Commit graph

216 commits

Author SHA1 Message Date
Jérémy Lecour 92f14a496f etc-git: conditional for cron job 2018-09-08 00:27:03 +02:00
Jérémy Lecour 37ea8d292e Release 9.3.2 2018-09-06 15:14:34 +02:00
Victor LABORIE bf3e5b4cb6 dovecot: enable SSL/TLS by default with snakeoil certificate 2018-09-04 14:50:22 +02:00
Jérémy Lecour 9869a1f269 typo 2018-08-31 19:28:06 +02:00
Jérémy Lecour c25c3c6a31 minifirewall: improve variables values and documentation 2018-08-30 17:06:21 +02:00
Jérémy Lecour 9787328a0b minifirewall: add a variable to force a restart of the firewall 2018-08-30 17:05:30 +02:00
Jérémy Lecour 96cd04ae40 minifirewall: add a variable to disable the restart handler 2018-08-30 17:04:14 +02:00
Jérémy Lecour 944006e63c Release 9.3.1 2018-08-30 14:06:06 +02:00
Jérémy Lecour cfd5e3d7f2 metricbeat: new variables to configure elasticsearch hosts and auth 2018-08-30 13:47:48 +02:00
Jérémy Lecour cb9e48b41d update the CHANGELOG with a forgotten line for mysql 2018-08-24 18:38:12 +02:00
Jérémy Lecour 191a49784d Release 9.3.0 2018-08-24 18:27:03 +02:00
Jérémy Lecour d138c00db8 etc-git: some entries of .gitignore are mandatory 2018-08-24 14:44:51 +02:00
Jérémy Lecour fe064c16d1 update CHANGELOG for evolinux-todo 2018-08-24 14:43:14 +02:00
Jérémy Lecour 3e3c6437e8 etc-git: install a script to optimize the repository each month 2018-08-24 00:28:15 +02:00
Jérémy Lecour bb956fb5e7 apache: logrotate replacement is more subtle/precise
It replaces only the proper directive and not every occurence of the 
word.
2018-08-23 13:02:25 +02:00
Jérémy Lecour 12c49ed93b fail2ban: add a variable to update the list of ignored IP addresses 2018-08-23 11:43:34 +02:00
Jérémy Lecour e939198159 fail2ban: add a variable to disable the ssh filter (default: False) 2018-08-23 09:16:33 +02:00
Jérémy Lecour 012dabf657 fail2ban: fix fail2ban_ignore_ips definition
If the final variable is combined in the defaults file, it's component 
can be overridden, but the final variable can't be overriden.
2018-08-21 23:14:31 +02:00
Jérémy Lecour 77aeb60544 bind: chroot-bind.sh must not be executed in check mode 2018-08-21 18:46:16 +02:00
Jérémy Lecour 26c46bfb96 evocheck: the crontab is updated by the role 2018-08-18 09:41:59 +02:00
Jérémy Lecour 4d7e9b1c3f evocheck: detect installed packages even if "held" by APT (manual fix) 2018-08-17 14:59:22 +02:00
Jérémy Lecour 40160e0c6e generate-ldif: detect installed packages even if "held" by APT 2018-08-17 11:56:41 +02:00
Jérémy Lecour 46fed05fa2 evocheck: update upstream script 2018-08-17 10:04:07 +02:00
Jérémy Lecour bc8858fc0a evolinux-base: improve hostname configuration
We can have a "real" hostname and domain, but also an "internal" hostnae 
and domain, used mostly for internal tools.
2018-08-16 16:17:34 +02:00
Jérémy Lecour ccd8c00e3a CHANGELOG : add missing entries 2018-08-09 18:24:48 +02:00
Jérémy Lecour b9b0183ec5 remount-usr: mount doesn't report a change
It is arguable that this is a real change or not,
but in practice we have playbooks that report changes only for this and
it's very fun to scroll back each time to see if it's remount-usr or
a "real" change.
