2585 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Jeremy Lecour	2849039fad	remount-usr: use findmnt to find if usr is a readonly partition	2022-01-27 11:21:19 +01:00
Jeremy Lecour	80f8a94798	evolinux-base: many improvements for backup-server-state script	2022-01-27 10:29:08 +01:00
Eric Morino	0a244894eb	Add fix repository in source.list for bullseye	2022-01-26 11:07:10 +01:00
Jeremy Lecour	bff8fcfebb	apt: upgrade packages after all the configuration is done	2022-01-25 18:25:47 +01:00
Jeremy Lecour	93929864be	lxc-php: use bullseye-php80 for php80 container	2022-01-25 17:45:17 +01:00
Jeremy Lecour	52fff750df	evolinux-base: move "/sbin/deny" install to utils.yml tasks file	2022-01-25 17:44:42 +01:00
Jeremy Lecour	0e34d4cd4b	Merge remote-tracking branch 'origin/bullseye-swap-top' into unstable	2022-01-25 15:15:05 +01:00
Jérémy Lecour	8f8c024163	Merge branch 'unstable' into bullseye-swap-top	2022-01-25 15:13:10 +01:00
Jeremy Lecour	1f4ee2de79	Prepare CHANGELOG for 22.01 release	2022-01-25 15:00:03 +01:00
Jeremy Lecour	0fce412cf5	add WIP warning to check_async	2022-01-25 14:56:39 +01:00
Jeremy Lecour	544b213529	evomaintenance: Upstream release 22.01	2022-01-25 14:56:39 +01:00
Jeremy Lecour	266289c72e	whitespaces	2022-01-25 14:56:39 +01:00
Jeremy Lecour	51bc48623b	dovecot: switch to TLS 1.2+ and external DH params	2022-01-25 14:56:39 +01:00
Mathieu Trossevin	7a969a0be2	Merge pull request 'lxc-php: Fix config for opensmtpd on bullseye' (#137) from mtrossevin/ansible-roles:opensmtpd-bullseye into unstable ... Reviewed-on: #137	2022-01-25 12:00:01 +01:00
Mathieu Trossevin	1902c40c3c	lxc-php: Fix config for opensmtpd on bullseye	2022-01-25 11:57:41 +01:00
Mathieu Trossevin	fec9e49c18	Repair munin role	2022-01-25 11:01:45 +01:00
Jeremy Dubois	3822696db6	Update CHANGELOG for new openvpn role	2022-01-24 19:23:26 +01:00
Jeremy Dubois	4effe91b9f	Write an openvpn role	2022-01-24 19:12:48 +01:00
Brice Waegeneire	168b0fa9b7	nginx: Add snippet for custom server block config.	2022-01-20 10:44:02 +01:00
Jeremy Lecour	c4fab71d7a	evolinux-base: add new states to backup-server-states	2022-01-15 18:51:03 +01:00
Ludovic Poujol	c8a862c5e7	nagios-nrpe: Amélioration du check phpfpm_status et phpfpm_multi ... Pour phpfpm_status > Ajout de la possibilité d'avoir un seuil de max procs actifs Pour phpfpm_multi > Utilisation des seuils max (calculé sur le pm.max_children) + timeout	2022-01-14 17:06:48 +01:00
Jeremy Lecour	ea382a1686	varnish: add additional options	2022-01-12 13:04:22 +01:00
Jeremy Lecour	ca1f465aaa	nodejs: default to version 16 LTS	2022-01-12 13:04:22 +01:00
William Hirigoyen (Evolix)	bd39adaf68	Fail if /var has nodev or noexec option enabled.	2022-01-11 11:48:57 +01:00
William Hirigoyen (Evolix)	14883aa95e	Ensure that /var is mounted with dev and exec options prior to LXC container creation.	2022-01-11 11:02:09 +01:00
Brice Waegeneire	4c6d30a52c	apache: block access to .git* and .env* files	2021-12-28 16:27:05 +01:00
