Commit graph

53 commits

Author SHA1 Message Date
Ludovic Poujol 64b632c000 evolinux-base: Donner le choix (ou non) de virer apt-listchanges
Some checks reported errors
continuous-integration/drone/push Build encountered an error
2021-12-10 11:37:56 +01:00
Ludovic Poujol 8b701e615f evolinux-base: Donner le choix de changer (ou non) le motd 2021-12-10 11:37:33 +01:00
Jérémy Lecour 646a7b1813 evocheck: package install is not supported anymore 2021-10-25 10:08:40 +02:00
Jérémy Lecour 9b479f9c05 evolinux-base: logs are rotated with dateext by default 2021-09-30 12:07:02 +02:00
Jérémy Lecour 9ca68a16dd evolinux-base: quote values
All checks were successful
continuous-integration/drone/push Build is passing
2021-05-10 09:07:18 +02:00
Jérémy Lecour 37ed5dd393 evolinux-base: swappiness is customizable
All checks were successful
continuous-integration/drone/push Build is passing
2020-09-01 14:08:39 +02:00
Benoît S. 4bec21a9f3 evolinux-base: harware: Support HP gen >=10 RAID controller
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-16 12:35:56 +09:00
Jérémy Lecour ac98aa2d18 evolinux-base: install Evocheck (default: True)
All checks were successful
continuous-integration/drone/push Build is passing
2020-03-09 17:02:23 +01:00
Jérémy Lecour ec54af596c evolinux-base: Don't customize the logcheck recipient by default.
Some checks failed
continuous-integration/drone/push Build is failing
By default the package sends its messages to the logcheck user.
By default we alias the "logcheck" user to "root" which is redirected to 
our custom address.
2020-03-04 14:03:18 +01:00
Jérémy Lecour 80081aa26e evolinux-base: remove the chrony package
Some checks failed
continuous-integration/drone/push Build is failing
2020-01-16 10:57:47 +01:00
Jérémy Lecour bea11352be Merge branch 'buster' into unstable 2019-09-23 18:34:35 +02:00
Jérémy Lecour 8f868b8612 evolinux-base: default value for "evolinux_ssh_group" 2019-09-22 22:25:30 +02:00
Ludovic Poujol f630d93587 evolinux-base: On debian 10 and later, add noexec on /dev/shm
Some checks reported errors
continuous-integration/drone/push Build encountered an error
2019-07-23 18:18:29 +02:00
Jérémy Lecour b362f422df evolinux-base: packages for Buster and later
All checks were successful
continuous-integration/drone/push Build is passing
2019-06-19 15:08:54 +02:00
Jérémy Lecour bc8858fc0a evolinux-base: improve hostname configuration
We can have a "real" hostname and domain, but also an "internal" hostnae 
and domain, used mostly for internal tools.
2018-08-16 16:17:34 +02:00
Jérémy Lecour b866b6fa0a evolinux-base: fail2ban is not enabled by default 2018-04-18 12:15:43 +02:00
Jérémy Lecour 08d544668b evolinux-base: create /etc/evolinux 2018-01-03 10:05:20 +01:00
Victor LABORIE f09d93aadb evolinux-base: purge locate/mlocate by default 2018-01-02 15:11:27 +01:00
Jérémy Lecour aeba94bcba default/additional variables
List of hosts/ip are a combination of 2 lists allowing overrides
2017-12-20 18:04:54 +01:00
Jérémy Lecour 8ef9554746 Combine evolix and additional trusted IP addresses 2017-11-15 23:57:58 +01:00
Jérémy Lecour 4bc7635502 Include generate-ldif in evolinux-base 2017-10-11 13:10:15 +02:00
Jérémy Lecour 79e57b7787 evolinux-base: don't disable root ssh by default 2017-10-10 21:58:03 +02:00
Jérémy Lecour c4e61a18d4 evolinux-base includes a few external roles
* minifirewall
* munin
* nagios-nrpe
* fail2ban
* listupgrade
2017-10-07 18:13:52 +02:00
Jérémy Lecour 03bc456dfa evolinux-base: allow ssh for current user
When you're not sure to have a proper ssh connection after install,
you can keep the current user authorized.
Example: when using vagrant

