710 commits

Author	SHA1	Message	Date
Jérémy Lecour	61cd2b7428	minifirewall: upstream release 22.04	2022-04-28 19:14:31 +02:00
Jérémy Lecour	a53159c93b	minifirewall: compatibility with "legacy" version of minifirewall	2022-04-28 12:40:02 +02:00
Jérémy Lecour	805a8ecb3a	etc-git: use "ansible-commit" to efficiently commit all available repositories (including /etc inside LXC) from Ansible	2022-04-27 14:22:59 +02:00
Jérémy Lecour	381a71aca1	dump-server-state: upstream release 22.04.3	2022-04-26 18:21:42 +02:00
Jérémy Lecour	55356857b2	dump-server-state: upstream release 22.04.2	2022-04-26 09:56:49 +02:00
Jérémy Lecour	daa54cac8f	evocheck: upstream release 22.04.1	2022-04-26 09:56:49 +02:00
Jérémy Lecour	5935d9d4a3	evocheck: upstream release 22.04	2022-04-25 09:58:07 +02:00
Jérémy Lecour	58909bc395	vrrpd: Store sysctl values in specific file	2022-04-22 09:32:37 +02:00
Jérémy Lecour	a5bae6645e	dump-server-state: upstream release 22.04.1	2022-04-20 11:07:20 +02:00
Jérémy Dubois	9161fae0c4	openvpn: use a local copy of files instead of cloning an external git repository	2022-04-14 16:34:43 +02:00
Jérémy Dubois	4bf14b9a22	munin: Add possibility to install local plugins, and install dhcp_pool plugin	2022-04-14 10:45:24 +02:00
Ludovic Poujol	959d6a8579	redis : Activate overcommit sysctl	2022-04-12 11:27:46 +02:00
Jérémy Lecour	84178d6b24	Tomcat 9 by default with Debian 11	2022-04-08 11:57:35 +02:00
Jérémy Dubois	5b2fecb49c	Make evocommit fully compatible with OpenBSD	2022-04-07 10:18:08 +02:00
Jérémy Lecour	e71201ab46	dump-server-state: upstream release 22.04	2022-04-03 11:18:43 +02:00
Jérémy Dubois	726735d269	etc-git : Remount /usr in rw for git gc in in /usr/share/scripts/	2022-04-01 15:47:44 +02:00
Jérémy Dubois	6434adcc62	nagios-nrpe: Add a check dhcp_pool	2022-03-31 16:01:23 +02:00
Jérémy Lecour	ed6ca9a85a	minifirewall: upstream release 22.03.5	2022-03-30 22:45:13 +02:00
Mathieu Trossevin	5dc6a1d36b	etc-git: Commit changes to /etc in containers	2022-03-30 16:33:00 +02:00
Jérémy Lecour	31c2629d31	minifirewall: configure proxy/backup/sysctl values	2022-03-30 09:42:56 +02:00
Mathieu Trossevin	20abe0e09a	postfix: Skip milters after amavis (in packmail) ... Otherwise opendkim will sign local mails twice AND sign external mails (pretending to be) from local domains as if they were local mails.	2022-03-29 16:06:12 +02:00
Jérémy Lecour	75459baa35	dump-server-state: upstream release 22.03.10	2022-03-29 09:11:35 +02:00
Jérémy Lecour	3feacd0c6d	update CHANGELOG	2022-03-28 13:28:48 +02:00
Jérémy Lecour	54bf9c1854	evolinux-base: rename backup-server-state to dump-server-state	2022-03-27 09:18:15 +02:00
Jérémy Lecour	85d429295f	minifirewall: tail template follows symlinks	2022-03-25 18:12:24 +01:00
Jérémy Lecour	bbc1bae437	minifirewall: upstream release 22.03.4	2022-03-25 14:57:10 +01:00
Jérémy Dubois	d2fa14fb4f	backup-server-state: release 22.03.5	2022-03-24 18:15:56 +01:00
Jérémy Dubois	42782b7f3d	evolinux-base: fix show_help in backup-server-state.sh ... * --uname and --no-uname options were not in help * --services and --no-services were in help whereas --systemctl and --no-systemctl are used in options parsing	2022-03-24 17:57:58 +01:00
Mathieu Trossevin	1646cc99bf	redis: Remount /usr with RW when adding nagios plugin	2022-03-23 13:55:54 +01:00
Jérémy Dubois	b4f83e54d0	openvpn: use a subnet topology instead of the net30 default topology	2022-03-23 10:46:17 +01:00
Jérémy Dubois	c2f6ff5249	evocheck: upstream release 22.03.1	2022-03-22 11:03:26 +01:00
Jérémy Lecour	5895f5a99b	minifirewall: upstream release 22.03.3	2022-03-21 14:35:20 +01:00
Jérémy Lecour	e7594c6c86	evolinux-base: backup-server-state release 22.03.2	2022-03-21 11:32:08 +01:00
Mathieu Trossevin	444bd72944	generate-ldif: Correct generated entries for php-fpm in containers	2022-03-17 17:36:35 +01:00
