Commit graph

1752 commits

Author SHA1 Message Date
Tristan PILAT 92775ddc6c We don't want Solr to run as root! 2019-07-04 20:14:13 -04:00
Tristan PILAT 4fa1023780 Add a task to make sure the rootfs directory of each container has 755 rights 2019-07-04 20:14:13 -04:00
Tristan PILAT eac096fd0b Add lxc-solr role 2019-07-04 20:14:13 -04:00
Jérémy Lecour 6f07c77f10 elasticsearch: listen on local interface only by default 2019-07-04 20:14:13 -04:00
Jérémy Lecour efa7e44fe0 Revert "evolinux-base: install "spectre-meltdown-checker" (Debian 9 and later)"
This reverts commit 65414d8ae7.
2019-07-04 20:12:21 -04:00
Patrick Marchand cba87f594c Fix mistake in join for minifirewall HTTPSITES
All checks were successful
continuous-integration/drone/push Build is passing
There were extraneous quotes in the rendered string.

fixes #65
2019-07-03 09:07:17 -04:00
Patrick Marchand ff9e1e80aa Fix for minifirewall bug in 8d352f100e
All checks were successful
continuous-integration/drone/push Build is passing
The default OS websites would override all the default http sites.
I removed those default http sites from the file and put them in
the minifirewall_http_sites list. Since this would override the
list anyway, it doesnt change much, except that someone who doesnt
want to use the OS default websites should also override the related
variables (minifirewall_default_*_http_sites)

fixes #65
2019-07-03 09:04:17 -04:00
Patrick Marchand 8d352f100e Adds default http sites whitelist for ubuntu
Some checks reported errors
continuous-integration/drone/push Build encountered an error
Ubuntu and Debian do not use the same apt sources. I created two
new default variables (minifirewall_default_xxx_http_sites) that
contain a list of the sites required for apt to work. I then removed
the debian sites from the default file and added two new tasks to
prepend the contents of these variables to HTTPSITES.

fixes #65
2019-07-02 16:12:09 -04:00
Patrick Marchand 5385db2b16 Adds a task to directly install the serveur-base .deb in ubuntu
Some checks reported errors
continuous-integration/drone/push Build encountered an error
This package is not available yet on ubuntu systems so we must
install it directly alongside log2mail and evocheck.

