Commit graph

710 commits

Author SHA1 Message Date
Jérémy Lecour ef1472cbba logstash: elastic_stack_version = 7.x 2021-09-21 14:43:58 +02:00
Ludovic Poujol f75354bb84 generate-ldif: detect mdadm 2021-09-16 17:26:58 +02:00
Ludovic Poujol de4d814d74 generate-ldif: detect hardware raid card 2021-09-16 17:17:32 +02:00
Ludovic Poujol 6a2cd59e6d nagios-nrpe + evolinux-users: new check ipmi 2021-09-16 16:48:03 +02:00
Ludovic Poujol 51fd2337f0 nagios-nrpe + evolinux-users: new check raid (soft + hard) 2021-09-16 16:40:57 +02:00
Ludovic Poujol fa0c668cec evolinux-base: install freeipmi by default on dedicated hw 2021-09-16 15:58:10 +02:00
Jérémy Lecour 2b549af7d9 evolinux-base: split dpkg logrotate configuration 2021-09-09 10:23:53 +02:00
Jérémy Lecour e429f7aecb squid: add *.o.lencr.org to default whitelist 2021-09-07 14:01:52 +02:00
Jérémy Lecour e45ee59801 mysql: script "mysql-queries-killer.sh" to kill MySQL queries 2021-08-30 14:05:15 +02:00
Jérémy Lecour 65750d2aa6 evomaintenance: extract a config.yyml tasks file 2021-08-30 09:24:57 +02:00
Jérémy Lecour ecba57ad75 evolinux-base: install molly-guard by default 2021-08-25 17:57:38 +02:00
Jérémy Lecour 2c7380240c nagios-nrpe + evolinux-users: new checks for bkctld 2021-08-25 11:56:26 +02:00
Jérémy Lecour 066baf3538 Revert "bullseye-detect: this role is obsolete, Debian 11 has been fully released"
All checks were successful
continuous-integration/drone/push Build is passing
This reverts commit c9f25f4638.
2021-08-17 15:33:06 +02:00
Jérémy Lecour ad457dd7ba apt: use the new security repository for Bullseye
All checks were successful
continuous-integration/drone/push Build is passing
2021-08-16 14:12:31 +02:00
Jérémy Lecour 969a5bce7d apt: remove workaround for Evolix public repositories with Debian 11
All checks were successful
continuous-integration/drone/push Build is passing
2021-08-16 13:50:53 +02:00
Jérémy Lecour d186e21239 evoadmin-web: simpler PHP packages lists 2021-08-16 13:49:13 +02:00
Jérémy Lecour c9f25f4638 bullseye-detect: this role is obsolete, Debian 11 has been fully released 2021-08-16 13:47:33 +02:00
Jérémy Lecour 139b342fbd certbot: silence letsencrypt deprecation warnings 2021-07-20 17:19:57 +02:00
Jérémy Lecour bf49ec8df5 mysql: script "mysql_connections" to display a compact list of connections
All checks were successful
continuous-integration/drone/push Build is passing
2021-07-08 15:10:35 +02:00
Jérémy Lecour 32b5efa30e evocheck: upstream release 21.07
All checks were successful
continuous-integration/drone/push Build is passing
2021-07-07 15:20:24 +02:00
Jérémy Lecour 29ec7bdcf2 Remove embedded GPG keys only if legacy keyring is present
Some checks failed
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
2021-07-04 22:08:47 +02:00
Jérémy Lecour ffd7d0e504 evolinux-base: alert5 comes after the network 2021-07-04 22:07:51 +02:00
Jérémy Lecour 4167b6d2a9 fix CHANGELOG 2021-07-03 09:10:22 +02:00
Jérémy Lecour 3721c2ab38 squid: improve default whitelist 2021-07-03 08:56:23 +02:00
Jérémy Lecour 5905751a82 squid: must be started in foreground mode for systemd 2021-07-02 23:45:42 +02:00
Jérémy Lecour a5658b7f26 packweb-apache: install phpMyAdmin from buster-backports 2021-07-02 21:18:06 +02:00
Jérémy Lecour 5c1ae6ed0c spamassassin: change dependency on evomaintenance
Fail with an error if evomaintenance config is missing
instead of trying to install a package that doesn't exist anymore.
