key locally	2019-06-21 10:29:18 +02:00
Jérémy Lecour	ce12e32375	evocheck : update from upstream	2019-06-21 09:42:02 +02:00
Jérémy Lecour	49d90fff09	apache: add a variable to customize the server-status host	2019-06-20 17:29:48 +02:00
Jérémy Lecour	a8ef97fcde	Revert "evolinux-base: install "spectre-meltdown-checker" (Debian 9 and later)" ... This reverts commit 65414d8ae7.	2019-06-20 17:29:48 +02:00
Jérémy Lecour	8cb604aa93	etc-git: gitignore /etc/letsencrypt/.certbot.lock	2019-06-17 15:02:17 +02:00
Ludovic Poujol	7b9cc7c2b1	apt: Add Debian Buster repositories	2019-06-17 14:24:09 +02:00
Jérémy Lecour	65414d8ae7	evolinux-base: install "spectre-meltdown-checker" (Debian 9 and later)	2019-06-17 14:22:00 +02:00
Jérémy Lecour	a643c96cca	evomaintenance: make hooks configurable	2019-06-17 14:17:30 +02:00
Ludovic Poujol	8413fa137c	nagios-nrpe: Replace the dummy packages nagios-plugins-* with monitoring-plugins-*	2019-06-17 10:25:46 +02:00
Ludovic Poujol	890055753e	evolinux-users: Validate sshd config with "-t" instead of "-T" ... See #52	2019-06-17 10:23:56 +02:00
Ludovic Poujol	75a8c90258	evolinux-base: Ensure rename is present	2019-06-17 09:58:10 +02:00
Ludovic Poujol	20a4c082d7	php: Stop enforcing /var/www/html as chroot while we use /var/www.....	2019-06-06 13:45:53 +02:00
Victor LABORIE	e2ae37fa3d	nagios-nrpe: check_load is now based on ansible_processor_vcpus	2019-06-05 11:09:52 +02:00
Victor LABORIE	08ae9d73c4	redmine: fix 500 error on logging	2019-05-29 11:49:10 +02:00
Victor LABORIE	490708c76d	redmine: use custom errors-pages in Nginx vhost	2019-05-22 12:07:51 +02:00
Victor LABORIE	360150d57b	nagios-nrpe: fix redis_instances check when Redis port equal 0	2019-05-20 14:28:52 +02:00
Victor LABORIE	6c1991196a	nagios-nrpe: change required status code for http and https check	2019-05-14 14:29:50 +02:00
Jérémy Lecour	7cc1777cf5	apt: add a script to manage packages with "hold" mark	2019-05-13 17:48:55 +02:00
Victor LABORIE	e40aefb4e0	redmine: enable gzip compression in nginx vhost	2019-05-13 12:06:22 +02:00
Victor LABORIE	0dd7b26ade	redmine: update default version to 4.0.3	2019-05-13 11:21:32 +02:00
Victor LABORIE	c2ed7faeb7	rbenv: update defaults rbenv version to 1.1.2 and ruby version to 2.5.5	2019-05-13 11:21:32 +02:00
Victor LABORIE	4a703978a8	rbenv: add check_mode for versions checking	2019-05-13 11:21:32 +02:00
Patrick Marchand	d8385bff84	Make it possible to overwrite the default evoadmin-web templates ... The templates can also be forced to update if so desired.	2019-05-06 22:00:45 +02:00
Jérémy Lecour	4394d795e0	update changelog	2019-04-26 11:09:36 +02:00
Jérémy Lecour	b6499671fa	apache/nginx: add server status suffix in default site if missing	2019-04-26 11:02:02 +02:00
Jérémy Lecour	8e618ce70a	apache/nginx: add server status suffix in VHost if missing	2019-04-25 17:12:19 +02:00
Jérémy Lecour	afea232858	evocheck : version 19.04 from upstream	2019-04-25 13:34:28 +02:00
