Jérémy Lecour
749d6a78cd
redis: Add log2mail user to redis group
2022-05-05 09:40:30 +02:00
Jérémy Lecour
61cd2b7428
minifirewall: upstream release 22.04
continuous-integration/drone/push Build is passing
2022-04-28 19:14:31 +02:00
Jérémy Lecour
a53159c93b
minifirewall: compatibility with "legacy" version of minifirewall
continuous-integration/drone/push Build is passing
2022-04-28 12:40:02 +02:00
Jérémy Lecour
805a8ecb3a
etc-git: use "ansible-commit" to efficiently commit all available repositories (including /etc inside LXC) from Ansible
2022-04-27 14:22:59 +02:00
Jérémy Lecour
381a71aca1
dump-server-state: upstream release 22.04.3
continuous-integration/drone/push Build is passing
2022-04-26 18:21:42 +02:00
Jérémy Lecour
55356857b2
dump-server-state: upstream release 22.04.2
continuous-integration/drone/push Build is passing
2022-04-26 09:56:49 +02:00
Jérémy Lecour
daa54cac8f
evocheck: upstream release 22.04.1
2022-04-26 09:56:49 +02:00
Jérémy Lecour
5935d9d4a3
evocheck: upstream release 22.04
continuous-integration/drone/push Build is passing
2022-04-25 09:58:07 +02:00
Jérémy Lecour
58909bc395
vrrpd: Store sysctl values in specific file
2022-04-22 09:32:37 +02:00
Jérémy Lecour
a5bae6645e
dump-server-state: upstream release 22.04.1
continuous-integration/drone/push Build encountered an error
2022-04-20 11:07:20 +02:00
Jérémy Dubois
9161fae0c4
openvpn: use a local copy of files instead of cloning an external git repository
continuous-integration/drone/push Build was killed
2022-04-14 16:34:43 +02:00
Jérémy Dubois
4bf14b9a22
munin: Add possibility to install local plugins, and install dhcp_pool plugin
continuous-integration/drone/push Build was killed
2022-04-14 10:45:24 +02:00
Ludovic Poujol
959d6a8579
redis : Activate overcommit sysctl
2022-04-12 11:27:46 +02:00
Jérémy Lecour
84178d6b24
Tomcat 9 by default with Debian 11
continuous-integration/drone/push Build was killed
2022-04-08 11:57:35 +02:00
Jérémy Dubois
5b2fecb49c
Make evocommit fully compatible with OpenBSD
continuous-integration/drone/push Build was killed
2022-04-07 10:18:08 +02:00
Jérémy Lecour
e71201ab46
dump-server-state: upstream release 22.04
continuous-integration/drone/push Build was killed
2022-04-03 11:18:43 +02:00
Jérémy Dubois
726735d269
etc-git : Remount /usr in rw for git gc in in /usr/share/scripts/
2022-04-01 15:47:44 +02:00
Jérémy Dubois
6434adcc62
nagios-nrpe: Add a check dhcp_pool
continuous-integration/drone/push Build was killed
2022-03-31 16:01:23 +02:00
Jérémy Lecour
ed6ca9a85a
minifirewall: upstream release 22.03.5
continuous-integration/drone/push Build was killed
2022-03-30 22:45:13 +02:00
Mathieu Trossevin
5dc6a1d36b
etc-git: Commit changes to /etc in containers
continuous-integration/drone/push Build was killed
continuous-integration/drone/pr Build was killed
2022-03-30 16:33:00 +02:00
Jérémy Lecour
31c2629d31
minifirewall: configure proxy/backup/sysctl values
continuous-integration/drone/push Build was killed
2022-03-30 09:42:56 +02:00
Mathieu Trossevin
20abe0e09a
postfix: Skip milters after amavis (in packmail)
...
continuous-integration/drone/push Build was killed
Otherwise opendkim will sign local mails twice AND sign external mails
(pretending to be) from local domains as if they were local mails.
2022-03-29 16:06:12 +02:00
Jérémy Lecour
75459baa35
dump-server-state: upstream release 22.03.10
continuous-integration/drone/push Build was killed
2022-03-29 09:11:35 +02:00
Jérémy Lecour
3feacd0c6d
update CHANGELOG
continuous-integration/drone/push Build was killed
2022-03-28 13:28:48 +02:00
Jérémy Lecour
54bf9c1854
evolinux-base: rename backup-server-state to dump-server-state
continuous-integration/drone/push Build was killed
2022-03-27 09:18:15 +02:00
Jérémy Lecour
85d429295f
minifirewall: tail template follows symlinks
continuous-integration/drone/push Build was killed
2022-03-25 18:12:24 +01:00
Jérémy Lecour
bbc1bae437
minifirewall: upstream release 22.03.4
continuous-integration/drone/push Build was killed
continuous-integration/drone/pr Build was killed
2022-03-25 14:57:10 +01:00
Jérémy Dubois
d2fa14fb4f
backup-server-state: release 22.03.5
continuous-integration/drone/push Build was killed
2022-03-24 18:15:56 +01:00
Jérémy Dubois
42782b7f3d
evolinux-base: fix show_help in backup-server-state.sh
...
continuous-integration/drone/push Build was killed
* --uname and --no-uname options were not in help
* --services and --no-services were in help whereas --systemctl and --no-systemctl are used in options parsing
2022-03-24 17:57:58 +01:00
Mathieu Trossevin
1646cc99bf
redis: Remount /usr with RW when adding nagios plugin
continuous-integration/drone/push Build was killed
2022-03-23 13:55:54 +01:00
Jérémy Dubois
b4f83e54d0
openvpn: use a subnet topology instead of the net30 default topology
continuous-integration/drone/push Build was killed
2022-03-23 10:46:17 +01:00
Jérémy Dubois
c2f6ff5249
evocheck: upstream release 22.03.1
continuous-integration/drone/push Build was killed
2022-03-22 11:03:26 +01:00
Jérémy Lecour
5895f5a99b
minifirewall: upstream release 22.03.3
continuous-integration/drone/push Build was killed
2022-03-21 14:35:20 +01:00
Jérémy Lecour
e7594c6c86
evolinux-base: backup-server-state release 22.03.2
continuous-integration/drone/push Build was killed
2022-03-21 11:32:08 +01:00
Mathieu Trossevin
444bd72944
generate-ldif: Correct generated entries for php-fpm in containers
continuous-integration/drone/push Build was killed
2022-03-17 17:36:35 +01:00
Jérémy Lecour
fb41c81e99
backup-server-state: release 22.03.2
...
