Jérémy Dubois
42782b7f3d
evolinux-base: fix show_help in backup-server-state.sh
...
continuous-integration/drone/push Build was killed
* --uname and --no-uname options were not in help
* --services and --no-services were in help whereas --systemctl and --no-systemctl are used in options parsing
2022-03-24 17:57:58 +01:00
Mathieu Trossevin
1646cc99bf
redis: Remount /usr with RW when adding nagios plugin
continuous-integration/drone/push Build was killed
2022-03-23 13:55:54 +01:00
Jérémy Dubois
b4f83e54d0
openvpn: use a subnet topology instead of the net30 default topology
continuous-integration/drone/push Build was killed
2022-03-23 10:46:17 +01:00
Jérémy Dubois
c2f6ff5249
evocheck: upstream release 22.03.1
continuous-integration/drone/push Build was killed
2022-03-22 11:03:26 +01:00
Jérémy Lecour
5895f5a99b
minifirewall: upstream release 22.03.3
continuous-integration/drone/push Build was killed
2022-03-21 14:35:20 +01:00
Jérémy Lecour
e7594c6c86
evolinux-base: backup-server-state release 22.03.2
continuous-integration/drone/push Build was killed
2022-03-21 11:32:08 +01:00
Mathieu Trossevin
444bd72944
generate-ldif: Correct generated entries for php-fpm in containers
continuous-integration/drone/push Build was killed
2022-03-17 17:36:35 +01:00
Jérémy Lecour
fb41c81e99
backup-server-state: release 22.03.2
...
continuous-integration/drone/push Build was killed
update documentation for --dpkg-full vs. --dpkg-status
2022-03-17 10:45:44 +01:00
Jérémy Lecour
8a9faa0250
* minifirewall: upstream release 22.03.2
continuous-integration/drone/push Build was killed
2022-03-16 23:49:34 +01:00
Jérémy Lecour
545226f6f6
evocheck: upstream release 22.03
continuous-integration/drone/push Build was killed
2022-03-15 23:25:15 +01:00
Jérémy Lecour
ba90203f21
minifirewall: upstream release 22.03.1 and use includes directory
continuous-integration/drone/push Build was killed
2022-03-15 23:07:33 +01:00
Ludovic Poujol
17f884b04a
evolinux-base: Add non-free repos & install non-free firmware on dedicated hardware
continuous-integration/drone/push Build was killed
2022-03-15 11:35:20 +01:00
Ludovic Poujol
913e6d96e8
generate-ldif: Add services check for bkctld
continuous-integration/drone/push Build was killed
2022-03-15 10:53:16 +01:00
Jérémy Lecour
a733e2794f
evolinux-base: backup-server-state release 22.03
continuous-integration/drone/push Build was killed
2022-03-08 16:49:53 +01:00
Mathieu Trossevin
9c84e95182
Repair keepalived role
continuous-integration/drone/push Build was killed
2022-03-02 16:23:01 +01:00
Jérémy Lecour
e5dc503cfd
Release 22.03
continuous-integration/drone/push Build was killed
2022-03-02 09:42:12 +01:00
Jérémy Lecour
270d03b6a6
evolinx-users: optimize sudo configuration
continuous-integration/drone/push Build was killed
2022-03-02 09:40:52 +01:00
Jérémy Lecour
1dc4d0e133
redis: always install check_redis_instances
continuous-integration/drone/push Build was killed
2022-03-01 14:04:05 +01:00
Jérémy Lecour
c8ef7e9b75
redis: check_redis_instances tolerates absence of instances
continuous-integration/drone/push Build was killed
2022-03-01 14:02:22 +01:00
Jérémy Lecour
d9e95218ce
apt_hold_packages: broadcast message with wall, if present
continuous-integration/drone/push Build was killed
2022-02-24 11:49:12 +01:00
Ludovic Poujol
39949ea921
generate-ldif: Add support for php-fpm in containers
continuous-integration/drone/push Build was killed
2022-02-21 11:31:00 +01:00
Ludovic Poujol
e79141d2d2
lxc: Fail if /var is nosuid
2022-02-17 16:25:20 +01:00
Jérémy Lecour
799466788f
lxc-php: preliminary support for PHP 8.1 container
