Commit graph

2211 commits

Author SHA1 Message Date
Mathieu Trossevin 94f088e1bf Create role to install MariaDB MaxScale
This role have to add the official MariaDB MaxScale repository as
maxscale isn't in the Debian repositories. Moreover as maxscale need two
mysql users to works, the role can also create these users if requested
and ansible has access to a master server.
2020-06-18 10:58:15 +02:00
Mathieu Trossevin c5bf537022 Repair mysql playbook
Some checks failed
continuous-integration/drone/pr Build is failing
restart xinetd: state should be restarted, not restart
2020-06-17 16:17:18 +02:00
Benoît S. de908ae5bd nagios-nrpe: check_amavis: Update regex
Some checks failed
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
I just installed a Debian Stretch with a pack mail and the check_amavis
was not checking the right regex.

Amavis is returning:
2.7.0 Ok, discarded, id=17556-09 - INFECTED: Eicar-Signature
So the regex should be:
-if ($result =~/2.7.0 Ok, discarded, id=[^,]+ - INFECTED: Eicar-Test-Signature/) {
+if ($result =~/2.7.0 Ok, discarded, id=\S+ - INFECTED: Eicar-Signature/) {
2020-06-17 12:20:33 +09:00
Benoît S. 1d7d2ce08d squid: Update regex for sa-update domains.
Some checks failed
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
List of domains is like:

http://sa-update.dnswl.org/ weight=3

http://www.sa-update.pccc.com/ weight=5

http://sa-update.secnap.net/ weight=5

http://sa-update.space-pro.be/ weight=1

http://sa-update.ena.com/ weight=5

http://sa-update.razx.cloud/ weight=5

http://sa-update.fossies.org/ weight=1

http://sa-update.verein-clean.net/ weight=10

http://sa-update.bitwell.fi/ weight=5

http://sa-update.spamassassin.org/ weight=10

They all start sa-update.*, except for http://www.sa-update.pccc.com/.
In that case, we just match sa-update on the domain name.
2020-06-17 11:25:24 +09:00
Jérémy Lecour 977c28c720 varnish: fix start command when multiple addresses are present
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-16 13:51:07 +02:00
Benoît S. 766b4dfa82 evolinux-base: check_hpraid cron: Add -p
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-16 13:20:43 +09:00
Benoît S. a74f4e1890 evolinux-base/tasks/hardware.yml: Removed trailing whitespace
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-16 12:42:33 +09:00
Benoît S. 4bec21a9f3 evolinux-base: harware: Support HP gen >=10 RAID controller
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-16 12:35:56 +09:00
Benoît S. 241f50d27e nagios-nrpe: check_hpraid: Update known working RAID controllers 2020-06-16 12:34:48 +09:00
Benoît S. 74229809ff nagios-nrpe: Add check_hpraid in template 2020-06-16 12:28:10 +09:00
Benoît S. 09e17ffe6c nagios-nrpe: check_hpraid: Use printf for return lines
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-16 11:16:44 +09:00
Benoît S. b47d2b872c nagios-nrpe: check_hpraid: Fixed wrong grep in EXCLUDE_BATTERY
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-16 10:57:18 +09:00
Benoît S. d49da6954a nagios-nrpe: check_hpraid: Fix wrong command name in examples
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-16 10:53:00 +09:00
Benoît S. 6126be95e3 nagios-nrpe: check_hpraid: Be sure that variables are bound
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-16 10:36:24 +09:00
Jérémy Lecour ce7468816f haproxy: deport SSL tuning to Mozilla SSL generator
All checks were successful
continuous-integration/drone/push Build is passing
There are too many combinations and they change every so often.
It's better to direct the user to the generator to have a good 
configuration.
2020-06-15 22:47:08 +02:00
Jérémy Lecour 30cdbae981 haproxy: split stats variables 2020-06-15 22:45:22 +02:00
Jérémy Lecour 011761eb8f haproxy: add deny_ips file to reject connections
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-14 23:28:29 +02:00
Jérémy Lecour 8465743973 haproxy: add some comments to default config 2020-06-14 23:27:50 +02:00
Jérémy Lecour 01a486b20a haproxy: simplify syntax fos stats section 2020-06-14 23:19:40 +02:00
Jérémy Lecour ac4ef5ff96 whitespaces 2020-06-14 19:47:16 +02:00
Jérémy Lecour 4bf5b1daa6 nginx: read server-status values before changing the config
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-14 12:49:10 +02:00
Jérémy Lecour f47af9f54f haproxy: preconfigure SSL with defaults
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-14 12:37:04 +02:00
Jérémy Lecour 7f54b8ab60 haproxy: adapt backports installed package list to distibution 2020-06-14 12:37:04 +02:00
Jérémy Lecour e5d4ea3c18 nginx: make default vhost configurable 2020-06-14 12:37:04 +02:00
Jérémy Lecour ce0d61bcbd certbot: detect HAProxy cert directory 2020-06-14 12:37:04 +02:00
Patrick Marchand 0fee07f47e Fix variable par défaut manquante dans mysql
All checks were successful
continuous-integration/drone/push Build is passing
Le lower_case_table_names doit être mis à Null pour que le check marche.
2020-06-10 10:37:36 -04:00
Jérémy Lecour a8887aaa8e update changelog
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-09 11:45:19 +02:00
Jérémy Lecour 4c71ea2012 haproxy: enable stats frontend with access lists
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-09 11:41:33 +02:00
Patrick Marchand c9daa8ba35 evobackup-client: Fix ssh connection test in zzz_evobackup.sh
All checks were successful
continuous-integration/drone/push Build is passing
When I made the ssh key name a variable and defaulted it to id_ed25519,
I forgot to change the hardcoded value for the ssh test in
evobackup-client/templates/zzz_evobackup.default.sh.j2
2020-06-08 17:22:18 -04:00
Jérémy Lecour d9f9d03140 evoacme: read values from environment before defaults file
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-05 11:31:42 +02:00
Jérémy Lecour 1ade990526 mongodb: fix logrotate patterm on Debian buster
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-05 11:02:54 +02:00
Eric Morino 2fbf1ff9f9 Force owner opendkim for /etc/opendkim/ folder
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-05 11:00:22 +02:00
Jérémy Lecour 7f0931510f evoacme: upstream release 20.06.1
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-05 11:01:42 +02:00
Ludovic Poujol ebffccae59 lxc-php: Do --no-install-recommends for ssmtp/opensmtpd
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-05 11:01:22 +02:00
Ludovic Poujol 186f3d90b9 lxc-php: Install opensmtpd as intended 2020-06-05 10:57:49 +02:00
Ludovic Poujol 0dfb92360f php: Don't disable putenv() by default in PHP settings
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-04 11:52:04 +02:00
Ludovic Poujol 90704dc712 lxc-php: Don't disable putenv() by default in PHP settings 2020-06-04 11:51:25 +02:00
Ludovic Poujol ead0b7fd88 lxc-php: Install php-sqlite by default
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-04 11:42:17 +02:00
Ludovic Poujol 8c883c44dd php: Install php-sqlite by default 2020-06-04 11:39:51 +02:00
Ludovic Poujol c7d456471b packweb-apache: Install zip & unzip by default 2020-06-04 11:34:26 +02:00
Jérémy Lecour 2ca7872eef haproxy: syntax and whitespaces
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-04 11:22:58 +02:00
Jérémy Lecour 3bd0a4ffb3 certbot: restore compatibility with old Nginx 2020-06-04 11:22:58 +02:00
Jérémy Lecour 9aed38b637 certbot: install certbot dependencies non-interactively for jessie 2020-06-04 11:22:58 +02:00
Jérémy Dubois 1a0872c507 nagios-nrpe / evolinux-base : new ntp server variable
All checks were successful
continuous-integration/drone/push Build is passing
Online hosted servers must use ntp.online.net as
ntp server, because others one are rate limited.
Default ntp server is pool.ntp.org, and a custom
one can be set with the nagios_nrpe_ntp_server
variable.
2020-06-04 10:55:48 +02:00
Benoît S. 342810362d evolinux-base: check_hpraid.sh: Fix missing copy of RAID state
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-04 17:32:49 +09:00
Benoît S. 91dda2e1a2 evolinux-base: check_hpraid.sh: Fix RAID state detection 2020-06-04 17:23:14 +09:00
Benoît S. 7b97702f15 evolinux-base: Add check_hpraid.sh
All checks were successful
continuous-integration/drone/push Build is passing
This script is meant to be executed as a cron by executing Nagios
NRPE plugin check_hpraid and notify by mail any errors
2020-06-04 16:50:35 +09:00
Jérémy Lecour 1d5a30b144 evoacme: upstream release 20.06
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-03 12:09:58 +02:00
Patrick Marchand c8cd119a18 Merge pull request 'Make it possible to setup mysql replication' (#102) from mysql_replication into unstable
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-02 17:31:13 +02:00
Jérémy Lecour 4cf438c8ff redis: raise an error is port 6379 is used in "instance" mode
All checks were successful
continuous-integration/drone/push Build is passing
2020-06-02 11:22:56 +02:00