2021-07-02 21:16:43 +02:00
Jérémy Lecour 8a784c39ab mongodb: create munin plugins directory if missing 2021-07-02 21:16:40 +02:00
Jérémy Lecour 9c8dd743c8 Use python3 packages on Debian 11 and later 2021-07-02 21:16:15 +02:00
Jérémy Lecour 6b87ead5b4 update changelog 2021-07-02 21:16:12 +02:00
Jérémy Lecour e8a8e85819 redis: instance service for Debian 11 2021-07-02 21:13:42 +02:00
Jérémy Lecour c5ab0c0ff9 squid: remove obsolete variable on Squid 4 2021-07-02 21:13:05 +02:00
Jérémy Lecour f673ea85d1 Force Debian version to buster for Evolix repository 2021-07-02 21:12:33 +02:00
Jérémy Lecour 2c441f176a mysql: mariadb-client-10.5 on Debian 11 2021-07-02 21:11:27 +02:00
Jérémy Lecour c5bb8f06ae mysql: use python3 with Debian 11 and later 2021-07-02 21:10:52 +02:00
Jérémy Lecour 51d4ec1bb2 php: remove php-gettext for 7.4 2021-07-02 21:10:04 +02:00
Jérémy Lecour 2f68ae5339 Preliminary support for Bullseye 2021-07-02 20:58:09 +02:00
Jérémy Lecour 90cbd17f9b listupgrade: crontab is configurable 2021-07-02 14:01:46 +02:00
Jérémy Lecour b0b24744d6 listupgrade: upstream release 21.06.3 2021-07-02 13:59:42 +02:00
Jérémy Lecour 11813c31a4 certbot: add script for manual deploy hooks execution
All checks were successful
continuous-integration/drone/push Build is passing
2021-06-30 14:29:03 +02:00
Jérémy Lecour 51462c724c certbot: sync_remote excludes itself 2021-06-30 07:39:57 +02:00
Jérémy Lecour 2ed1dac16b Release 10.6.0
All checks were successful
continuous-integration/drone/pr Build is passing
continuous-integration/drone/push Build is passing
2021-06-28 15:56:19 +02:00
Jérémy Lecour 0fe0244116 Update Galaxy metadata (company, platforms and galaxy_tags) 2021-06-28 15:26:28 +02:00
Jérémy Lecour 1890a79702 elasticsearch: inline YAML formatting of seed_hosts and initial_master_nodes
All checks were successful
continuous-integration/drone/push Build is passing
2021-06-23 22:38:24 +02:00
Jérémy Lecour 4c1ef1bd56 elasticsearch: recent versiond don't depend on external JRE 2021-06-23 22:38:24 +02:00
Jérémy Lecour 6190c66445 listupgrade: upstream release 21.06.2
All checks were successful
continuous-integration/drone/push Build is passing
2021-06-20 12:06:49 +02:00
Jérémy Lecour dd32ab5688 listupgrade: upstream release 21.06.1 2021-06-20 10:32:16 +02:00
Jérémy Lecour dbc853a815 listupgrade: upstream release 21.06
All checks were successful
continuous-integration/drone/push Build is passing
2021-06-17 18:23:13 +02:00
Jérémy Lecour 4c7fed77c4 squid: add Yarn apt repository in default whitelist
All checks were successful
continuous-integration/drone/push Build is passing
2021-06-17 18:19:20 +02:00
Jérémy Lecour fe9b7ee5f7 evomaintenance: upstream release 0.6.4
All checks were successful
continuous-integration/drone/push Build is passing
2021-06-17 10:57:07 +02:00
Jérémy Lecour 3d715bae35 kvm-host: replace the "kvm-tools" package with scripts deployed by Ansible