continuous-integration/drone/push Build was killed
2022-02-17 14:50:21 +01:00
Jérémy Dubois
f3c443d076
openvpn: now check that openvpn has been restarted since last certificates renewal
continuous-integration/drone/push Build was killed
2022-02-15 15:52:21 +01:00
Ludovic Poujol
9995fca35d
varnish: update munin plugin to work with recent varnish versions
continuous-integration/drone/push Build was killed
2022-02-08 16:16:24 +01:00
Ludovic Poujol
a2f73bb7df
elasticsearch: Use /etc/elasticsearch/jvm.options.d/evolinux
instead of default /etc/elasticsearch/jvm.options
continuous-integration/drone/push Build was killed
2022-02-07 15:18:46 +01:00
Jérémy Dubois
981128dc17
openvpn: make it compatible with OpenBSD and add some improvements
continuous-integration/drone/push Build was killed
2022-02-03 18:35:16 +01:00
Jérémy Lecour
0cbdda840d
Explicit permissions for systemd overrides
continuous-integration/drone/push Build was killed
2022-02-03 14:18:20 +01:00
Jérémy Lecour
9e27d9707b
kvm-host: add missing default value
2022-02-03 14:16:45 +01:00
Jérémy Lecour
5153b88d01
evolinux-base: option to bypass raid-related tasks
2022-02-03 14:15:33 +01:00
Jérémy Lecour
3dd78fbf7e
Release 22.01.3
continuous-integration/drone/push Build was killed
continuous-integration/drone/pr Build was killed
2022-01-31 11:57:21 +01:00
Jérémy Lecour
fcb0b8c80f
backup-server-state: 22.01.3
continuous-integration/drone/push Build was killed
2022-01-28 16:27:39 +01:00
Jérémy Lecour
cd26081add
rbenv: install Ruby 3.1.0 by default
2022-01-28 16:27:20 +01:00
Jérémy Lecour
bb30402df3
Release 22.01.2
continuous-integration/drone/push Build was killed
continuous-integration/drone/pr Build was killed
2022-01-27 14:12:40 +01:00
Jérémy Lecour
6ccd0ea440
Release 22.01.1
continuous-integration/drone/pr Build was killed
continuous-integration/drone/push Build was killed
2022-01-27 14:04:41 +01:00
Jérémy Lecour
2849039fad
remount-usr: use findmnt to find if usr is a readonly partition
continuous-integration/drone/push Build was killed
2022-01-27 11:21:19 +01:00
Jérémy Lecour
80f8a94798
evolinux-base: many improvements for backup-server-state script
continuous-integration/drone/push Build was killed
2022-01-27 10:29:08 +01:00
Jérémy Lecour
bff8fcfebb
apt: upgrade packages after all the configuration is done
continuous-integration/drone/push Build was killed
continuous-integration/drone/pr Build was killed
2022-01-25 18:25:47 +01:00
Jérémy Lecour
0e34d4cd4b
Merge remote-tracking branch 'origin/bullseye-swap-top' into unstable
continuous-integration/drone/push Build was killed
2022-01-25 15:15:05 +01:00
Jérémy Lecour
1f4ee2de79
Prepare CHANGELOG for 22.01 release
continuous-integration/drone/push Build was killed
2022-01-25 15:00:03 +01:00
Mathieu Trossevin
1902c40c3c
lxc-php: Fix config for opensmtpd on bullseye
continuous-integration/drone/pr Build was killed
2022-01-25 11:57:41 +01:00
Jérémy Dubois
3822696db6
Update CHANGELOG for new openvpn role
continuous-integration/drone/push Build was killed
2022-01-24 19:23:26 +01:00
Jérémy Lecour
ca1f465aaa
nodejs: default to version 16 LTS
2022-01-12 13:04:22 +01:00
Jérémy Lecour
ec346a42a5
munin: systemd override to unprotect home directory
continuous-integration/drone/push Build was killed
2021-12-23 16:56:23 +01:00
Mathieu Trossevin
d3eef71127
nagios-nrpe: Fix check_nfsserver for buster and bullseye
...
continuous-integration/drone/pr Build is failing
From buster onward the nfs server doesn't run NFSv4 over UDP (it is out
of spec, see RFC 7530). As such the check broke as it attempt to check
the availability of NFSv4 over UDP.
