Commit Graph

2585 Commits

Author SHA1 Message Date
Jérémy Lecour 2849039fad remount-usr: use findmnt to find if usr is a readonly partition
continuous-integration/drone/push Build was killed Details
2022-01-27 11:21:19 +01:00
Jérémy Lecour 80f8a94798 evolinux-base: many improvements for backup-server-state script
continuous-integration/drone/push Build was killed Details
2022-01-27 10:29:08 +01:00
Eric Morino 0a244894eb Add fix repository in source.list for bullseye
continuous-integration/drone/push Build was killed Details
2022-01-26 11:07:10 +01:00
Jérémy Lecour bff8fcfebb apt: upgrade packages after all the configuration is done
continuous-integration/drone/push Build was killed Details
continuous-integration/drone/pr Build was killed Details
2022-01-25 18:25:47 +01:00
Jérémy Lecour 93929864be lxc-php: use bullseye-php80 for php80 container
continuous-integration/drone/push Build was killed Details
2022-01-25 17:45:17 +01:00
Jérémy Lecour 52fff750df evolinux-base: move "/sbin/deny" install to utils.yml tasks file 2022-01-25 17:44:42 +01:00
Jérémy Lecour 0e34d4cd4b Merge remote-tracking branch 'origin/bullseye-swap-top' into unstable
continuous-integration/drone/push Build was killed Details
2022-01-25 15:15:05 +01:00
Jérémy Lecour 8f8c024163 Merge branch 'unstable' into bullseye-swap-top
continuous-integration/drone/push Build was killed Details
continuous-integration/drone/pr Build was killed Details
2022-01-25 15:13:10 +01:00
Jérémy Lecour 1f4ee2de79 Prepare CHANGELOG for 22.01 release
continuous-integration/drone/push Build was killed Details
2022-01-25 15:00:03 +01:00
Jérémy Lecour 0fce412cf5 add WIP warning to check_async 2022-01-25 14:56:39 +01:00
Jérémy Lecour 544b213529 evomaintenance: Upstream release 22.01 2022-01-25 14:56:39 +01:00
Jérémy Lecour 266289c72e whitespaces 2022-01-25 14:56:39 +01:00
Jérémy Lecour 51bc48623b dovecot: switch to TLS 1.2+ and external DH params 2022-01-25 14:56:39 +01:00
Mathieu Trossevin 7a969a0be2 Merge pull request 'lxc-php: Fix config for opensmtpd on bullseye' (#137) from mtrossevin/ansible-roles:opensmtpd-bullseye into unstable
continuous-integration/drone/push Build was killed Details
Reviewed-on: #137
2022-01-25 12:00:01 +01:00
Mathieu Trossevin 1902c40c3c
lxc-php: Fix config for opensmtpd on bullseye
continuous-integration/drone/pr Build was killed Details
2022-01-25 11:57:41 +01:00
Mathieu Trossevin fec9e49c18
Repair munin role
continuous-integration/drone/push Build was killed Details
2022-01-25 11:01:45 +01:00
Jérémy Dubois 3822696db6 Update CHANGELOG for new openvpn role
continuous-integration/drone/push Build was killed Details
2022-01-24 19:23:26 +01:00
Jérémy Dubois 4effe91b9f Write an openvpn role
continuous-integration/drone/push Build was killed Details
2022-01-24 19:12:48 +01:00
Brice Waegeneire 168b0fa9b7 nginx: Add snippet for custom server block config.
continuous-integration/drone/push Build was killed Details
2022-01-20 10:44:02 +01:00
Jérémy Lecour c4fab71d7a evolinux-base: add new states to backup-server-states
continuous-integration/drone/push Build was killed Details
2022-01-15 18:51:03 +01:00
Ludovic Poujol c8a862c5e7 nagios-nrpe: Amélioration du check phpfpm_status et phpfpm_multi
continuous-integration/drone/push Build was killed Details
Pour phpfpm_status > Ajout de la possibilité d'avoir un seuil de max procs actifs
Pour phpfpm_multi > Utilisation des seuils max (calculé sur le pm.max_children) + timeout
2022-01-14 17:06:48 +01:00
Jérémy Lecour ea382a1686 varnish: add additional options
continuous-integration/drone/push Build was killed Details
2022-01-12 13:04:22 +01:00
Jérémy Lecour ca1f465aaa nodejs: default to version 16 LTS 2022-01-12 13:04:22 +01:00
William Hirigoyen (Evolix) bd39adaf68 Fail if /var has nodev or noexec option enabled.
continuous-integration/drone/push Build was killed Details
2022-01-11 11:48:57 +01:00
William Hirigoyen (Evolix) 14883aa95e Ensure that /var is mounted with dev and exec options prior to LXC container creation.
continuous-integration/drone/push Build was killed Details
2022-01-11 11:02:09 +01:00
Brice Waegeneire 4c6d30a52c apache: block access to .git* and .env* files
continuous-integration/drone/push Build was killed Details
2021-12-28 16:27:05 +01:00
Jérémy Lecour 1893b6dea5 don't enable alert5 service in check mode
continuous-integration/drone/push Build was killed Details
2021-12-23 16:56:43 +01:00
Jérémy Lecour ec346a42a5 munin: systemd override to unprotect home directory
continuous-integration/drone/push Build was killed Details
2021-12-23 16:56:23 +01:00
William Hirigoyen (Evolix) 1c754f7eb0 Fix Filebeat role for --check mode.
continuous-integration/drone/push Build encountered an error Details
2021-12-21 15:27:46 +01:00
Eric Morino 7bb7b22d1f Add redirectMath 404 on http request /.git by default
continuous-integration/drone/push Build encountered an error Details
2021-12-20 09:59:25 +01:00
Ludovic Poujol 7c7ccf07eb generate-ldif: fix typo in var name (cap)
continuous-integration/drone/push Build encountered an error Details
2021-12-13 17:01:59 +01:00
Ludovic Poujol 64b632c000 evolinux-base: Donner le choix (ou non) de virer apt-listchanges
continuous-integration/drone/push Build encountered an error Details
2021-12-10 11:37:56 +01:00
Ludovic Poujol 8b701e615f evolinux-base: Donner le choix de changer (ou non) le motd 2021-12-10 11:37:33 +01:00
Ludovic Poujol d27d6b69cd evolinux-base: Add missing dependency dmidecode
continuous-integration/drone/push Build encountered an error Details
2021-12-08 18:35:55 +01:00
Ludovic Poujol bd429275d1 generate-ldif: properly flag virtual machines on vmware as virtual machines
continuous-integration/drone/push Build encountered an error Details
2021-12-08 18:07:53 +01:00
Eric Morino cd7c488713 Add rule .well-know to allow letsencrypt challenge
continuous-integration/drone/push Build is failing Details
2021-11-26 16:37:00 +01:00
Eric Morino 7e36d03804 Add new location by default for /.well-know, fix some warning in Nextcloud check setup
continuous-integration/drone/push Build is failing Details
2021-11-26 15:42:39 +01:00
Eric Morino 2ec026c2b3 Change variable item by kvm_pair and disable loop on all 'hypervisor' group
continuous-integration/drone/push Build is failing Details
2021-11-26 11:08:43 +01:00
Mathieu Trossevin 53cd3ba342 Merge pull request 'nagios-nrpe: Fix check_nfsserver for buster and bullseye' (#138) from mtrossevin/ansible-roles:check_nfsserver-buster into unstable
continuous-integration/drone/push Build is failing Details
Reviewed-on: #138
2021-11-24 11:12:11 +01:00
Mathieu Trossevin d3eef71127
nagios-nrpe: Fix check_nfsserver for buster and bullseye
continuous-integration/drone/pr Build is failing Details
From buster onward the nfs server doesn't run NFSv4 over UDP (it is out
of spec, see RFC 7530). As such the check broke as it attempt to check
the availability of NFSv4 over UDP.