Jeremy Lecour	1893b6dea5	don't enable alert5 service in check mode	2021-12-23 16:56:43 +01:00
Jeremy Lecour	ec346a42a5	munin: systemd override to unprotect home directory	2021-12-23 16:56:23 +01:00
William Hirigoyen (Evolix)	1c754f7eb0	Fix Filebeat role for --check mode.	2021-12-21 15:27:46 +01:00
Eric Morino	7bb7b22d1f	Add redirectMath 404 on http request /.git by default	2021-12-20 09:59:25 +01:00
Ludovic Poujol	7c7ccf07eb	generate-ldif: fix typo in var name (cap)	2021-12-13 17:01:59 +01:00
Ludovic Poujol	64b632c000	evolinux-base: Donner le choix (ou non) de virer apt-listchanges	2021-12-10 11:37:56 +01:00
Ludovic Poujol	8b701e615f	evolinux-base: Donner le choix de changer (ou non) le motd	2021-12-10 11:37:33 +01:00
Ludovic Poujol	d27d6b69cd	evolinux-base: Add missing dependency dmidecode	2021-12-08 18:35:55 +01:00
Ludovic Poujol	bd429275d1	generate-ldif: properly flag virtual machines on vmware as virtual machines	2021-12-08 18:07:53 +01:00
Eric Morino	cd7c488713	Add rule .well-know to allow letsencrypt challenge	2021-11-26 16:37:00 +01:00
Eric Morino	7e36d03804	Add new location by default for /.well-know, fix some warning in Nextcloud check setup	2021-11-26 15:42:39 +01:00
Eric Morino	2ec026c2b3	Change variable item by kvm_pair and disable loop on all 'hypervisor' group	2021-11-26 11:08:43 +01:00
Mathieu Trossevin	53cd3ba342	Merge pull request 'nagios-nrpe: Fix check_nfsserver for buster and bullseye' (#138) from mtrossevin/ansible-roles:check_nfsserver-buster into unstable ... Reviewed-on: #138	2021-11-24 11:12:11 +01:00
Mathieu Trossevin	d3eef71127	nagios-nrpe: Fix check_nfsserver for buster and bullseye ... From buster onward the nfs server doesn't run NFSv4 over UDP (it is out of spec, see RFC 7530). As such the check broke as it attempt to check the availability of NFSv4 over UDP. Right now the check doesn't check for NFSv2 over UDP as it would need to check if it exist first, as on bullseye it isn't supported by default anymore.	2021-11-24 11:11:39 +01:00
Ludovic Poujol	82694ef5e9	generate-ldif: Don't miss detect deb11 as VM	2021-11-22 17:40:49 +01:00
Ludovic Poujol	a35139fcee	Add missing sudoers line (for old debian 9)	2021-11-22 16:28:30 +01:00
Eric Morino	8dca949564	Add *xml to crontab for sync libvirt xml file	2021-11-22 11:44:07 +01:00
Eric Morino	c9af7db827	re-activation task ssh.yml + modify crontab for sync list of running vm + add tags	2021-11-22 11:38:10 +01:00
Eric Morino	21bd4021d3	add virsh list --all on kvm host and this neighbor	2021-11-22 10:42:46 +01:00
Eric Morino	4fb885a33b	Fix right for redis log dir and log file	2021-11-15 11:33:34 +01:00
Jeremy Lecour	e4bb0c6f55	filebeat/metricbeat: version 7.x y default	2021-11-12 10:07:43 +01:00
Jeremy Lecour	039c740ef3	mysql: add evomariabackup 21.11	2021-11-01 10:16:55 +01:00
William Hirigoyen (Evolix)	51aaac0cbc	Fix evocheck_force_install VARIABLE IS NOT DEFINED (validé par jlecour)	2021-10-29 14:54:44 +02:00
Jeremy Lecour	6cf8195744	evolinux-base: fix alert5.service dependency syntax	2021-10-29 07:52:38 +02:00