Right now the check doesn't check for NFSv2 over UDP as it would need to
check if it exist first, as on bullseye it isn't supported by default
anymore.
2021-11-24 11:11:39 +01:00
Jérémy Lecour
e4bb0c6f55
filebeat/metricbeat: version 7.x y default
continuous-integration/drone/push Build is failing
2021-11-12 10:07:43 +01:00
Jérémy Lecour
039c740ef3
mysql: add evomariabackup 21.11
2021-11-01 10:16:55 +01:00
Jérémy Lecour
6cf8195744
evolinux-base: fix alert5.service dependency syntax
2021-10-29 07:52:38 +02:00
Jérémy Lecour
dcfea674a4
listupgrade: old-kernel-removal version 21.10
2021-10-25 14:23:52 +02:00
Jérémy Lecour
646a7b1813
evocheck: package install is not supported anymore
2021-10-25 10:08:40 +02:00
Jérémy Lecour
dd53c01027
evocheck: upstream release 21.10.4
2021-10-25 10:02:12 +02:00
Jérémy Dubois
90acb99c2a
nagios-nrpe: new check influxdb
2021-10-22 14:51:57 +02:00
Jérémy Lecour
ca28df1b75
evocheck: upstream release 21.10.3
2021-10-22 13:57:56 +02:00
Jérémy Lecour
1706361e8d
evocheck: upstream release 21.10.2
2021-10-22 13:43:43 +02:00
Jérémy Lecour
dcdde5f7f6
evocheck: upstream release 21.10.1
2021-10-21 17:32:11 +02:00
Ludovic Poujol
9b3bb39bd0
mysql : Create a default ~root/.my.cnf for compatibility reasons
2021-10-20 16:31:05 +02:00
Ludovic Poujol
b120a92203
evolinux-users + nagios-nrpe: Add support for php-fpm80 in lxc
2021-10-20 15:59:20 +02:00
Ludovic Poujol
a9d0d0958d
packweb-apache : Support php 8.0
2021-10-18 18:30:47 +02:00
Jérémy Dubois
d38119eb0f
nginx : fix variable name and debug
...
nginx_minimal defined the nginx_package_name_default variable which was not
used instead of the nginx_default_package_name variable
also fixed debug which was reversed, and add another one to be sure which mode
is used
2021-10-18 15:01:59 +02:00
Jérémy Lecour
bbd16dc5b4
evolinux-base: add script backup-server-state
2021-10-15 10:50:42 +02:00
Ludovic Poujol
73d6979e72
Various changes on mongodb (support 5.0) + fixes & compatibility
...
* mongodb: Deny the install on Debian 11 « Bullseye » when the version is unsupported
* mongodb: Support version 5.0 (for buster)
* mongodb: Allow to specify a mongodb version for buster & bullseye
* mongodb: Add missing remount-usr for munin plugins
2021-10-05 15:49:47 +02:00
Jérémy Lecour
7d63f20336
evoacme: exclude renewal-hooks directory from cron
2021-10-05 08:28:47 +02:00
Jérémy Lecour
7b14296503
etc-git: optimize maintenance tasks
...