continuous-integration/drone/push Build was killed
update documentation for --dpkg-full vs. --dpkg-status
2022-03-17 10:45:44 +01:00
Jérémy Lecour
8a9faa0250
* minifirewall: upstream release 22.03.2
continuous-integration/drone/push Build was killed
2022-03-16 23:49:34 +01:00
Jérémy Lecour
545226f6f6
evocheck: upstream release 22.03
continuous-integration/drone/push Build was killed
2022-03-15 23:25:15 +01:00
Jérémy Lecour
ba90203f21
minifirewall: upstream release 22.03.1 and use includes directory
continuous-integration/drone/push Build was killed
2022-03-15 23:07:33 +01:00
Ludovic Poujol
17f884b04a
evolinux-base: Add non-free repos & install non-free firmware on dedicated hardware
continuous-integration/drone/push Build was killed
2022-03-15 11:35:20 +01:00
Ludovic Poujol
913e6d96e8
generate-ldif: Add services check for bkctld
continuous-integration/drone/push Build was killed
2022-03-15 10:53:16 +01:00
Jérémy Lecour
a733e2794f
evolinux-base: backup-server-state release 22.03
continuous-integration/drone/push Build was killed
2022-03-08 16:49:53 +01:00
Mathieu Trossevin
9c84e95182
Repair keepalived role
continuous-integration/drone/push Build was killed
2022-03-02 16:23:01 +01:00
Jérémy Lecour
e5dc503cfd
Release 22.03
continuous-integration/drone/push Build was killed
2022-03-02 09:42:12 +01:00
Jérémy Lecour
270d03b6a6
evolinx-users: optimize sudo configuration
continuous-integration/drone/push Build was killed
2022-03-02 09:40:52 +01:00
Jérémy Lecour
1dc4d0e133
redis: always install check_redis_instances
continuous-integration/drone/push Build was killed
2022-03-01 14:04:05 +01:00
Jérémy Lecour
c8ef7e9b75
redis: check_redis_instances tolerates absence of instances
continuous-integration/drone/push Build was killed
2022-03-01 14:02:22 +01:00
Jérémy Lecour
d9e95218ce
apt_hold_packages: broadcast message with wall, if present
continuous-integration/drone/push Build was killed
2022-02-24 11:49:12 +01:00
Ludovic Poujol
39949ea921
generate-ldif: Add support for php-fpm in containers
continuous-integration/drone/push Build was killed
2022-02-21 11:31:00 +01:00
Ludovic Poujol
e79141d2d2
lxc: Fail if /var is nosuid
2022-02-17 16:25:20 +01:00
Jérémy Lecour
799466788f
lxc-php: preliminary support for PHP 8.1 container
continuous-integration/drone/push Build was killed
2022-02-17 14:50:21 +01:00
Jérémy Dubois
f3c443d076
openvpn: now check that openvpn has been restarted since last certificates renewal
continuous-integration/drone/push Build was killed
2022-02-15 15:52:21 +01:00
Ludovic Poujol
9995fca35d
varnish: update munin plugin to work with recent varnish versions
continuous-integration/drone/push Build was killed
2022-02-08 16:16:24 +01:00
Ludovic Poujol
a2f73bb7df
elasticsearch: Use /etc/elasticsearch/jvm.options.d/evolinux
instead of default /etc/elasticsearch/jvm.options
continuous-integration/drone/push Build was killed
2022-02-07 15:18:46 +01:00
Jérémy Dubois
981128dc17
openvpn: make it compatible with OpenBSD and add some improvements
continuous-integration/drone/push Build was killed
2022-02-03 18:35:16 +01:00
Jérémy Lecour
0cbdda840d
Explicit permissions for systemd overrides
continuous-integration/drone/push Build was killed
2022-02-03 14:18:20 +01:00
Jérémy Lecour
9e27d9707b
kvm-host: add missing default value
2022-02-03 14:16:45 +01:00
Jérémy Lecour
5153b88d01
evolinux-base: option to bypass raid-related tasks
2022-02-03 14:15:33 +01:00
Jérémy Lecour
3dd78fbf7e
Release 22.01.3
continuous-integration/drone/push Build was killed
continuous-integration/drone/pr Build was killed
2022-01-31 11:57:21 +01:00
Jérémy Lecour
fcb0b8c80f
backup-server-state: 22.01.3
continuous-integration/drone/push Build was killed
2022-01-28 16:27:39 +01:00
Jérémy Lecour
cd26081add
rbenv: install Ruby 3.1.0 by default
2022-01-28 16:27:20 +01:00
Jérémy Lecour
bb30402df3
Release 22.01.2
continuous-integration/drone/push Build was killed
continuous-integration/drone/pr Build was killed
2022-01-27 14:12:40 +01:00
Jérémy Lecour
6ccd0ea440
Release 22.01.1
continuous-integration/drone/pr Build was killed
continuous-integration/drone/push Build was killed
2022-01-27 14:04:41 +01:00
Jérémy Lecour
2849039fad
remount-usr: use findmnt to find if usr is a readonly partition
continuous-integration/drone/push Build was killed
2022-01-27 11:21:19 +01:00
Jérémy Lecour
80f8a94798
evolinux-base: many improvements for backup-server-state script
continuous-integration/drone/push Build was killed
2022-01-27 10:29:08 +01:00
Jérémy Lecour
bff8fcfebb
apt: upgrade packages after all the configuration is done
continuous-integration/drone/push Build was killed
continuous-integration/drone/pr Build was killed
2022-01-25 18:25:47 +01:00
Jérémy Lecour
0e34d4cd4b
Merge remote-tracking branch 'origin/bullseye-swap-top' into unstable
continuous-integration/drone/push Build was killed
2022-01-25 15:15:05 +01:00
Jérémy Lecour
1f4ee2de79
Prepare CHANGELOG for 22.01 release
continuous-integration/drone/push Build was killed
2022-01-25 15:00:03 +01:00
Mathieu Trossevin
1902c40c3c
lxc-php: Fix config for opensmtpd on bullseye
continuous-integration/drone/pr Build was killed
2022-01-25 11:57:41 +01:00
Jérémy Dubois
3822696db6
Update CHANGELOG for new openvpn role
continuous-integration/drone/push Build was killed
2022-01-24 19:23:26 +01:00
Jérémy Lecour
ca1f465aaa
nodejs: default to version 16 LTS
2022-01-12 13:04:22 +01:00
Jérémy Lecour
ec346a42a5
munin: systemd override to unprotect home directory
continuous-integration/drone/push Build was killed
2021-12-23 16:56:23 +01:00
Mathieu Trossevin
d3eef71127
nagios-nrpe: Fix check_nfsserver for buster and bullseye
...
continuous-integration/drone/pr Build is failing
From buster onward the nfs server doesn't run NFSv4 over UDP (it is out
of spec, see RFC 7530). As such the check broke as it attempt to check
the availability of NFSv4 over UDP.
Right now the check doesn't check for NFSv2 over UDP as it would need to
check if it exist first, as on bullseye it isn't supported by default
anymore.
2021-11-24 11:11:39 +01:00
Jérémy Lecour
e4bb0c6f55
filebeat/metricbeat: version 7.x y default
continuous-integration/drone/push Build is failing
2021-11-12 10:07:43 +01:00
Jérémy Lecour
039c740ef3
mysql: add evomariabackup 21.11
2021-11-01 10:16:55 +01:00
Jérémy Lecour
6cf8195744
evolinux-base: fix alert5.service dependency syntax
2021-10-29 07:52:38 +02:00
Jérémy Lecour
dcfea674a4
listupgrade: old-kernel-removal version 21.10
2021-10-25 14:23:52 +02:00
Jérémy Lecour
646a7b1813
evocheck: package install is not supported anymore
2021-10-25 10:08:40 +02:00
Jérémy Lecour
dd53c01027
evocheck: upstream release 21.10.4
2021-10-25 10:02:12 +02:00
Jérémy Dubois
90acb99c2a
nagios-nrpe: new check influxdb
2021-10-22 14:51:57 +02:00
Jérémy Lecour
ca28df1b75
evocheck: upstream release 21.10.3
2021-10-22 13:57:56 +02:00
Jérémy Lecour
1706361e8d
evocheck: upstream release 21.10.2
2021-10-22 13:43:43 +02:00
Jérémy Lecour
dcdde5f7f6
evocheck: upstream release 21.10.1
2021-10-21 17:32:11 +02:00
Ludovic Poujol
9b3bb39bd0
mysql : Create a default ~root/.my.cnf for compatibility reasons
2021-10-20 16:31:05 +02:00
Ludovic Poujol
b120a92203
evolinux-users + nagios-nrpe: Add support for php-fpm80 in lxc
2021-10-20 15:59:20 +02:00
Ludovic Poujol
a9d0d0958d
packweb-apache : Support php 8.0
2021-10-18 18:30:47 +02:00
Jérémy Dubois
d38119eb0f
nginx : fix variable name and debug
...
nginx_minimal defined the nginx_package_name_default variable which was not
used instead of the nginx_default_package_name variable
also fixed debug which was reversed, and add another one to be sure which mode
is used
2021-10-18 15:01:59 +02:00
Jérémy Lecour
bbd16dc5b4
evolinux-base: add script backup-server-state
2021-10-15 10:50:42 +02:00
Ludovic Poujol
73d6979e72
Various changes on mongodb (support 5.0) + fixes & compatibility
...
* mongodb: Deny the install on Debian 11 « Bullseye » when the version is unsupported
* mongodb: Support version 5.0 (for buster)
* mongodb: Allow to specify a mongodb version for buster & bullseye
* mongodb: Add missing remount-usr for munin plugins
2021-10-05 15:49:47 +02:00
Jérémy Lecour
7d63f20336
evoacme: exclude renewal-hooks directory from cron
2021-10-05 08:28:47 +02:00
Jérémy Lecour
7b14296503
etc-git: optimize maintenance tasks
...