All checks were successful
continuous-integration/drone/push Build is passing
2021-06-10 11:09:48 +02:00
Jérémy Lecour ca40fad186 nodejs: change GPG key name
All checks were successful
continuous-integration/drone/push Build is passing
2021-06-08 11:19:26 +02:00
Jérémy Lecour 856d11aced nodejs: update apt cache before installing the package 2021-06-07 13:03:18 +02:00
Jérémy Lecour 2c47871fa7 Add Elastic GPG key to kibana, filebeat, logstash, metricbeat roles
All checks were successful
continuous-integration/drone/push Build is passing
2021-05-25 15:10:04 +02:00
Jérémy Lecour 06b8314211 evolinux-base: fix motd lookup path 2021-05-19 17:02:20 +02:00
Jérémy Lecour 02451f1e67 add default (useless) value for file lookup
All checks were successful
continuous-integration/drone/push Build is passing
2021-05-19 14:35:08 +02:00
Jérémy Lecour 4d83f25ae6 fix pipefail option for shell invocations
All checks were successful
continuous-integration/drone/push Build is passing
2021-05-18 14:04:54 +02:00
Jérémy Lecour cae0de17df listupgrade: fix wget error + shellcheck cleanup
All checks were successful
continuous-integration/drone/push Build is passing
2021-05-17 23:05:18 +02:00
Jérémy Lecour 56af68e5b3 listupgrade: print error if wget fails
All checks were successful
continuous-integration/drone/push Build is passing
2021-05-17 12:19:57 +02:00
Jérémy Lecour d823c8116a update CHANGELOG
All checks were successful
continuous-integration/drone/push Build is passing
2021-05-09 23:21:21 +02:00
Jérémy Lecour e5e4dc95fa packweb-apache: install phpMyAdmin from buster-backports 2021-05-04 14:57:18 +02:00
Jérémy Lecour e7ddf9d46c Use 'loop' syntax instead of 'with_list' 2021-05-04 14:31:22 +02:00
Jérémy Lecour 485ec39674 Use 'loop' syntax instead of 'with_nested' 2021-05-04 14:29:50 +02:00
Jérémy Lecour 07fd6451e1 Use 'loop' syntax instead of 'with_dict' 2021-05-04 14:20:53 +02:00
Jérémy Lecour 5138065059 Use 'loop' syntax instead of 'with_items' 2021-05-04 14:19:18 +02:00
Jérémy Lecour debc4a82ca Use 'loop' syntax instead of 'with_first_found'
All checks were successful
continuous-integration/drone/push Build is passing
2021-05-04 13:39:47 +02:00
Jérémy Lecour a7971abb04 apt: store keys in /etc/apt/trusted.gpg.d in ascii format 2021-05-03 12:02:31 +02:00
Jérémy Lecour cc6acdbf34 certbot: sync_remote.sh is configurable
All checks were successful
continuous-integration/drone/push Build is passing
2021-05-03 11:25:24 +02:00
Jérémy Lecour 6eaeb90f6e ldap: fix edge cases where passwords were not set/get properly
All checks were successful
continuous-integration/drone/push Build is passing
2021-05-02 23:28:09 +02:00
Jérémy Lecour 43c726e86a spamassassin: change dependency on evomaintenance
All checks were successful
continuous-integration/drone/push Build is passing
Fail with an error if evomaintenance config is missing
instead of trying to install a package that doesn't exist anymore.