* manage commits with an optimized shell script instead of many slow Ansible tasks
* centralize cron jobs in dedicated crontab
2021-10-02 12:50:01 +02:00
Jérémy Lecour
e089ddf091
evocheck: upstream release 21.10
2021-10-01 18:27:44 +02:00
Jérémy Lecour
b293cf2cf9
Install python 2 or 3 libraries according to running python version
2021-09-30 17:05:10 +02:00
Jérémy Lecour
5cbfda8f52
docker-host: install additional dependencies
2021-09-30 12:09:11 +02:00
Jérémy Lecour
9b479f9c05
evolinux-base: logs are rotated with dateext by default
2021-09-30 12:07:02 +02:00
Jérémy Lecour
4a035d248d
evocheck: upstream release 21.09
2021-09-30 10:45:07 +02:00
Jérémy Lecour
3de5de5304
mysql: improve Bullseye compatibility
2021-09-30 10:13:11 +02:00
Jérémy Lecour
0eb7332a34
php: enforce Debian version with assert instead of fail
2021-09-29 16:43:55 +02:00
Jérémy Lecour
73efee9caa
etc-git: purge old .git/index.lock (default: True)
2021-09-23 14:45:24 +02:00
Jérémy Lecour
1d55965527
logstash: no more dependency on Java
2021-09-21 14:43:58 +02:00
Jérémy Lecour
8233264d2a
logstash: logging to syslog is configurable (default: True)
2021-09-21 14:43:58 +02:00
Jérémy Lecour
ef1472cbba
logstash: elastic_stack_version = 7.x
2021-09-21 14:43:58 +02:00
Ludovic Poujol
f75354bb84
generate-ldif: detect mdadm
2021-09-16 17:26:58 +02:00
Ludovic Poujol
de4d814d74
generate-ldif: detect hardware raid card
2021-09-16 17:17:32 +02:00
Ludovic Poujol
6a2cd59e6d
nagios-nrpe + evolinux-users: new check ipmi
2021-09-16 16:48:03 +02:00
Ludovic Poujol
51fd2337f0
nagios-nrpe + evolinux-users: new check raid (soft + hard)
2021-09-16 16:40:57 +02:00
Ludovic Poujol
fa0c668cec
evolinux-base: install freeipmi by default on dedicated hw
2021-09-16 15:58:10 +02:00
Jérémy Lecour
2b549af7d9
evolinux-base: split dpkg logrotate configuration
2021-09-09 10:23:53 +02:00
Jérémy Lecour
e429f7aecb
squid: add *.o.lencr.org to default whitelist
2021-09-07 14:01:52 +02:00
Jérémy Lecour
e45ee59801
mysql: script "mysql-queries-killer.sh" to kill MySQL queries
2021-08-30 14:05:15 +02:00
Jérémy Lecour
65750d2aa6
evomaintenance: extract a config.yyml tasks file
2021-08-30 09:24:57 +02:00
Jérémy Lecour
ecba57ad75
evolinux-base: install molly-guard by default
2021-08-25 17:57:38 +02:00
Jérémy Lecour
2c7380240c
nagios-nrpe + evolinux-users: new checks for bkctld
2021-08-25 11:56:26 +02:00
Jérémy Lecour
066baf3538
Revert "bullseye-detect: this role is obsolete, Debian 11 has been fully released"
...
continuous-integration/drone/push Build is passing
This reverts commit c9f25f4638
.
2021-08-17 15:33:06 +02:00
Jérémy Lecour
ad457dd7ba
apt: use the new security repository for Bullseye
continuous-integration/drone/push Build is passing
2021-08-16 14:12:31 +02:00
Jérémy Lecour
969a5bce7d
apt: remove workaround for Evolix public repositories with Debian 11
continuous-integration/drone/push Build is passing
2021-08-16 13:50:53 +02:00
Jérémy Lecour
d186e21239
evoadmin-web: simpler PHP packages lists
2021-08-16 13:49:13 +02:00
Jérémy Lecour
c9f25f4638
bullseye-detect: this role is obsolete, Debian 11 has been fully released
2021-08-16 13:47:33 +02:00
Jérémy Lecour
139b342fbd
certbot: silence letsencrypt deprecation warnings
2021-07-20 17:19:57 +02:00
Jérémy Lecour
bf49ec8df5
mysql: script "mysql_connections" to display a compact list of connections
continuous-integration/drone/push Build is passing
2021-07-08 15:10:35 +02:00
Jérémy Lecour
32b5efa30e
evocheck: upstream release 21.07
continuous-integration/drone/push Build is passing
2021-07-07 15:20:24 +02:00
Jérémy Lecour
29ec7bdcf2
Remove embedded GPG keys only if legacy keyring is present
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
2021-07-04 22:08:47 +02:00
Jérémy Lecour
ffd7d0e504
evolinux-base: alert5 comes after the network
2021-07-04 22:07:51 +02:00
Jérémy Lecour
4167b6d2a9
fix CHANGELOG
2021-07-03 09:10:22 +02:00
Jérémy Lecour
3721c2ab38
squid: improve default whitelist
2021-07-03 08:56:23 +02:00
Jérémy Lecour
5905751a82
squid: must be started in foreground mode for systemd
2021-07-02 23:45:42 +02:00
Jérémy Lecour
a5658b7f26
packweb-apache: install phpMyAdmin from buster-backports
2021-07-02 21:18:06 +02:00
Jérémy Lecour
5c1ae6ed0c
spamassassin: change dependency on evomaintenance
...
