Commit graph

2222 commits

Author SHA1 Message Date
Benoît S. 0fd8128f94 generate-ldif: Skip some odd ethernet devices 2020-06-30 04:36:04 +02:00
Benoît S. 0cd889e4fb generate-ldif: Add NVMe disk support 2020-06-30 04:10:03 +02:00
Mathieu Trossevin e22703425d Add filters and arbitrary options
Some checks failed
continuous-integration/drone/pr Build is failing
(+ Make config file a bit more readable)
2020-06-29 10:04:48 +02:00
Benoît S. 9a8f1979bc evolinux-base: check_hpraid.cron.sh: Fixed wrong else
All checks were successful
continuous-integration/drone/push Build is passing
The logic was wrong, an else part was not necessary.
2020-06-26 17:57:50 +09:00
Benoît S. a28b9558cb evolinux-base: check_hpraid.cron.sh: Better logic and use mail
All checks were successful
continuous-integration/drone/push Build is passing
First step is to detect errors
Second step is to detect different state

Added mail comand to replace cron output
2020-06-24 18:57:08 +09:00
Jérémy Lecour 9bdd5ad9e7 haproxy: rotate logs with date extension and immediate compression
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-22 19:02:29 +02:00
Mathieu Trossevin 129a2b4da7 Add maxscale tag to tasks in maxscale role 2020-06-22 10:07:06 +02:00
Mathieu Trossevin c1776d7859 [maxscale] Add README
Some checks failed
continuous-integration/drone/pr Build is failing
Add the README for the maxscale role
2020-06-18 10:58:15 +02:00
Mathieu Trossevin 94f088e1bf Create role to install MariaDB MaxScale
This role have to add the official MariaDB MaxScale repository as
maxscale isn't in the Debian repositories. Moreover as maxscale need two
mysql users to works, the role can also create these users if requested
and ansible has access to a master server.
2020-06-18 10:58:15 +02:00
Mathieu Trossevin c5bf537022 Repair mysql playbook
Some checks failed
continuous-integration/drone/pr Build is failing
restart xinetd: state should be restarted, not restart
2020-06-17 16:17:18 +02:00
Mathieu Trossevin 5e13f8da4e lxc-php: Make mysql socket binding work on fresh install
/var/run/mysqld only exist after mysql is installed, as such the role
lxc-php need to run after the role mysql.

Also only cause a restart of the containers when their configuration has
been changed.

For now socket binding might only work for mysql and not mysql-oracle
(it's default socket seems to be /tmp/mysql.sock).
2020-06-17 16:06:54 +02:00
Mathieu Trossevin 49b20f9b12 lxc-php: Have mysqld.sock inside of a directory
Bind mount don't seems to work on a file so the default socket is now
always named mysqld.sock and the configurable variable is
php_conf_mysql_socket_dir that define the directory the socket will be
in.
2020-06-17 16:06:54 +02:00
Mathieu Trossevin 1d9ab0f1f3 Allows using localhost to connect to MySQL in lxc
Add 'php_conf_mysql_default_socket' variable to lxc-php role that
configure both the lxc containers and PHP so that a local MySQL database
may be used through localhost.

The PHP containers will automount /var/run/mysqld/mysqld.sock (the
default path to the mysql socket) to the path defined by the variable
'php_conf_mysql_default_socket' which will be the path used by php to
contact MySQL both with mysqli and PDO_MYSQL.
2020-06-17 16:06:53 +02:00
Benoît S. de908ae5bd nagios-nrpe: check_amavis: Update regex
Some checks failed
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
I just installed a Debian Stretch with a pack mail and the check_amavis
was not checking the right regex.

Amavis is returning:
2.7.0 Ok, discarded, id=17556-09 - INFECTED: Eicar-Signature
So the regex should be:
-if ($result =~/2.7.0 Ok, discarded, id=[^,]+ - INFECTED: Eicar-Test-Signature/) {
+if ($result =~/2.7.0 Ok, discarded, id=\S+ - INFECTED: Eicar-Signature/) {
2020-06-17 12:20:33 +09:00
Benoît S. 1d7d2ce08d squid: Update regex for sa-update domains.
Some checks failed
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
List of domains is like:

http://sa-update.dnswl.org/ weight=3

http://www.sa-update.pccc.com/ weight=5

http://sa-update.secnap.net/ weight=5

http://sa-update.space-pro.be/ weight=1

http://sa-update.ena.com/ weight=5

http://sa-update.razx.cloud/ weight=5

http://sa-update.fossies.org/ weight=1

http://sa-update.verein-clean.net/ weight=10

http://sa-update.bitwell.fi/ weight=5

http://sa-update.spamassassin.org/ weight=10

They all start sa-update.*, except for http://www.sa-update.pccc.com/.
In that case, we just match sa-update on the domain name.
2020-06-17 11:25:24 +09:00
Jérémy Lecour 977c28c720 varnish: fix start command when multiple addresses are present
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-16 13:51:07 +02:00
Benoît S. 766b4dfa82 evolinux-base: check_hpraid cron: Add -p
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-16 13:20:43 +09:00
Benoît S. a74f4e1890 evolinux-base/tasks/hardware.yml: Removed trailing whitespace
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-16 12:42:33 +09:00
Benoît S. 4bec21a9f3 evolinux-base: harware: Support HP gen >=10 RAID controller
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-16 12:35:56 +09:00
Benoît S. 241f50d27e nagios-nrpe: check_hpraid: Update known working RAID controllers 2020-06-16 12:34:48 +09:00
Benoît S. 74229809ff nagios-nrpe: Add check_hpraid in template 2020-06-16 12:28:10 +09:00
Benoît S. 09e17ffe6c nagios-nrpe: check_hpraid: Use printf for return lines
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-16 11:16:44 +09:00
Benoît S. b47d2b872c nagios-nrpe: check_hpraid: Fixed wrong grep in EXCLUDE_BATTERY
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-16 10:57:18 +09:00
Benoît S. d49da6954a nagios-nrpe: check_hpraid: Fix wrong command name in examples
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-16 10:53:00 +09:00
Benoît S. 6126be95e3 nagios-nrpe: check_hpraid: Be sure that variables are bound
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-16 10:36:24 +09:00
Jérémy Lecour ce7468816f haproxy: deport SSL tuning to Mozilla SSL generator
All checks were successful
continuous-integration/drone/push Build is passing
There are too many combinations and they change every so often.
It's better to direct the user to the generator to have a good 
configuration.
2020-06-15 22:47:08 +02:00
Jérémy Lecour 30cdbae981 haproxy: split stats variables 2020-06-15 22:45:22 +02:00
Jérémy Lecour 011761eb8f haproxy: add deny_ips file to reject connections
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-14 23:28:29 +02:00
Jérémy Lecour 8465743973 haproxy: add some comments to default config 2020-06-14 23:27:50 +02:00
Jérémy Lecour 01a486b20a haproxy: simplify syntax fos stats section 2020-06-14 23:19:40 +02:00
Jérémy Lecour ac4ef5ff96 whitespaces 2020-06-14 19:47:16 +02:00
Jérémy Lecour 4bf5b1daa6 nginx: read server-status values before changing the config
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-14 12:49:10 +02:00
Jérémy Lecour f47af9f54f haproxy: preconfigure SSL with defaults
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-14 12:37:04 +02:00
Jérémy Lecour 7f54b8ab60 haproxy: adapt backports installed package list to distibution 2020-06-14 12:37:04 +02:00
Jérémy Lecour e5d4ea3c18 nginx: make default vhost configurable 2020-06-14 12:37:04 +02:00
Jérémy Lecour ce0d61bcbd certbot: detect HAProxy cert directory 2020-06-14 12:37:04 +02:00
Patrick Marchand 0fee07f47e Fix variable par défaut manquante dans mysql
All checks were successful
continuous-integration/drone/push Build is passing
Le lower_case_table_names doit être mis à Null pour que le check marche.
2020-06-10 10:37:36 -04:00
Jérémy Lecour a8887aaa8e update changelog
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-09 11:45:19 +02:00
Jérémy Lecour 4c71ea2012 haproxy: enable stats frontend with access lists
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-09 11:41:33 +02:00
Patrick Marchand c9daa8ba35 evobackup-client: Fix ssh connection test in zzz_evobackup.sh
All checks were successful
continuous-integration/drone/push Build is passing
When I made the ssh key name a variable and defaulted it to id_ed25519,
I forgot to change the hardcoded value for the ssh test in
evobackup-client/templates/zzz_evobackup.default.sh.j2
2020-06-08 17:22:18 -04:00
Jérémy Lecour d9f9d03140 evoacme: read values from environment before defaults file
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-05 11:31:42 +02:00
Jérémy Lecour 1ade990526 mongodb: fix logrotate patterm on Debian buster
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-05 11:02:54 +02:00
Eric Morino 2fbf1ff9f9 Force owner opendkim for /etc/opendkim/ folder
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-05 11:00:22 +02:00
Jérémy Lecour 7f0931510f evoacme: upstream release 20.06.1
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-05 11:01:42 +02:00
Ludovic Poujol ebffccae59 lxc-php: Do --no-install-recommends for ssmtp/opensmtpd
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-05 11:01:22 +02:00
Ludovic Poujol 186f3d90b9 lxc-php: Install opensmtpd as intended 2020-06-05 10:57:49 +02:00
Ludovic Poujol 0dfb92360f php: Don't disable putenv() by default in PHP settings
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-04 11:52:04 +02:00
Ludovic Poujol 90704dc712 lxc-php: Don't disable putenv() by default in PHP settings 2020-06-04 11:51:25 +02:00
Ludovic Poujol ead0b7fd88 lxc-php: Install php-sqlite by default
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-04 11:42:17 +02:00
Ludovic Poujol 8c883c44dd php: Install php-sqlite by default 2020-06-04 11:39:51 +02:00