2021-05-02 01:24:03 +02:00
Jérémy Lecour 920cb7eaeb update changelog
All checks were successful
continuous-integration/drone/push Build is passing
2021-05-01 16:51:20 +02:00
Jérémy Lecour 5d79c31dc3 kvm-host: add migrate-vm script
All checks were successful
continuous-integration/drone/push Build is passing
2021-04-28 15:53:38 +02:00
Jérémy Lecour 94a5d7daa2 mysql: variable to disable myadd script overwrite (default: True)
All checks were successful
continuous-integration/drone/push Build is passing
2021-04-23 14:59:29 +02:00
Jérémy Lecour eab68545fe evolinux-base: add default motd template
All checks were successful
continuous-integration/drone/push Build is passing
2021-04-23 11:41:27 +02:00
Ludovic Poujol 3457b14fed ntpd: Add leapfile configuration setting to ntpd on debian 10+
All checks were successful
continuous-integration/drone/push Build is passing
2021-04-21 17:22:45 +02:00
Ludovic Poujol d56c545183 apache: new variable for mpm mode (+ updated default config accordingly)
All checks were successful
continuous-integration/drone/push Build is passing
Also, itk package will only be installed if required
2021-04-19 17:35:49 +02:00
Jérémy Lecour 5e0ca0e3ff Release 10.5.1
All checks were successful
continuous-integration/drone/pr Build is passing
continuous-integration/drone/push Build is passing
2021-04-13 15:56:09 +02:00
Ludovic Poujol 0f8804a8ab etc-git: commit in /usr/share/scripts when there's an active repository
All checks were successful
continuous-integration/drone/push Build is passing
2021-04-08 16:07:49 +02:00
Jérémy Lecour a5a2c6e335 haproxy: dedicated internal address/binding (without SSL)
All checks were successful
continuous-integration/drone/push Build is passing
2021-04-06 14:41:03 +02:00
Jérémy Lecour 2686eea2b1 Release 10.5.0
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2021-04-01 15:38:10 +02:00
Jérémy Lecour 7041a70eeb elasticsearch: log rotation is more readable/maintainable 2021-04-01 15:36:34 +02:00
Ludovic Poujol f2ebe2d878 lxc-php: Add php 7.4 support
All checks were successful
continuous-integration/drone/push Build is passing
2021-03-31 10:57:29 +02:00
Jérémy Lecour d7d057e435 filebeat: fix Ansible syntax error
All checks were successful
continuous-integration/drone/push Build is passing
2021-03-23 16:29:03 +01:00
Jérémy Lecour 2593784ab0 metricbeat: new variables to configure SSL mode 2021-03-23 16:28:14 +01:00
Jérémy Lecour 3a3cf1395e listupgrade: update script from upstream 2021-03-23 16:27:15 +01:00
Jérémy Lecour 5a4bd28eaf nagios-nrpe: libfcgi-client-perl is not available before Debian 10
All checks were successful
continuous-integration/drone/push Build is passing
2021-03-18 15:16:23 +01:00
Jérémy Lecour 5582d6e724 redis: socket/pid directories have the correct permissions 2021-03-18 15:15:39 +01:00
Patrick Marchand e5511eafc6 Revert changes to bind log path from apparmor fix
All checks were successful
continuous-integration/drone/push Build is passing
I realised it wasnt the best idea to change the path we are used to using just for this, so I overwrite the apparmor configuration instead.
2021-03-09 16:58:14 -05:00
Patrick Marchand ffd3ff97f1 Fix conflict in changelog
All checks were successful
continuous-integration/drone/push Build is passing
2021-03-09 12:28:01 -05:00
Patrick Marchand 7da22e243e Changed log directory for bind9
It is now /var/log/named, this is what debian 10 and apparmor expect by default. This fixes the bind9 service crashing at start.
2021-03-09 12:25:15 -05:00
Jérémy Lecour 3103af67a7 redis: escape password in Munin configuration
All checks were successful
continuous-integration/drone/push Build is passing
2021-03-09 18:24:15 +01:00
Ludovic Poujol 3cb18faf28 evolinux-users: Add sudo rights for nagios for multi-php lxc
All checks were successful
continuous-integration/drone/push Build is passing
2021-03-04 16:48:55 +01:00
Jérémy Lecour 1f4079b1b3 haproxy: possible admin access with login/pass
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-27 18:43:59 +01:00
Ludovic Poujol df9db31725 deny requests to ^/evolinux_fpm_status-.*
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-22 16:06:57 +01:00
Jérémy Lecour 3709808fdc redis: use /run instead or /var/run
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-18 16:42:54 +01:00
Ludovic Poujol ddd3e1aa06 nagios-nrpe: new script check_phpfpm_multi
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-17 17:23:11 +01:00
Jérémy Lecour f862ffc42e beats packages can be upgraded to latest (default: False)
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-16 16:35:25 +01:00
Jérémy Lecour 622bbca4c2 apache: rotate logs daily instead of weekly
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-12 18:05:47 +01:00
Ludovic Poujol b0cb14eb5b * nagios-nrpe: update check_phpfpm_status.pl & install perl dependencies
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-12 15:22:57 +01:00
Jérémy Lecour 2b328dc764 postfix: add smtpd_relay_restrictions in configuration
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-12 14:10:04 +01:00
Jérémy Lecour 17f1a1a55e update changelog
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-11 12:09:32 +01:00
Jérémy Lecour dde2672715 nginx: no more "minimal" mode, but the package remains customizable.
