evolix/ansible-roles
22
2
Fork 2
Code Issues 61 Pull requests 18 Releases 32 Wiki Activity
2144 commits 76 branches 56 tags 128 MiB
Commit graph

2144 commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Mathieu Trossevin 5e13f8da4e lxc-php: Make mysql socket binding work on fresh install 
/var/run/mysqld only exist after mysql is installed, as such the role
lxc-php need to run after the role mysql.

Also only cause a restart of the containers when their configuration has
been changed.

For now socket binding might only work for mysql and not mysql-oracle
(it's default socket seems to be /tmp/mysql.sock).
 2020-06-17 16:06:54 +02:00
Mathieu Trossevin 49b20f9b12 lxc-php: Have mysqld.sock inside of a directory 
Bind mount don't seems to work on a file so the default socket is now
always named mysqld.sock and the configurable variable is
php_conf_mysql_socket_dir that define the directory the socket will be
in.
 2020-06-17 16:06:54 +02:00
Mathieu Trossevin 1d9ab0f1f3 Allows using localhost to connect to MySQL in lxc 
Add 'php_conf_mysql_default_socket' variable to lxc-php role that
configure both the lxc containers and PHP so that a local MySQL database
may be used through localhost.

The PHP containers will automount /var/run/mysqld/mysqld.sock (the
default path to the mysql socket) to the path defined by the variable
'php_conf_mysql_default_socket' which will be the path used by php to
contact MySQL both with mysqli and PDO_MYSQL.
 2020-06-17 16:06:53 +02:00
Jérémy Lecour 977c28c720 varnish: fix start command when multiple addresses are present
All checks were successful
continuous-integration/drone/push Build is passing
Details
2020-06-16 13:51:07 +02:00
Jérémy Lecour ce7468816f haproxy: deport SSL tuning to Mozilla SSL generator
All checks were successful
continuous-integration/drone/push Build is passing
Details 
There are too many combinations and they change every so often.
It's better to direct the user to the generator to have a good 
configuration.
 2020-06-15 22:47:08 +02:00
Jérémy Lecour 30cdbae981 haproxy: split stats variables 2020-06-15 22:45:22 +02:00
Jérémy Lecour 011761eb8f haproxy: add deny_ips file to reject connections
All checks were successful
continuous-integration/drone/push Build is passing
Details
2020-06-14 23:28:29 +02:00
Jérémy Lecour 8465743973 haproxy: add some comments to default config 2020-06-14 23:27:50 +02:00
Jérémy Lecour 01a486b20a haproxy: simplify syntax fos stats section 2020-06-14 23:19:40 +02:00
Jérémy Lecour ac4ef5ff96 whitespaces 2020-06-14 19:47:16 +02:00
Jérémy Lecour 4bf5b1daa6 nginx: read server-status values before changing the config
All checks were successful
continuous-integration/drone/push Build is passing
Details
2020-06-14 12:49:10 +02:00
Jérémy Lecour f47af9f54f haproxy: preconfigure SSL with defaults
All checks were successful
continuous-integration/drone/push Build is passing
Details
2020-06-14 12:37:04 +02:00
Jérémy Lecour 7f54b8ab60 haproxy: adapt backports installed package list to distibution 2020-06-14 12:37:04 +02:00
Jérémy Lecour e5d4ea3c18 nginx: make default vhost configurable 2020-06-14 12:37:04 +02:00
Jérémy Lecour ce0d61bcbd certbot: detect HAProxy cert directory 2020-06-14 12:37:04 +02:00
Patrick Marchand 0fee07f47e Fix variable par défaut manquante dans mysql
All checks were successful
continuous-integration/drone/push Build is passing
Details 
Le lower_case_table_names doit être mis à Null pour que le check marche.
 2020-06-10 10:37:36 -04:00
Jérémy Lecour a8887aaa8e update changelog
All checks were successful
continuous-integration/drone/push Build is passing
Details
2020-06-09 11:45:19 +02:00
Jérémy Lecour 4c71ea2012 haproxy: enable stats frontend with access lists
All checks were successful
continuous-integration/drone/push Build is passing
Details
2020-06-09 11:41:33 +02:00
Patrick Marchand c9daa8ba35 evobackup-client: Fix ssh connection test in zzz_evobackup.sh
All checks were successful
continuous-integration/drone/push Build is passing
Details 
When I made the ssh key name a variable and defaulted it to id_ed25519,
I forgot to change the hardcoded value for the ssh test in
evobackup-client/templates/zzz_evobackup.default.sh.j2
 2020-06-08 17:22:18 -04:00
Jérémy Lecour d9f9d03140 evoacme: read values from environment before defaults file
All checks were successful
continuous-integration/drone/push Build is passing
Details
2020-06-05 11:31:42 +02:00
Jérémy Lecour 1ade990526 mongodb: fix logrotate patterm on Debian buster
All checks were successful
continuous-integration/drone/push Build is passing
Details
2020-06-05 11:02:54 +02:00
Eric Morino 2fbf1ff9f9 Force owner opendkim for /etc/opendkim/ folder
All checks were successful
continuous-integration/drone/push Build is passing
Details
