William Hirigoyen
5b63ba112c
Revert "evolinux-base: include postfix role, move exim4 purge from evolinux-base to postfix role"
...
This reverts commit a440110cad
.
2023-08-31 17:47:49 +02:00
William Hirigoyen
a440110cad
evolinux-base: include postfix role, move exim4 purge from evolinux-base to postfix role
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|2620|19|2601|21|:+1:
Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/336//ansiblelint">Evolix » ansible-roles » unstable #336</a>
gitea/ansible-roles/pipeline/head This commit looks good
2023-08-31 17:30:34 +02:00
Brice Waegeneire
fe369257ed
evolinux-base: Limit journald to 1 day
2023-08-23 15:48:42 +02:00
Brice Waegeneire
0e1fe0e81f
evolinux-base: Disable logcheck monitoring of journald
2023-08-23 15:05:10 +02:00
Ludovic Poujol
f0abb53750
evolinux-base: New variable "evolinux_system_include_ntpd" to chose wether or not to include ntpd role
Ansible Lint |Total|New|Outstanding|Fixed|Trend
|:-:|:-:|:-:|:-:|:-:
|2613|13|2600|13|:-1:
Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/316//ansiblelint">Evolix » ansible-roles » unstable #316</a>
gitea/ansible-roles/pipeline/head This commit looks good
2023-08-04 11:47:42 +02:00
Jérémy Lecour
f531460f49
Use proper keyrings directory for APT version
...
Debian 9 → 11 : /etc/apt/trusted.gpg.d
Debian 12 : /etc/apt/keyrings
2022-11-02 23:16:32 +01:00
Jérémy Lecour
f71075d4ef
evolinux-base: replace regular kernel by cloud kernel on virtual servers
2022-10-19 16:33:25 +02:00
Jérémy Lecour
2d16aeb41e
evolinux-base: utils.yml can be excluded
gitea/ansible-roles/pipeline/head This commit looks good
2022-10-11 13:37:21 +02:00
Jérémy Lecour
0a3bfd7f27
evolinux-base: session timeout is configurable
continuous-integration/drone/push Build is passing
2022-07-06 14:24:41 +02:00
William Hirigoyen (Evolix)
c4023a4f49
Détecte automatiquement si le serveur est baremetal pour installer les outils hw, suppression de la variable evolinux_packages_hardware inutile
continuous-integration/drone/push Build is passing
2022-06-03 16:22:56 +02:00
Jérémy Lecour
5153b88d01
evolinux-base: option to bypass raid-related tasks
2022-02-03 14:15:33 +01:00
Ludovic Poujol
64b632c000
evolinux-base: Donner le choix (ou non) de virer apt-listchanges
continuous-integration/drone/push Build encountered an error
2021-12-10 11:37:56 +01:00
Ludovic Poujol
8b701e615f
evolinux-base: Donner le choix de changer (ou non) le motd
2021-12-10 11:37:33 +01:00
Jérémy Lecour
646a7b1813
evocheck: package install is not supported anymore
2021-10-25 10:08:40 +02:00
Jérémy Lecour
9b479f9c05
evolinux-base: logs are rotated with dateext by default
2021-09-30 12:07:02 +02:00
Jérémy Lecour
9ca68a16dd
evolinux-base: quote values
continuous-integration/drone/push Build is passing
2021-05-10 09:07:18 +02:00
Jérémy Lecour
37ed5dd393
evolinux-base: swappiness is customizable
continuous-integration/drone/push Build is passing
2020-09-01 14:08:39 +02:00
Benoît S.
4bec21a9f3
evolinux-base: harware: Support HP gen >=10 RAID controller
continuous-integration/drone/push Build is passing
2020-06-16 12:35:56 +09:00
Jérémy Lecour
ac98aa2d18
evolinux-base: install Evocheck (default: True
)
continuous-integration/drone/push Build is passing
2020-03-09 17:02:23 +01:00
Jérémy Lecour
ec54af596c
evolinux-base: Don't customize the logcheck recipient by default.
...
continuous-integration/drone/push Build is failing
By default the package sends its messages to the logcheck user.
By default we alias the "logcheck" user to "root" which is redirected to
our custom address.