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-04 11:31:36 +01:00
Jérémy Lecour cff309ff41 nginx: add access to server status on default VHost 2021-02-04 11:30:32 +01:00
Jérémy Lecour 5588ed6009 minifirewall: change some defaults
Only SSH (22) is open on privilegied IPs
Remove volatile.debian.org domain
2021-02-04 10:55:31 +01:00
Jérémy Lecour 024d30ea43 evoacme: upstream release 21.01
All checks were successful
continuous-integration/drone/push Build is passing
2021-01-07 19:16:06 +01:00
Jérémy Lecour 0e32e0d2aa certbot: use a fixed 1.9.0 version of the certbot-auto script (renamed "letsencrypt-auto")
All checks were successful
continuous-integration/drone/push Build is passing
2021-01-07 18:55:44 +01:00
Jérémy Lecour 8c54fd8c16 apache: new variables for logrotate + server-status
All checks were successful
continuous-integration/drone/push Build is passing
2021-01-05 17:47:56 +01:00
Jérémy Lecour 19da5ea1f7 Release 10.4.0
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2020-12-24 14:00:37 +01:00
Jérémy Lecour 7ec0748383 certbot: detect domains if missing
All checks were successful
continuous-integration/drone/push Build is passing
2020-12-24 13:56:43 +01:00
Jérémy Lecour 442e9bcda8 cerbot: hook to sync certificates to remote servers 2020-12-24 13:56:43 +01:00
Jérémy Lecour 4dbd1b0bee certbot: disable auth for Let's Encrypt challenge 2020-12-24 10:33:48 +01:00
Jérémy Lecour 1d56e002b4 nginx: change from "nginx_status-XXX" to "server-status-XXX"
All checks were successful
continuous-integration/drone/push Build is passing
2020-12-23 15:53:36 +01:00
Jérémy Lecour 66a6e67de2 varnish: variable for jail configuration
All checks were successful
continuous-integration/drone/push Build is passing
2020-12-21 23:33:14 +01:00
Jérémy Lecour 1922b51fbe Release 10.3.0
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2020-12-21 16:03:49 +01:00
Jérémy Lecour 67ce8de85e varnish: custom reload script is now useless
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2020-12-20 23:25:34 +01:00
Jérémy Lecour 3e72d6961c varnish: no threadpool delay by default 2020-12-20 23:03:37 +01:00
Jérémy Lecour 8861169a04 varnish: config file name is configurable 2020-12-20 23:03:10 +01:00
Jérémy Lecour 81fbd98a5f evolinux-users: improve uid/login checks
All checks were successful
continuous-integration/drone/push Build is passing
2020-12-17 15:25:48 +01:00
Jérémy Lecour 0b528f15da tomcat-instance: fail if uid already exists
All checks were successful
continuous-integration/drone/push Build is passing
2020-12-17 08:06:44 +01:00
Jérémy Lecour 5b2d3b09d0 Create system users for vmail (dovecot) and evoadmin 2020-12-17 08:05:16 +01:00
Jérémy Lecour 3c4986275c evocheck: upstream release 20.12
All checks were successful
continuous-integration/drone/push Build is passing
2020-12-08 11:07:42 +01:00
Jérémy Lecour 772bce8c0b dovecot: vmail uid/gid are configurable 2020-12-07 17:26:45 +01:00
Jérémy Lecour 4d6f88f0f4 minifirewall: add variables to force upgrade the script and the config (default: False)
All checks were successful
continuous-integration/drone/push Build is passing
2020-12-07 17:23:37 +01:00
Jérémy Lecour 98f798b9fb cerbot: parse HAProxy config file only if HAProxy is found
All checks were successful
continuous-integration/drone/push Build is passing
2020-12-03 17:26:16 +01:00
Jérémy Lecour fc71bb5945 minifirewall: upstream release 20.12 2020-12-01 22:57:13 +01:00
Jérémy Lecour 9aa24f4cde minifirewall: Docker support
All checks were successful
continuous-integration/drone/push Build is passing
2020-12-01 22:47:38 +01:00
Jérémy Lecour b6817cb62c evoacme: upstream release 20.12
All checks were successful
continuous-integration/drone/push Build is passing
2020-12-01 22:27:05 +01:00
Jérémy Lecour 18ac1e7279 redis: check maxmemory in NRPE check
All checks were successful
continuous-integration/drone/push Build is passing
If "maxmemory" is set and "maxmemory-policy" is missing or set to 
"noeviction" then we enforce the "maxmemory" limit
2020-12-01 19:02:42 +01:00
Jérémy Lecour 86d59cbb5f mysql: install save_mysql_processlist script 2020-11-24 13:59:04 +01:00
Ludovic Poujol 1d8b7c3bea apt: disable APT Periodic
This interfere with our usual workflow (listupgrade)

Note : Using 0 instead of false is intentional, The value is used by the
apt-daily script that except a "0" to disable itself.
