710 commits

Author	SHA1	Message	Date
Jérémy Dubois	f3c443d076	openvpn: now check that openvpn has been restarted since last certificates renewal	2022-02-15 15:52:21 +01:00
Ludovic Poujol	9995fca35d	varnish: update munin plugin to work with recent varnish versions	2022-02-08 16:16:24 +01:00
Ludovic Poujol	a2f73bb7df	elasticsearch: Use /etc/elasticsearch/jvm.options.d/evolinux instead of default /etc/elasticsearch/jvm.options	2022-02-07 15:18:46 +01:00
Jérémy Dubois	981128dc17	openvpn: make it compatible with OpenBSD and add some improvements	2022-02-03 18:35:16 +01:00
Jérémy Lecour	0cbdda840d	Explicit permissions for systemd overrides	2022-02-03 14:18:20 +01:00
Jérémy Lecour	9e27d9707b	kvm-host: add missing default value	2022-02-03 14:16:45 +01:00
Jérémy Lecour	5153b88d01	evolinux-base: option to bypass raid-related tasks	2022-02-03 14:15:33 +01:00
Jérémy Lecour	3dd78fbf7e	Release 22.01.3	2022-01-31 11:57:21 +01:00
Jérémy Lecour	fcb0b8c80f	backup-server-state: 22.01.3	2022-01-28 16:27:39 +01:00
Jérémy Lecour	cd26081add	rbenv: install Ruby 3.1.0 by default	2022-01-28 16:27:20 +01:00
Jérémy Lecour	bb30402df3	Release 22.01.2	2022-01-27 14:12:40 +01:00
Jérémy Lecour	6ccd0ea440	Release 22.01.1	2022-01-27 14:04:41 +01:00
Jérémy Lecour	2849039fad	remount-usr: use findmnt to find if usr is a readonly partition	2022-01-27 11:21:19 +01:00
Jérémy Lecour	80f8a94798	evolinux-base: many improvements for backup-server-state script	2022-01-27 10:29:08 +01:00
Jérémy Lecour	bff8fcfebb	apt: upgrade packages after all the configuration is done	2022-01-25 18:25:47 +01:00
Jérémy Lecour	0e34d4cd4b	Merge remote-tracking branch 'origin/bullseye-swap-top' into unstable	2022-01-25 15:15:05 +01:00
Jérémy Lecour	1f4ee2de79	Prepare CHANGELOG for 22.01 release	2022-01-25 15:00:03 +01:00
Mathieu Trossevin	1902c40c3c	lxc-php: Fix config for opensmtpd on bullseye	2022-01-25 11:57:41 +01:00
Jérémy Dubois	3822696db6	Update CHANGELOG for new openvpn role	2022-01-24 19:23:26 +01:00
Jérémy Lecour	ca1f465aaa	nodejs: default to version 16 LTS	2022-01-12 13:04:22 +01:00
Jérémy Lecour	ec346a42a5	munin: systemd override to unprotect home directory	2021-12-23 16:56:23 +01:00
Mathieu Trossevin	d3eef71127	nagios-nrpe: Fix check_nfsserver for buster and bullseye ... From buster onward the nfs server doesn't run NFSv4 over UDP (it is out of spec, see RFC 7530). As such the check broke as it attempt to check the availability of NFSv4 over UDP. Right now the check doesn't check for NFSv2 over UDP as it would need to check if it exist first, as on bullseye it isn't supported by default anymore.	2021-11-24 11:11:39 +01:00
Jérémy Lecour	e4bb0c6f55	filebeat/metricbeat: version 7.x y default	2021-11-12 10:07:43 +01:00
Jérémy Lecour	039c740ef3	mysql: add evomariabackup 21.11	2021-11-01 10:16:55 +01:00
Jérémy Lecour	6cf8195744	evolinux-base: fix alert5.service dependency syntax	2021-10-29 07:52:38 +02:00
Jérémy Lecour	dcfea674a4	listupgrade: old-kernel-removal version 21.10	2021-10-25 14:23:52 +02:00
Jérémy Lecour	646a7b1813	evocheck: package install is not supported anymore	2021-10-25 10:08:40 +02:00
Jérémy Lecour	dd53c01027	evocheck: upstream release 21.10.4	2021-10-25 10:02:12 +02:00
Jérémy Dubois	90acb99c2a	nagios-nrpe: new check influxdb	2021-10-22 14:51:57 +02:00
