Commit graph

3561 commits

Author SHA1 Message Date
Jérémy Lecour 9402458304
Merge branch 'unstable' into stable
Some checks failed
gitea/ansible-roles/pipeline/head There was a failure building this commit
gitea/ansible-roles/pipeline/tag There was a failure building this commit
2024-02-08 11:08:47 +01:00
Jérémy Lecour cf0fab1e22
Release 24.02.1 2024-02-08 11:08:28 +01:00
Jérémy Lecour 13284645de
fail2ban: fix Ansible syntax
Some checks failed
gitea/ansible-roles/pipeline/head There was a failure building this commit
2024-02-08 11:03:14 +01:00
Jérémy Lecour 2f96151c70
Merge branch 'unstable' into stable
Some checks failed
gitea/ansible-roles/pipeline/head There was a failure building this commit
gitea/ansible-roles/pipeline/tag There was a failure building this commit
2024-02-08 09:48:29 +01:00
Jérémy Lecour d4fcc6f8f4
Release 24.02 2024-02-08 09:27:08 +01:00
Jérémy Lecour eb3aac9d3e
update CHANGELOG 2024-02-08 08:33:49 +01:00
Jérémy Lecour 2e9b6c0680
amavis/ldap: make ldap_suffix mandatory 2024-02-07 16:15:32 +01:00
Jérémy Lecour 0b859fd1a4
dovecot: add variables for LDAP 2024-02-07 16:14:29 +01:00
Jérémy Lecour fe5a61289b
whitespaces 2024-02-07 16:12:32 +01:00
Jérémy Lecour ae665ea178
spamassassin: optimize tasks 2024-02-07 16:01:37 +01:00
Jérémy Lecour d401778024
remount-usr: back to a simpler implementation 2024-02-07 15:43:23 +01:00
Jérémy Lecour 4fb49dd6c9
nginx: clarify intent regarding check mode 2024-02-07 15:39:05 +01:00
Jérémy Lecour ef2e65287e
YAML header 2024-02-07 15:38:29 +01:00
Jérémy Lecour 8af6cdc4d6
apache: create ip_whitelist file if missing 2024-02-07 15:38:28 +01:00
William Hirigoyen 3bb29aa6ba proftpd: fix error when no SSH key is provided 2024-02-07 11:32:41 +01:00
Jérémy Lecour 47d7141a66
evoadmin-mail: apt modules already knows how to download packages 2024-02-06 13:59:28 +01:00
Jérémy Lecour 75650032d4
postfix: default to evolinux_fqdn 2024-02-06 13:33:15 +01:00
Eric Morino 5df27a4bc5 Add variables for generate "ldap_suffix" in amavis role. 2024-02-06 10:29:52 +01:00
Jérémy Lecour 2768b3146f
nginx: simpler regex for settings 2024-02-06 08:46:20 +01:00
Jérémy Lecour 8f86584605
nginx: different way of dealing with check-mode 2024-02-06 08:44:48 +01:00
Jérémy Lecour ba827b79d9
sort CHANGELOG 2024-02-06 08:41:58 +01:00
Jérémy Lecour 12993a8d7c
vrrpd: configure minifirewall 2024-02-06 08:40:55 +01:00
Jérémy Lecour ff233b65a6
remove check-mode protection for handlers
handlers are not supposed to be executed in check-mode since no change should happen in check-mode.
If there is a corner case we should deal with it at the source, not at the handler level.
2024-02-06 08:39:38 +01:00
Jérémy Lecour 8dd9c64cbc
nagios-nrpe: multi-line list 2024-02-06 08:34:22 +01:00
Jérémy Lecour 112bc2133a
dovecot: combine similar tasks 2024-02-06 08:22:18 +01:00
Jérémy Lecour 63745c2697
apt: remove duplicate extension 2024-02-06 08:21:15 +01:00
William Hirigoyen 1f8738fbda postfix: move postfix installation from evolinux-base to postfix role, plus some refactoring
All checks were successful
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2696|33|2663|34|:+1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/467//ansiblelint">Evolix » ansible-roles » unstable #467</a>
gitea/ansible-roles/pipeline/head This commit looks good
postfix:
* Move common packages installation in common.yml
* Replace ansible_fqdn by evolinux_fqdn, set postfix_slow_transport_include to false by default (only for packmails and packwebs)
* Remove dependency on evolinux_fqdn var
* Do not overwrite main.cf if it has been modified (except if postfix_force_main_cf)