* manage commits with an optimized shell script instead of many slow Ansible tasks
* centralize cron jobs in dedicated crontab
2021-10-02 12:50:01 +02:00
Jérémy Lecour
e089ddf091
evocheck: upstream release 21.10
2021-10-01 18:27:44 +02:00
Jérémy Lecour
b293cf2cf9
Install python 2 or 3 libraries according to running python version
2021-09-30 17:05:10 +02:00
Jérémy Lecour
5cbfda8f52
docker-host: install additional dependencies
2021-09-30 12:09:11 +02:00
Jérémy Lecour
9b479f9c05
evolinux-base: logs are rotated with dateext by default
2021-09-30 12:07:02 +02:00
Jérémy Lecour
4a035d248d
evocheck: upstream release 21.09
2021-09-30 10:45:07 +02:00
Jérémy Lecour
3de5de5304
mysql: improve Bullseye compatibility
2021-09-30 10:13:11 +02:00
Jérémy Lecour
0eb7332a34
php: enforce Debian version with assert instead of fail
2021-09-29 16:43:55 +02:00
Jérémy Lecour
73efee9caa
etc-git: purge old .git/index.lock (default: True)
2021-09-23 14:45:24 +02:00
Jérémy Lecour
1d55965527
logstash: no more dependency on Java
2021-09-21 14:43:58 +02:00
Jérémy Lecour
8233264d2a
logstash: logging to syslog is configurable (default: True)
2021-09-21 14:43:58 +02:00
Jérémy Lecour
ef1472cbba
logstash: elastic_stack_version = 7.x
2021-09-21 14:43:58 +02:00
Ludovic Poujol
f75354bb84
generate-ldif: detect mdadm
2021-09-16 17:26:58 +02:00
Ludovic Poujol
de4d814d74
generate-ldif: detect hardware raid card
2021-09-16 17:17:32 +02:00
Ludovic Poujol
6a2cd59e6d
nagios-nrpe + evolinux-users: new check ipmi
2021-09-16 16:48:03 +02:00
Ludovic Poujol
51fd2337f0
nagios-nrpe + evolinux-users: new check raid (soft + hard)
2021-09-16 16:40:57 +02:00
Ludovic Poujol
fa0c668cec
evolinux-base: install freeipmi by default on dedicated hw
2021-09-16 15:58:10 +02:00
Jérémy Lecour
2b549af7d9
evolinux-base: split dpkg logrotate configuration
2021-09-09 10:23:53 +02:00
Jérémy Lecour
e429f7aecb
squid: add *.o.lencr.org to default whitelist
2021-09-07 14:01:52 +02:00
Jérémy Lecour
e45ee59801
mysql: script "mysql-queries-killer.sh" to kill MySQL queries
2021-08-30 14:05:15 +02:00
Jérémy Lecour
65750d2aa6
evomaintenance: extract a config.yyml tasks file
2021-08-30 09:24:57 +02:00
Jérémy Lecour
ecba57ad75
evolinux-base: install molly-guard by default
2021-08-25 17:57:38 +02:00
Jérémy Lecour
2c7380240c
nagios-nrpe + evolinux-users: new checks for bkctld
2021-08-25 11:56:26 +02:00
Jérémy Lecour
066baf3538
Revert "bullseye-detect: this role is obsolete, Debian 11 has been fully released"
...
continuous-integration/drone/push Build is passing
This reverts commit c9f25f4638
.
2021-08-17 15:33:06 +02:00
Jérémy Lecour
ad457dd7ba
apt: use the new security repository for Bullseye
continuous-integration/drone/push Build is passing
2021-08-16 14:12:31 +02:00
Jérémy Lecour
969a5bce7d
apt: remove workaround for Evolix public repositories with Debian 11
continuous-integration/drone/push Build is passing
2021-08-16 13:50:53 +02:00
Jérémy Lecour
d186e21239
evoadmin-web: simpler PHP packages lists
2021-08-16 13:49:13 +02:00
Jérémy Lecour
c9f25f4638
bullseye-detect: this role is obsolete, Debian 11 has been fully released
2021-08-16 13:47:33 +02:00
Jérémy Lecour
139b342fbd
certbot: silence letsencrypt deprecation warnings
2021-07-20 17:19:57 +02:00
Jérémy Lecour
bf49ec8df5
mysql: script "mysql_connections" to display a compact list of connections
continuous-integration/drone/push Build is passing
2021-07-08 15:10:35 +02:00
Jérémy Lecour
32b5efa30e
evocheck: upstream release 21.07
continuous-integration/drone/push Build is passing
2021-07-07 15:20:24 +02:00
Jérémy Lecour
29ec7bdcf2
Remove embedded GPG keys only if legacy keyring is present
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
2021-07-04 22:08:47 +02:00
Jérémy Lecour
ffd7d0e504
evolinux-base: alert5 comes after the network
2021-07-04 22:07:51 +02:00
Jérémy Lecour
4167b6d2a9
fix CHANGELOG
2021-07-03 09:10:22 +02:00
Jérémy Lecour
3721c2ab38
squid: improve default whitelist
2021-07-03 08:56:23 +02:00
Jérémy Lecour
5905751a82
squid: must be started in foreground mode for systemd
2021-07-02 23:45:42 +02:00
Jérémy Lecour
a5658b7f26
packweb-apache: install phpMyAdmin from buster-backports
2021-07-02 21:18:06 +02:00
Jérémy Lecour
5c1ae6ed0c
spamassassin: change dependency on evomaintenance
...
Fail with an error if evomaintenance config is missing
instead of trying to install a package that doesn't exist anymore.
2021-07-02 21:16:43 +02:00
Jérémy Lecour
8a784c39ab
mongodb: create munin plugins directory if missing
2021-07-02 21:16:40 +02:00
Jérémy Lecour
9c8dd743c8
Use python3 packages on Debian 11 and later
2021-07-02 21:16:15 +02:00
Jérémy Lecour
6b87ead5b4
update changelog
2021-07-02 21:16:12 +02:00
Jérémy Lecour
e8a8e85819
redis: instance service for Debian 11
2021-07-02 21:13:42 +02:00
Jérémy Lecour
c5ab0c0ff9
squid: remove obsolete variable on Squid 4
2021-07-02 21:13:05 +02:00
Jérémy Lecour
f673ea85d1
Force Debian version to buster for Evolix repository
2021-07-02 21:12:33 +02:00
Jérémy Lecour
2c441f176a
mysql: mariadb-client-10.5 on Debian 11
2021-07-02 21:11:27 +02:00
Jérémy Lecour
c5bb8f06ae
mysql: use python3 with Debian 11 and later
2021-07-02 21:10:52 +02:00
Jérémy Lecour
51d4ec1bb2
php: remove php-gettext for 7.4
2021-07-02 21:10:04 +02:00
Jérémy Lecour
2f68ae5339
Preliminary support for Bullseye
2021-07-02 20:58:09 +02:00
Jérémy Lecour
90cbd17f9b
listupgrade: crontab is configurable
2021-07-02 14:01:46 +02:00
Jérémy Lecour
b0b24744d6
listupgrade: upstream release 21.06.3
2021-07-02 13:59:42 +02:00
Jérémy Lecour
11813c31a4
certbot: add script for manual deploy hooks execution
continuous-integration/drone/push Build is passing
2021-06-30 14:29:03 +02:00
Jérémy Lecour
51462c724c
certbot: sync_remote excludes itself
2021-06-30 07:39:57 +02:00
Jérémy Lecour
2ed1dac16b
Release 10.6.0
continuous-integration/drone/pr Build is passing
continuous-integration/drone/push Build is passing
2021-06-28 15:56:19 +02:00
Jérémy Lecour
0fe0244116
Update Galaxy metadata (company, platforms and galaxy_tags)
2021-06-28 15:26:28 +02:00
Jérémy Lecour
1890a79702
elasticsearch: inline YAML formatting of seed_hosts and initial_master_nodes
continuous-integration/drone/push Build is passing
2021-06-23 22:38:24 +02:00
Jérémy Lecour
4c1ef1bd56
elasticsearch: recent versiond don't depend on external JRE
2021-06-23 22:38:24 +02:00
Jérémy Lecour
6190c66445
listupgrade: upstream release 21.06.2
continuous-integration/drone/push Build is passing
2021-06-20 12:06:49 +02:00
Jérémy Lecour
dd32ab5688
listupgrade: upstream release 21.06.1
2021-06-20 10:32:16 +02:00
Jérémy Lecour
dbc853a815
listupgrade: upstream release 21.06
continuous-integration/drone/push Build is passing
2021-06-17 18:23:13 +02:00
Jérémy Lecour
4c7fed77c4
squid: add Yarn apt repository in default whitelist
continuous-integration/drone/push Build is passing
2021-06-17 18:19:20 +02:00
Jérémy Lecour
fe9b7ee5f7
evomaintenance: upstream release 0.6.4
continuous-integration/drone/push Build is passing
2021-06-17 10:57:07 +02:00
Jérémy Lecour
3d715bae35
kvm-host: replace the "kvm-tools" package with scripts deployed by Ansible
continuous-integration/drone/push Build is passing
2021-06-10 11:09:48 +02:00
Jérémy Lecour
ca40fad186
nodejs: change GPG key name
continuous-integration/drone/push Build is passing
2021-06-08 11:19:26 +02:00
Jérémy Lecour
856d11aced
nodejs: update apt cache before installing the package
2021-06-07 13:03:18 +02:00
Jérémy Lecour
2c47871fa7
Add Elastic GPG key to kibana, filebeat, logstash, metricbeat roles
continuous-integration/drone/push Build is passing
2021-05-25 15:10:04 +02:00
Jérémy Lecour
06b8314211
evolinux-base: fix motd lookup path
2021-05-19 17:02:20 +02:00
Jérémy Lecour
02451f1e67
add default (useless) value for file lookup
continuous-integration/drone/push Build is passing
2021-05-19 14:35:08 +02:00
Jérémy Lecour
4d83f25ae6
fix pipefail option for shell invocations
continuous-integration/drone/push Build is passing
2021-05-18 14:04:54 +02:00
Jérémy Lecour
cae0de17df
listupgrade: fix wget error + shellcheck cleanup
continuous-integration/drone/push Build is passing
2021-05-17 23:05:18 +02:00
Jérémy Lecour
56af68e5b3
listupgrade: print error if wget fails
continuous-integration/drone/push Build is passing
2021-05-17 12:19:57 +02:00
Jérémy Lecour
d823c8116a
update CHANGELOG
continuous-integration/drone/push Build is passing
2021-05-09 23:21:21 +02:00
Jérémy Lecour
e5e4dc95fa
packweb-apache: install phpMyAdmin from buster-backports
2021-05-04 14:57:18 +02:00
Jérémy Lecour
e7ddf9d46c
Use 'loop' syntax instead of 'with_list'
2021-05-04 14:31:22 +02:00
Jérémy Lecour
485ec39674
Use 'loop' syntax instead of 'with_nested'
2021-05-04 14:29:50 +02:00
Jérémy Lecour
07fd6451e1
Use 'loop' syntax instead of 'with_dict'
2021-05-04 14:20:53 +02:00
Jérémy Lecour
5138065059
Use 'loop' syntax instead of 'with_items'
2021-05-04 14:19:18 +02:00
Jérémy Lecour
debc4a82ca
Use 'loop' syntax instead of 'with_first_found'
continuous-integration/drone/push Build is passing
2021-05-04 13:39:47 +02:00
Jérémy Lecour
a7971abb04
apt: store keys in /etc/apt/trusted.gpg.d in ascii format
2021-05-03 12:02:31 +02:00
Jérémy Lecour
cc6acdbf34
certbot: sync_remote.sh is configurable
continuous-integration/drone/push Build is passing
2021-05-03 11:25:24 +02:00
Jérémy Lecour
6eaeb90f6e
ldap: fix edge cases where passwords were not set/get properly
continuous-integration/drone/push Build is passing
2021-05-02 23:28:09 +02:00
Jérémy Lecour
43c726e86a
spamassassin: change dependency on evomaintenance
...
