Commit Graph

855 Commits

Author SHA1 Message Date
Gregory Colpart 04239e3350 use replace instead of lineinfile 2017-09-08 01:26:53 +02:00
Gregory Colpart a074f6488a we use now evolinux-sudo group to set sudo rights 2017-09-08 01:26:53 +02:00
Gregory Colpart 9f01e1869d Add info.php 2017-09-08 01:26:46 +02:00
Gregory Colpart 87ef758891 we need force=no for files who will be lineinfile/blockinfile 2017-09-07 02:32:08 +02:00
Gregory Colpart 26b76aed17 review default vhost 2017-09-07 02:31:48 +02:00
Gregory Colpart be4e811c47 phpMyAdmin configuration 2017-09-07 02:26:35 +02:00
Gregory Colpart 94625a73c2 Prepare phpMyAdmin config if needed 2017-09-06 19:34:04 +02:00
Gregory Colpart 4f3b04e97d Centralize restrictions to fhs_retrictions.yml 2017-09-06 19:30:21 +02:00
Gregory Colpart af5427e077 Add flavor for installing Symfony 2017-09-06 19:28:37 +02:00
Gregory Colpart 521fe2e9f3 Fix custom config file name for PHP ini values 2017-09-06 15:34:11 +02:00
Gregory Colpart 6241bdc8ce Easy activation of Access-Control-Allow-Origin for eot|ttf|otf|woff files 2017-09-06 14:58:43 +02:00
Jérémy Lecour 5d549af643 evomainteance should not install the trap itself
Not all users with a shell are sudoers.
2017-09-05 15:24:51 +02:00
Jérémy Lecour a18fdd0ab2 Merge branch 'hotfix-mongodb' into unstable 2017-09-04 17:19:02 +02:00
Jérémy Lecour fc23090fca MongoDB: fix syntax mistake 2017-09-04 17:17:51 +02:00
Jérémy Lecour 2f2192e5cf apache is compatible with Stretch 2017-09-04 17:15:02 +02:00
Gregory Colpart d4a47346ef In Stretch, we have now /etc/mysql/mariadb.conf.d/ dir then we need use it for our conf files 2017-09-01 04:00:51 +02:00
Gregory Colpart d1b290f864 Typos + add info 2017-09-01 04:00:13 +02:00
Gregory Colpart 4a0d473e84 clean gpg key 2017-09-01 02:44:53 +02:00
Victor LABORIE e38f4bc0c3 redmine: don't change when touch nginx log files 2017-08-31 11:07:59 +02:00
Victor LABORIE 716b0a2ed8 redmine: use tasks instead of handlers 2017-08-31 10:55:14 +02:00
Victor LABORIE f47947f489 Add a redmine role 2017-08-31 09:47:07 +02:00
Gregory Colpart 64c1dc3d45 Fix mytop install with https://wiki.evolix.org/HowtoMySQL#mytop 2017-08-31 04:40:49 +02:00
Gregory Colpart 409ac0d503 ajust minfirewall default config (mostly let port 22 in public port to avoid failure during Ansible connection) 2017-08-31 04:05:33 +02:00
Gregory Colpart 4eb891b8b7 use role ntpd in evolinux-base 2017-08-31 03:31:00 +02:00
Gregory Colpart 5d3870f20f using ntp.evolix.net by default 2017-08-31 03:23:59 +02:00
Gregory Colpart b801c883ac minor fix: true -> True 2017-08-31 03:23:07 +02:00
Gregory Colpart d72cd0184d minor fix. true -> True 2017-08-31 03:21:57 +02:00
Victor LABORIE 4e4cbdb3c9 ntpd: listen only on localhost by default 2017-08-30 14:26:57 +02:00
Gregory Colpart 1524146f10 force own:group for config.local.php 2017-08-30 04:07:26 +02:00
Gregory Colpart ca4b0d5b1d log2mail need to be started and not restarted each time 2017-08-30 04:07:26 +02:00
Gregory Colpart 251d323662 Fix: forgot an include in main squid config file 2017-08-30 04:07:26 +02:00
Gregory Colpart 859822709d Revert "Fix: openssl req -subj arg need to be "/CN="" because bad var during test
This reverts commit 8cfa0a6ef2.
2017-08-30 04:07:26 +02:00
Daniel Jakots 03f4eaf269 fix example 2017-08-29 11:22:21 -04:00
Gregory Colpart 4a81d12d03 Delete OpenBSD stuff (mv to another repo), ansible-roles is now Linux-specific (even Debian-specific) 2017-08-29 03:09:57 +02:00
Gregory Colpart 8cfa0a6ef2 Fix: openssl req -subj arg need to be "/CN=" 2017-08-29 02:32:20 +02:00
Gregory Colpart aca83c50a9 need libssl1.0.0 backport for haproxy in jessie-backports 2017-08-29 00:05:36 +02:00
Gregory Colpart df6170404f typo in include file 2017-08-29 00:01:26 +02:00
Gregory Colpart b02e49073a don't crash when use in root (no SUDO_USER) 2017-08-29 00:01:26 +02:00
Daniel Jakots 1b80956043 remove OpenBSD tentacles, requested by gcolpart 2017-08-28 14:05:27 -04:00
Romain Dessort 58bc7940ac Add LimitUIDRange. Fix sudo calls from evoadmin 2017-08-24 12:56:12 -04:00
Romain Dessort 8ed1aaf160 Fix multiple bugs in lxc role after testing 2017-08-24 12:09:41 -04:00
Gregory Colpart 9aec7c8891 First step to use new evoadmin / FPM 2017-08-23 04:28:21 +02:00
Gregory Colpart 5bbec8f829 first step to improve userlogrotate in Debian 9 2017-08-23 04:27:34 +02:00
Gregory Colpart e10e971dbe move FHS restrictions to a new file 2017-08-23 03:23:16 +02:00
Gregory Colpart 453b78a59b do not remove old log files 2017-08-23 03:17:07 +02:00
Gregory Colpart f480ae461c add main.cf hash for stretch 2017-08-23 03:13:04 +02:00
Gregory Colpart 8e0aa59e47 download gpg in repo, we want to be independant from network as possible 2017-08-23 02:50:17 +02:00
Gregory Colpart 41d6fa4df2 test jenkins role on Debian 8 and 9 2017-08-23 02:00:42 +02:00
Gregory Colpart 207a2f6011 Improve distribution verification 2017-08-23 01:49:27 +02:00
Gregory Colpart a5db321717 quick review of mongodb role, few improvments and disable it for stretch because not ready 2017-08-23 01:44:07 +02:00