Right now the check doesn't check for NFSv2 over UDP as it would need to
check if it exist first, as on bullseye it isn't supported by default
anymore.
2021-11-24 11:11:39 +01:00
Ludovic Poujol 82694ef5e9 generate-ldif: Don't miss detect deb11 as VM
continuous-integration/drone/push Build is failing Details
2021-11-22 17:40:49 +01:00
Ludovic Poujol a35139fcee Add missing sudoers line (for old debian 9)
continuous-integration/drone/push Build is failing Details
2021-11-22 16:28:30 +01:00
Eric Morino 8dca949564 Add *xml to crontab for sync libvirt xml file
continuous-integration/drone/push Build is failing Details
2021-11-22 11:44:07 +01:00
Eric Morino c9af7db827 re-activation task ssh.yml + modify crontab for sync list of running vm + add tags
continuous-integration/drone/push Build is failing Details
2021-11-22 11:38:10 +01:00
Eric Morino 21bd4021d3 add virsh list --all on kvm host and this neighbor
continuous-integration/drone/push Build is failing Details
2021-11-22 10:42:46 +01:00
Eric Morino 4fb885a33b Fix right for redis log dir and log file
continuous-integration/drone/push Build is failing Details
2021-11-15 11:33:34 +01:00
Jérémy Lecour e4bb0c6f55 filebeat/metricbeat: version 7.x y default
continuous-integration/drone/push Build is failing Details
2021-11-12 10:07:43 +01:00
Jérémy Lecour 039c740ef3 mysql: add evomariabackup 21.11 2021-11-01 10:16:55 +01:00
William Hirigoyen (Evolix) 51aaac0cbc Fix evocheck_force_install VARIABLE IS NOT DEFINED (validé par jlecour) 2021-10-29 14:54:44 +02:00
Jérémy Lecour 6cf8195744 evolinux-base: fix alert5.service dependency syntax 2021-10-29 07:52:38 +02:00