Jérémy Lecour	fb41c81e99	backup-server-state: release 22.03.2 ... update documentation for --dpkg-full vs. --dpkg-status	2022-03-17 10:45:44 +01:00
Jérémy Lecour	8a9faa0250	* minifirewall: upstream release 22.03.2	2022-03-16 23:49:34 +01:00
Jérémy Lecour	545226f6f6	evocheck: upstream release 22.03	2022-03-15 23:25:15 +01:00
Jérémy Lecour	ba90203f21	minifirewall: upstream release 22.03.1 and use includes directory	2022-03-15 23:07:33 +01:00
Ludovic Poujol	17f884b04a	evolinux-base: Add non-free repos & install non-free firmware on dedicated hardware	2022-03-15 11:35:20 +01:00
Ludovic Poujol	913e6d96e8	generate-ldif: Add services check for bkctld	2022-03-15 10:53:16 +01:00
Jérémy Lecour	a733e2794f	evolinux-base: backup-server-state release 22.03	2022-03-08 16:49:53 +01:00
Mathieu Trossevin	9c84e95182	Repair keepalived role	2022-03-02 16:23:01 +01:00
Jérémy Lecour	e5dc503cfd	Release 22.03	2022-03-02 09:42:12 +01:00
Jérémy Lecour	270d03b6a6	evolinx-users: optimize sudo configuration	2022-03-02 09:40:52 +01:00
Jérémy Lecour	1dc4d0e133	redis: always install check_redis_instances	2022-03-01 14:04:05 +01:00
Jérémy Lecour	c8ef7e9b75	redis: check_redis_instances tolerates absence of instances	2022-03-01 14:02:22 +01:00
Jérémy Lecour	d9e95218ce	apt_hold_packages: broadcast message with wall, if present	2022-02-24 11:49:12 +01:00
Ludovic Poujol	39949ea921	generate-ldif: Add support for php-fpm in containers	2022-02-21 11:31:00 +01:00
Ludovic Poujol	e79141d2d2	lxc: Fail if /var is nosuid	2022-02-17 16:25:20 +01:00
Jérémy Lecour	799466788f	lxc-php: preliminary support for PHP 8.1 container	2022-02-17 14:50:21 +01:00
Jérémy Dubois	f3c443d076	openvpn: now check that openvpn has been restarted since last certificates renewal	2022-02-15 15:52:21 +01:00
Ludovic Poujol	9995fca35d	varnish: update munin plugin to work with recent varnish versions	2022-02-08 16:16:24 +01:00
Ludovic Poujol	a2f73bb7df	elasticsearch: Use /etc/elasticsearch/jvm.options.d/evolinux instead of default /etc/elasticsearch/jvm.options	2022-02-07 15:18:46 +01:00
Jérémy Dubois	981128dc17	openvpn: make it compatible with OpenBSD and add some improvements	2022-02-03 18:35:16 +01:00
Jérémy Lecour	0cbdda840d	Explicit permissions for systemd overrides	2022-02-03 14:18:20 +01:00
Jérémy Lecour	9e27d9707b	kvm-host: add missing default value	2022-02-03 14:16:45 +01:00
Jérémy Lecour	5153b88d01	evolinux-base: option to bypass raid-related tasks	2022-02-03 14:15:33 +01:00
Jérémy Lecour	3dd78fbf7e	Release 22.01.3	2022-01-31 11:57:21 +01:00
Jérémy Lecour	fcb0b8c80f	backup-server-state: 22.01.3	2022-01-28 16:27:39 +01:00
Jérémy Lecour	cd26081add	rbenv: install Ruby 3.1.0 by default	2022-01-28 16:27:20 +01:00
Jérémy Lecour	bb30402df3	Release 22.01.2	2022-01-27 14:12:40 +01:00
Jérémy Lecour	6ccd0ea440	Release 22.01.1	2022-01-27 14:04:41 +01:00
Jérémy Lecour	2849039fad	remount-usr: use findmnt to find if usr is a readonly partition	2022-01-27 11:21:19 +01:00
Jérémy Lecour	80f8a94798	evolinux-base: many improvements for backup-server-state script	2022-01-27 10:29:08 +01:00
Jérémy Lecour	bff8fcfebb	apt: upgrade packages after all the configuration is done	2022-01-25 18:25:47 +01:00
Jérémy Lecour	0e34d4cd4b	Merge remote-tracking branch 'origin/bullseye-swap-top' into unstable	2022-01-25 15:15:05 +01:00
Jérémy Lecour	1f4ee2de79	Prepare CHANGELOG for 22.01 release	2022-01-25 15:00:03 +01:00
Mathieu Trossevin	1902c40c3c	lxc-php: Fix config for opensmtpd on bullseye	2022-01-25 11:57:41 +01:00
Jérémy Dubois	3822696db6	Update CHANGELOG for new openvpn role	2022-01-24 19:23:26 +01:00
Jérémy Lecour	ca1f465aaa	nodejs: default to version 16 LTS	2022-01-12 13:04:22 +01:00
Jérémy Lecour	ec346a42a5	munin: systemd override to unprotect home directory	2021-12-23 16:56:23 +01:00
