Commit graph

609 commits

Author SHA1 Message Date
Ludovic Poujol f75354bb84 generate-ldif: detect mdadm 2021-09-16 17:26:58 +02:00
Ludovic Poujol de4d814d74 generate-ldif: detect hardware raid card 2021-09-16 17:17:32 +02:00
Ludovic Poujol 6a2cd59e6d nagios-nrpe + evolinux-users: new check ipmi 2021-09-16 16:48:03 +02:00
Ludovic Poujol 51fd2337f0 nagios-nrpe + evolinux-users: new check raid (soft + hard) 2021-09-16 16:40:57 +02:00
Ludovic Poujol fa0c668cec evolinux-base: install freeipmi by default on dedicated hw 2021-09-16 15:58:10 +02:00
Jérémy Lecour 2b549af7d9 evolinux-base: split dpkg logrotate configuration 2021-09-09 10:23:53 +02:00
Jérémy Lecour e429f7aecb squid: add *.o.lencr.org to default whitelist 2021-09-07 14:01:52 +02:00
Jérémy Lecour e45ee59801 mysql: script "mysql-queries-killer.sh" to kill MySQL queries 2021-08-30 14:05:15 +02:00
Jérémy Lecour 65750d2aa6 evomaintenance: extract a config.yyml tasks file 2021-08-30 09:24:57 +02:00
Jérémy Lecour ecba57ad75 evolinux-base: install molly-guard by default 2021-08-25 17:57:38 +02:00
Jérémy Lecour 2c7380240c nagios-nrpe + evolinux-users: new checks for bkctld 2021-08-25 11:56:26 +02:00
Jérémy Lecour 066baf3538 Revert "bullseye-detect: this role is obsolete, Debian 11 has been fully released"
All checks were successful
continuous-integration/drone/push Build is passing
This reverts commit c9f25f4638.
2021-08-17 15:33:06 +02:00
Jérémy Lecour ad457dd7ba apt: use the new security repository for Bullseye
All checks were successful
continuous-integration/drone/push Build is passing
2021-08-16 14:12:31 +02:00
Jérémy Lecour 969a5bce7d apt: remove workaround for Evolix public repositories with Debian 11
All checks were successful
continuous-integration/drone/push Build is passing
2021-08-16 13:50:53 +02:00
Jérémy Lecour d186e21239 evoadmin-web: simpler PHP packages lists 2021-08-16 13:49:13 +02:00
Jérémy Lecour c9f25f4638 bullseye-detect: this role is obsolete, Debian 11 has been fully released 2021-08-16 13:47:33 +02:00
Jérémy Lecour 139b342fbd certbot: silence letsencrypt deprecation warnings 2021-07-20 17:19:57 +02:00
Jérémy Lecour bf49ec8df5 mysql: script "mysql_connections" to display a compact list of connections
All checks were successful
continuous-integration/drone/push Build is passing
2021-07-08 15:10:35 +02:00
Jérémy Lecour 32b5efa30e evocheck: upstream release 21.07
All checks were successful
continuous-integration/drone/push Build is passing
2021-07-07 15:20:24 +02:00
Jérémy Lecour 29ec7bdcf2 Remove embedded GPG keys only if legacy keyring is present
Some checks failed
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
2021-07-04 22:08:47 +02:00
Jérémy Lecour ffd7d0e504 evolinux-base: alert5 comes after the network 2021-07-04 22:07:51 +02:00
Jérémy Lecour 4167b6d2a9 fix CHANGELOG 2021-07-03 09:10:22 +02:00
Jérémy Lecour 3721c2ab38 squid: improve default whitelist 2021-07-03 08:56:23 +02:00
Jérémy Lecour 5905751a82 squid: must be started in foreground mode for systemd 2021-07-02 23:45:42 +02:00
Jérémy Lecour a5658b7f26 packweb-apache: install phpMyAdmin from buster-backports 2021-07-02 21:18:06 +02:00
Jérémy Lecour 5c1ae6ed0c spamassassin: change dependency on evomaintenance
Fail with an error if evomaintenance config is missing
instead of trying to install a package that doesn't exist anymore.
