Commit graph

600 commits

Author SHA1 Message Date
Victor LABORIE 00a8947da1 tomcat-instance: default rng set to /dev/urandom 2017-07-13 13:51:15 +02:00
Jérémy Lecour da974b6cb0 merge nginx roles 2017-07-13 09:59:37 +02:00
Jérémy Lecour ec9e8d3d8b merge haproxy roles 2017-07-13 09:47:29 +02:00
Gregory Colpart f78e93e0ff we want always packages ssl-cert et ca-certificates (probably will go to serveur-base package, we will see) 2017-07-13 02:41:12 +02:00
Gregory Colpart ea4ec27f08 Oops, last commit was broken. I think "when: TAG" need always to be boolean, then I patch for that. 2017-07-13 02:20:28 +02:00
Gregory Colpart fcfea428b7 pet commit: remove not ecessary params 2017-07-13 01:18:25 +02:00
Jérémy Lecour 3c2656b531 fail2ban doesn't seem to like line breaks 2017-07-12 13:48:54 +02:00
Jérémy Lecour a044aea42a squid: add log_path 2017-07-12 13:35:05 +02:00
Jérémy Lecour bc99227259 Better squid/squid3 whitelist and reload 2017-07-12 12:17:33 +02:00
Jérémy Lecour 0c5117dd4e Jenkins: the repository key is stored locally 2017-07-12 12:10:14 +02:00
Victor LABORIE eedeab6be2 tomcat-instance: possibility to surcharge java path 2017-07-12 10:57:16 +02:00
Jérémy Lecour e23edbd5f4 this have nothing to do in the previous commit 2017-07-12 10:24:09 +02:00
Jérémy Lecour ce37282feb Effectively change the timezone 2017-07-12 10:23:21 +02:00
Jérémy Lecour a318e6065c Disable new vim defaults 2017-07-12 10:15:47 +02:00
Jérémy Lecour 6514f64a1f Better english 2017-07-12 09:34:46 +02:00
Jérémy Lecour 1cdbcaa5fb Install packages for Stretch and later 2017-07-11 18:43:22 +02:00
Gregory Colpart 12b5d9a97a Fix #2207 : set -L 15 for Cron 2017-07-11 00:42:38 +02:00
Gregory Colpart eab03993d0 improvment, don't touch to /etc/profile and instead use /etc/profile.d/evolinux.sh 2017-07-11 00:29:06 +02:00
Gregory Colpart feee230885 use stretch-updates 2017-07-10 22:49:38 +02:00
Gregory Colpart 45c729c5d7 Use mirror.evolix.org 2017-07-10 22:49:11 +02:00
Gregory Colpart 05b7588953 no more apt-listchanges in Stretch 2017-07-10 22:17:58 +02:00
Gregory Colpart 0d79db4ed5 Improve dpkg pre / post - invoke 2017-07-10 21:52:57 +02:00
Gregory Colpart 8505ef5b5e exit 0 -> true 2017-07-09 19:59:12 +02:00
Gregory Colpart 0d0937aa4e Use "false" instead of "0" to be more explicit 2017-07-09 19:59:12 +02:00
Gregory Colpart 5a28681700 easy deny User-Agent 2017-07-09 19:59:12 +02:00
Victor LABORIE 61685dfa40 tomcat-instance: fix default vars 2017-07-07 12:12:05 +02:00
Victor LABORIE 4237a4fb21 tomcat-instance: move handler in tasks 2017-07-07 11:35:20 +02:00
Jérémy Lecour 9abe3128f4 Merge branch 'packweb' into unstable 2017-07-06 17:15:27 +02:00
Jérémy Lecour 0fdc1565a8 Default site CSS slightly beautified 2017-07-06 17:14:29 +02:00
Jérémy Lecour 553025d199 enable server-status in default site 2017-07-06 17:14:29 +02:00
Jérémy Lecour 3d77f086ed Disable random URL for server-status (probably temporary) 2017-07-06 17:14:28 +02:00
Jérémy Lecour 242c005f6d Fix default web page
* split 80/443
* use modern authorization syntax
* reorganize the VHost file
2017-07-06 17:14:28 +02:00
Jérémy Lecour 34f6354a9e random suffices for phpmyadmin abnd server-status with apg 2017-07-06 17:14:28 +02:00
Jérémy Lecour 0e0bc1cbbd Split default vhost into nginx ad apache roles 2017-07-06 17:14:28 +02:00
Jérémy Lecour de37aac243 Don't overwrite default apache vhost 2017-07-06 17:14:27 +02:00
Jérémy Lecour 57f6b45570 whitespaces 2017-07-06 17:14:27 +02:00
Jérémy Lecour e99145231b remove useless file 2017-07-06 17:14:27 +02:00
Jérémy Lecour 666dc7ba2a evoadmin: append group instead of replacing 2017-07-06 17:14:27 +02:00
Jérémy Lecour e11b2e5a38 Use evoadmin_host for the TLS certificate 2017-07-06 17:14:26 +02:00
Jérémy Lecour 82d3ee7355 Merge branch 'fix-check-proxy' into unstable 2017-07-06 17:13:49 +02:00
Victor LABORIE c97eacbaf3 tomcat: disable default tomcat7 service 2017-07-06 12:42:08 +02:00
Victor LABORIE 6c6723ea30 fail2ban: fix ignoreip 2017-07-05 12:07:22 +02:00
Victor LABORIE 8d4c1f4af5 fail2ban: custom ignoreip + add tags 2017-07-05 12:01:07 +02:00
Equipe Evolix f2d32c4fde Merge branch 'update-check-elasticsearch' into 'unstable'
Use the _cat api

See merge request !7
2017-07-05 11:44:59 +02:00
Jérémy Lecour 50a792d6ba Use the _cat api
The "_cat" API is better for non-human consumers
2017-07-05 11:41:02 +02:00
Jérémy Lecour d3795150a7 Let's use a variable, with a default value (non-internal) 2017-07-05 11:38:47 +02:00
Jérémy Lecour 58f458c90d Don't check debian.org for check_proxy
debian.org is not reliable enough, let's use an internal ipv4-only domain
2017-07-05 11:33:29 +02:00
Jérémy Lecour 39dc5ddc6c Merge branch 'packweb-apache' into unstable 2017-07-03 18:27:43 +02:00
Jérémy Lecour b774a82146 gitignore cleanup 2017-07-03 18:24:13 +02:00
Jérémy Lecour bae8961e99 packweb/evoadmin: cleanup
* extracted tasks
* more variables
* more templates
* less bugs
2017-07-03 18:23:39 +02:00