Commit Graph

2268 Commits

Author SHA1 Message Date
Jérémy Lecour 5588ed6009 minifirewall: change some defaults
Only SSH (22) is open on privilegied IPs
Remove volatile.debian.org domain
2021-02-04 10:55:31 +01:00
Jérémy Lecour 6c84ada361 redis: s/content/block/ to workaround the blockinfile bug 2021-02-04 10:55:31 +01:00
Brice Waegeneire 1785e6a500 nginx: fix server-status
continuous-integration/drone/push Build is passing Details
2021-02-03 16:25:08 +01:00
Jérémy Dubois 02ba81884d MàJ IPs Evolix minifirewall + spamassassin
continuous-integration/drone/push Build is passing Details
2021-01-20 15:45:04 +01:00
Mathieu Trossevin 633d5644cb Merge pull request 'lxc-php: Do not bind the mysql socket by default' (#122) from mtrossevin/ansible-roles:packweb-multi-php2_patch into unstable
continuous-integration/drone/push Build is passing Details
Reviewed-on: #122
2021-01-11 15:27:33 +01:00
Mathieu Trossevin 2e29dc2440 lxc-php: Do not bind the mysql socket by default
continuous-integration/drone/pr Build is failing Details
The lxc-php role can be run on a server without mysql. Attempting to
bindmount the mysql socket in such a case cause the lxc container to
fail to start.

