Commit Graph

1667 Commits

Author SHA1 Message Date
Jérémy Lecour 4e6cbf514d ssl: strengthen SSL private key permissions 2019-04-25 13:36:17 +02:00
Jérémy Lecour afea232858 evocheck : version 19.04 from upstream 2019-04-25 13:34:28 +02:00
Tristan PILAT e851b8cbfe Add fluentd installation role 2019-04-23 17:15:28 +02:00
Jérémy Lecour daae099aef Release 9.9.0 2019-04-16 16:41:28 +02:00
Jérémy Lecour 69e45dab84 update CHANGELOG for lxc changes 2019-04-16 16:36:27 +02:00
Jérémy Lecour 1c5505b36b typo 2019-04-16 16:30:05 +02:00
Jérémy Lecour c61e40bdf8 clean CHANGELOG 2019-04-16 16:27:10 +02:00
Jérémy Lecour 7bb15e7b70 evocheck : add "x-frame-options: sameorigin" for Munin 2019-04-16 10:47:26 +02:00
Jérémy Lecour 6b52f89ad3 evocheck : update script from upstream 2019-04-16 10:46:44 +02:00
Jérémy Lecour c86c53146d Merge branch '29-add-sury-preferences' of evolix/ansible-roles into unstable 2019-04-15 17:29:49 +02:00
Benoît S. c019c4230c PHP: For sury add packages to preferences
Closes #39
2019-04-15 16:55:45 +02:00
Tristan PILAT cd82c2609e PHP sury is now 7.3 2019-04-10 15:27:15 +02:00
Tristan PILAT 531dc80207 We want /home mounted inside the container by default 2019-04-09 19:53:26 +02:00
Ludovic Poujol b5cc808635 apt: Ensure jessie-backport from archives.debian.org is accepted
(typo in the when condition)
2019-04-08 17:51:26 +02:00
Ludovic Poujol 48226ff7b6 apt: Ensure jessie-backport from archives.debian.org is accepted 2019-04-08 16:11:10 +02:00
Ludovic Poujol b185012469 apt: Remove jessie-update suite as it's no longer exists 2019-04-08 15:40:03 +02:00
Benoît S. 19800c071c Merge branch 'fail2ban-sshd-use-port-2222-too' into unstable 2019-04-04 16:20:27 +02:00
Benoît S. c91186c4f9 Merge branch 'fail2ban-increase-ban-limit' of evolix/ansible-roles into unstable 2019-04-04 16:15:56 +02:00
Eric Morino 48becaecf4 Replace mirror.evolix.org by archives.debian.org for jessie-backport 2019-04-03 15:08:06 +02:00
Eric Morino 951309e4a3 Remplace mirror.evolix.org by archives.debian.org for jessie-backport 2019-04-03 15:05:14 +02:00
Eric Morino eb0bbe4661 Set correct permissions on folder /etc/opendkim and add package dns-root-data in dependencies 2019-03-27 14:49:19 +01:00
Eric Morino 36515c9c89 aligning roles with our conventions, major changes in opendkim-add.sh 2019-03-27 11:01:11 +01:00
Jérémy Lecour 66381ae454 evomaintenance: embed version 0.5.0 2019-03-26 15:06:20 +01:00
Benoît S. 1a7349ee3d fail2ban: For sshd jail, protect 2222 port too
2222 port is heavily attacked by bots like 22.
2019-03-22 11:39:20 +01:00
Benoît S. 3ab6ecbf0e fail2ban: Add local sshd jail with maxretry at 10
Default of 3 maxretry is too low!
2019-03-22 11:35:23 +01:00
Jérémy Lecour de0a4c2ca8 update README 2019-03-21 15:38:36 +01:00
Jérémy Lecour aa28e9c1b8 change repositories URL 2019-03-21 15:31:58 +01:00
Eric Morino db71907155 Remove chown root: /etc/ssl/private in make-csr.sh 2019-03-19 16:13:17 +01:00
Ludovic Poujol 6e36b54adb webapps/evoadmin-web: add dbadmin.sh to sudoers file 2019-03-18 11:50:46 +01:00
Jérémy Lecour f3b54188d3 redis: higher limit of open files 2019-03-08 13:44:12 +01:00
Jérémy Lecour 02723ba0f3 redis: set variables on nclusion, not with set_facts 2019-03-08 13:44:12 +01:00
Jérémy Lecour 8279092037 evoacme: add a renewal hook to commit changes in /etc/.git 2019-03-07 00:19:43 +01:00
Victor LABORIE aebd46e4d7 tomcat-instance: deploy correct version of config files 2019-03-06 15:52:56 +01:00
Jérémy Lecour 3e37800994 evolinux-base: remove apt-listchanges on Stretch and later 2019-03-05 11:10:12 +01:00
Jérémy Lecour 54f44f0443 elasticsearch: install a script to help plugins upgrades 2019-02-22 10:25:27 +01:00
Jérémy Lecour 70f5504382 etc-git: ignore evobackup/.keep-* files 2019-02-22 10:25:27 +01:00
Victor LABORIE 346e556049 tomcat-instance: deploy correct version of server.xml 2019-02-20 11:29:11 +01:00
Victor LABORIE 49dc437880 tomcat: better tomcat version management 2019-02-20 11:28:59 +01:00
Benoît S. 6eb88cf43d squid: Add mirrors used by Jenkins 2019-02-06 17:10:15 +01:00
Victor LABORIE c1d727bb5d spamassasin: fix sa-update.sh and ensure service is started and enabled 2019-01-31 14:37:41 +01:00
Jérémy Lecour c296dd94c2 Release 9.8.0 2019-01-31 10:22:50 +01:00
Jérémy Lecour eb0879f3c2 New "percona" role to install Percona repositories and tools 2019-01-31 10:22:13 +01:00
Jérémy Lecour c8e7675a49 metricbeat: disable cloud_metadata processor by default 2019-01-31 10:15:02 +01:00
Jérémy Lecour ff275efd95 filebeat: disable cloud_metadata processor by default 2019-01-31 10:14:13 +01:00
Victor LABORIE 0794e6f620 redmine: refactoring of redmine role with use of rbenv 2019-01-28 14:29:01 +01:00
Victor LABORIE fabac07210 redis: add variable for configure unixsocketperm 2019-01-28 14:26:13 +01:00
Victor LABORIE 2c874afb3c proftpd: add FTPS and SFTP support 2019-01-24 11:47:03 +01:00
Ludovic Poujol af896fe1fc * ntpd: Update the restrictions to follow wiki.evolix.org/HowtoNTP client config
- Ensure the client won't respond to anybody but accept the timeserver 
answers
- Should work on both Jessie and Stretch
2019-01-18 15:32:45 +01:00
Jérémy Lecour 87860d5b7f Release 9.7.0 2019-01-17 18:11:46 +01:00
Jérémy Lecour fc0b1d6968 update changelog 2019-01-17 17:42:18 +01:00