Fail with an error if evomaintenance config is missing
instead of trying to install a package that doesn't exist anymore.
2021-07-02 21:16:43 +02:00
Jérémy Lecour
8a784c39ab
mongodb: create munin plugins directory if missing
2021-07-02 21:16:40 +02:00
Jérémy Lecour
9c8dd743c8
Use python3 packages on Debian 11 and later
2021-07-02 21:16:15 +02:00
Jérémy Lecour
6b87ead5b4
update changelog
2021-07-02 21:16:12 +02:00
Jérémy Lecour
e8a8e85819
redis: instance service for Debian 11
2021-07-02 21:13:42 +02:00
Jérémy Lecour
c5ab0c0ff9
squid: remove obsolete variable on Squid 4
2021-07-02 21:13:05 +02:00
Jérémy Lecour
f673ea85d1
Force Debian version to buster for Evolix repository
2021-07-02 21:12:33 +02:00
Jérémy Lecour
2c441f176a
mysql: mariadb-client-10.5 on Debian 11
2021-07-02 21:11:27 +02:00
Jérémy Lecour
c5bb8f06ae
mysql: use python3 with Debian 11 and later
2021-07-02 21:10:52 +02:00
Jérémy Lecour
51d4ec1bb2
php: remove php-gettext for 7.4
2021-07-02 21:10:04 +02:00
Jérémy Lecour
2f68ae5339
Preliminary support for Bullseye
2021-07-02 20:58:09 +02:00
Jérémy Lecour
90cbd17f9b
listupgrade: crontab is configurable
2021-07-02 14:01:46 +02:00
Jérémy Lecour
b0b24744d6
listupgrade: upstream release 21.06.3
2021-07-02 13:59:42 +02:00
Jérémy Lecour
11813c31a4
certbot: add script for manual deploy hooks execution
continuous-integration/drone/push Build is passing
2021-06-30 14:29:03 +02:00
Jérémy Lecour
51462c724c
certbot: sync_remote excludes itself
2021-06-30 07:39:57 +02:00
Jérémy Lecour
2ed1dac16b
Release 10.6.0
continuous-integration/drone/pr Build is passing
continuous-integration/drone/push Build is passing
2021-06-28 15:56:19 +02:00
Jérémy Lecour
0fe0244116
Update Galaxy metadata (company, platforms and galaxy_tags)
2021-06-28 15:26:28 +02:00
Jérémy Lecour
1890a79702
elasticsearch: inline YAML formatting of seed_hosts and initial_master_nodes
continuous-integration/drone/push Build is passing
2021-06-23 22:38:24 +02:00
Jérémy Lecour
4c1ef1bd56
elasticsearch: recent versiond don't depend on external JRE
2021-06-23 22:38:24 +02:00
Jérémy Lecour
6190c66445
listupgrade: upstream release 21.06.2
continuous-integration/drone/push Build is passing
2021-06-20 12:06:49 +02:00
Jérémy Lecour
dd32ab5688
listupgrade: upstream release 21.06.1
2021-06-20 10:32:16 +02:00
Jérémy Lecour
dbc853a815
listupgrade: upstream release 21.06
continuous-integration/drone/push Build is passing
2021-06-17 18:23:13 +02:00
Jérémy Lecour
4c7fed77c4
squid: add Yarn apt repository in default whitelist
continuous-integration/drone/push Build is passing
2021-06-17 18:19:20 +02:00
Jérémy Lecour
fe9b7ee5f7
evomaintenance: upstream release 0.6.4
continuous-integration/drone/push Build is passing
2021-06-17 10:57:07 +02:00
Jérémy Lecour
3d715bae35
kvm-host: replace the "kvm-tools" package with scripts deployed by Ansible
continuous-integration/drone/push Build is passing
2021-06-10 11:09:48 +02:00
Jérémy Lecour
ca40fad186
nodejs: change GPG key name
continuous-integration/drone/push Build is passing
2021-06-08 11:19:26 +02:00
Jérémy Lecour
856d11aced
nodejs: update apt cache before installing the package
2021-06-07 13:03:18 +02:00
Jérémy Lecour
2c47871fa7
Add Elastic GPG key to kibana, filebeat, logstash, metricbeat roles
continuous-integration/drone/push Build is passing