continuous-integration/drone/push Build is passing
Fail with an error if evomaintenance config is missing
instead of trying to install a package that doesn't exist anymore.
2021-05-02 01:24:03 +02:00
Jérémy Lecour
920cb7eaeb
update changelog
continuous-integration/drone/push Build is passing
2021-05-01 16:51:20 +02:00
Jérémy Lecour
5d79c31dc3
kvm-host: add migrate-vm script
continuous-integration/drone/push Build is passing
2021-04-28 15:53:38 +02:00
Jérémy Lecour
94a5d7daa2
mysql: variable to disable myadd script overwrite (default: True)
continuous-integration/drone/push Build is passing
2021-04-23 14:59:29 +02:00
Jérémy Lecour
eab68545fe
evolinux-base: add default motd template
continuous-integration/drone/push Build is passing
2021-04-23 11:41:27 +02:00
Ludovic Poujol
3457b14fed
ntpd: Add leapfile configuration setting to ntpd on debian 10+
continuous-integration/drone/push Build is passing
2021-04-21 17:22:45 +02:00
Ludovic Poujol
d56c545183
apache: new variable for mpm mode (+ updated default config accordingly)
...
continuous-integration/drone/push Build is passing
Also, itk package will only be installed if required
2021-04-19 17:35:49 +02:00
Jérémy Lecour
5e0ca0e3ff
Release 10.5.1
continuous-integration/drone/pr Build is passing
continuous-integration/drone/push Build is passing
2021-04-13 15:56:09 +02:00
Ludovic Poujol
0f8804a8ab
etc-git: commit in /usr/share/scripts when there's an active repository
continuous-integration/drone/push Build is passing
2021-04-08 16:07:49 +02:00
Jérémy Lecour
a5a2c6e335
haproxy: dedicated internal address/binding (without SSL)
continuous-integration/drone/push Build is passing
2021-04-06 14:41:03 +02:00
Jérémy Lecour
2686eea2b1
Release 10.5.0
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2021-04-01 15:38:10 +02:00
Jérémy Lecour
7041a70eeb
elasticsearch: log rotation is more readable/maintainable
2021-04-01 15:36:34 +02:00
Ludovic Poujol
f2ebe2d878
lxc-php: Add php 7.4 support
continuous-integration/drone/push Build is passing
2021-03-31 10:57:29 +02:00
Jérémy Lecour
d7d057e435
filebeat: fix Ansible syntax error
continuous-integration/drone/push Build is passing
2021-03-23 16:29:03 +01:00
Jérémy Lecour
2593784ab0
metricbeat: new variables to configure SSL mode
2021-03-23 16:28:14 +01:00
Jérémy Lecour
3a3cf1395e
listupgrade: update script from upstream
2021-03-23 16:27:15 +01:00
Jérémy Lecour
5a4bd28eaf
nagios-nrpe: libfcgi-client-perl is not available before Debian 10
continuous-integration/drone/push Build is passing
2021-03-18 15:16:23 +01:00
Jérémy Lecour
5582d6e724
redis: socket/pid directories have the correct permissions
2021-03-18 15:15:39 +01:00
Patrick Marchand
e5511eafc6
Revert changes to bind log path from apparmor fix
...
continuous-integration/drone/push Build is passing
I realised it wasnt the best idea to change the path we are used to using just for this, so I overwrite the apparmor configuration instead.
2021-03-09 16:58:14 -05:00
Patrick Marchand
ffd3ff97f1
Fix conflict in changelog
continuous-integration/drone/push Build is passing
2021-03-09 12:28:01 -05:00
Patrick Marchand
7da22e243e
Changed log directory for bind9
...
It is now /var/log/named, this is what debian 10 and apparmor expect by default. This fixes the bind9 service crashing at start.
2021-03-09 12:25:15 -05:00
Jérémy Lecour
3103af67a7
redis: escape password in Munin configuration
continuous-integration/drone/push Build is passing
2021-03-09 18:24:15 +01:00
Ludovic Poujol
3cb18faf28
evolinux-users: Add sudo rights for nagios for multi-php lxc
continuous-integration/drone/push Build is passing
2021-03-04 16:48:55 +01:00
Jérémy Lecour
1f4079b1b3
haproxy: possible admin access with login/pass
continuous-integration/drone/push Build is passing
2021-02-27 18:43:59 +01:00
Ludovic Poujol
df9db31725
deny requests to ^/evolinux_fpm_status-.*
continuous-integration/drone/push Build is passing
2021-02-22 16:06:57 +01:00
Jérémy Lecour
3709808fdc
redis: use /run instead or /var/run
continuous-integration/drone/push Build is passing
2021-02-18 16:42:54 +01:00
Ludovic Poujol
ddd3e1aa06
nagios-nrpe: new script check_phpfpm_multi
continuous-integration/drone/push Build is passing
2021-02-17 17:23:11 +01:00
Jérémy Lecour
f862ffc42e
beats packages can be upgraded to latest (default: False)
continuous-integration/drone/push Build is passing
2021-02-16 16:35:25 +01:00
Jérémy Lecour
622bbca4c2
apache: rotate logs daily instead of weekly
continuous-integration/drone/push Build is passing
2021-02-12 18:05:47 +01:00
Ludovic Poujol
b0cb14eb5b
* nagios-nrpe: update check_phpfpm_status.pl & install perl dependencies
continuous-integration/drone/push Build is passing
2021-02-12 15:22:57 +01:00
Jérémy Lecour
2b328dc764
postfix: add smtpd_relay_restrictions in configuration
continuous-integration/drone/push Build is passing
2021-02-12 14:10:04 +01:00
Jérémy Lecour
17f1a1a55e
update changelog
continuous-integration/drone/push Build is passing
2021-02-11 12:09:32 +01:00
Jérémy Lecour
dde2672715
nginx: no more "minimal" mode, but the package remains customizable.
continuous-integration/drone/push Build is passing
2021-02-04 11:31:36 +01:00
Jérémy Lecour
cff309ff41
nginx: add access to server status on default VHost
2021-02-04 11:30:32 +01:00
Jérémy Lecour
5588ed6009
minifirewall: change some defaults
...