2020-11-24 11:19:18 +01:00
Jérémy Lecour 592030ee9a evoacme: variable to disable Debian version check (default: False) 2020-11-21 09:59:10 +01:00
Jérémy Lecour b43d0f3629 evoacme: upstream release 20.11 2020-11-19 21:21:07 +01:00
Ludovic Poujol 15154169cf kvm-host: Add drbd role dependency (toggleable with kvm_install_drbd)
All checks were successful
continuous-integration/drone/push Build is passing
2020-10-30 11:56:24 +01:00
Mathieu Trossevin 71f85a5863
Merge branch 'unstable' into packweb-multi-php2
Some checks failed
continuous-integration/drone/pr Build is failing
2020-10-20 17:41:36 +02:00
Mathieu Trossevin 2ea4745f93
lxc-php: Update changelog
Some checks failed
continuous-integration/drone/pr Build is failing
2020-10-20 17:27:34 +02:00
Ludovic Poujol c8d4da532f evoacme: Don't ignore hooks with . in the name (ignore when it's ".disable")
All checks were successful
continuous-integration/drone/push Build is passing
2020-10-20 10:58:51 +02:00
Ludovic Poujol 9e5d041210 dovecot: Update munin plugin & configure it 2020-10-20 10:56:41 +02:00
Jérémy Lecour d80461e39a redis: variable to force use of port 6379 in instances mode
All checks were successful
continuous-integration/drone/push Build is passing
2020-10-19 16:03:58 +02:00
Ludovic Poujol 929f258bf8 nextcloud: New role
All checks were successful
continuous-integration/drone/push Build is passing
2020-10-02 16:51:05 +02:00
Jérémy Lecour 8b48552e36 Release 10.2.0
Some checks failed
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
2020-09-17 14:06:46 +02:00
Jérémy Lecour 3e67d92fd3 certbot: an empty change shouldn't raise an exception
All checks were successful
continuous-integration/drone/push Build is passing
2020-09-16 12:07:27 +02:00
Jérémy Lecour 48174ad618 evoacme: remount /usr if necessary
All checks were successful
continuous-integration/drone/push Build is passing
2020-09-14 11:31:47 +02:00
Jérémy Lecour b818c348c2 evoacme: remove Debian 9 support
All checks were successful
continuous-integration/drone/push Build is passing
2020-09-11 11:09:45 +02:00
Ludovic Poujol f9d6fe0ad4 evolinux-base: install wget
All checks were successful
continuous-integration/drone/push Build is passing
2020-09-10 14:59:19 +02:00
Jérémy Lecour c7151a8de8 certbot: fix "no-self-upgrade" option
All checks were successful
continuous-integration/drone/push Build is passing
2020-09-08 10:02:15 +02:00
Jérémy Lecour 37ed5dd393 evolinux-base: swappiness is customizable
All checks were successful
continuous-integration/drone/push Build is passing
2020-09-01 14:08:39 +02:00
Jérémy Lecour afa0fd35c8 Change default public SSH/SFTP port from 2222 to 22222
All checks were successful
continuous-integration/drone/push Build is passing
2020-08-28 18:32:47 +02:00
Jérémy Lecour d0622c6b20 tomcat: root directory owner/group are configurable
All checks were successful
continuous-integration/drone/push Build is passing
2020-08-27 17:12:34 +02:00
Jérémy Lecour 7413a242a8 Release 10.1.0
All checks were successful
continuous-integration/drone/pr Build is passing
continuous-integration/drone/push Build is passing
2020-08-21 14:50:17 +02:00
Jérémy Lecour 1e6d6cdd13 sort lines in CHANGELOG 2020-08-21 14:03:41 +02:00
Jérémy Lecour a60deb276b evoacme: upstream release 20.08 2020-08-21 14:01:06 +02:00
Jérémy Lecour 8ea1bac000 evoacme: update for new certbot role
* certbot is installed by the certbot role
* Apache/Nginx configuration is delegated to the certbot role
* No more "acme" user, everything is done with "root".