2021-05-25 15:10:04 +02:00
Jérémy Lecour
06b8314211
evolinux-base: fix motd lookup path
2021-05-19 17:02:20 +02:00
Jérémy Lecour
02451f1e67
add default (useless) value for file lookup
continuous-integration/drone/push Build is passing
2021-05-19 14:35:08 +02:00
Jérémy Lecour
4d83f25ae6
fix pipefail option for shell invocations
continuous-integration/drone/push Build is passing
2021-05-18 14:04:54 +02:00
Jérémy Lecour
cae0de17df
listupgrade: fix wget error + shellcheck cleanup
continuous-integration/drone/push Build is passing
2021-05-17 23:05:18 +02:00
Jérémy Lecour
56af68e5b3
listupgrade: print error if wget fails
continuous-integration/drone/push Build is passing
2021-05-17 12:19:57 +02:00
Jérémy Lecour
d823c8116a
update CHANGELOG
continuous-integration/drone/push Build is passing
2021-05-09 23:21:21 +02:00
Jérémy Lecour
e5e4dc95fa
packweb-apache: install phpMyAdmin from buster-backports
2021-05-04 14:57:18 +02:00
Jérémy Lecour
e7ddf9d46c
Use 'loop' syntax instead of 'with_list'
2021-05-04 14:31:22 +02:00
Jérémy Lecour
485ec39674
Use 'loop' syntax instead of 'with_nested'
2021-05-04 14:29:50 +02:00
Jérémy Lecour
07fd6451e1
Use 'loop' syntax instead of 'with_dict'
2021-05-04 14:20:53 +02:00
Jérémy Lecour
5138065059
Use 'loop' syntax instead of 'with_items'
2021-05-04 14:19:18 +02:00
Jérémy Lecour
debc4a82ca
Use 'loop' syntax instead of 'with_first_found'
continuous-integration/drone/push Build is passing
2021-05-04 13:39:47 +02:00
Jérémy Lecour
a7971abb04
apt: store keys in /etc/apt/trusted.gpg.d in ascii format
2021-05-03 12:02:31 +02:00
Jérémy Lecour
cc6acdbf34
certbot: sync_remote.sh is configurable
continuous-integration/drone/push Build is passing
2021-05-03 11:25:24 +02:00
Jérémy Lecour
6eaeb90f6e
ldap: fix edge cases where passwords were not set/get properly
continuous-integration/drone/push Build is passing
2021-05-02 23:28:09 +02:00
Jérémy Lecour
43c726e86a
spamassassin: change dependency on evomaintenance
...
continuous-integration/drone/push Build is passing
Fail with an error if evomaintenance config is missing
instead of trying to install a package that doesn't exist anymore.
2021-05-02 01:24:03 +02:00
Jérémy Lecour
920cb7eaeb
update changelog
continuous-integration/drone/push Build is passing
2021-05-01 16:51:20 +02:00
Jérémy Lecour
5d79c31dc3
kvm-host: add migrate-vm script
continuous-integration/drone/push Build is passing
2021-04-28 15:53:38 +02:00
Jérémy Lecour
94a5d7daa2
mysql: variable to disable myadd script overwrite (default: True)
continuous-integration/drone/push Build is passing
2021-04-23 14:59:29 +02:00
Jérémy Lecour
eab68545fe
evolinux-base: add default motd template
continuous-integration/drone/push Build is passing
2021-04-23 11:41:27 +02:00
Ludovic Poujol
3457b14fed
ntpd: Add leapfile configuration setting to ntpd on debian 10+
continuous-integration/drone/push Build is passing
2021-04-21 17:22:45 +02:00
Ludovic Poujol
d56c545183
apache: new variable for mpm mode (+ updated default config accordingly)
...
continuous-integration/drone/push Build is passing
Also, itk package will only be installed if required
2021-04-19 17:35:49 +02:00
Jérémy Lecour
5e0ca0e3ff
Release 10.5.1
continuous-integration/drone/pr Build is passing
continuous-integration/drone/push Build is passing
2021-04-13 15:56:09 +02:00