Commit graph

1319 commits

Author SHA1 Message Date
Jérémy Lecour 03c53433d6 Add minifirewal_status and check_minifirewall
minifirewall_status returns "started" on stdout and exit code 0,
or "stopped" on stdout and exit code 1. The state of minifirewall
is determined by looking for common iptables rules applied by
minifirewall.

check_minifirewall is an NRPE plugin for minifirewall. It returns:
* 0 (OK) if the firewall state is consistent with its configuration
(from the alert5 script)
* 1 (WARNING) if the firewall is started but alert5 is not configured
properly
* 2 (CRITICAL) if the firewall is not running but it should be.
2018-04-06 09:52:18 +02:00
Jérémy Lecour c2ed10e2e4 CHANGELOG cleanup 2018-04-06 09:26:51 +02:00
Jérémy Lecour 8b9c8288c9 Merge branch 'lpoujol-node-yarn' into unstable 2018-04-06 09:23:42 +02:00
Jérémy Lecour b68d0765ed update CHANGELOG 2018-04-06 09:22:05 +02:00
Jérémy Lecour 2c9acfb12d nodejs: extract yarn tasks in a file 2018-04-06 09:19:36 +02:00
Jérémy Lecour beeb7de0af mongodb: rename logrotate script 2018-04-05 18:43:29 +02:00
Jérémy Lecour 3b8c57faee mongodb: allow unauthenticated packages for Jessie 2018-04-05 15:23:12 +02:00
Jérémy Lecour 786f25731e Update CHANGELOG 2018-04-04 23:46:50 +02:00
Jérémy Lecour 7195742af9 remine: add tags 2018-04-04 23:36:00 +02:00
Jérémy Lecour 8abed3e258 Use "command" instead of "shell" where possible 2018-04-04 23:36:00 +02:00
Jérémy Lecour 4382ce24f6 add "become" when missing 2018-04-04 23:22:17 +02:00
Jérémy Lecour 3cbb65ea8d whitespaces 2018-04-04 23:21:31 +02:00
Bruno TATU 20d3afb74a verify if opendkim-tools and opendkim is installed 2018-04-04 16:16:54 +02:00
Ludovic Poujol 6a14904227 nodejs: install yarn optionaly with var (default: ) 2018-04-04 10:15:51 +02:00
Jérémy Lecour 3af7d2d679 php: fix condition statement position 2018-04-04 10:01:17 +02:00
Jérémy Lecour 3038ad8fdc webapps: fix task indentation 2018-04-04 10:01:10 +02:00
Jérémy Lecour ce11c39ce4 evoacme: add a symlink for vhosts with old path 2018-03-30 18:45:26 +02:00
Jérémy Lecour 7385e2894e evoacme: fix version comparison for evoacme 2018-03-30 18:43:03 +02:00
Ludovic Poujol e27c96fd2f rbenv: Correct the changes done in 24aeff2e about become user issues 2018-03-30 15:34:45 +02:00
Jérémy Lecour ad3383a510 Install ncurses-term for additional terminal types
When connecting to a server from urxvt, the session behaves like one
with xterm.
2018-03-29 16:42:33 +02:00
Jérémy Lecour f5339568ed nginx: don't debug variables in verbosity 0 2018-03-28 21:12:24 +02:00
Daniel Jakots 3d35f7f763 Remove unused files since 4a81d12 2018-03-28 09:52:38 -04:00
Daniel Jakots 44de2b84ec Add script to exclude a time slot from monitoring 2018-03-28 09:50:41 -04:00
Jérémy Lecour d9bf95e7b3 Merge branch 'improve-php' into unstable 2018-03-26 21:53:51 +02:00
Jérémy Lecour 690318e435 Update CHANGELOG for php changes 2018-03-26 21:53:32 +02:00
Jérémy Lecour 3d4733fc13 php: fix fpm custom file permissions 2018-03-26 21:52:46 +02:00
Jérémy Lecour d4da36ffa7 php: restart fpm if needed 2018-03-26 21:52:38 +02:00
