evolix
/
ansible-roles
22
2
Fork 2
Code Issues 61 Pull Requests 18 Releases 32 Wiki Activity
3,582 Commits 76 Branches 56 Tags 128 MiB
Commit Graph

70 Commits

Author SHA1 Message Date
William Hirigoyen 1f8738fbda postfix: move postfix installation from evolinux-base to postfix role, plus some refactoring
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2696|33|2663|34|:+1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/467//ansiblelint">Evolix » ansible-roles » unstable #467</a> Details
gitea/ansible-roles/pipeline/head This commit looks good Details 
postfix:
* Move common packages installation in common.yml
* Replace ansible_fqdn by evolinux_fqdn, set postfix_slow_transport_include to false by default (only for packmails and packwebs)
* Remove dependency on evolinux_fqdn var
* Do not overwrite main.cf if it has been modified (except if postfix_force_main_cf)

evolinux-base:
* Move exim4 purge from evolinux-base to postfix role
* Call postfix role call after nagios role (dependency)
 2024-02-01 18:00:48 +01:00
William Hirigoyen dae2a25f78 check_free_space: add role; evolinux-base: install check_free_space by default
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2697|20|2677|5|:-1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/458//ansiblelint">Evolix » ansible-roles » unstable #458</a> Details
gitea/ansible-roles/pipeline/head This commit looks good Details
2024-01-24 17:25:20 +01:00
Mathieu Trossevin 62c596046d
Add role for automatically deploying autosysadmin 2023-12-18 17:00:51 +01:00
David Prevot f2c37dddff Use timesyncd instead of ntpd starting with Debian 12 (not always)
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2631|7|2624|9|:+1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/363//ansiblelint">Evolix » ansible-roles » unstable #363</a> Details
gitea/ansible-roles/pipeline/head This commit looks good Details
2023-09-28 17:25:18 +02:00
David Prevot ca67feb39e New timesyncd role used instead of ntpd by default 2023-09-28 15:27:19 +02:00
Jérémy Lecour b57a5c3b3c
evolinux-base: default value for evolinux_kernel_cloud_reboot (true)
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2625|15|2610|13|:-1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/344//ansiblelint">Evolix » ansible-roles » unstable #344</a> Details
gitea/ansible-roles/pipeline/head This commit looks good Details
2023-09-13 09:42:30 +02:00
William Hirigoyen 5b63ba112c Revert "evolinux-base: include postfix role, move exim4 purge from evolinux-base to postfix role" 
This reverts commit a440110cad.
 2023-08-31 17:47:49 +02:00
William Hirigoyen a440110cad evolinux-base: include postfix role, move exim4 purge from evolinux-base to postfix role
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2620|19|2601|21|:+1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/336//ansiblelint">Evolix » ansible-roles » unstable #336</a> Details
gitea/ansible-roles/pipeline/head This commit looks good Details
2023-08-31 17:30:34 +02:00
Brice Waegeneire fe369257ed evolinux-base: Limit journald to 1 day 2023-08-23 15:48:42 +02:00
Brice Waegeneire 0e1fe0e81f evolinux-base: Disable logcheck monitoring of journald 2023-08-23 15:05:10 +02:00
Ludovic Poujol f0abb53750 evolinux-base: New variable "evolinux_system_include_ntpd" to chose wether or not to include ntpd role
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2613|13|2600|13|:-1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/316//ansiblelint">Evolix » ansible-roles » unstable #316</a> Details
gitea/ansible-roles/pipeline/head This commit looks good Details
2023-08-04 11:47:42 +02:00
Jérémy Lecour f531460f49 Use proper keyrings directory for APT version 
Debian 9 → 11 : /etc/apt/trusted.gpg.d
Debian 12 : /etc/apt/keyrings
 2022-11-02 23:16:32 +01:00
Jérémy Lecour f71075d4ef evolinux-base: replace regular kernel by cloud kernel on virtual servers 2022-10-19 16:33:25 +02:00
Jérémy Lecour 2d16aeb41e evolinux-base: utils.yml can be excluded
gitea/ansible-roles/pipeline/head This commit looks good Details
2022-10-11 13:37:21 +02:00
Jérémy Lecour 0a3bfd7f27 evolinux-base: session timeout is configurable
continuous-integration/drone/push Build is passing Details
2022-07-06 14:24:41 +02:00
William Hirigoyen (Evolix) c4023a4f49 Détecte automatiquement si le serveur est baremetal pour installer les outils hw, suppression de la variable evolinux_packages_hardware inutile
continuous-integration/drone/push Build is passing Details
2022-06-03 16:22:56 +02:00
Jérémy Lecour 5153b88d01 evolinux-base: option to bypass raid-related tasks 2022-02-03 14:15:33 +01:00
Ludovic Poujol 64b632c000 evolinux-base: Donner le choix (ou non) de virer apt-listchanges
continuous-integration/drone/push Build encountered an error Details
2021-12-10 11:37:56 +01:00
Ludovic Poujol 8b701e615f evolinux-base: Donner le choix de changer (ou non) le motd 2021-12-10 11:37:33 +01:00
Jérémy Lecour 646a7b1813 evocheck: package install is not supported anymore 2021-10-25 10:08:40 +02:00
Jérémy Lecour 9b479f9c05 evolinux-base: logs are rotated with dateext by default 2021-09-30 12:07:02 +02:00
Jérémy Lecour 9ca68a16dd evolinux-base: quote values
continuous-integration/drone/push Build is passing Details
2021-05-10 09:07:18 +02:00
Jérémy Lecour 37ed5dd393 evolinux-base: swappiness is customizable
continuous-integration/drone/push Build is passing Details
2020-09-01 14:08:39 +02:00
Benoît S. 4bec21a9f3 evolinux-base: harware: Support HP gen >=10 RAID controller
continuous-integration/drone/push Build is passing Details
2020-06-16 12:35:56 +09:00
Jérémy Lecour ac98aa2d18 evolinux-base: install Evocheck (default: `True`)
continuous-integration/drone/push Build is passing Details
2020-03-09 17:02:23 +01:00
Jérémy Lecour ec54af596c evolinux-base: Don't customize the logcheck recipient by default.
continuous-integration/drone/push Build is failing Details 
By default the package sends its messages to the logcheck user.
By default we alias the "logcheck" user to "root" which is redirected to 
our custom address.
 2020-03-04 14:03:18 +01:00
Jérémy Lecour 80081aa26e evolinux-base: remove the chrony package
continuous-integration/drone/push Build is failing Details
2020-01-16 10:57:47 +01:00
Jérémy Lecour bea11352be Merge branch 'buster' into unstable 2019-09-23 18:34:35 +02:00
Jérémy Lecour 8f868b8612 evolinux-base: default value for "evolinux_ssh_group" 2019-09-22 22:25:30 +02:00
Ludovic Poujol f630d93587 evolinux-base: On debian 10 and later, add noexec on /dev/shm
continuous-integration/drone/push Build encountered an error Details
2019-07-23 18:18:29 +02:00
Jérémy Lecour b362f422df evolinux-base: packages for Buster and later
continuous-integration/drone/push Build is passing Details
2019-06-19 15:08:54 +02:00
Jérémy Lecour bc8858fc0a evolinux-base: improve hostname configuration 
We can have a "real" hostname and domain, but also an "internal" hostnae 
and domain, used mostly for internal tools.
 2018-08-16 16:17:34 +02:00
Jérémy Lecour b866b6fa0a evolinux-base: fail2ban is not enabled by default 2018-04-18 12:15:43 +02:00
Jérémy Lecour 08d544668b evolinux-base: create /etc/evolinux 2018-01-03 10:05:20 +01:00
Victor LABORIE f09d93aadb evolinux-base: purge locate/mlocate by default 2018-01-02 15:11:27 +01:00
Jérémy Lecour aeba94bcba default/additional variables 
List of hosts/ip are a combination of 2 lists allowing overrides
 2017-12-20 18:04:54 +01:00
Jérémy Lecour 8ef9554746 Combine evolix and additional trusted IP addresses 2017-11-15 23:57:58 +01:00
Jérémy Lecour 4bc7635502 Include generate-ldif in evolinux-base 2017-10-11 13:10:15 +02:00
Jérémy Lecour 79e57b7787 evolinux-base: don't disable root ssh by default 2017-10-10 21:58:03 +02:00
Jérémy Lecour c4e61a18d4 evolinux-base includes a few external roles 
* minifirewall
* munin
* nagios-nrpe
* fail2ban
* listupgrade
 2017-10-07 18:13:52 +02:00
Jérémy Lecour 03bc456dfa evolinux-base: allow ssh for current user 
When you're not sure to have a proper ssh connection after install,
you can keep the current user authorized.
Example: when using vagrant