2021-07-02 21:16:43 +02:00
Jérémy Lecour 8a784c39ab mongodb: create munin plugins directory if missing 2021-07-02 21:16:40 +02:00
Jérémy Lecour 9c8dd743c8 Use python3 packages on Debian 11 and later 2021-07-02 21:16:15 +02:00
Jérémy Lecour 6b87ead5b4 update changelog 2021-07-02 21:16:12 +02:00
Jérémy Lecour e8a8e85819 redis: instance service for Debian 11 2021-07-02 21:13:42 +02:00
Jérémy Lecour c5ab0c0ff9 squid: remove obsolete variable on Squid 4 2021-07-02 21:13:05 +02:00
Jérémy Lecour f673ea85d1 Force Debian version to buster for Evolix repository 2021-07-02 21:12:33 +02:00
Jérémy Lecour 2c441f176a mysql: mariadb-client-10.5 on Debian 11 2021-07-02 21:11:27 +02:00
Jérémy Lecour c5bb8f06ae mysql: use python3 with Debian 11 and later 2021-07-02 21:10:52 +02:00
Jérémy Lecour 51d4ec1bb2 php: remove php-gettext for 7.4 2021-07-02 21:10:04 +02:00
Jérémy Lecour 2f68ae5339 Preliminary support for Bullseye 2021-07-02 20:58:09 +02:00
Jérémy Lecour 90cbd17f9b listupgrade: crontab is configurable 2021-07-02 14:01:46 +02:00
Jérémy Lecour b0b24744d6 listupgrade: upstream release 21.06.3 2021-07-02 13:59:42 +02:00
Jérémy Lecour 11813c31a4 certbot: add script for manual deploy hooks execution
All checks were successful
continuous-integration/drone/push Build is passing
2021-06-30 14:29:03 +02:00
Jérémy Lecour 51462c724c certbot: sync_remote excludes itself 2021-06-30 07:39:57 +02:00
Jérémy Lecour 2ed1dac16b Release 10.6.0
All checks were successful
continuous-integration/drone/pr Build is passing
continuous-integration/drone/push Build is passing
2021-06-28 15:56:19 +02:00
Jérémy Lecour 0fe0244116 Update Galaxy metadata (company, platforms and galaxy_tags) 2021-06-28 15:26:28 +02:00
Jérémy Lecour 1890a79702 elasticsearch: inline YAML formatting of seed_hosts and initial_master_nodes
All checks were successful
continuous-integration/drone/push Build is passing
2021-06-23 22:38:24 +02:00
Jérémy Lecour 4c1ef1bd56 elasticsearch: recent versiond don't depend on external JRE 2021-06-23 22:38:24 +02:00
Jérémy Lecour 6190c66445 listupgrade: upstream release 21.06.2
All checks were successful
continuous-integration/drone/push Build is passing
2021-06-20 12:06:49 +02:00
Jérémy Lecour dd32ab5688 listupgrade: upstream release 21.06.1 2021-06-20 10:32:16 +02:00
Jérémy Lecour dbc853a815 listupgrade: upstream release 21.06
All checks were successful
continuous-integration/drone/push Build is passing
2021-06-17 18:23:13 +02:00
Jérémy Lecour 4c7fed77c4 squid: add Yarn apt repository in default whitelist
All checks were successful
continuous-integration/drone/push Build is passing
2021-06-17 18:19:20 +02:00
Jérémy Lecour fe9b7ee5f7 evomaintenance: upstream release 0.6.4
All checks were successful
continuous-integration/drone/push Build is passing
2021-06-17 10:57:07 +02:00
Jérémy Lecour 3d715bae35 kvm-host: replace the "kvm-tools" package with scripts deployed by Ansible
All checks were successful
continuous-integration/drone/push Build is passing
2021-06-10 11:09:48 +02:00
Jérémy Lecour ca40fad186 nodejs: change GPG key name
All checks were successful
continuous-integration/drone/push Build is passing
2021-06-08 11:19:26 +02:00
Jérémy Lecour 856d11aced nodejs: update apt cache before installing the package 2021-06-07 13:03:18 +02:00
Jérémy Lecour 2c47871fa7 Add Elastic GPG key to kibana, filebeat, logstash, metricbeat roles
All checks were successful
continuous-integration/drone/push Build is passing
2021-05-25 15:10:04 +02:00
Jérémy Lecour 06b8314211 evolinux-base: fix motd lookup path 2021-05-19 17:02:20 +02:00
Jérémy Lecour 02451f1e67 add default (useless) value for file lookup
All checks were successful
