Commit graph

2175 commits

Author SHA1 Message Date
Jérémy Lecour 23cd57e9aa metricbeat: allow using a template 2020-08-21 14:51:30 +02:00
Jérémy Lecour f68a79c022 filebeat: allow using a template 2020-08-21 14:51:30 +02:00
Ludovic Poujol 08cdd0cd18 mongodb: Fix issue introduced by 8aa7f6cf33 2020-08-21 14:51:30 +02:00
Jérémy Lecour f55e5be2e5 elasticsearch: keep native values 2020-08-21 14:51:30 +02:00
Jérémy Lecour c89d699518 certbot: fix haproxy hook (ssl cert directory detection)
It was matching additional parameters.
Now it matches on the first argument after "crt"
2020-08-21 14:51:30 +02:00
Jérémy Lecour 43122a5ea9 elasticsearch: configure cluster with seed hosts and initial masters 2020-08-21 14:51:30 +02:00
Jérémy Lecour f2f63eee36 elasticsearch: set tmpdir before datadir 2020-08-21 14:51:30 +02:00
Jérémy Lecour 1063d2dc1c elasticsearch is compatible with buster 2020-08-21 14:51:30 +02:00
Jérémy Lecour ec95f9538f mongodb: install custom munin plugins 2020-08-21 14:51:30 +02:00
Benoît S. 0c9b9b2628 evolinux-base: check_hpraid.cron.sh: Fixed wrong <<< usage 2020-08-21 14:51:30 +02:00
Benoît S. 63bfef13ee generate-ldif: Patched computerOS detection 2020-08-21 14:51:30 +02:00
Benoît S. 8b34bec22b generate-ldif: Skip some odd ethernet devices 2020-08-21 14:51:30 +02:00
Benoît S. 5101547242 generate-ldif: Add NVMe disk support 2020-08-21 14:51:30 +02:00
Benoît S. fd57b17980 evolinux-base: check_hpraid.cron.sh: Fixed wrong else
The logic was wrong, an else part was not necessary.
2020-08-21 14:51:30 +02:00
Benoît S. fe1756d22a evolinux-base: check_hpraid.cron.sh: Better logic and use mail
First step is to detect errors
Second step is to detect different state

Added mail comand to replace cron output
2020-08-21 14:51:30 +02:00
Jérémy Lecour 14d8eaac2f haproxy: rotate logs with date extension and immediate compression 2020-08-21 14:51:30 +02:00
Benoît S. 10385ecf4d nagios-nrpe: check_amavis: Update regex
I just installed a Debian Stretch with a pack mail and the check_amavis
was not checking the right regex.

Amavis is returning:
2.7.0 Ok, discarded, id=17556-09 - INFECTED: Eicar-Signature
So the regex should be:
-if ($result =~/2.7.0 Ok, discarded, id=[^,]+ - INFECTED: Eicar-Test-Signature/) {
+if ($result =~/2.7.0 Ok, discarded, id=\S+ - INFECTED: Eicar-Signature/) {
2020-08-21 14:51:30 +02:00
Benoît S. 952b0d4521 squid: Update regex for sa-update domains.
List of domains is like:

http://sa-update.dnswl.org/ weight=3

http://www.sa-update.pccc.com/ weight=5

http://sa-update.secnap.net/ weight=5

http://sa-update.space-pro.be/ weight=1

http://sa-update.ena.com/ weight=5

http://sa-update.razx.cloud/ weight=5

http://sa-update.fossies.org/ weight=1

http://sa-update.verein-clean.net/ weight=10

http://sa-update.bitwell.fi/ weight=5

http://sa-update.spamassassin.org/ weight=10

They all start sa-update.*, except for http://www.sa-update.pccc.com/.
In that case, we just match sa-update on the domain name.
2020-08-21 14:51:30 +02:00
Jérémy Lecour fa49369929 varnish: fix start command when multiple addresses are present 2020-08-21 14:51:30 +02:00
Benoît S. 8a4ae16d73 evolinux-base: check_hpraid cron: Add -p 2020-08-21 14:51:30 +02:00
Benoît S. 0dee37a7e6 evolinux-base/tasks/hardware.yml: Removed trailing whitespace 2020-08-21 14:51:30 +02:00
Benoît S. 215ecd6c2c evolinux-base: harware: Support HP gen >=10 RAID controller 2020-08-21 14:51:30 +02:00
Benoît S. 2dc7d22c13 nagios-nrpe: check_hpraid: Update known working RAID controllers 2020-08-21 14:51:30 +02:00
Benoît S. 725b7ae77b nagios-nrpe: Add check_hpraid in template 2020-08-21 14:51:30 +02:00
Benoît S. 4f3e809b77 nagios-nrpe: check_hpraid: Use printf for return lines 2020-08-21 14:51:30 +02:00
Benoît S. 0eecc1a4ca nagios-nrpe: check_hpraid: Fixed wrong grep in EXCLUDE_BATTERY 2020-08-21 14:51:30 +02:00
Benoît S. 2a065abf5f nagios-nrpe: check_hpraid: Fix wrong command name in examples 2020-08-21 14:51:30 +02:00
Benoît S. 39c8daacf4 nagios-nrpe: check_hpraid: Be sure that variables are bound 2020-08-21 14:51:30 +02:00
Jérémy Lecour d67be3cd91 haproxy: deport SSL tuning to Mozilla SSL generator
There are too many combinations and they change every so often.
It's better to direct the user to the generator to have a good 
configuration.
2020-08-21 14:51:30 +02:00
Jérémy Lecour 2a5195078c haproxy: split stats variables 2020-08-21 14:51:30 +02:00
Jérémy Lecour 4c4771b3ab haproxy: add deny_ips file to reject connections 2020-08-21 14:51:30 +02:00
Jérémy Lecour d26d501b2c haproxy: add some comments to default config 2020-08-21 14:51:30 +02:00
Jérémy Lecour 17b49ccc3d haproxy: simplify syntax fos stats section 2020-08-21 14:51:30 +02:00
Jérémy Lecour d9f8c4fc89 whitespaces 2020-08-21 14:51:30 +02:00
Jérémy Lecour c2ae3de929 nginx: read server-status values before changing the config 2020-08-21 14:51:30 +02:00
Jérémy Lecour a381d23d1f haproxy: preconfigure SSL with defaults 2020-08-21 14:51:30 +02:00
Jérémy Lecour e197f5c2ba haproxy: adapt backports installed package list to distibution 2020-08-21 14:51:30 +02:00
Jérémy Lecour d5b29a2fe0 nginx: make default vhost configurable 2020-08-21 14:51:30 +02:00
Jérémy Lecour 39b8e9698d certbot: detect HAProxy cert directory 2020-08-21 14:51:30 +02:00
Patrick Marchand 9bfbbf08c4 Fix variable par défaut manquante dans mysql
Le lower_case_table_names doit être mis à Null pour que le check marche.
2020-08-21 14:51:30 +02:00
Jérémy Lecour 7f65505f01 update changelog 2020-08-21 14:51:30 +02:00
Jérémy Lecour 45731c7755 haproxy: enable stats frontend with access lists 2020-08-21 14:51:30 +02:00
Patrick Marchand f5d06ad0b1 evobackup-client: Fix ssh connection test in zzz_evobackup.sh
When I made the ssh key name a variable and defaulted it to id_ed25519,
I forgot to change the hardcoded value for the ssh test in
evobackup-client/templates/zzz_evobackup.default.sh.j2
2020-08-21 14:51:30 +02:00
Jérémy Lecour 99f0d9e178 evoacme: read values from environment before defaults file 2020-08-21 14:51:30 +02:00
Jérémy Lecour 968d19bb30 mongodb: fix logrotate patterm on Debian buster 2020-08-21 14:51:30 +02:00
Eric Morino 413597cd59 Force owner opendkim for /etc/opendkim/ folder 2020-08-21 14:51:30 +02:00
Jérémy Lecour e380fa5085 evoacme: upstream release 20.06.1 2020-08-21 14:51:30 +02:00
Ludovic Poujol 974bc653f3 lxc-php: Do --no-install-recommends for ssmtp/opensmtpd 2020-08-21 14:51:30 +02:00
Ludovic Poujol 5ce715d2ae lxc-php: Install opensmtpd as intended 2020-08-21 14:51:30 +02:00
Ludovic Poujol c521c98a11 php: Don't disable putenv() by default in PHP settings 2020-08-21 14:51:30 +02:00