Jérémy Lecour	ca28df1b75	evocheck: upstream release 21.10.3	2021-10-22 13:57:56 +02:00
Jérémy Lecour	1706361e8d	evocheck: upstream release 21.10.2	2021-10-22 13:43:43 +02:00
Jérémy Lecour	dcdde5f7f6	evocheck: upstream release 21.10.1	2021-10-21 17:32:11 +02:00
Ludovic Poujol	9b3bb39bd0	mysql : Create a default ~root/.my.cnf for compatibility reasons	2021-10-20 16:31:05 +02:00
Ludovic Poujol	b120a92203	evolinux-users + nagios-nrpe: Add support for php-fpm80 in lxc	2021-10-20 15:59:20 +02:00
Ludovic Poujol	a9d0d0958d	packweb-apache : Support php 8.0	2021-10-18 18:30:47 +02:00
Jérémy Dubois	d38119eb0f	nginx : fix variable name and debug ... nginx_minimal defined the nginx_package_name_default variable which was not used instead of the nginx_default_package_name variable also fixed debug which was reversed, and add another one to be sure which mode is used	2021-10-18 15:01:59 +02:00
Jérémy Lecour	bbd16dc5b4	evolinux-base: add script backup-server-state	2021-10-15 10:50:42 +02:00
Ludovic Poujol	73d6979e72	Various changes on mongodb (support 5.0) + fixes & compatibility ... * mongodb: Deny the install on Debian 11 « Bullseye » when the version is unsupported * mongodb: Support version 5.0 (for buster) * mongodb: Allow to specify a mongodb version for buster & bullseye * mongodb: Add missing remount-usr for munin plugins	2021-10-05 15:49:47 +02:00
Jérémy Lecour	7d63f20336	evoacme: exclude renewal-hooks directory from cron	2021-10-05 08:28:47 +02:00
Jérémy Lecour	7b14296503	etc-git: optimize maintenance tasks ... * manage commits with an optimized shell script instead of many slow Ansible tasks * centralize cron jobs in dedicated crontab	2021-10-02 12:50:01 +02:00
Jérémy Lecour	e089ddf091	evocheck: upstream release 21.10	2021-10-01 18:27:44 +02:00
Jérémy Lecour	b293cf2cf9	Install python 2 or 3 libraries according to running python version	2021-09-30 17:05:10 +02:00
Jérémy Lecour	5cbfda8f52	docker-host: install additional dependencies	2021-09-30 12:09:11 +02:00
Jérémy Lecour	9b479f9c05	evolinux-base: logs are rotated with dateext by default	2021-09-30 12:07:02 +02:00
Jérémy Lecour	4a035d248d	evocheck: upstream release 21.09	2021-09-30 10:45:07 +02:00
Jérémy Lecour	3de5de5304	mysql: improve Bullseye compatibility	2021-09-30 10:13:11 +02:00
Jérémy Lecour	0eb7332a34	php: enforce Debian version with assert instead of fail	2021-09-29 16:43:55 +02:00
Jérémy Lecour	73efee9caa	etc-git: purge old .git/index.lock (default: True)	2021-09-23 14:45:24 +02:00
Jérémy Lecour	1d55965527	logstash: no more dependency on Java	2021-09-21 14:43:58 +02:00
Jérémy Lecour	8233264d2a	logstash: logging to syslog is configurable (default: True)	2021-09-21 14:43:58 +02:00
Jérémy Lecour	ef1472cbba	logstash: elastic_stack_version = 7.x	2021-09-21 14:43:58 +02:00
Ludovic Poujol	f75354bb84	generate-ldif: detect mdadm	2021-09-16 17:26:58 +02:00
Ludovic Poujol	de4d814d74	generate-ldif: detect hardware raid card	2021-09-16 17:17:32 +02:00
Ludovic Poujol	6a2cd59e6d	nagios-nrpe + evolinux-users: new check ipmi	2021-09-16 16:48:03 +02:00
Ludovic Poujol	51fd2337f0	nagios-nrpe + evolinux-users: new check raid (soft + hard)	2021-09-16 16:40:57 +02:00
Ludovic Poujol	fa0c668cec	evolinux-base: install freeipmi by default on dedicated hw	2021-09-16 15:58:10 +02:00