Mathieu Trossevin	d3eef71127	nagios-nrpe: Fix check_nfsserver for buster and bullseye ... From buster onward the nfs server doesn't run NFSv4 over UDP (it is out of spec, see RFC 7530). As such the check broke as it attempt to check the availability of NFSv4 over UDP. Right now the check doesn't check for NFSv2 over UDP as it would need to check if it exist first, as on bullseye it isn't supported by default anymore.	2021-11-24 11:11:39 +01:00
Jérémy Lecour	e4bb0c6f55	filebeat/metricbeat: version 7.x y default	2021-11-12 10:07:43 +01:00
Jérémy Lecour	039c740ef3	mysql: add evomariabackup 21.11	2021-11-01 10:16:55 +01:00
Jérémy Lecour	6cf8195744	evolinux-base: fix alert5.service dependency syntax	2021-10-29 07:52:38 +02:00
Jérémy Lecour	dcfea674a4	listupgrade: old-kernel-removal version 21.10	2021-10-25 14:23:52 +02:00
Jérémy Lecour	646a7b1813	evocheck: package install is not supported anymore	2021-10-25 10:08:40 +02:00
Jérémy Lecour	dd53c01027	evocheck: upstream release 21.10.4	2021-10-25 10:02:12 +02:00
Jérémy Dubois	90acb99c2a	nagios-nrpe: new check influxdb	2021-10-22 14:51:57 +02:00
Jérémy Lecour	ca28df1b75	evocheck: upstream release 21.10.3	2021-10-22 13:57:56 +02:00
Jérémy Lecour	1706361e8d	evocheck: upstream release 21.10.2	2021-10-22 13:43:43 +02:00
Jérémy Lecour	dcdde5f7f6	evocheck: upstream release 21.10.1	2021-10-21 17:32:11 +02:00
Ludovic Poujol	9b3bb39bd0	mysql : Create a default ~root/.my.cnf for compatibility reasons	2021-10-20 16:31:05 +02:00
Ludovic Poujol	b120a92203	evolinux-users + nagios-nrpe: Add support for php-fpm80 in lxc	2021-10-20 15:59:20 +02:00
Ludovic Poujol	a9d0d0958d	packweb-apache : Support php 8.0	2021-10-18 18:30:47 +02:00
Jérémy Dubois	d38119eb0f	nginx : fix variable name and debug ... nginx_minimal defined the nginx_package_name_default variable which was not used instead of the nginx_default_package_name variable also fixed debug which was reversed, and add another one to be sure which mode is used	2021-10-18 15:01:59 +02:00
Jérémy Lecour	bbd16dc5b4	evolinux-base: add script backup-server-state	2021-10-15 10:50:42 +02:00
Ludovic Poujol	73d6979e72	Various changes on mongodb (support 5.0) + fixes & compatibility ... * mongodb: Deny the install on Debian 11 « Bullseye » when the version is unsupported * mongodb: Support version 5.0 (for buster) * mongodb: Allow to specify a mongodb version for buster & bullseye * mongodb: Add missing remount-usr for munin plugins	2021-10-05 15:49:47 +02:00
Jérémy Lecour	7d63f20336	evoacme: exclude renewal-hooks directory from cron	2021-10-05 08:28:47 +02:00
Jérémy Lecour	7b14296503	etc-git: optimize maintenance tasks ... * manage commits with an optimized shell script instead of many slow Ansible tasks * centralize cron jobs in dedicated crontab	2021-10-02 12:50:01 +02:00
Jérémy Lecour	e089ddf091	evocheck: upstream release 21.10	2021-10-01 18:27:44 +02:00
Jérémy Lecour	b293cf2cf9	Install python 2 or 3 libraries according to running python version	2021-09-30 17:05:10 +02:00
Jérémy Lecour	5cbfda8f52	docker-host: install additional dependencies	2021-09-30 12:09:11 +02:00
Jérémy Lecour	9b479f9c05	evolinux-base: logs are rotated with dateext by default	2021-09-30 12:07:02 +02:00
Jérémy Lecour	4a035d248d	evocheck: upstream release 21.09	2021-09-30 10:45:07 +02:00
Jérémy Lecour	3de5de5304	mysql: improve Bullseye compatibility	2021-09-30 10:13:11 +02:00
Jérémy Lecour	0eb7332a34	php: enforce Debian version with assert instead of fail	2021-09-29 16:43:55 +02:00
Jérémy Lecour	73efee9caa	etc-git: purge old .git/index.lock (default: True)	2021-09-23 14:45:24 +02:00
Jérémy Lecour	1d55965527	logstash: no more dependency on Java	2021-09-21 14:43:58 +02:00
Jérémy Lecour	8233264d2a	logstash: logging to syslog is configurable (default: True)	2021-09-21 14:43:58 +02:00