Only SSH (22) is open on privilegied IPs
Remove volatile.debian.org domain
2021-02-04 10:55:31 +01:00
Jérémy Lecour
024d30ea43
evoacme: upstream release 21.01
continuous-integration/drone/push Build is passing
2021-01-07 19:16:06 +01:00
Jérémy Lecour
0e32e0d2aa
certbot: use a fixed 1.9.0 version of the certbot-auto script (renamed "letsencrypt-auto")
continuous-integration/drone/push Build is passing
2021-01-07 18:55:44 +01:00
Jérémy Lecour
8c54fd8c16
apache: new variables for logrotate + server-status
continuous-integration/drone/push Build is passing
2021-01-05 17:47:56 +01:00
Jérémy Lecour
19da5ea1f7
Release 10.4.0
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2020-12-24 14:00:37 +01:00
Jérémy Lecour
7ec0748383
certbot: detect domains if missing
continuous-integration/drone/push Build is passing
2020-12-24 13:56:43 +01:00
Jérémy Lecour
442e9bcda8
cerbot: hook to sync certificates to remote servers
2020-12-24 13:56:43 +01:00
Jérémy Lecour
4dbd1b0bee
certbot: disable auth for Let's Encrypt challenge
2020-12-24 10:33:48 +01:00
Jérémy Lecour
1d56e002b4
nginx: change from "nginx_status-XXX" to "server-status-XXX"
continuous-integration/drone/push Build is passing
2020-12-23 15:53:36 +01:00
Jérémy Lecour
66a6e67de2
varnish: variable for jail configuration
continuous-integration/drone/push Build is passing
2020-12-21 23:33:14 +01:00
Jérémy Lecour
1922b51fbe
Release 10.3.0
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2020-12-21 16:03:49 +01:00
Jérémy Lecour
67ce8de85e
varnish: custom reload script is now useless
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2020-12-20 23:25:34 +01:00
Jérémy Lecour
3e72d6961c
varnish: no threadpool delay by default
2020-12-20 23:03:37 +01:00
Jérémy Lecour
8861169a04
varnish: config file name is configurable
2020-12-20 23:03:10 +01:00
Jérémy Lecour
81fbd98a5f
evolinux-users: improve uid/login checks
continuous-integration/drone/push Build is passing
2020-12-17 15:25:48 +01:00
Jérémy Lecour
0b528f15da
tomcat-instance: fail if uid already exists
continuous-integration/drone/push Build is passing
2020-12-17 08:06:44 +01:00
Jérémy Lecour
5b2d3b09d0
Create system users for vmail (dovecot) and evoadmin
2020-12-17 08:05:16 +01:00
Jérémy Lecour
3c4986275c
evocheck: upstream release 20.12
continuous-integration/drone/push Build is passing
2020-12-08 11:07:42 +01:00
Jérémy Lecour
772bce8c0b
dovecot: vmail uid/gid are configurable
2020-12-07 17:26:45 +01:00
Jérémy Lecour
4d6f88f0f4
minifirewall: add variables to force upgrade the script and the config (default: False)
continuous-integration/drone/push Build is passing
2020-12-07 17:23:37 +01:00
Jérémy Lecour
98f798b9fb
cerbot: parse HAProxy config file only if HAProxy is found
continuous-integration/drone/push Build is passing
2020-12-03 17:26:16 +01:00
Jérémy Lecour
fc71bb5945
minifirewall: upstream release 20.12
2020-12-01 22:57:13 +01:00
Jérémy Lecour
9aa24f4cde
minifirewall: Docker support
continuous-integration/drone/push Build is passing
2020-12-01 22:47:38 +01:00
Jérémy Lecour
b6817cb62c
evoacme: upstream release 20.12
continuous-integration/drone/push Build is passing
2020-12-01 22:27:05 +01:00
Jérémy Lecour
18ac1e7279
redis: check maxmemory in NRPE check
...
continuous-integration/drone/push Build is passing
If "maxmemory" is set and "maxmemory-policy" is missing or set to
"noeviction" then we enforce the "maxmemory" limit
2020-12-01 19:02:42 +01:00
Jérémy Lecour
86d59cbb5f
mysql: install save_mysql_processlist script
2020-11-24 13:59:04 +01:00
Ludovic Poujol
1d8b7c3bea
apt: disable APT Periodic
...
This interfere with our usual workflow (listupgrade)
Note : Using 0 instead of false is intentional, The value is used by the
apt-daily script that except a "0" to disable itself.
2020-11-24 11:19:18 +01:00
Jérémy Lecour
592030ee9a
evoacme: variable to disable Debian version check (default: False)
2020-11-21 09:59:10 +01:00
Jérémy Lecour
b43d0f3629
evoacme: upstream release 20.11
2020-11-19 21:21:07 +01:00
Ludovic Poujol
15154169cf
kvm-host: Add drbd role dependency (toggleable with kvm_install_drbd)
continuous-integration/drone/push Build is passing
2020-10-30 11:56:24 +01:00
Mathieu Trossevin
71f85a5863
Merge branch 'unstable' into packweb-multi-php2
continuous-integration/drone/pr Build is failing
2020-10-20 17:41:36 +02:00
Mathieu Trossevin
2ea4745f93
lxc-php: Update changelog
continuous-integration/drone/pr Build is failing
2020-10-20 17:27:34 +02:00
Ludovic Poujol
c8d4da532f
evoacme: Don't ignore hooks with . in the name (ignore when it's ".disable")
continuous-integration/drone/push Build is passing
2020-10-20 10:58:51 +02:00
Ludovic Poujol
9e5d041210
dovecot: Update munin plugin & configure it
2020-10-20 10:56:41 +02:00
Jérémy Lecour
d80461e39a
redis: variable to force use of port 6379 in instances mode
continuous-integration/drone/push Build is passing
2020-10-19 16:03:58 +02:00
Ludovic Poujol
929f258bf8
nextcloud: New role
continuous-integration/drone/push Build is passing
2020-10-02 16:51:05 +02:00
Jérémy Lecour
8b48552e36
Release 10.2.0
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
2020-09-17 14:06:46 +02:00
Jérémy Lecour
3e67d92fd3
certbot: an empty change shouldn't raise an exception
continuous-integration/drone/push Build is passing
2020-09-16 12:07:27 +02:00
Jérémy Lecour
48174ad618
evoacme: remount /usr if necessary
continuous-integration/drone/push Build is passing
2020-09-14 11:31:47 +02:00
Jérémy Lecour
b818c348c2
evoacme: remove Debian 9 support
continuous-integration/drone/push Build is passing
2020-09-11 11:09:45 +02:00
Ludovic Poujol
f9d6fe0ad4
evolinux-base: install wget
continuous-integration/drone/push Build is passing
2020-09-10 14:59:19 +02:00
Jérémy Lecour
c7151a8de8
certbot: fix "no-self-upgrade" option
continuous-integration/drone/push Build is passing
2020-09-08 10:02:15 +02:00
Jérémy Lecour
37ed5dd393
evolinux-base: swappiness is customizable
continuous-integration/drone/push Build is passing
2020-09-01 14:08:39 +02:00
Jérémy Lecour
afa0fd35c8
Change default public SSH/SFTP port from 2222 to 22222
continuous-integration/drone/push Build is passing
2020-08-28 18:32:47 +02:00
Jérémy Lecour
d0622c6b20
tomcat: root directory owner/group are configurable
continuous-integration/drone/push Build is passing
2020-08-27 17:12:34 +02:00
Jérémy Lecour
7413a242a8
Release 10.1.0
continuous-integration/drone/pr Build is passing
continuous-integration/drone/push Build is passing
2020-08-21 14:50:17 +02:00
Jérémy Lecour
1e6d6cdd13
sort lines in CHANGELOG
2020-08-21 14:03:41 +02:00
Jérémy Lecour
a60deb276b
evoacme: upstream release 20.08
2020-08-21 14:01:06 +02:00
Jérémy Lecour
8ea1bac000
evoacme: update for new certbot role
...
* certbot is installed by the certbot role
* Apache/Nginx configuration is delegated to the certbot role
* No more "acme" user, everything is done with "root".
2020-08-21 13:36:24 +02:00
Benoît S.
a8095b1c36
Updated CHANGELOG.md with recent merges
continuous-integration/drone/push Build is passing
2020-08-20 15:49:22 +09:00
Jérémy Lecour
57ac4e467c
metricbeat: allow using a template
continuous-integration/drone/push Build is passing
2020-08-18 14:01:09 +02:00
Jérémy Lecour
ce35f7292f
filebeat: allow using a template
2020-08-18 14:00:46 +02:00
Jérémy Lecour
d3e69eeeb5
certbot: fix haproxy hook (ssl cert directory detection)
...
continuous-integration/drone/push Build is passing
It was matching additional parameters.
