744 commits

Author	SHA1	Message	Date
William Hirigoyen (Evolix)	3623363b94	Update changelog for version 22.06	2022-06-13 17:35:31 +02:00
Jérémy Lecour	556719bbf2	Release 22.06.2	2022-06-10 11:11:44 +02:00
Ludovic Poujol	b3ac39decd	postgresql: Fix task order when using pgdg repo & Install the right pg version	2022-06-09 10:33:28 +02:00
Jérémy Lecour	cea1408bba	evocheck: upstream release 22.06.2	2022-06-09 07:42:29 +02:00
Jérémy Lecour	4d1d77faaf	postgresql: add variable to configure binding addresses (default: 127.0.0.1)	2022-06-09 07:41:52 +02:00
Ludovic Poujol	1e19418fb0	Fail2ban: Multiple changes & improvements : ... * Give the possibility to override jail.local (with fail2ban_override_jaillocal) * If jail.local was overriden, add a warning * Allow to tune some jail settings (maxretry, bantime, findtime) with ansible * Allow to tune the default action with ansible * Change default action to ban only (instead of ban + mail with whois report) * Configure recidive jail (off by default) + extend dbpurgeage	2022-06-08 17:55:58 +02:00
Jérémy Lecour	bcaacdf57f	postgresql: fix nested loop for Munin plugins	2022-06-08 15:39:34 +02:00
Jérémy Lecour	cbe7985814	Enforce String notation for mode	2022-06-08 15:38:21 +02:00
Jérémy Lecour	b677defd97	redis: binding is possible on multiple interfaces	2022-06-08 15:36:47 +02:00
Jérémy Lecour	1895c549d4	Release 22.06.1	2022-06-06 15:07:10 +02:00
Jérémy Lecour	3d70438f7e	evocheck: upstream release 22.06.1	2022-06-06 15:05:59 +02:00
Jérémy Lecour	4cd7e0f4a1	minifirewall: upstream release 22.06	2022-06-06 14:42:22 +02:00
Jérémy Lecour	56c2c19d61	evomariabackup: release 22.06.1	2022-06-05 21:49:23 +02:00
Jérémy Lecour	6d0e49ba90	mysql: reorganize evomariabackup to use mtree instead of our own dir-check	2022-06-05 21:48:04 +02:00
Jérémy Lecour	e718156f86	fix CHANGELOG	2022-06-03 10:19:35 +02:00
Jérémy Lecour	e8e99bb9b6	Release 22.06	2022-06-03 09:27:01 +02:00
Jérémy Lecour	9378f5634c	add missing entry in CHANGELOG	2022-06-03 09:26:07 +02:00
Jérémy Lecour	51908f64b9	evocheck: upstream release 22.06	2022-06-03 09:15:04 +02:00
Jérémy Lecour	586aa206a8	mysql: add post-backup-hook to evomariabackup	2022-06-02 18:26:23 +02:00
Jérémy Lecour	b8b96bb5b7	mysql: use dir-check inside evomariabackup	2022-06-01 17:24:55 +02:00
Jérémy Lecour	249e53fc21	evolinux-base: add dir-check script	2022-06-01 17:24:55 +02:00
Jérémy Lecour	17a2032a10	evolinux-base: add update-evobackup-canary script	2022-06-01 10:46:13 +02:00
Jérémy Lecour	b3dbcb082f	certbot: add hapee (HAProxy Enterprise Edition) deploy hook	2022-05-31 14:06:25 +02:00
Ludovic Poujol	134355d190	docker: Allow live-restore to be toggled with docker_conf_live_restore	2022-05-24 16:22:49 +02:00
Jérémy Lecour	1a9c219c5b	Release 22.05.1	2022-05-12 15:49:18 +02:00
Jérémy Lecour	f82a81844d	evocheck: upstream release 22.05	2022-05-12 15:47:50 +02:00
Ludovic Poujol	9973a62c16	docker : Introduce new variables to tweak daemon settings	2022-05-10 19:04:58 +02:00
Ludovic Poujol	6aa7b89b78	docker : Introduce new default settings + allow to change the docker data directory	2022-05-10 18:21:59 +02:00
Ludovic Poujol	1b4d4c98fe	docker : Removed Debian Jessie support	2022-05-10 17:39:45 +02:00
Jérémy Lecour	09872fa4ad	Release 22.05	2022-05-10 16:58:32 +02:00
Jérémy Lecour	dd2072b86b	minifirewall: fix failed_when conditions on restart	2022-05-10 16:40:45 +02:00
Jérémy Lecour	378ee04c82	minifirewall: upstream release 22.05	2022-05-10 15:55:08 +02:00
Eric Morino	3663783509	add change in opendkim role	2022-05-09 10:19:18 +02:00
