Commit Graph

135 Commits

Author SHA1 Message Date
Jérémy Lecour 8af6cdc4d6
apache: create ip_whitelist file if missing 2024-02-07 15:38:28 +01:00
Jérémy Lecour 26e3dc1be6
apache: use backward compatible Redirect directive 2023-12-11 18:19:38 +01:00
Gregory Colpart 0578d5a3ec apache : rename MaxRequestsPerChild to MaxConnectionsPerChild (new name)
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2635|8|2627|8|:-1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/393//ansiblelint">Evolix » ansible-roles » unstable #393</a> Details
gitea/ansible-roles/pipeline/head This commit looks good Details
2023-11-16 14:45:07 +01:00
Gregory Colpart ac72c7ac31 apache: fix MaxRequestsPerChild value to be sync with wiki.e.o 2023-11-16 14:44:08 +01:00
Gregory Colpart b1a67d1a5c apache : fix goaway pattern for bad bots
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2635|2|2633|3|:+1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/392//ansiblelint">Evolix » ansible-roles » unstable #392</a> Details
gitea/ansible-roles/pipeline/head This commit looks good Details
2023-11-16 14:35:48 +01:00
Jérémy Lecour 00fe225a3c
force: [yes,no] → force [true,false]
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2615|7|2608|177|:+1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/278//ansiblelint">Evolix » ansible-roles » unstable #278</a> Details
gitea/ansible-roles/pipeline/head This commit looks good Details
2023-06-28 13:25:30 +02:00
Jérémy Lecour ee21973371 Use FQCN
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2777|524|2253|2462|:+1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/223//ansiblelint">Evolix » ansible-roles » unstable #223</a> Details
gitea/ansible-roles/pipeline/head This commit looks good Details
Fully Qualified Collection Name
2023-03-20 23:33:19 +01:00
Eric Morino 8ec159c444 Add task in postfix for packmail and index.hml + vhost directive for mailgraph
gitea/ansible-roles/pipeline/head This commit looks good Details
2023-02-24 15:41:39 +01:00
Jérémy Lecour 21ab9b1e68 Revert ce5e4b12c6
gitea/ansible-roles/pipeline/head This commit looks good Details
2022-12-14 11:30:35 +01:00
Jérémy Lecour 1728eaee68 Revert "Add “when: not ansible_check_mode” to allow more --check"
gitea/ansible-roles/pipeline/head This commit looks good Details
This reverts commit fafff25c20.
This reverts commit e64471c5a8084f95a8e6f955d3fa918c55b8e846.
2022-12-14 07:41:18 +01:00
David Prevot ce5e4b12c6 Apache: Drop duplicate when keys
gitea/ansible-roles/pipeline/head This commit looks good Details
2022-12-12 11:54:00 +01:00
David Prevot fafff25c20 Add “when: not ansible_check_mode” to allow more --check
gitea/ansible-roles/pipeline/head This commit looks good Details
2022-12-02 17:40:43 +01:00
Brice Waegeneire 4c6d30a52c apache: block access to .git* and .env* files
continuous-integration/drone/push Build was killed Details
2021-12-28 16:27:05 +01:00
Eric Morino 7bb7b22d1f Add redirectMath 404 on http request /.git by default
continuous-integration/drone/push Build encountered an error Details
2021-12-20 09:59:25 +01:00
Jérémy Lecour 4a158ac819 Reduce verbosity 2021-07-02 21:08:07 +02:00
Jérémy Lecour 0fe0244116 Update Galaxy metadata (company, platforms and galaxy_tags) 2021-06-28 15:26:28 +02:00
Jérémy Lecour 7dc6f0b849 remove trailing whitespaces 2021-05-13 15:23:39 +02:00
Jérémy Lecour 3c9be8d913 fix more Ansible syntax 2021-05-09 23:20:15 +02:00
Jérémy Lecour 2ed77c60f0 Improve Ansible syntax
replace « x | changed » by « x is changed »
add explicit « bool » filter
use « length » filter instead of string comparison
2021-05-09 23:06:42 +02:00
Jérémy Lecour 5138065059 Use 'loop' syntax instead of 'with_items' 2021-05-04 14:19:18 +02:00
Jérémy Lecour 2386733231 bash syntax : `` → $()
continuous-integration/drone/push Build is passing Details
2021-04-29 10:22:21 +02:00