Now it matches on the first argument after "crt"
2020-07-21 10:46:01 +02:00
Jérémy Lecour
21b8104654
elasticsearch: configure cluster with seed hosts and initial masters
continuous-integration/drone/push Build is passing
2020-07-19 11:40:59 +02:00
Jérémy Lecour
9270852349
elasticsearch: set tmpdir before datadir
continuous-integration/drone/push Build is passing
2020-07-19 11:30:00 +02:00
Jérémy Lecour
8aa7f6cf33
mongodb: install custom munin plugins
continuous-integration/drone/push Build is passing
2020-07-17 13:48:18 +02:00
Jérémy Lecour
9bdd5ad9e7
haproxy: rotate logs with date extension and immediate compression
continuous-integration/drone/push Build is passing
2020-06-22 19:02:29 +02:00
Jérémy Lecour
977c28c720
varnish: fix start command when multiple addresses are present
continuous-integration/drone/push Build is passing
2020-06-16 13:51:07 +02:00
Jérémy Lecour
ce7468816f
haproxy: deport SSL tuning to Mozilla SSL generator
...
continuous-integration/drone/push Build is passing
There are too many combinations and they change every so often.
It's better to direct the user to the generator to have a good
configuration.
2020-06-15 22:47:08 +02:00
Jérémy Lecour
30cdbae981
haproxy: split stats variables
2020-06-15 22:45:22 +02:00
Jérémy Lecour
011761eb8f
haproxy: add deny_ips file to reject connections
continuous-integration/drone/push Build is passing
2020-06-14 23:28:29 +02:00
Jérémy Lecour
8465743973
haproxy: add some comments to default config
2020-06-14 23:27:50 +02:00
Jérémy Lecour
4bf5b1daa6
nginx: read server-status values before changing the config
continuous-integration/drone/push Build is passing
2020-06-14 12:49:10 +02:00
Jérémy Lecour
f47af9f54f
haproxy: preconfigure SSL with defaults
continuous-integration/drone/push Build is passing
2020-06-14 12:37:04 +02:00
Jérémy Lecour
7f54b8ab60
haproxy: adapt backports installed package list to distibution
2020-06-14 12:37:04 +02:00
Jérémy Lecour
e5d4ea3c18
nginx: make default vhost configurable
2020-06-14 12:37:04 +02:00
Jérémy Lecour
ce0d61bcbd
certbot: detect HAProxy cert directory
2020-06-14 12:37:04 +02:00
Jérémy Lecour
a8887aaa8e
update changelog
continuous-integration/drone/push Build is passing
2020-06-09 11:45:19 +02:00
Jérémy Lecour
4c71ea2012
haproxy: enable stats frontend with access lists
continuous-integration/drone/push Build is passing
2020-06-09 11:41:33 +02:00
Patrick Marchand
c9daa8ba35
evobackup-client: Fix ssh connection test in zzz_evobackup.sh
...
continuous-integration/drone/push Build is passing
When I made the ssh key name a variable and defaulted it to id_ed25519,
I forgot to change the hardcoded value for the ssh test in
evobackup-client/templates/zzz_evobackup.default.sh.j2
2020-06-08 17:22:18 -04:00
Jérémy Lecour
1ade990526
mongodb: fix logrotate patterm on Debian buster
continuous-integration/drone/push Build is passing
2020-06-05 11:02:54 +02:00
Jérémy Lecour
7f0931510f
evoacme: upstream release 20.06.1
continuous-integration/drone/push Build is passing
2020-06-05 11:01:42 +02:00
Ludovic Poujol
ebffccae59
lxc-php: Do --no-install-recommends for ssmtp/opensmtpd
continuous-integration/drone/push Build is passing
2020-06-05 11:01:22 +02:00
Ludovic Poujol
186f3d90b9
lxc-php: Install opensmtpd as intended
2020-06-05 10:57:49 +02:00
Ludovic Poujol
0dfb92360f
php: Don't disable putenv() by default in PHP settings
continuous-integration/drone/push Build is passing
2020-06-04 11:52:04 +02:00
Ludovic Poujol
90704dc712
lxc-php: Don't disable putenv() by default in PHP settings
2020-06-04 11:51:25 +02:00
Ludovic Poujol
ead0b7fd88
lxc-php: Install php-sqlite by default
continuous-integration/drone/push Build is passing
2020-06-04 11:42:17 +02:00
Ludovic Poujol
8c883c44dd
php: Install php-sqlite by default
2020-06-04 11:39:51 +02:00
Ludovic Poujol
c7d456471b
packweb-apache: Install zip & unzip by default
2020-06-04 11:34:26 +02:00
Jérémy Lecour
3bd0a4ffb3
certbot: restore compatibility with old Nginx
2020-06-04 11:22:58 +02:00
Jérémy Lecour
9aed38b637
certbot: install certbot dependencies non-interactively for jessie
2020-06-04 11:22:58 +02:00
Jérémy Lecour
1d5a30b144
evoacme: upstream release 20.06
continuous-integration/drone/push Build is passing
2020-06-03 12:09:58 +02:00
Patrick Marchand
c8cd119a18
Merge pull request 'Make it possible to setup mysql replication' ( #102 ) from mysql_replication into unstable
continuous-integration/drone/push Build is passing
2020-06-02 17:31:13 +02:00
Jérémy Lecour
4cf438c8ff
redis: raise an error is port 6379 is used in "instance" mode
continuous-integration/drone/push Build is passing
2020-06-02 11:22:56 +02:00
Jérémy Lecour
8a87fecbe4
redis: new syntax for match filter
continuous-integration/drone/push Build is passing
2020-06-02 11:00:06 +02:00
Jérémy Lecour
47d11308ba
redis: create sudoers file if missing
2020-06-02 10:59:51 +02:00
Jérémy Lecour
86cab2ab94
haproxy: chroot and socket path are configurable
2020-06-02 10:58:10 +02:00
Patrick Marchand
8c1e40c1a9
Add option to make a mysql install read only
...
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
Rebased on unstable
2020-06-01 12:03:23 -04:00
Ludovic Poujol
09371b095f
packweb-apache: Don't turn on mod-evasive emails by default
continuous-integration/drone/push Build is passing
2020-05-18 12:03:34 +02:00
Jérémy Lecour
4016387ca8
Release 10.0.0
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2020-05-13 11:20:45 +02:00
Jérémy Lecour
ac7ee86a9c
minifirewall: /bin/true command doesn't report "changed" anymore
continuous-integration/drone/push Build is passing
2020-05-11 15:23:52 +02:00
Jérémy Lecour
849ec405d5
evocheck: upstream version 20.04.4
continuous-integration/drone/push Build is passing
2020-04-28 16:00:45 +02:00
Jérémy Lecour
57e5791728
networkd-to-ifconfig: add variables for configuration by variables
continuous-integration/drone/push Build is passing
2020-04-26 18:39:25 +02:00
Jérémy Lecour
2f77100b47
evocheck: upstream version 20.04.3
continuous-integration/drone/push Build is passing
2020-04-26 10:54:49 +02:00
Jérémy Lecour
d013a65cf6
Merge branch 'unstable' into lpoujol/better-multiphp
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
2020-04-17 12:23:56 +02:00
Jérémy Lecour
6764418e75
evocheck: upstream release 20.04.2
continuous-integration/drone/push Build is passing
2020-04-15 18:01:55 +02:00
Jérémy Lecour
257a3476f1
evocheck: upstream release 20.04.1
continuous-integration/drone/push Build is passing
2020-04-12 22:30:07 +02:00
Jérémy Lecour
f2613e91aa
evolinux-base: configure cciss-vol-statusd in the proper file
...
continuous-integration/drone/push Build is passing
The default file should be used for configuration instead of the init
script.