2020-03-04 14:03:18 +01:00
Jérémy Lecour
80081aa26e
evolinux-base: remove the chrony package
continuous-integration/drone/push Build is failing
2020-01-16 10:57:47 +01:00
Jérémy Lecour
bea11352be
Merge branch 'buster' into unstable
2019-09-23 18:34:35 +02:00
Jérémy Lecour
8f868b8612
evolinux-base: default value for "evolinux_ssh_group"
2019-09-22 22:25:30 +02:00
Ludovic Poujol
f630d93587
evolinux-base: On debian 10 and later, add noexec on /dev/shm
continuous-integration/drone/push Build encountered an error
2019-07-23 18:18:29 +02:00
Jérémy Lecour
b362f422df
evolinux-base: packages for Buster and later
continuous-integration/drone/push Build is passing
2019-06-19 15:08:54 +02:00
Jérémy Lecour
bc8858fc0a
evolinux-base: improve hostname configuration
...
We can have a "real" hostname and domain, but also an "internal" hostnae
and domain, used mostly for internal tools.
2018-08-16 16:17:34 +02:00
Jérémy Lecour
b866b6fa0a
evolinux-base: fail2ban is not enabled by default
2018-04-18 12:15:43 +02:00
Jérémy Lecour
08d544668b
evolinux-base: create /etc/evolinux
2018-01-03 10:05:20 +01:00
Victor LABORIE
f09d93aadb
evolinux-base: purge locate/mlocate by default
2018-01-02 15:11:27 +01:00
Jérémy Lecour
aeba94bcba
default/additional variables
...
List of hosts/ip are a combination of 2 lists allowing overrides
2017-12-20 18:04:54 +01:00
Jérémy Lecour
8ef9554746
Combine evolix and additional trusted IP addresses
2017-11-15 23:57:58 +01:00
Jérémy Lecour
4bc7635502
Include generate-ldif in evolinux-base
2017-10-11 13:10:15 +02:00
Jérémy Lecour
79e57b7787
evolinux-base: don't disable root ssh by default
2017-10-10 21:58:03 +02:00
Jérémy Lecour
c4e61a18d4
evolinux-base includes a few external roles
...
* minifirewall
* munin
* nagios-nrpe
* fail2ban
* listupgrade
2017-10-07 18:13:52 +02:00
Jérémy Lecour
03bc456dfa
evolinux-base: allow ssh for current user
...
When you're not sure to have a proper ssh connection after install,
you can keep the current user authorized.
Example: when using vagrant
This is disabled by default
2017-10-07 13:12:03 +02:00
Jérémy Lecour
7b88393ccf
Refactoring of admin-users + evolinux-base roles
...
* rename admin-users to evolinux-users
* splitting the "sudo" part for users between jessie and stretch
* with stretch, the sudo group is customizable and properly configured
* import evolinux-users role from evolinux-base at proper time
to ensure ssh connections are possible for other users before
cutting root's access
* evomaintenance is also included in evolinux-base to have it available
when users are created
2017-10-06 01:06:59 +02:00
Jérémy Lecour
622698fb99
Don't disable root access by default
...
It will be caught by evocheck if we forget to disable it
but will prevent locking ourselves out if we don't create users
2017-10-05 00:29:14 +02:00
Jérémy Lecour
ee80235e14
evolinux-base: etc-git is included after apt customization
...
APT sources must be customized before installing any package
2017-10-04 23:32:27 +02:00
Gregory Colpart
06184a44bf
remove *ssl_subject vars to avoid errors
2017-09-08 01:26:53 +02:00
Gregory Colpart
4eb891b8b7
use role ntpd in evolinux-base
2017-08-31 03:31:00 +02:00
Gregory Colpart
b801c883ac
minor fix: true -> True
2017-08-31 03:23:07 +02:00
Benoît S.
fa3047bdc4
Fix #2198 . Purge openntpd
2017-07-17 16:18:10 +02:00
Gregory Colpart
a189b7935b
NTPD : Listen only on lo interface by default
2017-07-17 14:21:46 +02:00
Gregory Colpart
ea4ec27f08
Oops, last commit was broken. I think "when: TAG" need always to be boolean, then I patch for that.
2017-07-13 02:20:28 +02:00
Jérémy Lecour
a318e6065c
Disable new vim defaults
2017-07-12 10:15:47 +02:00
Jérémy Lecour
1cdbcaa5fb
Install packages for Stretch and later
2017-07-11 18:43:22 +02:00
Gregory Colpart
12b5d9a97a
Fix #2207 : set -L 15 for Cron
2017-07-11 00:42:38 +02:00
Jérémy Lecour
0e0bc1cbbd
Split default vhost into nginx ad apache roles
2017-07-06 17:14:28 +02:00
Jérémy Lecour
4d9961b0f9
evolinux-base: configure apt-repositories role
2017-06-07 09:59:55 +02:00
Victor LABORIE
a1c69bdf84
apt-repositories/evolinux-base: fix default sources.list configuration
2017-06-05 11:43:25 +02:00