Commit Graph

1116 Commits

Author SHA1 Message Date
Jérémy Lecour 1b50dfb0b3 evoacme: inline hooks calls + export variables 2017-10-19 23:23:51 +02:00
Jérémy Lecour 3d3e45faef evoacme: use local variable 2017-10-19 23:18:11 +02:00
Jérémy Lecour 4d6853f844 evoacme: use hooks after certificate creation 2017-10-19 22:21:18 +02:00
Jérémy Lecour 1fa4ccc338 make-csr: create important directories 2017-10-19 11:08:35 +02:00
Jérémy Lecour d2f86f7950 evoacme: check for arguments first 2017-10-19 11:08:16 +02:00
Jérémy Lecour 37cd22a466 evoacme: remove useless variables 2017-10-19 11:08:01 +02:00
Jérémy Lecour 266ac7fc07 evoacme: create important directories 2017-10-19 11:07:45 +02:00
Jérémy Lecour e47371f347 Use bash, for proper readonly/local support
"readonly" is a safety bonus, but "local" is really important
not to overwrite variables from functions.
2017-10-19 11:05:54 +02:00
Jérémy Lecour 4d3ed7ed97 evoacme: remove a debug statement 2017-10-19 07:59:55 +02:00
Gregory Colpart 34365a145c Typo: rename script 2017-10-19 01:39:08 +02:00
Jérémy Lecour 95e16287c8 Extract hook scripts for Apache and Nginx 2017-10-18 22:48:22 +02:00
Victor LABORIE 97e4abb37c fail2ban: add wordpress filters 2017-10-18 15:44:20 +02:00
Victor LABORIE 938aaa4ec1 wordpress: install wp-fail2ban plugin by default 2017-10-18 14:24:44 +02:00
Jérémy Lecour d8960e2afa simplify CSR generation 2017-10-18 00:44:04 +02:00
Jérémy Lecour cd8ea40336 readability and whitespaces 2017-10-18 00:43:33 +02:00
Jérémy Lecour 232648a9b0 readlink -> realpath
better portability on BSD systems
2017-10-18 00:42:15 +02:00
Jérémy Lecour 21f698b62c chmod 700 /etc/evolinux 2017-10-17 18:08:18 +02:00
Jérémy Lecour b7cede7654 Don't add the trap if it is present or commented 2017-10-17 18:07:51 +02:00
Jérémy Lecour beff333a1a Evoacme: big refactoring
* debug messages are sent to stdout
* domains discovery from vhosts is extracted to "vhost-domains"
* fixes suggested by shellcheck
* variables are "local" or "readonly" wherever possible
2017-10-17 14:46:37 +02:00
Victor LABORIE c5844fa193 wordpress: fix summary mail 2017-10-17 11:18:02 +02:00
Victor LABORIE 8f9151c66e wordpress: don't use special caracter in admin password 2017-10-17 11:01:53 +02:00
Victor LABORIE 35f1ec91d8 wordpress: configure site before update it 2017-10-17 11:01:53 +02:00
Jérémy Lecour 71cd04029c Insert "Match User" if missing (Jessie only) 2017-10-17 10:28:49 +02:00
Jérémy Lecour b4e4b14fc6 Invert SSH Match User directives 2017-10-17 10:28:48 +02:00
Victor LABORIE 104a5c962e wordpress: refactoring into role 2017-10-17 10:24:19 +02:00
Victor LABORIE 3b4bf6d13a php: fix right on custom conf files 2017-10-16 17:46:55 +02:00
Jérémy Lecour 1941f9a3f9 evoacme: improve webserver config logic 2017-10-13 17:14:03 +02:00
Jérémy Lecour 2066a79f2e evoacme: exit after certbot in dry-run mode 2017-10-13 17:13:14 +02:00
Jérémy Lecour 350abe5787 evoacme: invert test logic 2017-10-13 14:05:05 +02:00
Jérémy Lecour baa5eae784 evoacme: add many tests 2017-10-13 12:46:40 +02:00
Jérémy Lecour 1c5e5e965b evoacme: fix typo 2017-10-13 12:32:16 +02:00
Jérémy Lecour 06a3965fde whitespaces 2017-10-13 12:30:34 +02:00
Jérémy Lecour 31a19114e5 evoacme: readability of tests
change from :
"what I don't want" && error
to :
"what I want" || error
2017-10-13 12:30:24 +02:00
Jérémy Lecour 9bccbd9496 evoacme: check for readability, not just presence 2017-10-13 12:28:44 +02:00
Jérémy Lecour 3c283d2bb4 evoacme: execute evoacme in cron mode 2017-10-13 12:09:12 +02:00
Jérémy Lecour 0022071462 evoacme: add tests to fail with proper messages 2017-10-13 12:08:47 +02:00
Jérémy Lecour e11958d101 evoacme: fix web servers config check 2017-10-13 11:18:37 +02:00
Jérémy Lecour 6d6d0760cd evoacme: sed cert path after cert creation 2017-10-13 11:18:15 +02:00
Jérémy Lecour 88600039d3 evoacme: daily iterations are not enough 2017-10-13 11:17:32 +02:00
Jérémy Lecour 5e71da94d3 evoacme: fix typo 2017-10-13 11:16:46 +02:00
Jérémy Lecour bced7561c9 make-csr: extract a few functions 2017-10-13 11:16:21 +02:00
Jérémy Lecour fb0c22dfd1 evoacme: refactoring for make-csr
inspired from recent refactoring or evoacme itself
2017-10-13 00:47:02 +02:00
Jérémy Lecour 9fccd7e682 evoacme: improve variables 2017-10-12 18:22:43 +02:00
Jérémy Lecour 65ccc2c0b5 evoacme: use env variables for execution modes 2017-10-12 18:22:06 +02:00
Jérémy Lecour 30434a70d8 evoacme: csr verification is a different function call 2017-10-12 18:20:49 +02:00
Jérémy Lecour 118a9759af evoacme: change function name to be more specific 2017-10-12 18:19:53 +02:00
Jérémy Lecour 3c61484448 evoacme: don't allow uninitialized variables 2017-10-12 18:19:09 +02:00
Victor LABORIE 5e9795435b nginx: fix ip filtering in default vhost 2017-10-12 15:38:07 +02:00
Jérémy Lecour 0d0c21f908 Evoacme: refactoring
* add a lot of variables, to reduce possible typos
* add a lot of debug statements
* add many comments and line breaks for readability
* extract functions for complex openssl commands
* explode the big certbot command into multiple lines
* allow certbot to make test certs (for API query limits)
* allow certbot to run in "dry run" mode
* regroup some lines together when they do related things
2017-10-12 00:29:21 +02:00
Jérémy Lecour 1091dfeeed evolinux-users: Handle "PermitRootLogin prohibit-password" 2017-10-11 22:17:52 +02:00