Jérémy Lecour	749d6a78cd	redis: Add log2mail user to redis group	2022-05-05 09:40:30 +02:00
Jérémy Lecour	61cd2b7428	minifirewall: upstream release 22.04	2022-04-28 19:14:31 +02:00
Jérémy Lecour	a53159c93b	minifirewall: compatibility with "legacy" version of minifirewall	2022-04-28 12:40:02 +02:00
Jérémy Lecour	805a8ecb3a	etc-git: use "ansible-commit" to efficiently commit all available repositories (including /etc inside LXC) from Ansible	2022-04-27 14:22:59 +02:00
Jérémy Lecour	381a71aca1	dump-server-state: upstream release 22.04.3	2022-04-26 18:21:42 +02:00
Jérémy Lecour	55356857b2	dump-server-state: upstream release 22.04.2	2022-04-26 09:56:49 +02:00
Jérémy Lecour	daa54cac8f	evocheck: upstream release 22.04.1	2022-04-26 09:56:49 +02:00
Jérémy Lecour	5935d9d4a3	evocheck: upstream release 22.04	2022-04-25 09:58:07 +02:00
Jérémy Lecour	58909bc395	vrrpd: Store sysctl values in specific file	2022-04-22 09:32:37 +02:00
Jérémy Lecour	a5bae6645e	dump-server-state: upstream release 22.04.1	2022-04-20 11:07:20 +02:00
Jérémy Dubois	9161fae0c4	openvpn: use a local copy of files instead of cloning an external git repository	2022-04-14 16:34:43 +02:00
Jérémy Dubois	4bf14b9a22	munin: Add possibility to install local plugins, and install dhcp_pool plugin	2022-04-14 10:45:24 +02:00
Ludovic Poujol	959d6a8579	redis : Activate overcommit sysctl	2022-04-12 11:27:46 +02:00
Jérémy Lecour	84178d6b24	Tomcat 9 by default with Debian 11	2022-04-08 11:57:35 +02:00
Jérémy Dubois	5b2fecb49c	Make evocommit fully compatible with OpenBSD	2022-04-07 10:18:08 +02:00
Jérémy Lecour	e71201ab46	dump-server-state: upstream release 22.04	2022-04-03 11:18:43 +02:00
Jérémy Dubois	726735d269	etc-git : Remount /usr in rw for git gc in in /usr/share/scripts/	2022-04-01 15:47:44 +02:00
Jérémy Dubois	6434adcc62	nagios-nrpe: Add a check dhcp_pool	2022-03-31 16:01:23 +02:00
Jérémy Lecour	ed6ca9a85a	minifirewall: upstream release 22.03.5	2022-03-30 22:45:13 +02:00
Mathieu Trossevin	5dc6a1d36b	etc-git: Commit changes to /etc in containers	2022-03-30 16:33:00 +02:00
Jérémy Lecour	31c2629d31	minifirewall: configure proxy/backup/sysctl values	2022-03-30 09:42:56 +02:00
Mathieu Trossevin	20abe0e09a	postfix: Skip milters after amavis (in packmail) ... Otherwise opendkim will sign local mails twice AND sign external mails (pretending to be) from local domains as if they were local mails.	2022-03-29 16:06:12 +02:00
Jérémy Lecour	75459baa35	dump-server-state: upstream release 22.03.10	2022-03-29 09:11:35 +02:00
Jérémy Lecour	3feacd0c6d	update CHANGELOG	2022-03-28 13:28:48 +02:00
Jérémy Lecour	54bf9c1854	evolinux-base: rename backup-server-state to dump-server-state	2022-03-27 09:18:15 +02:00
Jérémy Lecour	85d429295f	minifirewall: tail template follows symlinks	2022-03-25 18:12:24 +01:00
Jérémy Lecour	bbc1bae437	minifirewall: upstream release 22.03.4	2022-03-25 14:57:10 +01:00
Jérémy Dubois	d2fa14fb4f	backup-server-state: release 22.03.5	2022-03-24 18:15:56 +01:00
Jérémy Dubois	42782b7f3d	evolinux-base: fix show_help in backup-server-state.sh ... * --uname and --no-uname options were not in help * --services and --no-services were in help whereas --systemctl and --no-systemctl are used in options parsing	2022-03-24 17:57:58 +01:00
Mathieu Trossevin	1646cc99bf	redis: Remount /usr with RW when adding nagios plugin	2022-03-23 13:55:54 +01:00
Jérémy Dubois	b4f83e54d0	openvpn: use a subnet topology instead of the net30 default topology	2022-03-23 10:46:17 +01:00
Jérémy Dubois	c2f6ff5249	evocheck: upstream release 22.03.1	2022-03-22 11:03:26 +01:00