This commit add a variable, lxc_php_create_mysql_link defaulting to
false telling ansible if it should bindmount the MySQL socket to the
container.
2021-01-11 15:20:25 +01:00
Brice Waegeneire 1576375417 postgresql: Fix postgresql@.service customization
continuous-integration/drone/push Build is passing Details
2021-01-08 14:46:38 +01:00
Jérémy Lecour 024d30ea43 evoacme: upstream release 21.01
continuous-integration/drone/push Build is passing Details
2021-01-07 19:16:06 +01:00
Jérémy Lecour 0e32e0d2aa certbot: use a fixed 1.9.0 version of the certbot-auto script (renamed "letsencrypt-auto")
continuous-integration/drone/push Build is passing Details
2021-01-07 18:55:44 +01:00
Jérémy Lecour 8c54fd8c16 apache: new variables for logrotate + server-status
continuous-integration/drone/push Build is passing Details
2021-01-05 17:47:56 +01:00
Jérémy Lecour 19da5ea1f7 Release 10.4.0
continuous-integration/drone/push Build is passing Details
continuous-integration/drone/pr Build is passing Details
2020-12-24 14:00:37 +01:00
Jérémy Lecour 7ec0748383 certbot: detect domains if missing
continuous-integration/drone/push Build is passing Details
2020-12-24 13:56:43 +01:00
Jérémy Lecour 442e9bcda8 cerbot: hook to sync certificates to remote servers 2020-12-24 13:56:43 +01:00
Jérémy Lecour 4dbd1b0bee certbot: disable auth for Let's Encrypt challenge 2020-12-24 10:33:48 +01:00
Eric Morino feda9a63d8 Add directive auth_basic off for nginx configuration
continuous-integration/drone/push Build is passing Details
2020-12-24 10:03:43 +01:00
Eric Morino dd8b989bbe Add directive auth_basic off for nginx configuration
continuous-integration/drone/push Build is passing Details
2020-12-24 10:02:27 +01:00
Jérémy Lecour 1d56e002b4 nginx: change from "nginx_status-XXX" to "server-status-XXX"
continuous-integration/drone/push Build is passing Details
2020-12-23 15:53:36 +01:00
Jérémy Lecour 51cec4bce1 whitespaces 2020-12-23 15:51:59 +01:00
Jérémy Lecour 6ee66d0a74 varnish: add tags 2020-12-23 15:43:05 +01:00
Jérémy Lecour 74ac4c7570 haproxy: add tags 2020-12-23 15:42:57 +01:00
Jérémy Lecour 66a6e67de2 varnish: variable for jail configuration
continuous-integration/drone/push Build is passing Details
2020-12-21 23:33:14 +01:00
Jérémy Lecour 1922b51fbe Release 10.3.0
continuous-integration/drone/push Build is passing Details
continuous-integration/drone/pr Build is passing Details
2020-12-21 16:03:49 +01:00
Jérémy Lecour 67ce8de85e varnish: custom reload script is now useless
continuous-integration/drone/push Build is passing Details
continuous-integration/drone/pr Build is passing Details
2020-12-20 23:25:34 +01:00
Jérémy Lecour 0f5ce44186 varnish: change template name for better readability
continuous-integration/drone/push Build is passing Details
2020-12-20 23:04:17 +01:00
Jérémy Lecour d430dea043 whitespaces 2020-12-20 23:03:51 +01:00
Jérémy Lecour 3e72d6961c varnish: no threadpool delay by default 2020-12-20 23:03:37 +01:00
Jérémy Lecour 8861169a04 varnish: config file name is configurable 2020-12-20 23:03:10 +01:00
Jérémy Lecour 81fbd98a5f evolinux-users: improve uid/login checks
continuous-integration/drone/push Build is passing Details
2020-12-17 15:25:48 +01:00
Jérémy Lecour 0b528f15da tomcat-instance: fail if uid already exists
continuous-integration/drone/push Build is passing Details
2020-12-17 08:06:44 +01:00
Jérémy Lecour 5b2d3b09d0 Create system users for vmail (dovecot) and evoadmin 2020-12-17 08:05:16 +01:00
Jérémy Lecour 3c4986275c evocheck: upstream release 20.12
continuous-integration/drone/push Build is passing Details
2020-12-08 11:07:42 +01:00
Jérémy Lecour 772bce8c0b dovecot: vmail uid/gid are configurable 2020-12-07 17:26:45 +01:00
Jérémy Lecour 4d6f88f0f4 minifirewall: add variables to force upgrade the script and the config (default: False)
continuous-integration/drone/push Build is passing Details
2020-12-07 17:23:37 +01:00
Eric Morino c324866cd2 Add set variables for debian stretch and jessie
continuous-integration/drone/push Build is passing Details
2020-12-07 16:45:32 +01:00
Ludovic Poujol 1160a5e809 postgresql: correct confitinal on set_fact
continuous-integration/drone/push Build is passing Details
2020-12-07 16:43:59 +01:00
Eric Morino 0f7dcb57b1 add postgresql_version to empty
continuous-integration/drone/push Build is passing Details
2020-12-07 16:24:11 +01:00
Eric Morino 2a94a3bdf1 fix packages_buster
continuous-integration/drone/push Build is passing Details
2020-12-07 16:21:57 +01:00
Eric Morino 5522f822f7 add set facts for buster
continuous-integration/drone/push Build is passing Details
2020-12-07 16:18:56 +01:00
Jérémy Lecour 98f798b9fb cerbot: parse HAProxy config file only if HAProxy is found
continuous-integration/drone/push Build is passing Details
2020-12-03 17:26:16 +01:00
Jérémy Lecour 84bd3372d5 blockinfile: change from "content" to "block"
continuous-integration/drone/push Build is passing Details
It solves the diff bug :
https://github.com/ansible/ansible/issues/62315
2020-12-02 15:22:35 +01:00
Jérémy Lecour fc71bb5945 minifirewall: upstream release 20.12 2020-12-01 22:57:13 +01:00
Jérémy Lecour 9aa24f4cde minifirewall: Docker support
continuous-integration/drone/push Build is passing Details
2020-12-01 22:47:38 +01:00
Jérémy Lecour b6817cb62c evoacme: upstream release 20.12
continuous-integration/drone/push Build is passing Details
2020-12-01 22:27:05 +01:00
Jérémy Lecour 18ac1e7279 redis: check maxmemory in NRPE check
continuous-integration/drone/push Build is passing Details
If "maxmemory" is set and "maxmemory-policy" is missing or set to 
"noeviction" then we enforce the "maxmemory" limit
2020-12-01 19:02:42 +01:00
Eric Morino ae07d508cf Fix key and update just after add pgdg repo key
continuous-integration/drone/push Build is passing Details
2020-11-30 10:51:34 +01:00
Eric Morino aa62555e9e Fix name file preference for PGDG repository 2020-11-27 11:07:18 +01:00
Jérémy Lecour 86d59cbb5f mysql: install save_mysql_processlist script 2020-11-24 13:59:04 +01:00
Ludovic Poujol 1d8b7c3bea apt: disable APT Periodic
This interfere with our usual workflow (listupgrade)

Note : Using 0 instead of false is intentional, The value is used by the
apt-daily script that except a "0" to disable itself.
2020-11-24 11:19:18 +01:00
Jérémy Lecour 592030ee9a evoacme: variable to disable Debian version check (default: False) 2020-11-21 09:59:10 +01:00
Jérémy Lecour b43d0f3629 evoacme: upstream release 20.11 2020-11-19 21:21:07 +01:00