2020-06-05 11:00:22 +02:00
Jérémy Lecour 7f0931510f evoacme: upstream release 20.06.1
All checks were successful
continuous-integration/drone/push Build is passing
Details
2020-06-05 11:01:42 +02:00
Ludovic Poujol ebffccae59 lxc-php: Do --no-install-recommends for ssmtp/opensmtpd
All checks were successful
continuous-integration/drone/push Build is passing
Details
2020-06-05 11:01:22 +02:00
Ludovic Poujol 186f3d90b9 lxc-php: Install opensmtpd as intended 2020-06-05 10:57:49 +02:00
Ludovic Poujol 0dfb92360f php: Don't disable putenv() by default in PHP settings
All checks were successful
continuous-integration/drone/push Build is passing
Details
2020-06-04 11:52:04 +02:00
Ludovic Poujol 90704dc712 lxc-php: Don't disable putenv() by default in PHP settings 2020-06-04 11:51:25 +02:00
Ludovic Poujol ead0b7fd88 lxc-php: Install php-sqlite by default
All checks were successful
continuous-integration/drone/push Build is passing
Details
2020-06-04 11:42:17 +02:00
Ludovic Poujol 8c883c44dd php: Install php-sqlite by default 2020-06-04 11:39:51 +02:00
Ludovic Poujol c7d456471b packweb-apache: Install zip & unzip by default 2020-06-04 11:34:26 +02:00
Jérémy Lecour 2ca7872eef haproxy: syntax and whitespaces
All checks were successful
continuous-integration/drone/push Build is passing
Details
2020-06-04 11:22:58 +02:00
Jérémy Lecour 3bd0a4ffb3 certbot: restore compatibility with old Nginx 2020-06-04 11:22:58 +02:00
Jérémy Lecour 9aed38b637 certbot: install certbot dependencies non-interactively for jessie 2020-06-04 11:22:58 +02:00
Jérémy Dubois 1a0872c507 nagios-nrpe / evolinux-base : new ntp server variable
All checks were successful
continuous-integration/drone/push Build is passing
Details 
Online hosted servers must use ntp.online.net as
ntp server, because others one are rate limited.
Default ntp server is pool.ntp.org, and a custom
one can be set with the nagios_nrpe_ntp_server
variable.
 2020-06-04 10:55:48 +02:00
Jérémy Lecour 1d5a30b144 evoacme: upstream release 20.06
All checks were successful
continuous-integration/drone/push Build is passing
Details
2020-06-03 12:09:58 +02:00
Patrick Marchand c8cd119a18 Merge pull request 'Make it possible to setup mysql replication' (#102) from mysql_replication into unstable
All checks were successful
continuous-integration/drone/push Build is passing
Details
2020-06-02 17:31:13 +02:00
Jérémy Lecour 4cf438c8ff redis: raise an error is port 6379 is used in "instance" mode
All checks were successful
continuous-integration/drone/push Build is passing
Details
2020-06-02 11:22:56 +02:00
Jérémy Lecour 8a87fecbe4 redis: new syntax for match filter
All checks were successful
continuous-integration/drone/push Build is passing
Details
2020-06-02 11:00:06 +02:00
Jérémy Lecour 47d11308ba redis: create sudoers file if missing 2020-06-02 10:59:51 +02:00
Jérémy Lecour 86cab2ab94 haproxy: chroot and socket path are configurable 2020-06-02 10:58:10 +02:00
Jérémy Lecour 3fe1138a98 whitespaces 2020-06-02 10:57:16 +02:00
Patrick Marchand 8c1e40c1a9 Add option to make a mysql install read only
Some checks failed
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone/pr Build is failing
Details 
Rebased on unstable
 2020-06-01 12:03:23 -04:00
Patrick Marchand 5b9cc3af31 Added mysql_innodb_log_file_size option to the mysql role 
Makes it possible to have larger binary entries when replicating.
 2020-06-01 12:01:01 -04:00
Patrick Marchand 1a96616f42 Fix right problem in mysql replication 
The configuration file was not set to 0644, which caused the file
to be ignored by mysql and it's configuration not to be set.
 2020-06-01 12:01:01 -04:00
Patrick Marchand b80f3993ae Added some mysql variables and allowed forcing config update 
The default behaviour is kept, but this way we can manage a mysql
installation from ansible.
 2020-06-01 12:01:01 -04:00
Patrick Marchand d15819fb04 Replication should set a binlog format 
This could possible be better served in the base config file, but
for now I'll keep it here.
 2020-06-01 12:01:01 -04:00
Patrick Marchand 6289c7fe1c Removed redundant nagios checks 
They are already installed by the base roles.
 2020-06-01 12:01:01 -04:00
Patrick Marchand 45fba1f878 Removed useless dbadmin script from mysql replication tasks 
It was used by a very specific client case and is not needed for a
general role.
 2020-06-01 12:01:01 -04:00
Patrick Marchand c319be2542 Make it possible for mysql role to copy evolix scripts 
Based myself off of the webapps/evoadmin-web role, but I'm not sure
we still consider this a hack or not. We use a read only /usr fs,
so we need to remount it to add scripts in /usr/local/share.
 2020-06-01 12:01:01 -04:00
Patrick Marchand 31f002f9d9 Added option to prepare mysql servers for replication 2020-06-01 12:01:01 -04:00