Commit Graph

109 Commits

Author SHA1 Message Date
Jérémy Lecour 7283e34077 Replace version_compare() with version() 2020-02-25 10:45:35 +01:00
Jérémy Lecour 71a2a19847 apache: the default VHost doesn't redirect to https for ".well-known" paths 2020-01-23 14:34:03 +01:00
Jérémy Lecour e04d881988 replace "with_items" in apt modules 2019-12-31 16:18:56 +01:00
Jérémy Lecour 79bb6103b8 Change "|version_compare" with "is version_compare" 2019-12-31 10:18:19 +01:00
Jérémy Lecour e557a3eaae apache: improve permissions in save_apache_status script 2019-12-13 10:44:44 +01:00
Victor LABORIE 6f5e13f8b8 Add evolix prefix to include_role 2019-11-29 14:00:25 +01:00
Benoît S. 62cd28c1f5 apache: Add missing part for munin cgi
continuous-integration/drone/push Build encountered an error Details
continuous-integration/drone/pr Build is failing Details
ScriptAlias /munin-cgi/munin-cgi-graph were missing.
2019-07-03 11:56:51 +02:00
Jérémy Lecour 49d90fff09 apache: add a variable to customize the server-status host
continuous-integration/drone/push Build is passing Details
2019-06-20 17:29:48 +02:00
Jérémy Lecour 9a489ccf29 apache/nginx: fix server-status replacement 2019-05-02 12:16:47 +02:00
Jérémy Lecour b6499671fa apache/nginx: add server status suffix in default site if missing 2019-04-26 11:02:02 +02:00
Jérémy Lecour 8e618ce70a apache/nginx: add server status suffix in VHost if missing 2019-04-25 17:12:19 +02:00
Jérémy Lecour aa28e9c1b8 change repositories URL 2019-03-21 15:31:58 +01:00
Jérémy Lecour 41c1ed5a70 apache: add Munin configuration for Apache server-status URL 2019-01-01 21:08:51 +01:00
Jérémy Lecour 06a0f0d9b7 apache/nginx/fail2ban: mention ip_whitelist.yml in README.md 2018-11-02 18:18:22 +01:00
Jérémy Lecour 24ddc78a23 apache/nginx: IP adresses can also be removed 2018-11-02 18:15:17 +01:00
Patrick Marchand b776fc3da2 Make ip whitelist tasks more flexible
Now the list of whitelisted ip addresses can be updated simply by
including the specific tasks in an external playbook without polluting
our role list.

This change takes effect for nginx, apache and fail2ban.
2018-11-02 18:08:23 +01:00
Jérémy Lecour bfb591dc74 apache: cleaner way to overwrite the server status suffix 2018-09-09 23:01:43 +02:00
Jérémy Lecour bb956fb5e7 apache: logrotate replacement is more subtle/precise
It replaces only the proper directive and not every occurence of the 
word.
2018-08-23 13:02:25 +02:00
Jérémy Lecour ec535b036c apt module: Use "state: present" instead of "state: installed"
"state: installed" is deprecated in Ansible 2.5
2018-05-18 09:33:25 +02:00
Jérémy Lecour 5c5361dbb5 apache: customize logrotate (52 weeks) 2018-04-22 18:10:47 +02:00
Ludovic Poujol 94118b2536 Apache: Don't turn on modsec if it's available on default vhost 2018-03-12 11:00:57 +01:00
Jérémy Lecour 25a47173b8 create server status parent directory if missing 2018-01-18 17:17:34 +01:00
Jérémy Lecour 86c2bcb398 apache: /usr/share/scripts exists 2018-01-18 17:08:29 +01:00
Jérémy Lecour b634840b42 apache/nginx: server status suffix 2018-01-03 10:05:20 +01:00
Jérémy Lecour 28954e634c whitespaces 2018-01-03 10:05:20 +01:00
Jérémy Lecour aeba94bcba default/additional variables
List of hosts/ip are a combination of 2 lists allowing overrides
2017-12-20 18:04:54 +01:00
Jérémy Lecour 8ef9554746 Combine evolix and additional trusted IP addresses 2017-11-15 23:57:58 +01:00
Victor LABORIE 1c48df025c Move /usr rw remount into remount-usr role 2017-11-07 13:34:05 +01:00
Victor LABORIE ce89d5c5a5 apache: fix usr rw remount 2017-10-31 15:28:42 +01:00
Victor LABORIE 2d1504ddf6 apache: add somes modules by defaults 2017-10-27 15:01:06 +02:00
Jérémy Lecour 9527aff68a apache/nginx: remove compatibility mode 2017-10-11 18:13:15 +02:00
Ludovic Poujol 745c45f88d Fix remount_usr_rw/yml 2017-10-11 17:58:18 +02:00
Jérémy Lecour e7e9f9e125 Apache/Nginx: use ipaddr_whitelist 2017-10-07 13:48:04 +02:00
Jérémy Lecour 0e9fab48f5 apache: fix ipaddr_whitelist path 2017-10-07 13:12:03 +02:00
Jérémy Lecour be84ab434e apache: install save_apache_status.sh 2017-10-07 13:12:01 +02:00
Jérémy Lecour 2395777194 apache: no need for server status suffix anymore
The location is restricted, so we don't need to obfuscate
2017-10-07 13:11:25 +02:00
Jérémy Lecour ddeb39b886 apache: phpmyadmin is not managed here anymore 2017-10-07 13:03:43 +02:00
Jérémy Lecour dc3b735445 apache: cleanup munin tasks 2017-10-07 11:54:31 +02:00
Jérémy Lecour 1776b4bc24 Apache: improve munin integration
* ansible syntax
* remove duplicate tasks
* improve tasks names
2017-10-07 11:17:02 +02:00
Benoît S. 50cba28f7b Merge branch 'apache-munin' into unstable 2017-10-06 15:42:45 +02:00
Gregory Colpart 87ef758891 we need force=no for files who will be lineinfile/blockinfile 2017-09-07 02:32:08 +02:00
Gregory Colpart 26b76aed17 review default vhost 2017-09-07 02:31:48 +02:00
Gregory Colpart be4e811c47 phpMyAdmin configuration 2017-09-07 02:26:35 +02:00
Gregory Colpart 94625a73c2 Prepare phpMyAdmin config if needed 2017-09-06 19:34:04 +02:00
Gregory Colpart 6241bdc8ce Easy activation of Access-Control-Allow-Origin for eot|ttf|otf|woff files 2017-09-06 14:58:43 +02:00
Jérémy Lecour 2f2192e5cf apache is compatible with Stretch 2017-09-04 17:15:02 +02:00
Romain Dessort 58bc7940ac Add LimitUIDRange. Fix sudo calls from evoadmin 2017-08-24 12:56:12 -04:00
Gregory Colpart 9c406cc9bd Fix "Unable to reload service munin-node: Failed to reload munin-node.service: Job type reload is not applicable for unit munin-node.service.\n" 2017-08-22 06:30:04 +02:00
Gregory Colpart 2fd165a465 fix error in handler call 2017-08-18 04:18:52 +02:00
Gregory Colpart 2bb7367edf standardization for Debian versions : we use "jessie" or "9 or later" to prepare buster smoothly as possible 2017-08-18 03:50:30 +02:00