Jérémy Lecour	2b549af7d9	evolinux-base: split dpkg logrotate configuration	2021-09-09 10:23:53 +02:00
Jérémy Lecour	e429f7aecb	squid: add *.o.lencr.org to default whitelist	2021-09-07 14:01:52 +02:00
Jérémy Lecour	e45ee59801	mysql: script "mysql-queries-killer.sh" to kill MySQL queries	2021-08-30 14:05:15 +02:00
Jérémy Lecour	65750d2aa6	evomaintenance: extract a config.yyml tasks file	2021-08-30 09:24:57 +02:00
Jérémy Lecour	ecba57ad75	evolinux-base: install molly-guard by default	2021-08-25 17:57:38 +02:00
Jérémy Lecour	2c7380240c	nagios-nrpe + evolinux-users: new checks for bkctld	2021-08-25 11:56:26 +02:00
Jérémy Lecour	066baf3538	Revert "bullseye-detect: this role is obsolete, Debian 11 has been fully released" ... This reverts commit c9f25f4638.	2021-08-17 15:33:06 +02:00
Jérémy Lecour	ad457dd7ba	apt: use the new security repository for Bullseye	2021-08-16 14:12:31 +02:00
Jérémy Lecour	969a5bce7d	apt: remove workaround for Evolix public repositories with Debian 11	2021-08-16 13:50:53 +02:00
Jérémy Lecour	d186e21239	evoadmin-web: simpler PHP packages lists	2021-08-16 13:49:13 +02:00
Jérémy Lecour	c9f25f4638	bullseye-detect: this role is obsolete, Debian 11 has been fully released	2021-08-16 13:47:33 +02:00
Jérémy Lecour	139b342fbd	certbot: silence letsencrypt deprecation warnings	2021-07-20 17:19:57 +02:00
Jérémy Lecour	bf49ec8df5	mysql: script "mysql_connections" to display a compact list of connections	2021-07-08 15:10:35 +02:00
Jérémy Lecour	32b5efa30e	evocheck: upstream release 21.07	2021-07-07 15:20:24 +02:00
Jérémy Lecour	29ec7bdcf2	Remove embedded GPG keys only if legacy keyring is present	2021-07-04 22:08:47 +02:00
Jérémy Lecour	ffd7d0e504	evolinux-base: alert5 comes after the network	2021-07-04 22:07:51 +02:00
Jérémy Lecour	4167b6d2a9	fix CHANGELOG	2021-07-03 09:10:22 +02:00
Jérémy Lecour	3721c2ab38	squid: improve default whitelist	2021-07-03 08:56:23 +02:00
Jérémy Lecour	5905751a82	squid: must be started in foreground mode for systemd	2021-07-02 23:45:42 +02:00
Jérémy Lecour	a5658b7f26	packweb-apache: install phpMyAdmin from buster-backports	2021-07-02 21:18:06 +02:00
Jérémy Lecour	5c1ae6ed0c	spamassassin: change dependency on evomaintenance ... Fail with an error if evomaintenance config is missing instead of trying to install a package that doesn't exist anymore.	2021-07-02 21:16:43 +02:00
Jérémy Lecour	8a784c39ab	mongodb: create munin plugins directory if missing	2021-07-02 21:16:40 +02:00
Jérémy Lecour	9c8dd743c8	Use python3 packages on Debian 11 and later	2021-07-02 21:16:15 +02:00
Jérémy Lecour	6b87ead5b4	update changelog	2021-07-02 21:16:12 +02:00
Jérémy Lecour	e8a8e85819	redis: instance service for Debian 11	2021-07-02 21:13:42 +02:00
Jérémy Lecour	c5ab0c0ff9	squid: remove obsolete variable on Squid 4	2021-07-02 21:13:05 +02:00
Jérémy Lecour	f673ea85d1	Force Debian version to buster for Evolix repository	2021-07-02 21:12:33 +02:00
Jérémy Lecour	2c441f176a	mysql: mariadb-client-10.5 on Debian 11	2021-07-02 21:11:27 +02:00
Jérémy Lecour	c5bb8f06ae	mysql: use python3 with Debian 11 and later	2021-07-02 21:10:52 +02:00
Jérémy Lecour	51d4ec1bb2	php: remove php-gettext for 7.4	2021-07-02 21:10:04 +02:00
Jérémy Lecour	2f68ae5339	Preliminary support for Bullseye	2021-07-02 20:58:09 +02:00
Jérémy Lecour	90cbd17f9b	listupgrade: crontab is configurable	2021-07-02 14:01:46 +02:00