continuous-integration/drone/push Build is passing
2021-05-19 14:35:08 +02:00
Jérémy Lecour 4d83f25ae6 fix pipefail option for shell invocations
All checks were successful
continuous-integration/drone/push Build is passing
2021-05-18 14:04:54 +02:00
Jérémy Lecour cae0de17df listupgrade: fix wget error + shellcheck cleanup
All checks were successful
continuous-integration/drone/push Build is passing
2021-05-17 23:05:18 +02:00
Jérémy Lecour 56af68e5b3 listupgrade: print error if wget fails
All checks were successful
continuous-integration/drone/push Build is passing
2021-05-17 12:19:57 +02:00
Jérémy Lecour d823c8116a update CHANGELOG
All checks were successful
continuous-integration/drone/push Build is passing
2021-05-09 23:21:21 +02:00
Jérémy Lecour e5e4dc95fa packweb-apache: install phpMyAdmin from buster-backports 2021-05-04 14:57:18 +02:00
Jérémy Lecour e7ddf9d46c Use 'loop' syntax instead of 'with_list' 2021-05-04 14:31:22 +02:00
Jérémy Lecour 485ec39674 Use 'loop' syntax instead of 'with_nested' 2021-05-04 14:29:50 +02:00
Jérémy Lecour 07fd6451e1 Use 'loop' syntax instead of 'with_dict' 2021-05-04 14:20:53 +02:00
Jérémy Lecour 5138065059 Use 'loop' syntax instead of 'with_items' 2021-05-04 14:19:18 +02:00
Jérémy Lecour debc4a82ca Use 'loop' syntax instead of 'with_first_found'
All checks were successful
continuous-integration/drone/push Build is passing
2021-05-04 13:39:47 +02:00
Jérémy Lecour a7971abb04 apt: store keys in /etc/apt/trusted.gpg.d in ascii format 2021-05-03 12:02:31 +02:00
Jérémy Lecour cc6acdbf34 certbot: sync_remote.sh is configurable
All checks were successful
continuous-integration/drone/push Build is passing
2021-05-03 11:25:24 +02:00
Jérémy Lecour 6eaeb90f6e ldap: fix edge cases where passwords were not set/get properly
All checks were successful
continuous-integration/drone/push Build is passing
2021-05-02 23:28:09 +02:00
Jérémy Lecour 43c726e86a spamassassin: change dependency on evomaintenance
All checks were successful
continuous-integration/drone/push Build is passing
Fail with an error if evomaintenance config is missing
instead of trying to install a package that doesn't exist anymore.
2021-05-02 01:24:03 +02:00
Jérémy Lecour 920cb7eaeb update changelog
All checks were successful
continuous-integration/drone/push Build is passing
2021-05-01 16:51:20 +02:00
Jérémy Lecour 5d79c31dc3 kvm-host: add migrate-vm script
All checks were successful
continuous-integration/drone/push Build is passing
2021-04-28 15:53:38 +02:00
Jérémy Lecour 94a5d7daa2 mysql: variable to disable myadd script overwrite (default: True)
All checks were successful
continuous-integration/drone/push Build is passing
2021-04-23 14:59:29 +02:00
Jérémy Lecour eab68545fe evolinux-base: add default motd template
All checks were successful
continuous-integration/drone/push Build is passing
2021-04-23 11:41:27 +02:00
Ludovic Poujol 3457b14fed ntpd: Add leapfile configuration setting to ntpd on debian 10+
All checks were successful
continuous-integration/drone/push Build is passing
2021-04-21 17:22:45 +02:00
Ludovic Poujol d56c545183 apache: new variable for mpm mode (+ updated default config accordingly)
All checks were successful
continuous-integration/drone/push Build is passing
Also, itk package will only be installed if required
2021-04-19 17:35:49 +02:00
Jérémy Lecour 5e0ca0e3ff Release 10.5.1
All checks were successful
continuous-integration/drone/pr Build is passing
continuous-integration/drone/push Build is passing
2021-04-13 15:56:09 +02:00
Ludovic Poujol 0f8804a8ab etc-git: commit in /usr/share/scripts when there's an active repository
All checks were successful
continuous-integration/drone/push Build is passing
