Patrick Marchand
e713ad024b
Fix right problem in mysql replication
...
The configuration file was not set to 0644, which caused the file
to be ignored by mysql and it's configuration not to be set.
2020-08-21 14:51:30 +02:00
Patrick Marchand
c142af69f0
Added some mysql variables and allowed forcing config update
...
The default behaviour is kept, but this way we can manage a mysql
installation from ansible.
2020-08-21 14:51:30 +02:00
Patrick Marchand
18878d58e8
Replication should set a binlog format
...
This could possible be better served in the base config file, but
for now I'll keep it here.
2020-08-21 14:51:30 +02:00
Patrick Marchand
8778d69102
Removed redundant nagios checks
...
They are already installed by the base roles.
2020-08-21 14:51:30 +02:00
Patrick Marchand
c39f63048c
Removed useless dbadmin script from mysql replication tasks
...
It was used by a very specific client case and is not needed for a
general role.
2020-08-21 14:51:30 +02:00
Patrick Marchand
df99e9ac4f
Make it possible for mysql role to copy evolix scripts
...
Based myself off of the webapps/evoadmin-web role, but I'm not sure
we still consider this a hack or not. We use a read only /usr fs,
so we need to remount it to add scripts in /usr/local/share.
2020-08-21 14:51:30 +02:00
Patrick Marchand
6a264a3179
Added option to prepare mysql servers for replication
2020-08-21 14:51:30 +02:00
Benoît S.
d0004ebacc
nagios-nrpe: Added hpsa support to check_hpraid
...
Also handle empty slots.
2020-08-21 14:51:30 +02:00
Benoît S.
5bf7ba5c84
nagios-nrpe: shellchecked check_hp
...
Also refactored the checking part and outputing.
2020-08-21 14:51:30 +02:00
Benoît S.
d8a3bd0c01
nagios-nrpe: Adding licence GPLv2 to check_hpraid
...
Also describe what has been removed/changed from the original source.
2020-08-21 14:51:30 +02:00
Benoît S.
8d9d068a33
nqgios-nrpe: Add check_hpraid
2020-08-21 14:51:30 +02:00
Ludovic Poujol
a9fe102f30
packweb-apache: Don't turn on mod-evasive emails by default
2020-08-21 14:51:30 +02:00
Jérémy Lecour
7413a242a8
Release 10.1.0
continuous-integration/drone/pr Build is passing
continuous-integration/drone/push Build is passing
2020-08-21 14:50:17 +02:00
Jérémy Lecour
44ddc8047d
evoacme: disable empty task for hooks
2020-08-21 14:21:28 +02:00
Jérémy Lecour
1e6d6cdd13
sort lines in CHANGELOG
2020-08-21 14:03:41 +02:00
Jérémy Lecour
f49bf5c72d
evoacme: use Let's Encrypt deploy hooks instead of evoacme hooks
continuous-integration/drone/push Build is passing
2020-08-21 14:02:07 +02:00
Jérémy Lecour
a60deb276b
evoacme: upstream release 20.08
2020-08-21 14:01:06 +02:00
Jérémy Lecour
8ea1bac000
evoacme: update for new certbot role
...
* certbot is installed by the certbot role
* Apache/Nginx configuration is delegated to the certbot role
* No more "acme" user, everything is done with "root".
2020-08-21 13:36:24 +02:00
Benoît S.
a8095b1c36
Updated CHANGELOG.md with recent merges
continuous-integration/drone/push Build is passing
2020-08-20 15:49:22 +09:00
Jérémy Lecour
5c4daf3691
Merge remote-tracking branch 'origin/generateldif-patch' into unstable
continuous-integration/drone/push Build is passing
2020-08-19 14:53:10 +02:00
Jérémy Lecour
d457b25c4b
Merge remote-tracking branch 'origin/nagios-nrpe-amavis-update' into unstable
2020-08-19 14:52:04 +02:00
Jérémy Lecour
7eed6d0255
Merge remote-tracking branch 'origin/squid-sa-update-domains' into unstable
2020-08-19 14:51:50 +02:00
Jérémy Lecour
221e9edc10
Merge branch 'nagios-nrpe-check-hpraid' into unstable
2020-08-19 14:49:22 +02:00
Jérémy Lecour
57ac4e467c
metricbeat: allow using a template
continuous-integration/drone/push Build is passing
2020-08-18 14:01:09 +02:00
Jérémy Lecour
ce35f7292f
filebeat: allow using a template
2020-08-18 14:00:46 +02:00
Ludovic Poujol
edbc596511
mongodb: Fix issue introduced by 8aa7f6cf33
continuous-integration/drone/push Build is passing
2020-07-30 11:31:19 +02:00
Jérémy Lecour
eeeb20771a
elasticsearch: keep native values
continuous-integration/drone/push Build is passing
2020-07-21 10:46:34 +02:00
Jérémy Lecour
d3e69eeeb5
certbot: fix haproxy hook (ssl cert directory detection)
...
continuous-integration/drone/push Build is passing
It was matching additional parameters.