2020-08-21 13:36:24 +02:00
Benoît S. a8095b1c36 Updated CHANGELOG.md with recent merges
All checks were successful
continuous-integration/drone/push Build is passing
2020-08-20 15:49:22 +09:00
Jérémy Lecour 57ac4e467c metricbeat: allow using a template
All checks were successful
continuous-integration/drone/push Build is passing
2020-08-18 14:01:09 +02:00
Jérémy Lecour ce35f7292f filebeat: allow using a template 2020-08-18 14:00:46 +02:00
Jérémy Lecour d3e69eeeb5 certbot: fix haproxy hook (ssl cert directory detection)
All checks were successful
continuous-integration/drone/push Build is passing
It was matching additional parameters.
Now it matches on the first argument after "crt"
2020-07-21 10:46:01 +02:00
Jérémy Lecour 21b8104654 elasticsearch: configure cluster with seed hosts and initial masters
All checks were successful
continuous-integration/drone/push Build is passing
2020-07-19 11:40:59 +02:00
Jérémy Lecour 9270852349 elasticsearch: set tmpdir before datadir
All checks were successful
continuous-integration/drone/push Build is passing
2020-07-19 11:30:00 +02:00
Jérémy Lecour 8aa7f6cf33 mongodb: install custom munin plugins
All checks were successful
continuous-integration/drone/push Build is passing
2020-07-17 13:48:18 +02:00
Jérémy Lecour 9bdd5ad9e7 haproxy: rotate logs with date extension and immediate compression
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-22 19:02:29 +02:00
Jérémy Lecour 977c28c720 varnish: fix start command when multiple addresses are present
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-16 13:51:07 +02:00
Jérémy Lecour ce7468816f haproxy: deport SSL tuning to Mozilla SSL generator
All checks were successful
continuous-integration/drone/push Build is passing
There are too many combinations and they change every so often.
It's better to direct the user to the generator to have a good 
configuration.
2020-06-15 22:47:08 +02:00
Jérémy Lecour 30cdbae981 haproxy: split stats variables 2020-06-15 22:45:22 +02:00
Jérémy Lecour 011761eb8f haproxy: add deny_ips file to reject connections
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-14 23:28:29 +02:00
Jérémy Lecour 8465743973 haproxy: add some comments to default config 2020-06-14 23:27:50 +02:00
Jérémy Lecour 4bf5b1daa6 nginx: read server-status values before changing the config
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-14 12:49:10 +02:00
Jérémy Lecour f47af9f54f haproxy: preconfigure SSL with defaults
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-14 12:37:04 +02:00
Jérémy Lecour 7f54b8ab60 haproxy: adapt backports installed package list to distibution 2020-06-14 12:37:04 +02:00
Jérémy Lecour e5d4ea3c18 nginx: make default vhost configurable 2020-06-14 12:37:04 +02:00
Jérémy Lecour ce0d61bcbd certbot: detect HAProxy cert directory 2020-06-14 12:37:04 +02:00
Jérémy Lecour a8887aaa8e update changelog
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-09 11:45:19 +02:00
Jérémy Lecour 4c71ea2012 haproxy: enable stats frontend with access lists
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-09 11:41:33 +02:00
Patrick Marchand c9daa8ba35 evobackup-client: Fix ssh connection test in zzz_evobackup.sh
All checks were successful
continuous-integration/drone/push Build is passing
When I made the ssh key name a variable and defaulted it to id_ed25519,
I forgot to change the hardcoded value for the ssh test in
evobackup-client/templates/zzz_evobackup.default.sh.j2
2020-06-08 17:22:18 -04:00
Jérémy Lecour 1ade990526 mongodb: fix logrotate patterm on Debian buster
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-05 11:02:54 +02:00
Jérémy Lecour 7f0931510f evoacme: upstream release 20.06.1