Jérémy Lecour	b0b24744d6	listupgrade: upstream release 21.06.3	2021-07-02 13:59:42 +02:00
Jérémy Lecour	11813c31a4	certbot: add script for manual deploy hooks execution	2021-06-30 14:29:03 +02:00
Jérémy Lecour	51462c724c	certbot: sync_remote excludes itself	2021-06-30 07:39:57 +02:00
Jérémy Lecour	2ed1dac16b	Release 10.6.0	2021-06-28 15:56:19 +02:00
Jérémy Lecour	0fe0244116	Update Galaxy metadata (company, platforms and galaxy_tags)	2021-06-28 15:26:28 +02:00
Jérémy Lecour	1890a79702	elasticsearch: inline YAML formatting of seed_hosts and initial_master_nodes	2021-06-23 22:38:24 +02:00
Jérémy Lecour	4c1ef1bd56	elasticsearch: recent versiond don't depend on external JRE	2021-06-23 22:38:24 +02:00
Jérémy Lecour	6190c66445	listupgrade: upstream release 21.06.2	2021-06-20 12:06:49 +02:00
Jérémy Lecour	dd32ab5688	listupgrade: upstream release 21.06.1	2021-06-20 10:32:16 +02:00
Jérémy Lecour	dbc853a815	listupgrade: upstream release 21.06	2021-06-17 18:23:13 +02:00
Jérémy Lecour	4c7fed77c4	squid: add Yarn apt repository in default whitelist	2021-06-17 18:19:20 +02:00
Jérémy Lecour	fe9b7ee5f7	evomaintenance: upstream release 0.6.4	2021-06-17 10:57:07 +02:00
Jérémy Lecour	3d715bae35	kvm-host: replace the "kvm-tools" package with scripts deployed by Ansible	2021-06-10 11:09:48 +02:00
Jérémy Lecour	ca40fad186	nodejs: change GPG key name	2021-06-08 11:19:26 +02:00
Jérémy Lecour	856d11aced	nodejs: update apt cache before installing the package	2021-06-07 13:03:18 +02:00
Jérémy Lecour	2c47871fa7	Add Elastic GPG key to kibana, filebeat, logstash, metricbeat roles	2021-05-25 15:10:04 +02:00
Jérémy Lecour	06b8314211	evolinux-base: fix motd lookup path	2021-05-19 17:02:20 +02:00
Jérémy Lecour	02451f1e67	add default (useless) value for file lookup	2021-05-19 14:35:08 +02:00
Jérémy Lecour	4d83f25ae6	fix pipefail option for shell invocations	2021-05-18 14:04:54 +02:00
Jérémy Lecour	cae0de17df	listupgrade: fix wget error + shellcheck cleanup	2021-05-17 23:05:18 +02:00
Jérémy Lecour	56af68e5b3	listupgrade: print error if wget fails	2021-05-17 12:19:57 +02:00
Jérémy Lecour	d823c8116a	update CHANGELOG	2021-05-09 23:21:21 +02:00
Jérémy Lecour	e5e4dc95fa	packweb-apache: install phpMyAdmin from buster-backports	2021-05-04 14:57:18 +02:00
Jérémy Lecour	e7ddf9d46c	Use 'loop' syntax instead of 'with_list'	2021-05-04 14:31:22 +02:00
Jérémy Lecour	485ec39674	Use 'loop' syntax instead of 'with_nested'	2021-05-04 14:29:50 +02:00
Jérémy Lecour	07fd6451e1	Use 'loop' syntax instead of 'with_dict'	2021-05-04 14:20:53 +02:00
Jérémy Lecour	5138065059	Use 'loop' syntax instead of 'with_items'	2021-05-04 14:19:18 +02:00
Jérémy Lecour	debc4a82ca	Use 'loop' syntax instead of 'with_first_found'	2021-05-04 13:39:47 +02:00
Jérémy Lecour	a7971abb04	apt: store keys in /etc/apt/trusted.gpg.d in ascii format	2021-05-03 12:02:31 +02:00
Jérémy Lecour	cc6acdbf34	certbot: sync_remote.sh is configurable	2021-05-03 11:25:24 +02:00
Jérémy Lecour	6eaeb90f6e	ldap: fix edge cases where passwords were not set/get properly	2021-05-02 23:28:09 +02:00
Jérémy Lecour	43c726e86a	spamassassin: change dependency on evomaintenance ... Fail with an error if evomaintenance config is missing instead of trying to install a package that doesn't exist anymore.	2021-05-02 01:24:03 +02:00