2020-04-10 11:36:03 +02:00
Ludovic Poujol
93c043c8e0
(fix) lxc: Fix container existance check to be able to run in check_mode
2020-04-08 17:57:46 +02:00
Ludovic Poujol
bd63e7037f
packweb-apache: Do the install & conffigure phpContainer script (instead of evoadmin-web role)
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
2020-04-08 17:54:43 +02:00
Ludovic Poujol
f135f67cd0
(change) php: Cleanup CLI Settings. Also, allow url fopen and don't disable functions (in CLI only)
...
continuous-integration/drone/push Build is passing
Closes #98
2020-04-01 18:22:46 +02:00
Ludovic Poujol
7fc260a17b
(fix) php: update surry_post.yml to match current latest PHP release
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
2020-04-01 18:08:57 +02:00
Ludovic Poujol
f442239cec
(fix) packweb-apache: Don't try to install PHPMyAdmin on Buster as it's not available
2020-04-01 18:05:20 +02:00
Ludovic Poujol
135a089341
(change) lxc-php: Use OpenSMTPD for Stretch/Buster containers, and ssmtp for Jessie containers
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
2020-04-01 17:23:39 +02:00
Ludovic Poujol
a21fcaf663
(fix) php: Chose the debian version repo archive for packages.sury.org
2020-04-01 17:23:39 +02:00
Ludovic Poujol
a680399608
packweb-apache: Add missing dependency to evoacme role
2020-04-01 17:23:39 +02:00
Ludovic Poujol
9b80db3772
lxc: Don't stop the container if it already exists
2020-04-01 17:17:00 +02:00
Jérémy Lecour
5b5b8944c5
java: add Java 11 as possible version to install
continuous-integration/drone/push Build is passing
2020-03-21 19:07:26 +01:00
Patrick Marchand
d5731f90e0
Merge branch 'bind9_evocheck_fix' into unstable
continuous-integration/drone/push Build is passing
2020-03-10 13:48:52 -04:00
Jérémy Lecour
ac98aa2d18
evolinux-base: install Evocheck (default: True
)
continuous-integration/drone/push Build is passing
2020-03-09 17:02:23 +01:00
Jérémy Lecour
92dcbf1ab5
rbenv: change default Ruby version to 2.7.0
2020-03-09 17:02:23 +01:00
Jérémy Lecour
ac6414076c
nodejs: change default version to 12 (new LTS)
2020-03-09 17:02:23 +01:00
Jérémy Lecour
ec54af596c
evolinux-base: Don't customize the logcheck recipient by default.
...
continuous-integration/drone/push Build is failing
By default the package sends its messages to the logcheck user.
By default we alias the "logcheck" user to "root" which is redirected to
our custom address.
2020-03-04 14:03:18 +01:00
Jérémy Lecour
783dcb9890
evomaintenance: upstream release 0.6.3
continuous-integration/drone/push Build is passing
2020-03-02 22:12:58 +01:00
Jérémy Lecour
68a1d4eb27
update changelog
2020-03-02 20:53:54 +01:00
Jérémy Lecour
af53a6b2ec
evomaintenance: upstream release 0.6.2
continuous-integration/drone/push Build is failing
2020-03-02 14:45:41 +01:00
Jérémy Lecour
eb74bda22a
nagios-nrpe: check_mode per cpu dynamically
continuous-integration/drone/push Build is passing
2020-02-28 12:14:20 +01:00
Jérémy Lecour
1b29f2d793
update listupgrade from upstream
continuous-integration/drone/push Build is passing
2020-02-27 13:41:04 +01:00
Jérémy Lecour
d31dddc9aa
evocheck: upstream verison 20.02.1
continuous-integration/drone/push Build is passing
2020-02-27 11:37:01 +01:00
Jérémy Lecour
65bc2c657d
certbot: commit hook must be executed at the end
continuous-integration/drone/push Build is passing
2020-02-25 10:46:21 +01:00
Jérémy Lecour
7283e34077
Replace version_compare() with version()
2020-02-25 10:45:35 +01:00
Jérémy Lecour
ff7f8669ef
evomaintenance: install PG dependencies only when needed
2020-02-25 10:43:23 +01:00
Ludovic Poujol
704b76e6de
minifirewall: Properly detect alert5.sh to turn on firewall at boot
continuous-integration/drone/push Build is passing
2020-02-17 16:02:48 +01:00
Ludovic Poujol
02e8754d75
minifirewall: Backport changes from minifirewall (properly open outgoing smtp(s))
continuous-integration/drone/push Build is failing
2020-02-17 10:56:38 +01:00
Jérémy Lecour
f57af13349
minifirewall: better alert5 activation
continuous-integration/drone/push Build is passing
2020-02-10 10:36:00 +01:00
Jérémy Lecour
68b7a88e63
apt: added buster backports prerferences
2020-02-10 10:35:18 +01:00
Patrick Marchand
896b8bd7e4
Merge branch 'evobackup-client' into unstable
...
continuous-integration/drone/push Build is passing
Import evobackup client code into mainline.
2020-02-06 16:29:02 -05:00
Jérémy Lecour
72f5dc70f8
apt: hold packages only if package is installed
continuous-integration/drone/push Build is passing
2020-02-04 18:14:57 +01:00
Jérémy Lecour
dc7358bc4c
nagios-nrpe: change default haproxy socket path
continuous-integration/drone/push Build is failing
2020-01-23 15:04:25 +01:00
Jérémy Lecour
02858692bb
evomaintenance: don't configure firewall for database if not necessary
continuous-integration/drone/push Build is failing
2020-01-23 14:34:03 +01:00
Jérémy Lecour
71a2a19847
apache: the default VHost doesn't redirect to https for ".well-known" paths
2020-01-23 14:34:03 +01:00
Ludovic Poujol
31df2d2fbc
php: Add a task to remove Debian's default FPM pool file (off by default)
...
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
Can be triggered by switching php_fpm_remove_default_pool to True.
2020-01-16 15:55:35 +01:00
Ludovic Poujol
ef5ed6911e
php: Change the default pool names to something more explicit (and same for the variables names)
...
Because it's more than just pure configuration, but a fpm pool
definition, I've changed the following variables in Ansible :
- php_fpm_defaults_conf_file to replaced by php_fpm_default_pool_file
- php_fpm_custom_conf_file to php_fpm_default_pool_custom_file.
On the FPM side, I've also changed the files names of the pool to make
them more explicit. No more z and zzz. It's the www pool, so let's put
www in the file name for coherence :
- z-evolinux-defaults.conf changes to www-evolinux-defaults.conf
- zzz-evolinux-custom.conf changes to www-evolinux-zcustom.conf
2020-01-16 15:55:25 +01:00
Ludovic Poujol
c9d3635cf8
php: Make sure the default pool we define can be fully functionnal witout debian's default pool file
2020-01-16 15:55:17 +01:00
Jérémy Lecour
80081aa26e
evolinux-base: remove the chrony package
continuous-integration/drone/push Build is failing
2020-01-16 10:57:47 +01:00
Jérémy Lecour
e7952dc3c8
etc-git: fix warnings ansible-lint
continuous-integration/drone/push Build is passing
2020-01-08 17:19:36 +01:00
Jérémy Lecour
bf7de332ea
minifirewall: fix warnings ansible-lint
2020-01-08 17:19:13 +01:00
Jérémy Lecour
f79b30eeb4
update changelog
continuous-integration/drone/push Build is passing
2020-01-03 16:40:53 +01:00
Jérémy Lecour
3b258cc43e
tomcat: package version derived from Debian version if missing
2019-12-31 16:43:51 +01:00
Patrick Marchand
20191c8873
Fixed regression introduced by commit 276177900b
...
continuous-integration/drone/push Build is passing
The default behavior for ansible template is to overwrite the
targeted file. Since we dont always want to overwrite a file when
we play this role, we set `force` to `False` by default. This means
that if the `dest` already exists, ansible will not overwrite it
with it's given template.
This is fine for most of the tasks in this role, but in the case
of `{{ evoadmin_scripts_dir }}/web-mail.tpl`,the file is created
by a task that runs prior to the template task, so setting it to
`False` by default means it never gets updated and clients dont get
notified when they create new websites.
2019-12-24 14:10:24 -05:00
Victor LABORIE
2a1e0b7ef6
evolinux-base: install ssacli for HP Smart Array
continuous-integration/drone/push Build is passing
2019-12-13 11:00:20 +01:00
Jérémy Lecour
e557a3eaae
apache: improve permissions in save_apache_status script
2019-12-13 10:44:44 +01:00
Ludovic Poujol
6e918d166e
evolinux-base: Don't make alert5.service executable
...
continuous-integration/drone/push Build is passing
Every 3 mins, systemd complain that the service file is marked as
executable, and asks the executable bit to be remove.
Nov 27 01:35:11 foo systemd[1]: Configuration file /etc/systemd/system/alert5.service is marked executable. Please remove executable permission bits. Proceeding anyway.
2019-11-28 10:59:29 +01:00
Ludovic Poujol
0e58f34e18
certbot: Properly evaluate when apache is installed
...
continuous-integration/drone/push Build is failing
Checking the existence of /etc/apache2 is not enough as a condition to
validate the presence of apache.
Indeed, some packages (including certbot!!!), put some files in
/etc/apache2/conf-available even if apache isn't installed.
In those cases, the check is not correct, and we'll enter in the apache
block, and fail when we try to enable the configuration.
With this commit, we now validate the presence apache with the presence
of /usr/sbin/apachectl
2019-11-26 11:58:52 +01:00
Ludovic Poujol
dc1c78e08a
evolinux-base: Fix our zsyslog rotate config that doesn't work on Debian 10
...
continuous-integration/drone/push Build is passing
I've noticed that some log files, especially /var/log/syslog were empty.
After investigating, I've realized that it was happening after a log
rotation by logrotate.