Jérémy Lecour 1b4ea6e859 whitespaces 2018-03-26 21:52:22 +02:00
Ludovic Poujol 24aeff2e72 rbenv: fix become user issue with copy tasks 2018-03-26 09:53:54 +02:00
Romain Dessort 521b196ba3 memcached: add Nagios check for memcached (evoqa #3498) 2018-03-22 15:15:24 -04:00
Victor LABORIE d2207b60e1 Add an evolix symlink for prefixed roles
* permit to use evolix/role_name with working include_role
2018-03-20 13:32:38 +01:00
Ludovic Poujol 4c36fd075c webapps/evoadmin-web: Fail if variable evoadmin_contact_email isn't defined 2018-03-19 16:48:12 +01:00
Jérémy Lecour 98486fd771 etc-git: add tags for Ansible 2018-03-16 14:21:01 +01:00
Romain Dessort b92d697db1 Make commit tasks work on squeeze
On squeeze machines, the task fetching the user.email variable fails and
therefore git_config_user_email.config_value ansible variable is
undefined in the next task. I added a condition to handle this case.
2018-03-15 11:23:38 -04:00
Romain Dessort 236b65f54a Exclude postfix/spamd.cidr from git
This commit refer to evoqa #2748.
2018-03-15 11:23:38 -04:00
Ludovic Poujol 3c2443181b evolinux-base: Exec the firewall tasks sooner to avoid dependency issues 2018-03-15 12:04:35 +01:00
Romain Dessort 8c0fadb8fe Ensure munin plugins for Postfix are enabled
munin plugins for Postfix could be absent on some servers. This commit
fixes evoqa issue #2584.
2018-03-14 10:46:54 -04:00
Jérémy Lecour a12dca0b70 mysql/mysql-oracle: mysqltuner cron task is executable 2018-03-14 09:35:26 +01:00
Jérémy Lecour b81ef36f92 mysql: remount /usr (if needed) before creating scripts directory 2018-03-14 09:33:14 +01:00
Victor LABORIE 61ee8052e5 dovecot: update CHANGELOG 2018-03-13 10:25:45 +01:00
Victor LABORIE 5e3c33eb7a proftpd: update README and CHANGELOG 2018-03-13 10:25:26 +01:00
Jérémy Lecour ad4714856b mongodb: don't overwrite config by default 2018-03-13 09:40:37 +01:00
Jérémy Lecour 84924c38f4 evolinux-users: create .profile for evomaintenance if missing 2018-03-13 09:37:27 +01:00
Ludovic Poujol 94118b2536 Apache: Don't turn on modsec if it's available on default vhost 2018-03-12 11:00:57 +01:00
Victor LABORIE 389d1c7395 Merge branch 'postfix-dovecot-handle-plus-sign' into unstable 2018-03-09 17:38:07 +01:00
Benoît S. 1558bfe8c3 Patch dovecot deliver to handle + sign in address.
This is mandatory to handle the plus sign in email address like
foo+bar@example.com
2018-03-08 14:59:37 +01:00
Benoît S. a4a3569630 Show the certificate path when exiting with an error 2018-03-06 10:34:55 +01:00
Benoît S. cdaad871b3 Be sure to check the exit code of certbot
If we use set -e but no -o pipefail with a pipe, the last command exit code is
used by set -e.

certbot | grep -v something

If the grep exit with a non-zero exit code, set -e stop the execution of the
script.  We don't care about that grep, so we now use the PIPESTATUS.
2018-03-05 14:46:49 +01:00
Ludovic Poujol 77cc1cce7d mysql-oracle: Add repo.mysql.com to minifw if needed 2018-03-02 15:49:47 +01:00
Ludovic Poujol 3488ec758d mysql-oracle: Add missing remount-usr 2018-03-02 15:22:36 +01:00