Commit graph

3582 commits

Author SHA1 Message Date
Jérémy Lecour 738d56db68 Add mysql-oracle role
Install and configure MySQL 5.7 with packages from Oracle
2018-02-28 17:12:25 +01:00
Victor LABORIE ef3287f7a2 proftpd: missing tab 2018-02-27 17:24:21 +01:00
Victor LABORIE d0fcd1c2d1 proftpd: use proftpd_accounts list for create ftp accounts
* need documentation
* faster, easier, more robust and reliable than loop on
  include_role with account.yml task
* account.yml task will be removed in future release
2018-02-27 17:14:57 +01:00
Gregory Colpart 01379f5a29 follow https://wiki.evolix.org/HowtoNodeJS and default to node_8.x version 2018-02-27 00:12:50 +01:00
Jérémy Lecour 54159f8e87 mongodb: configuration is forced by default but it's configurable 2018-02-23 18:44:26 +01:00
Jérémy Lecour 1ac3300ade nginx: package name can be specified (default: nginx-full) 2018-02-22 00:10:14 +01:00
Jérémy Lecour 40939dd6bd fixup! elasticsearch: RESTART_ON_UPGRADE is configurable 2018-02-20 15:21:18 +01:00
Jérémy Lecour 41f7b029b2 Update changelog for commits on nagios-nrpe 2018-02-20 15:08:40 +01:00
Jérémy Lecour 62a85ef72a elasticsearch: RESTART_ON_UPGRADE is configurable 2018-02-20 15:06:07 +01:00
Benoît S. 9bf70a57f4 Set +x on theses executables plugins 2018-02-19 14:18:58 +01:00
Benoît S. 90a517af2d Added a new nagios-nrpe plugin: check_open_files 2018-02-19 14:17:53 +01:00
Victor LABORIE df891f6aee haproxy: fix Munin plugin dependencies 2018-02-14 14:10:00 +01:00
Victor LABORIE cbf64417bf haproxy: Munin plugin need a Debian Package 2018-02-13 16:49:24 +01:00
Victor LABORIE 2727a6dfa1 haproxy: add Munin graphes 2018-02-13 16:37:40 +01:00
Jérémy Lecour 097f732922 evolinux-users: evomaintenance trap detection also with check_mode 2018-02-08 15:33:28 +01:00
Jérémy Lecour c18b83d974 evolinux-users: deal with AllowGroups and AllowUsers differently 2018-02-08 15:29:53 +01:00
Jérémy Lecour 6cb1a5765a whitespaces 2018-02-08 11:11:47 +01:00
Jérémy Lecour c6d3b804d9 nginx: fix basic auth for default vhost 2018-02-08 11:11:47 +01:00
Jérémy Lecour 23062e7b18 elasticsearch: ES_TMPDIR variable for custom tmpdir 2018-02-07 17:36:04 +01:00
Jérémy Lecour f9c06f3e47 etc-git: add postfix db files in default gitignore 2018-02-04 16:42:10 +01:00
Jérémy Lecour 8a498bb3a3 postfix: add lines in /etc/.gitignore 2018-02-04 11:49:14 +01:00
Jérémy Lecour 02fdbb9126 postgresql: use ".j2" extension for jinja templates 2018-02-04 11:39:59 +01:00
Jérémy Lecour 9102e35fe8 Merge branch 'unstable' into stable 2018-02-02 21:21:24 +01:00
Jérémy Lecour afe2446d54 Release 9.1.6 2018-02-02 20:10:20 +01:00
Jérémy Lecour 24a5f0df7e nginx: fix servers status dirname 2018-02-01 12:27:18 +01:00
Bruno TATU 26f3814254 Revert "nodejs: add 3 tasks + install procedure"
This reverts commit cff9900d94.
2018-02-01 12:00:41 +01:00
Bruno TATU b1cd390fb3 remove playbook exemple 2018-02-01 12:00:36 +01:00
Bruno TATU cc557f14c1 nodejs: add playbook example 2018-02-01 10:50:44 +01:00
Bruno TATU cff9900d94 nodejs: add 3 tasks + install procedure 2018-02-01 10:49:17 +01:00
Victor LABORIE ed81597b06 evoadmin-mail: allow Expires rules in .htaccess 2018-01-30 15:55:06 +01:00
Romain Dessort 0f12501760 Add security-cdn.debian.org to HTTPSITES whitelist
Debian migrated its security.debian.org repository to Fastly CDN
(security-cdn.debian.org) so we have to whitelist it too to make
security upgrades possible.
2018-01-29 11:15:11 -05:00
Gregory Colpart fb6cb79b41 Keep read right on group for software with non-root access like OpenLDAP 2018-01-28 17:13:23 +01:00
Victor LABORIE 4fd4e0d96d ldap|nagios-nrpe: use external file for NRPE credentials 2018-01-24 16:49:07 +01:00
Jérémy Lecour 3bbc1be977 nagios-nrpe: document new variable 2018-01-23 18:34:04 +01:00
Jérémy Lecour 8bd94a7c44 fail2ban: fix horrible typo, Python is not Ruby 2018-01-23 18:31:31 +01:00
Jérémy Lecour 6ed1f04c85 nagios-nrpe: allowed_hosts can be updated 2018-01-23 17:41:58 +01:00
Jérémy Lecour 19b2da5b92 evoacme: exclude typical certbot directories 2018-01-22 18:27:37 +01:00
Jérémy Lecour 88bdf270d7 Added emphasis on version number significance 2018-01-22 18:27:37 +01:00
Benoît S. 3ef353761f nagios-nrpe: Add --sni to check_https
Why? Because we want to use the right server name when checking.
And if you have a strict-sni enabled server you will have an error.
 CRITICAL - Cannot
make SSL connection.  139749570156288:error:14094458:SSL
routines:ssl3_read_bytes:tlsv1 unrecognized
name:../ssl/record/rec_layer_s3.c:1399:SSL alert number 112
2018-01-22 12:14:27 +01:00
Jérémy Lecour 1f007c1ff0 update changelog 2018-01-20 19:57:58 +01:00
Jérémy Lecour b4ffe48282 Changelog: backfill of a few releases 2018-01-20 19:55:41 +01:00
Jérémy Lecour ad80bc9ff7 mongodb: install python-pymongo for monitoring
Backport from commit 0858f53b2a70718d8b1f4567a4348c3e9b5c4faf
2018-01-20 19:33:18 +01:00
Jérémy Lecour 141da62b9f Changelog: backfill previous release notes (9.1.4 and 9.1.3) 2018-01-18 23:37:56 +01:00
Jérémy Lecour 25a5ffd6ef fail2ban: Install munin plugin if available 2018-01-18 23:17:20 +01:00
Jérémy Lecour 72695db53b Merge branch 'unstable' into stable 2018-01-18 18:42:18 +01:00
Jérémy Lecour cf8b110abb Add a changelog 2018-01-18 18:41:15 +01:00
Jérémy Lecour 25a47173b8 create server status parent directory if missing 2018-01-18 17:17:34 +01:00
Jérémy Lecour 86c2bcb398 apache: /usr/share/scripts exists 2018-01-18 17:08:29 +01:00
Jérémy Lecour 1b5cb850fb evocheck: add tags 2018-01-18 17:05:51 +01:00
Victor LABORIE a8f7a7748e unbound: retrieve list of root DNS servers 2018-01-11 12:41:40 +01:00