This is disabled by default
2017-10-07 13:12:03 +02:00
Jérémy Lecour 7b88393ccf Refactoring of admin-users + evolinux-base roles
* rename admin-users to evolinux-users
* splitting the "sudo" part for users between jessie and stretch
* with stretch, the sudo group is customizable and properly configured
* import evolinux-users role from evolinux-base at proper time
  to ensure ssh connections are possible for other users before
  cutting root's access
* evomaintenance is also included in evolinux-base to have it available
  when users are created
2017-10-06 01:06:59 +02:00
Jérémy Lecour 622698fb99 Don't disable root access by default
It will be caught by evocheck if we forget to disable it
but will prevent locking ourselves out if we don't create users
2017-10-05 00:29:14 +02:00
Jérémy Lecour ee80235e14 evolinux-base: etc-git is included after apt customization
APT sources must be customized before installing any package
2017-10-04 23:32:27 +02:00
Gregory Colpart 06184a44bf remove *ssl_subject vars to avoid errors 2017-09-08 01:26:53 +02:00
Gregory Colpart 4eb891b8b7 use role ntpd in evolinux-base 2017-08-31 03:31:00 +02:00
Gregory Colpart b801c883ac minor fix: true -> True 2017-08-31 03:23:07 +02:00
Benoît S. fa3047bdc4 Fix #2198. Purge openntpd 2017-07-17 16:18:10 +02:00
Gregory Colpart a189b7935b NTPD : Listen only on lo interface by default 2017-07-17 14:21:46 +02:00
Gregory Colpart ea4ec27f08 Oops, last commit was broken. I think "when: TAG" need always to be boolean, then I patch for that. 2017-07-13 02:20:28 +02:00
Jérémy Lecour a318e6065c Disable new vim defaults 2017-07-12 10:15:47 +02:00
Jérémy Lecour 1cdbcaa5fb Install packages for Stretch and later 2017-07-11 18:43:22 +02:00
Gregory Colpart 12b5d9a97a Fix #2207 : set -L 15 for Cron 2017-07-11 00:42:38 +02:00
Jérémy Lecour 0e0bc1cbbd Split default vhost into nginx ad apache roles 2017-07-06 17:14:28 +02:00
Jérémy Lecour 4d9961b0f9 evolinux-base: configure apt-repositories role 2017-06-07 09:59:55 +02:00
Victor LABORIE a1c69bdf84 apt-repositories/evolinux-base: fix default sources.list configuration 2017-06-05 11:43:25 +02:00
Jérémy Lecour c30e6b189c evolinux-base: fstab is more customizable 2017-04-05 17:50:50 +02:00
Jérémy Lecour 4eab8c319a evolinux: custom email for logcheck 2017-03-30 15:32:59 +02:00
Jérémy Lecour 130e1f2b0e evolinux-base: add conditions for most of tasks 2017-01-03 16:38:04 +01:00
Jérémy Lecour e2460c10d1 evolinux-base: tasks groups disabling 2017-01-03 12:11:01 +01:00
Jérémy Lecour ead09ad4e8 evolinux-base: apt upgrade can be disabled 2017-01-03 11:43:31 +01:00
Gregory Colpart 6c5e880938 add slow_transport configuration for Postfix role
and disable Postfix customization in evolinux-base role
2017-01-02 01:14:18 +01:00
Jérémy Lecour 8a20ec5ca2 evolinux_base/postfix: add some variables
* myhostname
* mydestination
* myorigin
2016-12-30 10:40:18 +01:00
Jérémy Lecour 34669fdfd0 evolinux-base: configure tzdata 2016-12-28 15:06:56 +01:00
Jérémy Lecour b2971d1f7d evolinux-base: add ssh.yml
* disable root login
* list authorized addresses
* disable AcceptEnv
2016-12-27 14:04:12 +01:00
Jérémy Lecour 542cc0ef33 evolinux-base: remove aptitude in apt.yml 2016-12-27 14:04:12 +01:00
Jérémy Lecour 706d247360 evolinux-base: remove aptitude 2016-12-26 12:11:46 +01:00