Fixes #57
2019-06-28 15:43:34 -04:00
Jérémy Lecour af5573980d change distribution release codename
Some checks reported errors
continuous-integration/drone/push Build encountered an error
Ansible 2.2 is too old to know about buster.
Let's use LSB for that.
2019-06-28 09:36:47 -04:00
Eric Morino 148a383cf1 Add install package percona-toolkit by default 2019-06-28 09:36:47 -04:00
Ludovic Poujol eeffa69c9d lxc-php: Don't remove the default pool - That's making PHP-FPM sad :( 2019-06-28 09:36:47 -04:00
Jérémy Lecour b439aeb739 Release 9.10.1 2019-06-28 09:36:47 -04:00
Jérémy Lecour e27fb3cee7 evocheck : update (version 19.06) from upstream 2019-06-28 09:36:47 -04:00
Jérémy Lecour 98cf6446d7 Release 9.10.0 2019-06-28 09:36:47 -04:00
Jérémy Lecour bf9f28dc9f rbenv: install Ruby 2.6.3 by default 2019-06-28 09:36:47 -04:00
Jérémy Lecour bd3c864ba4 whitespaces and syntax 2019-06-28 09:36:47 -04:00
Jérémy Lecour 08c5d8d427 fluentd: store gpg key locally 2019-06-28 09:36:47 -04:00
Jérémy Lecour aec0ecea99 tags and whitespaces 2019-06-28 09:36:47 -04:00
Jérémy Lecour 5bca101457 evocheck : update from upstream 2019-06-28 09:34:54 -04:00
Jérémy Lecour 02e50580e2 apache: add a variable to customize the server-status host 2019-06-28 09:34:54 -04:00
Jérémy Lecour 124af46b7f Revert "evolinux-base: install "spectre-meltdown-checker" (Debian 9 and later)"
This reverts commit 65414d8ae7.
2019-06-28 09:34:54 -04:00
Tristan PILAT 8918f0ecec Add proxy_fcgi activation for multi php 2019-06-28 09:33:22 -04:00
Tristan PILAT 74adcb08e8 Add restart apache2 handler 2019-06-28 09:33:22 -04:00
Tristan PILAT 99e8e74db8 Add lxc-php README file 2019-06-28 09:33:22 -04:00
Tristan PILAT bd821b7a06 Fix condition check mistakes in templates 2019-06-28 09:33:22 -04:00
Benoît S. b459eab77a apt: Install evolix public repo only for Debian
All checks were successful
continuous-integration/drone/push Build is passing
Closes #56
2019-06-20 10:04:10 +02:00
Benoît S. 682191889f apt: Ubuntu bionic sources list
Some checks reported errors
continuous-integration/drone/push Build encountered an error
Closes #55
2019-06-20 09:58:00 +02:00
Benoît S. ac66ede677 Handle Ubuntu >= 18
Some checks reported errors
continuous-integration/drone/push Build encountered an error
2019-06-19 17:46:53 +02:00
Jérémy Lecour b83574592f evolinux-base: install "spectre-meltdown-checker" (Debian 10 and later)
All checks were successful
continuous-integration/drone/push Build is passing
2019-06-19 15:13:25 +02:00
Jérémy Lecour b362f422df evolinux-base: packages for Buster and later
All checks were successful
continuous-integration/drone/push Build is passing
2019-06-19 15:08:54 +02:00
Jérémy Lecour bee57a0b3c change distribution release codename
Some checks reported errors
continuous-integration/drone/push Build encountered an error
continuous-integration/drone/pr Build is failing
Ansible 2.2 is too old to know about buster.
Let's use LSB for that.
2019-06-18 17:35:28 +02:00
Tristan PILAT 6d3eaf891c Fix condition check mistakes in templates
Some checks reported errors
continuous-integration/drone/push Build encountered an error
2019-06-17 15:55:56 +02:00
Jérémy Lecour 8cb604aa93 etc-git: gitignore /etc/letsencrypt/.certbot.lock
All checks were successful
continuous-integration/drone/push Build is passing
2019-06-17 15:02:17 +02:00
Victor LABORIE 189fa87efb Change Dockerfile Workdir to /data
All checks were successful
continuous-integration/drone/push Build is passing
2019-06-17 14:31:01 +02:00
Ludovic Poujol 7b9cc7c2b1 apt: Add Debian Buster repositories
Some checks reported errors
continuous-integration/drone/push Build encountered an error
2019-06-17 14:24:09 +02:00
Jérémy Lecour 65414d8ae7 evolinux-base: install "spectre-meltdown-checker" (Debian 9 and later)
All checks were successful
continuous-integration/drone/push Build is passing
2019-06-17 14:22:00 +02:00
Jérémy Lecour 9b2372720b make sure that /usr/share/scripts exists
Some checks reported errors
continuous-integration/drone/push Build encountered an error
2019-06-17 14:19:01 +02:00
Jérémy Lecour a643c96cca evomaintenance: make hooks configurable
Some checks reported errors
continuous-integration/drone/push Build encountered an error
2019-06-17 14:17:30 +02:00
Victor LABORIE 8314053506 Add DroneCI config for build Docker image
All checks were successful
continuous-integration/drone/push Build is passing
2019-06-17 14:06:13 +02:00
Tristan PILAT 317aac735f Add lxc-php role - Install 3 containers with all required PHP packages 2019-06-17 12:17:46 +02:00
Tristan PILAT b2e079101e Add xz-utils and debootstrap to lxc task 2019-06-17 12:17:46 +02:00
Tristan PILAT b6e6839419 Update lxc-create command in create-container.yml 2019-06-17 12:17:46 +02:00
Tristan PILAT c1b88d1eca Fix mistake file → copy 2019-06-17 12:17:46 +02:00
Ludovic Poujol 8413fa137c nagios-nrpe: Replace the dummy packages nagios-plugins-* with monitoring-plugins-* 2019-06-17 10:25:46 +02:00
Ludovic Poujol 890055753e evolinux-users: Validate sshd config with "-t" instead of "-T"
See #52
2019-06-17 10:23:56 +02:00
Ludovic Poujol 75a8c90258 evolinux-base: Ensure rename is present 2019-06-17 09:58:10 +02:00
Ludovic Poujol 334b8a3f0d evolinux-base: Validate sshd config with "sshd -t"
See #52 - It seems the behaviour changed with the recent releases, -T 
that does an extended test now fails on "Match" blocks when no context 
is given through -C
2019-06-17 09:47:22 +02:00
Ludovic Poujol 20a4c082d7 php: Stop enforcing /var/www/html as chroot while we use /var/www..... 2019-06-06 13:45:53 +02:00
Tristan PILAT 3e03358370 Add vlan package 2019-06-05 17:58:11 +02:00