2021-04-08 16:07:49 +02:00
Jérémy Lecour a5a2c6e335 haproxy: dedicated internal address/binding (without SSL)
All checks were successful
continuous-integration/drone/push Build is passing
2021-04-06 14:41:03 +02:00
Jérémy Lecour 2686eea2b1 Release 10.5.0
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2021-04-01 15:38:10 +02:00
Jérémy Lecour 7041a70eeb elasticsearch: log rotation is more readable/maintainable 2021-04-01 15:36:34 +02:00
Ludovic Poujol f2ebe2d878 lxc-php: Add php 7.4 support
All checks were successful
continuous-integration/drone/push Build is passing
2021-03-31 10:57:29 +02:00
Jérémy Lecour d7d057e435 filebeat: fix Ansible syntax error
All checks were successful
continuous-integration/drone/push Build is passing
2021-03-23 16:29:03 +01:00
Jérémy Lecour 2593784ab0 metricbeat: new variables to configure SSL mode 2021-03-23 16:28:14 +01:00
Jérémy Lecour 3a3cf1395e listupgrade: update script from upstream 2021-03-23 16:27:15 +01:00
Jérémy Lecour 5a4bd28eaf nagios-nrpe: libfcgi-client-perl is not available before Debian 10
All checks were successful
continuous-integration/drone/push Build is passing
2021-03-18 15:16:23 +01:00
Jérémy Lecour 5582d6e724 redis: socket/pid directories have the correct permissions 2021-03-18 15:15:39 +01:00
Patrick Marchand e5511eafc6 Revert changes to bind log path from apparmor fix
All checks were successful
continuous-integration/drone/push Build is passing
I realised it wasnt the best idea to change the path we are used to using just for this, so I overwrite the apparmor configuration instead.
2021-03-09 16:58:14 -05:00
Patrick Marchand ffd3ff97f1 Fix conflict in changelog
All checks were successful
continuous-integration/drone/push Build is passing
2021-03-09 12:28:01 -05:00
Patrick Marchand 7da22e243e Changed log directory for bind9
It is now /var/log/named, this is what debian 10 and apparmor expect by default. This fixes the bind9 service crashing at start.
2021-03-09 12:25:15 -05:00
Jérémy Lecour 3103af67a7 redis: escape password in Munin configuration
All checks were successful
continuous-integration/drone/push Build is passing
2021-03-09 18:24:15 +01:00
Ludovic Poujol 3cb18faf28 evolinux-users: Add sudo rights for nagios for multi-php lxc
All checks were successful
continuous-integration/drone/push Build is passing
2021-03-04 16:48:55 +01:00
Jérémy Lecour 1f4079b1b3 haproxy: possible admin access with login/pass
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-27 18:43:59 +01:00
Ludovic Poujol df9db31725 deny requests to ^/evolinux_fpm_status-.*
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-22 16:06:57 +01:00
Jérémy Lecour 3709808fdc redis: use /run instead or /var/run
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-18 16:42:54 +01:00
Ludovic Poujol ddd3e1aa06 nagios-nrpe: new script check_phpfpm_multi
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-17 17:23:11 +01:00
Jérémy Lecour f862ffc42e beats packages can be upgraded to latest (default: False)
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-16 16:35:25 +01:00
Jérémy Lecour 622bbca4c2 apache: rotate logs daily instead of weekly
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-12 18:05:47 +01:00
Ludovic Poujol b0cb14eb5b * nagios-nrpe: update check_phpfpm_status.pl & install perl dependencies
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-12 15:22:57 +01:00
Jérémy Lecour 2b328dc764 postfix: add smtpd_relay_restrictions in configuration
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-12 14:10:04 +01:00
Jérémy Lecour 17f1a1a55e update changelog
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-11 12:09:32 +01:00