Now it matches on the first argument after "crt"
2020-07-21 10:46:01 +02:00
Jérémy Lecour
21b8104654
elasticsearch: configure cluster with seed hosts and initial masters
continuous-integration/drone/push Build is passing
2020-07-19 11:40:59 +02:00
Jérémy Lecour
9270852349
elasticsearch: set tmpdir before datadir
continuous-integration/drone/push Build is passing
2020-07-19 11:30:00 +02:00
Jérémy Lecour
cea5620568
elasticsearch is compatible with buster
continuous-integration/drone/push Build is passing
2020-07-17 13:49:07 +02:00
Jérémy Lecour
8aa7f6cf33
mongodb: install custom munin plugins
continuous-integration/drone/push Build is passing
2020-07-17 13:48:18 +02:00
Benoît S.
1c050b481a
evolinux-base: check_hpraid.cron.sh: Fixed wrong <<<
usage
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
2020-07-01 10:18:30 +09:00
Benoît S.
0150e77041
generate-ldif: Patched computerOS detection
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
2020-06-30 05:11:05 +02:00
Benoît S.
0fd8128f94
generate-ldif: Skip some odd ethernet devices
2020-06-30 04:36:04 +02:00
Benoît S.
0cd889e4fb
generate-ldif: Add NVMe disk support
2020-06-30 04:10:03 +02:00
Benoît S.
9a8f1979bc
evolinux-base: check_hpraid.cron.sh: Fixed wrong else
...
continuous-integration/drone/push Build is passing
The logic was wrong, an else part was not necessary.
2020-06-26 17:57:50 +09:00
Benoît S.
a28b9558cb
evolinux-base: check_hpraid.cron.sh: Better logic and use mail
...
continuous-integration/drone/push Build is passing
First step is to detect errors
Second step is to detect different state
Added mail comand to replace cron output
2020-06-24 18:57:08 +09:00
Jérémy Lecour
9bdd5ad9e7
haproxy: rotate logs with date extension and immediate compression
continuous-integration/drone/push Build is passing
2020-06-22 19:02:29 +02:00
Mathieu Trossevin
5e13f8da4e
lxc-php: Make mysql socket binding work on fresh install
...
/var/run/mysqld only exist after mysql is installed, as such the role
lxc-php need to run after the role mysql.
Also only cause a restart of the containers when their configuration has
been changed.
For now socket binding might only work for mysql and not mysql-oracle
(it's default socket seems to be /tmp/mysql.sock).
2020-06-17 16:06:54 +02:00
Mathieu Trossevin
49b20f9b12
lxc-php: Have mysqld.sock inside of a directory
...
Bind mount don't seems to work on a file so the default socket is now
always named mysqld.sock and the configurable variable is
php_conf_mysql_socket_dir that define the directory the socket will be
in.
2020-06-17 16:06:54 +02:00
Mathieu Trossevin
1d9ab0f1f3
Allows using localhost to connect to MySQL in lxc
...
Add 'php_conf_mysql_default_socket' variable to lxc-php role that
configure both the lxc containers and PHP so that a local MySQL database
may be used through localhost.
The PHP containers will automount /var/run/mysqld/mysqld.sock (the
default path to the mysql socket) to the path defined by the variable
'php_conf_mysql_default_socket' which will be the path used by php to
contact MySQL both with mysqli and PDO_MYSQL.
2020-06-17 16:06:53 +02:00
Benoît S.
de908ae5bd
nagios-nrpe: check_amavis: Update regex
...
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
I just installed a Debian Stretch with a pack mail and the check_amavis
was not checking the right regex.
Amavis is returning:
2.7.0 Ok, discarded, id=17556-09 - INFECTED: Eicar-Signature
So the regex should be:
-if ($result =~/2.7.0 Ok, discarded, id=[^,]+ - INFECTED: Eicar-Test-Signature/) {
+if ($result =~/2.7.0 Ok, discarded, id=\S+ - INFECTED: Eicar-Signature/) {
2020-06-17 12:20:33 +09:00
Benoît S.
1d7d2ce08d
squid: Update regex for sa-update domains.
...
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
List of domains is like:
http://sa-update.dnswl.org/ weight=3
http://www.sa-update.pccc.com/ weight=5
http://sa-update.secnap.net/ weight=5
http://sa-update.space-pro.be/ weight=1
http://sa-update.ena.com/ weight=5
http://sa-update.razx.cloud/ weight=5
http://sa-update.fossies.org/ weight=1
http://sa-update.verein-clean.net/ weight=10
http://sa-update.bitwell.fi/ weight=5
http://sa-update.spamassassin.org/ weight=10
They all start sa-update.*, except for http://www.sa-update.pccc.com/ .
In that case, we just match sa-update on the domain name.
2020-06-17 11:25:24 +09:00
Jérémy Lecour
977c28c720
varnish: fix start command when multiple addresses are present
continuous-integration/drone/push Build is passing
2020-06-16 13:51:07 +02:00
Benoît S.
766b4dfa82
evolinux-base: check_hpraid cron: Add -p
continuous-integration/drone/push Build is passing
2020-06-16 13:20:43 +09:00
Benoît S.
a74f4e1890
evolinux-base/tasks/hardware.yml: Removed trailing whitespace
continuous-integration/drone/push Build is passing
2020-06-16 12:42:33 +09:00
Benoît S.
4bec21a9f3
evolinux-base: harware: Support HP gen >=10 RAID controller
continuous-integration/drone/push Build is passing
2020-06-16 12:35:56 +09:00
Benoît S.
241f50d27e
nagios-nrpe: check_hpraid: Update known working RAID controllers
2020-06-16 12:34:48 +09:00
Benoît S.
74229809ff
nagios-nrpe: Add check_hpraid in template
2020-06-16 12:28:10 +09:00