The old mechanism, `invoke-rc.d rsyslog rotate` isn't working anymore on
Debian 10. It will fail with a not so explicit message :
[FAIL] Closing open files: rsyslogd failed!
Long story short, it seems that the pid file (`/run/rsyslogd.pid`) isn't
created any more, so start-stop-daemon as used by /etc/init.d/rsyslog
will fail. Explaining the error message.
Debian 10 rsyslog now brings `/usr/lib/rsyslog/rsyslog-rotate` that is
used by logrotate. It will send the signal HUP the 'right' way, so
rsyslog will be aware of the log rotation.
Sadly, this script isn't present in Debian 9 nor 8, so the logrotate
configuration for rsyslog is now a template, using the right command for
the right version.
2019-11-22 16:48:19 +01:00
Jérémy Lecour
473bcb4cd6
apt: verify that /etc/evolinux is present
continuous-integration/drone/push Build is passing
2019-11-20 11:34:47 +01:00
Jérémy Lecour
26dd244ae0
nagios-nrpe: update check_redis_instances
continuous-integration/drone/push Build is passing
2019-11-13 09:47:23 +01:00
Jérémy Lecour
7f6ad406a5
evocheck: upstream version 19.11.2
continuous-integration/drone/push Build is passing
2019-11-07 10:38:32 +01:00
Jérémy Lecour
767760cbe0
evocheck: upstream version 19.11.1
continuous-integration/drone/push Build is passing
2019-11-06 07:50:45 +01:00
Jérémy Lecour
049d36ab8f
etc-git: add versioning for /usr/share/scripts on Debian 10+
...
continuous-integration/drone/push Build is passing
The repository.yml task file is generic and can be called for vrious
repositories.
On Debian 10, /usr/share/scripts is versioned
2019-11-05 17:00:22 +01:00
Jérémy Lecour
6b77372f24
evocheck: upstream version 19.11
continuous-integration/drone/push Build is passing
2019-11-05 16:20:07 +01:00
Jérémy Lecour
a55e29186f
evomaintenance: upstream version 0.6.0
continuous-integration/drone/push Build is passing
2019-11-05 14:52:59 +01:00
Jérémy Lecour
ab8c6b13b8
evoacme: upstream version 19.11
continuous-integration/drone/push Build is passing
2019-11-05 14:08:02 +01:00
Jérémy Lecour
7e50a460a8
minifirewall: add a variable to force the check scripts update
continuous-integration/drone/push Build is passing
2019-11-05 10:52:14 +01:00
Jérémy Lecour
5476538eb1
minifirewall: no http filtering by default
continuous-integration/drone/push Build is passing
2019-10-30 14:37:22 +01:00
Jérémy Lecour
f2dacac139
evolinux-base: add /usr/share/scripts in root's PATH (Debian 10+)
2019-10-30 14:32:32 +01:00
Jérémy Lecour
8679da4cb6
evolinux-base: install /sbin/deny
2019-10-30 14:32:32 +01:00
Jérémy Lecour
772c333623
apt: remove jessie/buster sources from Gandi servers
2019-10-30 14:32:32 +01:00
Jérémy Lecour
e80e4197c2
evocheck: upstream version 19.10
continuous-integration/drone/push Build is passing
2019-10-25 13:17:16 +02:00
Jérémy Lecour
d5a6487315
Merge branch 'mongodb-buster' into unstable
continuous-integration/drone/push Build is passing
2019-10-24 17:23:53 +02:00
Jérémy Lecour
27adad616f
squid: compatibility wit Debian 10
continuous-integration/drone/push Build is passing
2019-10-24 16:23:48 +02:00
Jérémy Lecour
85b0e36f33
CHANGELOG: sort alphabetically
continuous-integration/drone/push Build is passing
2019-10-24 15:37:58 +02:00
Jérémy Lecour
76864f226e
WIP mongodb: compatibility with Debian 10
continuous-integration/drone/push Build is passing
2019-10-24 15:36:51 +02:00
Jérémy Lecour
ee72dd07ff
rbenv: install Ruby 2.6.5 by default
continuous-integration/drone/push Build is passing
2019-10-22 15:03:45 +02:00
Jérémy Lecour
2ea88dc385
mysql-oracle: backport tasks from mysql role
continuous-integration/drone/push Build is passing
2019-10-21 16:32:59 +02:00
Jérémy Lecour
12cebfa71c
lxc-php: refactor tasks for better maintainability
2019-10-21 15:26:03 +02:00
Ludovic Poujol
2d2889ac16
php: Don't set a chroot for the default fpm pool
continuous-integration/drone/push Build is passing
2019-10-16 15:59:33 +02:00
Ludovic Poujol
0a7262081a
php: add missing handler for php7.3-fpm
continuous-integration/drone/push Build is passing
2019-10-16 15:17:35 +02:00
Jérémy Lecour
edb5ace762
haproxy: add a variable to keep the existing configuration
continuous-integration/drone/push Build is passing
2019-10-10 11:27:39 +02:00
Patrick Marchand
c6804e73e7
Adapted the bind role to respect the evocheck warnings
...
The required munin plugins and the logging necessary for them to work is
now activated depending on the type of resolver and the logrotate file is
changed from bind to bind9.
2019-10-09 11:54:30 -04:00
Ludovic Poujol
4aaeb4590b
lxc: rely on lxc_container module instead of command module
2019-10-02 16:32:20 +02:00
Ludovic Poujol
e985f5778c
evoadmin-web: Put the php config at the right place for Buster
2019-10-02 15:48:03 +02:00
Ludovic Poujol
a5378c783e
lxc: update our default template to be compatible with Debian 10
2019-10-01 17:54:13 +02:00
Ludovic Poujol
ae97276e13
lxc: remove useless loop in apt execution
2019-10-01 17:54:13 +02:00
Jérémy Lecour
a478c773eb
apt: check if cron is installed before adding a cron job
2019-09-30 14:12:38 +02:00
Jérémy Lecour
394e28b815
WIP: new certbot role
2019-09-27 00:21:29 +02:00
Jérémy Lecour
e3e908dd4c
Merge branch 'redis-instances' into unstable
2019-09-25 22:25:42 +02:00
Gregory Colpart
6fe86a76c5
remove reload-vcl.sh (Custom Varnish ExecReload script) when Debian >= 10
2019-09-24 14:00:22 +02:00
Jérémy Lecour
f09a405d84
mongodb: still incompatible with Debian 10
2019-09-23 22:18:52 +02:00
Jérémy Lecour
bea11352be
Merge branch 'buster' into unstable
2019-09-23 18:34:35 +02:00
Jérémy Lecour
45d48eedb0
changelog cleanup
2019-09-23 13:47:19 +02:00
Jérémy Lecour
3999e7d4f8
listupgrade: install old-kernel-autoremoval script
2019-09-23 13:46:29 +02:00
Jérémy Lecour
0829efc8a6
evocheck: upstream version 19.09
2019-09-23 09:22:58 +02:00
Jérémy Lecour
9f619adf68
evocheck: cron jobs execute in verbose
2019-09-23 09:22:40 +02:00
Jérémy Lecour
1a647d0546
evocheck : update (version 19.09) from upstream
2019-09-22 22:41:03 +02:00
Jérémy Lecour
b31159c9d2
evolinux-base: use "evolinux_internal_group" for SSH authentication
2019-09-22 22:26:21 +02:00
Jérémy Lecour
8f868b8612
evolinux-base: default value for "evolinux_ssh_group"
2019-09-22 22:25:30 +02:00
Jérémy Lecour
2d249f1815
squid: split systemd tasks into own file
2019-09-22 22:18:09 +02:00
Patrick Marchand
a358db065b
Merge branch 'htpasswd_evoadmin' into unstable
2019-09-20 10:06:20 -04:00
Patrick Marchand
0009272462
Allow setting a custom mysql server_id
2019-09-12 11:46:12 -04:00
Patrick Marchand
109191ccd8
Added mysql_log_bin variable to enable binary logs
2019-09-12 08:54:18 -04:00
Jérémy Lecour
442353ce73
Update changelog
2019-09-06 16:04:47 +02:00
Jérémy Lecour
4acd61a072
generate-ldif: support MariaDB 10.3
2019-09-02 10:39:49 +02:00
Patrick Marchand
1c12827c9c
Added evobackup-client role
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build encountered an error
2019-08-30 14:43:52 -04:00
Patrick Marchand
d75846ed28
Make it possible to add an htpasswd file to evoadmin
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build encountered an error
2019-08-30 10:32:44 -04:00
Jérémy Lecour
5925a12b3d
evocheck: upstream version 19.08
continuous-integration/drone/push Build is passing
2019-08-30 14:23:35 +02:00