Gregory Colpart 75675a96b1 add info for NFS and Apache-ITK
continuous-integration/drone/push Build is passing Details
2021-04-23 16:24:52 +02:00
Ludovic Poujol d56c545183 apache: new variable for mpm mode (+ updated default config accordingly)
continuous-integration/drone/push Build is passing Details
Also, itk package will only be installed if required
2021-04-19 17:35:49 +02:00
Ludovic Poujol df9db31725 deny requests to ^/evolinux_fpm_status-.*
continuous-integration/drone/push Build is passing Details
2021-02-22 16:06:57 +01:00
Jérémy Lecour 622bbca4c2 apache: rotate logs daily instead of weekly
continuous-integration/drone/push Build is passing Details
2021-02-12 18:05:47 +01:00
Jérémy Lecour 8c54fd8c16 apache: new variables for logrotate + server-status
continuous-integration/drone/push Build is passing Details
2021-01-05 17:47:56 +01:00
Jérémy Lecour 7283e34077 Replace version_compare() with version() 2020-02-25 10:45:35 +01:00
Jérémy Lecour 71a2a19847 apache: the default VHost doesn't redirect to https for ".well-known" paths 2020-01-23 14:34:03 +01:00
Jérémy Lecour e04d881988 replace "with_items" in apt modules 2019-12-31 16:18:56 +01:00
Jérémy Lecour 79bb6103b8 Change "|version_compare" with "is version_compare" 2019-12-31 10:18:19 +01:00
Jérémy Lecour e557a3eaae apache: improve permissions in save_apache_status script 2019-12-13 10:44:44 +01:00
Victor LABORIE 6f5e13f8b8 Add evolix prefix to include_role 2019-11-29 14:00:25 +01:00
Benoît S. 62cd28c1f5 apache: Add missing part for munin cgi
continuous-integration/drone/push Build encountered an error Details
continuous-integration/drone/pr Build is failing Details
ScriptAlias /munin-cgi/munin-cgi-graph were missing.
2019-07-03 11:56:51 +02:00
Jérémy Lecour 49d90fff09 apache: add a variable to customize the server-status host
continuous-integration/drone/push Build is passing Details
2019-06-20 17:29:48 +02:00
Jérémy Lecour 9a489ccf29 apache/nginx: fix server-status replacement 2019-05-02 12:16:47 +02:00
Jérémy Lecour b6499671fa apache/nginx: add server status suffix in default site if missing 2019-04-26 11:02:02 +02:00
Jérémy Lecour 8e618ce70a apache/nginx: add server status suffix in VHost if missing 2019-04-25 17:12:19 +02:00
Jérémy Lecour aa28e9c1b8 change repositories URL 2019-03-21 15:31:58 +01:00
Jérémy Lecour 41c1ed5a70 apache: add Munin configuration for Apache server-status URL 2019-01-01 21:08:51 +01:00
Jérémy Lecour 06a0f0d9b7 apache/nginx/fail2ban: mention ip_whitelist.yml in README.md 2018-11-02 18:18:22 +01:00
Jérémy Lecour 24ddc78a23 apache/nginx: IP adresses can also be removed 2018-11-02 18:15:17 +01:00
Patrick Marchand b776fc3da2 Make ip whitelist tasks more flexible
Now the list of whitelisted ip addresses can be updated simply by
including the specific tasks in an external playbook without polluting
our role list.

This change takes effect for nginx, apache and fail2ban.
2018-11-02 18:08:23 +01:00
Jérémy Lecour bfb591dc74 apache: cleaner way to overwrite the server status suffix 2018-09-09 23:01:43 +02:00
Jérémy Lecour bb956fb5e7 apache: logrotate replacement is more subtle/precise
It replaces only the proper directive and not every occurence of the 
word.
2018-08-23 13:02:25 +02:00
Jérémy Lecour ec535b036c apt module: Use "state: present" instead of "state: installed"
"state: installed" is deprecated in Ansible 2.5
2018-05-18 09:33:25 +02:00
Jérémy Lecour 5c5361dbb5 apache: customize logrotate (52 weeks) 2018-04-22 18:10:47 +02:00
Ludovic Poujol 94118b2536 Apache: Don't turn on modsec if it's available on default vhost 2018-03-12 11:00:57 +01:00
Jérémy Lecour 25a47173b8 create server status parent directory if missing 2018-01-18 17:17:34 +01:00
Jérémy Lecour 86c2bcb398 apache: /usr/share/scripts exists 2018-01-18 17:08:29 +01:00
Jérémy Lecour b634840b42 apache/nginx: server status suffix 2018-01-03 10:05:20 +01:00