Jérémy Lecour	daae099aef	Release 9.9.0	2019-04-16 16:41:28 +02:00
Jérémy Lecour	69e45dab84	update CHANGELOG for lxc changes	2019-04-16 16:36:27 +02:00
Jérémy Lecour	c61e40bdf8	clean CHANGELOG	2019-04-16 16:27:10 +02:00
Jérémy Lecour	7bb15e7b70	evocheck : add "x-frame-options: sameorigin" for Munin	2019-04-16 10:47:26 +02:00
Jérémy Lecour	6b52f89ad3	evocheck : update script from upstream	2019-04-16 10:46:44 +02:00
Ludovic Poujol	48226ff7b6	apt: Ensure jessie-backport from archives.debian.org is accepted	2019-04-08 16:11:10 +02:00
Ludovic Poujol	b185012469	apt: Remove jessie-update suite as it's no longer exists	2019-04-08 15:40:03 +02:00
Eric Morino	48becaecf4	Replace mirror.evolix.org by archives.debian.org for jessie-backport	2019-04-03 15:08:06 +02:00
Eric Morino	36515c9c89	aligning roles with our conventions, major changes in opendkim-add.sh	2019-03-27 11:01:11 +01:00
Jérémy Lecour	66381ae454	evomaintenance: embed version 0.5.0	2019-03-26 15:06:20 +01:00
Jérémy Lecour	de0a4c2ca8	update README	2019-03-21 15:38:36 +01:00
Ludovic Poujol	6e36b54adb	webapps/evoadmin-web: add dbadmin.sh to sudoers file	2019-03-18 11:50:46 +01:00
Jérémy Lecour	f3b54188d3	redis: higher limit of open files	2019-03-08 13:44:12 +01:00
Jérémy Lecour	02723ba0f3	redis: set variables on nclusion, not with set_facts	2019-03-08 13:44:12 +01:00
Victor LABORIE	aebd46e4d7	tomcat-instance: deploy correct version of config files	2019-03-06 15:52:56 +01:00
Jérémy Lecour	3e37800994	evolinux-base: remove apt-listchanges on Stretch and later	2019-03-05 11:10:12 +01:00
Jérémy Lecour	70f5504382	etc-git: ignore evobackup/.keep-* files	2019-02-22 10:25:27 +01:00
Victor LABORIE	346e556049	tomcat-instance: deploy correct version of server.xml	2019-02-20 11:29:11 +01:00
Victor LABORIE	49dc437880	tomcat: better tomcat version management	2019-02-20 11:28:59 +01:00
Victor LABORIE	c1d727bb5d	spamassasin: fix sa-update.sh and ensure service is started and enabled	2019-01-31 14:37:41 +01:00
Jérémy Lecour	c296dd94c2	Release 9.8.0	2019-01-31 10:22:50 +01:00
Jérémy Lecour	eb0879f3c2	New "percona" role to install Percona repositories and tools	2019-01-31 10:22:13 +01:00
Jérémy Lecour	c8e7675a49	metricbeat: disable cloud_metadata processor by default	2019-01-31 10:15:02 +01:00
Jérémy Lecour	ff275efd95	filebeat: disable cloud_metadata processor by default	2019-01-31 10:14:13 +01:00
Victor LABORIE	0794e6f620	redmine: refactoring of redmine role with use of rbenv	2019-01-28 14:29:01 +01:00
Victor LABORIE	fabac07210	redis: add variable for configure unixsocketperm	2019-01-28 14:26:13 +01:00
Victor LABORIE	2c874afb3c	proftpd: add FTPS and SFTP support	2019-01-24 11:47:03 +01:00
Ludovic Poujol	af896fe1fc	* ntpd: Update the restrictions to follow wiki.evolix.org/HowtoNTP client config ... - Ensure the client won't respond to anybody but accept the timeserver answers - Should work on both Jessie and Stretch	2019-01-18 15:32:45 +01:00