Jérémy Lecour	5895f5a99b	minifirewall: upstream release 22.03.3	2022-03-21 14:35:20 +01:00
Jérémy Lecour	e7594c6c86	evolinux-base: backup-server-state release 22.03.2	2022-03-21 11:32:08 +01:00
Mathieu Trossevin	444bd72944	generate-ldif: Correct generated entries for php-fpm in containers	2022-03-17 17:36:35 +01:00
Jérémy Lecour	fb41c81e99	backup-server-state: release 22.03.2 ... update documentation for --dpkg-full vs. --dpkg-status	2022-03-17 10:45:44 +01:00
Jérémy Lecour	8a9faa0250	* minifirewall: upstream release 22.03.2	2022-03-16 23:49:34 +01:00
Jérémy Lecour	545226f6f6	evocheck: upstream release 22.03	2022-03-15 23:25:15 +01:00
Jérémy Lecour	ba90203f21	minifirewall: upstream release 22.03.1 and use includes directory	2022-03-15 23:07:33 +01:00
Ludovic Poujol	17f884b04a	evolinux-base: Add non-free repos & install non-free firmware on dedicated hardware	2022-03-15 11:35:20 +01:00
Ludovic Poujol	913e6d96e8	generate-ldif: Add services check for bkctld	2022-03-15 10:53:16 +01:00
Jérémy Lecour	a733e2794f	evolinux-base: backup-server-state release 22.03	2022-03-08 16:49:53 +01:00
Mathieu Trossevin	9c84e95182	Repair keepalived role	2022-03-02 16:23:01 +01:00
Jérémy Lecour	e5dc503cfd	Release 22.03	2022-03-02 09:42:12 +01:00
Jérémy Lecour	270d03b6a6	evolinx-users: optimize sudo configuration	2022-03-02 09:40:52 +01:00
Jérémy Lecour	1dc4d0e133	redis: always install check_redis_instances	2022-03-01 14:04:05 +01:00
Jérémy Lecour	c8ef7e9b75	redis: check_redis_instances tolerates absence of instances	2022-03-01 14:02:22 +01:00
Jérémy Lecour	d9e95218ce	apt_hold_packages: broadcast message with wall, if present	2022-02-24 11:49:12 +01:00
Ludovic Poujol	39949ea921	generate-ldif: Add support for php-fpm in containers	2022-02-21 11:31:00 +01:00
Ludovic Poujol	e79141d2d2	lxc: Fail if /var is nosuid	2022-02-17 16:25:20 +01:00
Jérémy Lecour	799466788f	lxc-php: preliminary support for PHP 8.1 container	2022-02-17 14:50:21 +01:00
Jérémy Dubois	f3c443d076	openvpn: now check that openvpn has been restarted since last certificates renewal	2022-02-15 15:52:21 +01:00
Ludovic Poujol	9995fca35d	varnish: update munin plugin to work with recent varnish versions	2022-02-08 16:16:24 +01:00
Ludovic Poujol	a2f73bb7df	elasticsearch: Use /etc/elasticsearch/jvm.options.d/evolinux instead of default /etc/elasticsearch/jvm.options	2022-02-07 15:18:46 +01:00
Jérémy Dubois	981128dc17	openvpn: make it compatible with OpenBSD and add some improvements	2022-02-03 18:35:16 +01:00
Jérémy Lecour	0cbdda840d	Explicit permissions for systemd overrides	2022-02-03 14:18:20 +01:00
Jérémy Lecour	9e27d9707b	kvm-host: add missing default value	2022-02-03 14:16:45 +01:00
Jérémy Lecour	5153b88d01	evolinux-base: option to bypass raid-related tasks	2022-02-03 14:15:33 +01:00
Jérémy Lecour	3dd78fbf7e	Release 22.01.3	2022-01-31 11:57:21 +01:00
Jérémy Lecour	fcb0b8c80f	backup-server-state: 22.01.3	2022-01-28 16:27:39 +01:00
Jérémy Lecour	cd26081add	rbenv: install Ruby 3.1.0 by default	2022-01-28 16:27:20 +01:00
Jérémy Lecour	bb30402df3	Release 22.01.2	2022-01-27 14:12:40 +01:00
Jérémy Lecour	6ccd0ea440	Release 22.01.1	2022-01-27 14:04:41 +01:00
Jérémy Lecour	2849039fad	remount-usr: use findmnt to find if usr is a readonly partition	2022-01-27 11:21:19 +01:00
Jérémy Lecour	80f8a94798	evolinux-base: many improvements for backup-server-state script	2022-01-27 10:29:08 +01:00
Jérémy Lecour	bff8fcfebb	apt: upgrade packages after all the configuration is done	2022-01-25 18:25:47 +01:00
Jérémy Lecour	0e34d4cd4b	Merge remote-tracking branch 'origin/bullseye-swap-top' into unstable	2022-01-25 15:15:05 +01:00