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-05 11:01:42 +02:00
Ludovic Poujol ebffccae59 lxc-php: Do --no-install-recommends for ssmtp/opensmtpd
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-05 11:01:22 +02:00
Ludovic Poujol 186f3d90b9 lxc-php: Install opensmtpd as intended 2020-06-05 10:57:49 +02:00
Ludovic Poujol 0dfb92360f php: Don't disable putenv() by default in PHP settings
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-04 11:52:04 +02:00
Ludovic Poujol 90704dc712 lxc-php: Don't disable putenv() by default in PHP settings 2020-06-04 11:51:25 +02:00
Ludovic Poujol ead0b7fd88 lxc-php: Install php-sqlite by default
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-04 11:42:17 +02:00
Ludovic Poujol 8c883c44dd php: Install php-sqlite by default 2020-06-04 11:39:51 +02:00
Ludovic Poujol c7d456471b packweb-apache: Install zip & unzip by default 2020-06-04 11:34:26 +02:00
Jérémy Lecour 3bd0a4ffb3 certbot: restore compatibility with old Nginx 2020-06-04 11:22:58 +02:00
Jérémy Lecour 9aed38b637 certbot: install certbot dependencies non-interactively for jessie 2020-06-04 11:22:58 +02:00
Jérémy Lecour 1d5a30b144 evoacme: upstream release 20.06
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-03 12:09:58 +02:00
Patrick Marchand c8cd119a18 Merge pull request 'Make it possible to setup mysql replication' (#102) from mysql_replication into unstable
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-02 17:31:13 +02:00
Jérémy Lecour 4cf438c8ff redis: raise an error is port 6379 is used in "instance" mode
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-02 11:22:56 +02:00
Jérémy Lecour 8a87fecbe4 redis: new syntax for match filter
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-02 11:00:06 +02:00
Jérémy Lecour 47d11308ba redis: create sudoers file if missing 2020-06-02 10:59:51 +02:00
Jérémy Lecour 86cab2ab94 haproxy: chroot and socket path are configurable 2020-06-02 10:58:10 +02:00
Patrick Marchand 8c1e40c1a9 Add option to make a mysql install read only
Some checks failed
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
Rebased on unstable
2020-06-01 12:03:23 -04:00
Ludovic Poujol 09371b095f packweb-apache: Don't turn on mod-evasive emails by default
All checks were successful
continuous-integration/drone/push Build is passing
2020-05-18 12:03:34 +02:00
Jérémy Lecour 4016387ca8 Release 10.0.0
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2020-05-13 11:20:45 +02:00
Jérémy Lecour ac7ee86a9c minifirewall: /bin/true command doesn't report "changed" anymore
All checks were successful
continuous-integration/drone/push Build is passing
2020-05-11 15:23:52 +02:00
Jérémy Lecour 849ec405d5 evocheck: upstream version 20.04.4
All checks were successful
continuous-integration/drone/push Build is passing
2020-04-28 16:00:45 +02:00
Jérémy Lecour 57e5791728 networkd-to-ifconfig: add variables for configuration by variables
All checks were successful
continuous-integration/drone/push Build is passing
2020-04-26 18:39:25 +02:00
Jérémy Lecour 2f77100b47 evocheck: upstream version 20.04.3
All checks were successful
continuous-integration/drone/push Build is passing
2020-04-26 10:54:49 +02:00
Jérémy Lecour d013a65cf6 Merge branch 'unstable' into lpoujol/better-multiphp
Some checks failed
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
2020-04-17 12:23:56 +02:00
Jérémy Lecour 6764418e75 evocheck: upstream release 20.04.2
All checks were successful
continuous-integration/drone/push Build is passing
2020-04-15 18:01:55 +02:00
Jérémy Lecour 257a3476f1 evocheck: upstream release 20.04.1
All checks were successful
continuous-integration/drone/push Build is passing
2020-04-12 22:30:07 +02:00