Commit graph

835 commits

Author SHA1 Message Date
Gregory Colpart 76dda62001 remove interface ignore wildcard because it breaks ntp sync with external servers 2017-09-14 19:09:22 +02:00
Benoît.S dbbd0e1783 Patch MySQL 5.5.53, set secure-file-priv to empty value.
Why? Because we want to do SELECT INTO OUTFILE.
2017-09-14 15:19:26 +02:00
Jérémy Lecour 685282bf93 minifirewall: fallback when no trusted ip is provided 2017-09-14 14:26:44 +02:00
Jérémy Lecour 3a9b95cedc evolinux-base: fallback with warning for ssh without addresses 2017-09-14 14:26:00 +02:00
Jérémy Lecour 82fda57cdb squid: don't overwrite whitelist for Debian 8 2017-09-14 09:29:52 +02:00
Jérémy Lecour b4cf781dd1 squid: append whitelist for Debian 8 too 2017-09-14 09:29:52 +02:00
Jérémy Lecour c44896d433 squid: consistent version switch 2017-09-14 09:29:51 +02:00
Jérémy Lecour ca2048f9e3 squid: fix variable name 2017-09-14 09:29:51 +02:00
Victor LABORIE 8a139b07b2 evoacme: fix SRV_IP overriding in make-csr 2017-09-13 11:38:38 +02:00
Gregory Colpart a1188c7823 add default_charset example in php custom files 2017-09-12 20:14:56 +02:00
Victor LABORIE f5fdd71681 evoacme: fix invalid domain printing in make-csr 2017-09-12 15:49:35 +02:00
Jérémy Lecour 81aabdbe5e nginx: apt preferences for libnginx packages 2017-09-12 15:16:03 +02:00
Victor LABORIE 0438ece246 php: comments starting with '#' are deprecated 2017-09-12 10:41:47 +02:00
Victor LABORIE 069e675c6b evoacme: add basic check to evoacme.sh 2017-09-11 17:05:46 +02:00
Victor LABORIE ab177c2dad evoacme: add pem extension to dhparam file 2017-09-11 17:05:46 +02:00
Victor LABORIE 6c399ca60e evoacme: fix live link path 2017-09-11 17:05:46 +02:00
Victor LABORIE 1fbcb61559 evoacme: fix typo 2017-09-11 17:05:45 +02:00
Victor LABORIE ff392d8e26 evoacme: fix symlink generation 2017-09-11 17:05:45 +02:00
Victor LABORIE 0726d29796 evoacme: purge same day cert before recreating it 2017-09-11 17:05:45 +02:00
Victor LABORIE 740b60d838 evoacme: make-csr stdout is more verbose 2017-09-11 17:05:45 +02:00
Victor LABORIE e16eafc1a0 evoacme: complete refactoring of make-csr.sh 2017-09-11 17:05:45 +02:00
Victor LABORIE 05afeea894 evoacme: remove obsolete sudoers file 2017-09-11 17:05:44 +02:00
Victor LABORIE 8d7cbab3a9 evoacme: refactoring of certbot.cron 2017-09-11 17:05:44 +02:00
Victor LABORIE 9deb594834 evoacme: move scripts in /usr/local/sbin 2017-09-11 17:05:44 +02:00
Victor LABORIE e210de5f53 evoacme: complete refactoring of evoacme.sh 2017-09-11 17:05:44 +02:00
Victor LABORIE 1cc4ea65df nginx: fix default link in minimal install 2017-09-08 15:04:58 +02:00
Gregory Colpart db4331b98f we don't need anymore shadow group in Debian 9 or later 2017-09-08 04:03:04 +02:00
Gregory Colpart 27f0369c5b esthetic changes: add version condition in name: 2017-09-08 02:01:26 +02:00
Gregory Colpart 06184a44bf remove *ssl_subject vars to avoid errors 2017-09-08 01:26:53 +02:00
Gregory Colpart d4e800a263 enable evoadmin-web link in default site index 2017-09-08 01:26:53 +02:00
Gregory Colpart 04239e3350 use replace instead of lineinfile 2017-09-08 01:26:53 +02:00
Gregory Colpart a074f6488a we use now evolinux-sudo group to set sudo rights 2017-09-08 01:26:53 +02:00
Gregory Colpart 9f01e1869d Add info.php 2017-09-08 01:26:46 +02:00
Gregory Colpart 87ef758891 we need force=no for files who will be lineinfile/blockinfile 2017-09-07 02:32:08 +02:00
Gregory Colpart 26b76aed17 review default vhost 2017-09-07 02:31:48 +02:00
Gregory Colpart be4e811c47 phpMyAdmin configuration 2017-09-07 02:26:35 +02:00
Gregory Colpart 94625a73c2 Prepare phpMyAdmin config if needed 2017-09-06 19:34:04 +02:00
Gregory Colpart 4f3b04e97d Centralize restrictions to fhs_retrictions.yml 2017-09-06 19:30:21 +02:00
Gregory Colpart af5427e077 Add flavor for installing Symfony 2017-09-06 19:28:37 +02:00
Gregory Colpart 521fe2e9f3 Fix custom config file name for PHP ini values 2017-09-06 15:34:11 +02:00
Gregory Colpart 6241bdc8ce Easy activation of Access-Control-Allow-Origin for eot|ttf|otf|woff files 2017-09-06 14:58:43 +02:00
Jérémy Lecour 5d549af643 evomainteance should not install the trap itself
Not all users with a shell are sudoers.
2017-09-05 15:24:51 +02:00
Jérémy Lecour a18fdd0ab2 Merge branch 'hotfix-mongodb' into unstable 2017-09-04 17:19:02 +02:00
Jérémy Lecour fc23090fca MongoDB: fix syntax mistake 2017-09-04 17:17:51 +02:00
Jérémy Lecour 2f2192e5cf apache is compatible with Stretch 2017-09-04 17:15:02 +02:00
Gregory Colpart d4a47346ef In Stretch, we have now /etc/mysql/mariadb.conf.d/ dir then we need use it for our conf files 2017-09-01 04:00:51 +02:00
Gregory Colpart d1b290f864 Typos + add info 2017-09-01 04:00:13 +02:00
Gregory Colpart 4a0d473e84 clean gpg key 2017-09-01 02:44:53 +02:00
Victor LABORIE e38f4bc0c3 redmine: don't change when touch nginx log files 2017-08-31 11:07:59 +02:00
Victor LABORIE 716b0a2ed8 redmine: use tasks instead of handlers 2017-08-31 10:55:14 +02:00