This is disabled by default
 2017-10-07 13:12:03 +02:00
Jérémy Lecour 7b88393ccf Refactoring of admin-users + evolinux-base roles 
* rename admin-users to evolinux-users
* splitting the "sudo" part for users between jessie and stretch
* with stretch, the sudo group is customizable and properly configured
* import evolinux-users role from evolinux-base at proper time
  to ensure ssh connections are possible for other users before
  cutting root's access
* evomaintenance is also included in evolinux-base to have it available
  when users are created
 2017-10-06 01:06:59 +02:00
Jérémy Lecour 622698fb99 Don't disable root access by default 
It will be caught by evocheck if we forget to disable it
but will prevent locking ourselves out if we don't create users
 2017-10-05 00:29:14 +02:00
Jérémy Lecour ee80235e14 evolinux-base: etc-git is included after apt customization 
APT sources must be customized before installing any package
 2017-10-04 23:32:27 +02:00
Gregory Colpart 06184a44bf remove *ssl_subject vars to avoid errors 2017-09-08 01:26:53 +02:00
Gregory Colpart 4eb891b8b7 use role ntpd in evolinux-base 2017-08-31 03:31:00 +02:00
Gregory Colpart b801c883ac minor fix: true -> True 2017-08-31 03:23:07 +02:00
Benoît S. fa3047bdc4 Fix #2198. Purge openntpd 2017-07-17 16:18:10 +02:00
Gregory Colpart a189b7935b NTPD : Listen only on lo interface by default 2017-07-17 14:21:46 +02:00
Gregory Colpart ea4ec27f08 Oops, last commit was broken. I think "when: TAG" need always to be boolean, then I patch for that. 2017-07-13 02:20:28 +02:00