evolinux-base:
* Move exim4 purge from evolinux-base to postfix role
* Call postfix role call after nagios role (dependency)
2024-02-01 18:00:48 +01:00
William Hirigoyen 554bbaa36f roundcube: set default SMTP port to 25 instead of 587, which failed because of missing SSL conf (local connexion does not need SSL) 2024-02-01 18:00:38 +01:00
William Hirigoyen bc07010aa6 webapps/roundcube & evoadminmail: make roles more idempotent (were failing when played twice) 2024-02-01 18:00:38 +01:00
William Hirigoyen 9f530d78db evolinux-base: addd cert.sh, a small readonly openssl wrapper (testing, not deployed yet) 2024-02-01 18:00:38 +01:00
William Hirigoyen de0a98d693 dovecot: fix missing default mails 2024-02-01 18:00:38 +01:00
Alexis Ben Miloud--Josselin 8741167a80 Revert last commit
All checks were successful
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2697|5|2692|5|:-1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/466//ansiblelint">Evolix » ansible-roles » unstable #466</a>
gitea/ansible-roles/pipeline/head This commit looks good
2024-02-01 17:04:30 +01:00
Alexis Ben Miloud--Josselin 4c9e4a30cc userlogrotate: Ensure we use a valid group name
All checks were successful
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2697|8|2689|7|:-1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/465//ansiblelint">Evolix » ansible-roles » unstable #465</a>
gitea/ansible-roles/pipeline/head This commit looks good
Use user's primary group when user's name is not an existing group.
2024-02-01 11:07:19 +01:00
William Hirigoyen d67e2b122f nagios-nrpe, generateldif: new check_pressure_{cpu,io,mem}
All checks were successful
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2696|5|2691|6|:+1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/464//ansiblelint">Evolix » ansible-roles » unstable #464</a>
gitea/ansible-roles/pipeline/head This commit looks good
2024-01-31 18:04:11 +01:00
William Hirigoyen 393c1f4ff1 add missing LDAP conf iterate_filter to exclude disabled accounts in users list
All checks were successful
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2697|5|2692|4|:-1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/463//ansiblelint">Evolix » ansible-roles » unstable #463</a>
gitea/ansible-roles/pipeline/head This commit looks good
2024-01-29 12:04:38 +01:00
David Prevot e14408cb05 apt: follow up from previous commit
All checks were successful
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2696|4|2692|6|:+1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/462//ansiblelint">Evolix » ansible-roles » unstable #462</a>
gitea/ansible-roles/pipeline/head This commit looks good
2024-01-29 10:07:01 +01:00
David Prevot 1924324c07 apt: No preferences needed for backports
All checks were successful
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2698|3|2695|1|:-1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/461//ansiblelint">Evolix » ansible-roles » unstable #461</a>
gitea/ansible-roles/pipeline/head This commit looks good
2024-01-29 09:49:36 +01:00
David Prevot d55b2b14bb evolinux-base: tfix
All checks were successful
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2696|5|2691|4|:-1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/460//ansiblelint">Evolix » ansible-roles » unstable #460</a>
gitea/ansible-roles/pipeline/head This commit looks good
2024-01-29 09:44:57 +01:00
David Prevot b31aa53c81 apt: Improve check mode
All checks were successful
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2695|3|2692|5|:+1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/459//ansiblelint">Evolix » ansible-roles » unstable #459</a>
gitea/ansible-roles/pipeline/head This commit looks good
2024-01-25 13:59:36 +01:00
William Hirigoyen dae2a25f78 check_free_space: add role; evolinux-base: install check_free_space by default
All checks were successful
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2697|20|2677|5|:-1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/458//ansiblelint">Evolix » ansible-roles » unstable #458</a>
gitea/ansible-roles/pipeline/head This commit looks good
2024-01-24 17:25:20 +01:00
William Hirigoyen cce7280cd0 fail2ban: add script unban_ip
All checks were successful
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2682|3|2679|4|:+1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/457//ansiblelint">Evolix » ansible-roles » unstable #457</a>
gitea/ansible-roles/pipeline/head This commit looks good
2024-01-24 15:24:42 +01:00
William Hirigoyen 68d9d3c47c minifirewall: do not open publicly ports except 22222
All checks were successful
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2683|3|2680|2|:-1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/456//ansiblelint">Evolix » ansible-roles » unstable #456</a>
gitea/ansible-roles/pipeline/head This commit looks good
2024-01-24 11:45:28 +01:00
Alexis Ben Miloud--Josselin 251416f3e8 webapps/nextcloud: Set home directory's mode
All checks were successful
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2682|4|2678|5|:+1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/455//ansiblelint">Evolix » ansible-roles » unstable #455</a>
gitea/ansible-roles/pipeline/head This commit looks good
2024-01-23 18:00:54 +01:00
Alexis Ben Miloud--Josselin 9b67202acc webapps/nextcloud: Add condition for archive tasks
All checks were successful
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2683|7|2676|7|:-1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/454//ansiblelint">Evolix » ansible-roles » unstable #454</a>
gitea/ansible-roles/pipeline/head This commit looks good
2024-01-23 16:35:51 +01:00
David Prevot 30bd72614d listupgrade: Fix removal order
All checks were successful
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2683|3|2680|2|:-1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/453//ansiblelint">Evolix » ansible-roles » unstable #453</a>
gitea/ansible-roles/pipeline/head This commit looks good
2024-01-18 10:14:37 +01:00
David Prevot aa2593f34c Revert "listupgrade: No removal (especially of the just installed cron_file) needed"
This reverts commit 09f951de18.
2024-01-18 10:14:37 +01:00
David Prevot bc19912b71 Revert "listupgrade: try and get rid of duplicate entries"
This reverts commit 531b633d99.
2024-01-18 10:14:36 +01:00
Jérémy Lecour 0c17e4d8fc
sort CHANGELOG
All checks were successful
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2682|5|2677|6|:+1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/452//ansiblelint">Evolix » ansible-roles » unstable #452</a>
gitea/ansible-roles/pipeline/head This commit looks good
2024-01-18 10:01:46 +01:00
Jérémy Lecour 51280c586a
redis: manage config template inside a block
All checks were successful
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2683|18|2665|7|:-1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/451//ansiblelint">Evolix » ansible-roles » unstable #451</a>
gitea/ansible-roles/pipeline/head This commit looks good
This allows to have a coherent block managed by Ansible and extra lines that won't be overwritten.
Eg. : automatically added lines for replication, sentinel groups…
2024-01-18 10:00:44 +01:00
Jérémy Lecour f994e19946
vrrpd: fix typo in switch script 2024-01-18 10:00:43 +01:00