Jérémy Lecour	920cb7eaeb	update changelog	2021-05-01 16:51:20 +02:00
Jérémy Lecour	5d79c31dc3	kvm-host: add migrate-vm script	2021-04-28 15:53:38 +02:00
Jérémy Lecour	94a5d7daa2	mysql: variable to disable myadd script overwrite (default: True)	2021-04-23 14:59:29 +02:00
Jérémy Lecour	eab68545fe	evolinux-base: add default motd template	2021-04-23 11:41:27 +02:00
Ludovic Poujol	3457b14fed	ntpd: Add leapfile configuration setting to ntpd on debian 10+	2021-04-21 17:22:45 +02:00
Ludovic Poujol	d56c545183	apache: new variable for mpm mode (+ updated default config accordingly) ... Also, itk package will only be installed if required	2021-04-19 17:35:49 +02:00
Jérémy Lecour	5e0ca0e3ff	Release 10.5.1	2021-04-13 15:56:09 +02:00
Ludovic Poujol	0f8804a8ab	etc-git: commit in /usr/share/scripts when there's an active repository	2021-04-08 16:07:49 +02:00
Jérémy Lecour	a5a2c6e335	haproxy: dedicated internal address/binding (without SSL)	2021-04-06 14:41:03 +02:00
Jérémy Lecour	2686eea2b1	Release 10.5.0	2021-04-01 15:38:10 +02:00
Jérémy Lecour	7041a70eeb	elasticsearch: log rotation is more readable/maintainable	2021-04-01 15:36:34 +02:00
Ludovic Poujol	f2ebe2d878	lxc-php: Add php 7.4 support	2021-03-31 10:57:29 +02:00
Jérémy Lecour	d7d057e435	filebeat: fix Ansible syntax error	2021-03-23 16:29:03 +01:00
Jérémy Lecour	2593784ab0	metricbeat: new variables to configure SSL mode	2021-03-23 16:28:14 +01:00
Jérémy Lecour	3a3cf1395e	listupgrade: update script from upstream	2021-03-23 16:27:15 +01:00
Jérémy Lecour	5a4bd28eaf	nagios-nrpe: libfcgi-client-perl is not available before Debian 10	2021-03-18 15:16:23 +01:00
Jérémy Lecour	5582d6e724	redis: socket/pid directories have the correct permissions	2021-03-18 15:15:39 +01:00
Patrick Marchand	e5511eafc6	Revert changes to bind log path from apparmor fix ... I realised it wasnt the best idea to change the path we are used to using just for this, so I overwrite the apparmor configuration instead.	2021-03-09 16:58:14 -05:00
Patrick Marchand	ffd3ff97f1	Fix conflict in changelog	2021-03-09 12:28:01 -05:00
Patrick Marchand	7da22e243e	Changed log directory for bind9 ... It is now /var/log/named, this is what debian 10 and apparmor expect by default. This fixes the bind9 service crashing at start.	2021-03-09 12:25:15 -05:00
Jérémy Lecour	3103af67a7	redis: escape password in Munin configuration	2021-03-09 18:24:15 +01:00
Ludovic Poujol	3cb18faf28	evolinux-users: Add sudo rights for nagios for multi-php lxc	2021-03-04 16:48:55 +01:00
Jérémy Lecour	1f4079b1b3	haproxy: possible admin access with login/pass	2021-02-27 18:43:59 +01:00
Ludovic Poujol	df9db31725	deny requests to ^/evolinux_fpm_status-.*	2021-02-22 16:06:57 +01:00
Jérémy Lecour	3709808fdc	redis: use /run instead or /var/run	2021-02-18 16:42:54 +01:00
Ludovic Poujol	ddd3e1aa06	nagios-nrpe: new script check_phpfpm_multi	2021-02-17 17:23:11 +01:00
Jérémy Lecour	f862ffc42e	beats packages can be upgraded to latest (default: False)	2021-02-16 16:35:25 +01:00
Jérémy Lecour	622bbca4c2	apache: rotate logs daily instead of weekly	2021-02-12 18:05:47 +01:00
Ludovic Poujol	b0cb14eb5b	* nagios-nrpe: update check_phpfpm_status.pl & install perl dependencies	2021-02-12 15:22:57 +01:00
Jérémy Lecour	2b328dc764	postfix: add smtpd_relay_restrictions in configuration	2021-02-12 14:10:04 +01:00