2018-08-06 15:01:52 +02:00
Victor LABORIE 57cf0a29ab kvm-host: install kvm-tools package instead of copying add-vm.sh 2018-07-27 11:27:50 +02:00
Jérémy Lecour c57b069bf5 Reorder lines in CHANGELOG 2018-07-10 16:28:56 +02:00
Jérémy Lecour d387ed660a munin: properly rename Munin cache directory 2018-07-10 16:27:10 +02:00
Jérémy Lecour 1439fdab8f metricbeat: add a role (copied from filebeat) 2018-07-10 16:27:10 +02:00
Victor LABORIE f3ab0b361b tomcat: better nrpe check output 2018-07-03 12:24:11 +02:00
Victor LABORIE b18b3d3404 roundcube: add missing slash to https redirection 2018-06-25 16:58:03 +02:00
Victor LABORIE f56f8f7615 evolinux-base: add mail related aliases 2018-06-25 11:20:37 +02:00
Victor LABORIE f32eee4b68 Update CHANGELOG 2018-06-25 11:12:33 +02:00
Jérémy Lecour 77b5f84567 evoacme: disable old certbot cron also in cron.daily 2018-06-21 17:22:40 +02:00
Victor LABORIE 9f34db8f9a evoacme: fix module detection in apache config 2018-06-20 11:07:23 +02:00
Jérémy Lecour 045492be85 Update changelog 2018-06-19 16:51:27 +02:00
Jérémy Lecour fb4a254b9c mysql-oracle: fix configuration directory variable 2018-06-15 14:41:24 +02:00
Victor LABORIE 6d9fbe8689 nagios-nrpe: add check_postgrey 2018-06-14 13:50:06 +02:00
Jérémy Lecour 17d0c9c6bf php: clarify configuration
* Variables for config file names are normalized* With Sury, Evolix configs are linked to regular 7.0 paths
2018-06-11 17:35:20 +02:00
Victor LABORIE fbd97a5f08 java: support for Oracle JRE 2018-06-11 10:39:52 +02:00
Jérémy Lecour 03431fc116 mysql: add an option to install the dev client libraries 2018-06-09 13:15:08 +02:00
Jérémy Lecour d917d867bb changelog: minor rewording 2018-06-07 10:39:29 +02:00
Jérémy Lecour d67abef13d minifirewall: the tail file can be overwritten, or not 2018-06-04 16:31:36 +02:00
Victor LABORIE 17c8093711 nagios-nrpe: use bkctld check subcommand for NRPE check 2018-05-30 17:13:39 +02:00
Bruno TATU 108cd0f597 squid: whiteliste some news sites 2018-05-29 10:56:24 +02:00
Jérémy Lecour 7738de6f41 rbenv: switch from copy to lineinfile for default gems 2018-05-23 16:20:46 +02:00
Jérémy Lecour 3e5ea015c4 rbenv: install Ruby 2.5.1 by default 2018-05-23 16:18:23 +02:00
Jérémy Lecour b4122be2b3 kibana: log messages go to /var/log/kibana/kibana.log 2018-05-22 15:17:16 +02:00
Jérémy Lecour 0054e4fdea elasticsearch: add http.publish_host variable 2018-05-22 15:16:27 +02:00
Jérémy Lecour f8babfd532 elasticsearch: tmpdir configuration compatible with 5.x also 2018-05-16 12:15:04 +02:00
Jérémy Lecour 4f4b7cd8dc Release 9.2.0 2018-05-16 11:10:31 +02:00
Jérémy Lecour 4d148579c4 Changelog for elasticsearch changes 2018-05-16 11:08:18 +02:00
Jérémy Lecour 3dd1df8236 Changelog for varnish changes 2018-05-16 11:07:12 +02:00
Jérémy Lecour 2451e4d3fa Changelog for NTP changes 2018-05-16 11:06:06 +02:00
Bruno TATU a47a787a81 squid: add some domains and fix broken restrictions 2018-05-11 15:37:05 +02:00
Jérémy Lecour 93642b4afa filebeat: cleanup unused code 2018-05-09 20:57:32 +02:00
Jérémy Lecour 10af35bf41 filebeat: install version 6.x by default 2018-05-09 20:56:48 +02:00
Jérémy Lecour 08d5ca5696 evolinux-users: fix secondary groups
With ANsible 2.2 the list of groups must be comma-separated
2018-05-02 17:16:36 +02:00
Jérémy Lecour 170bd6c2c1 Release 9.1.9 2018-04-24 16:45:05 +02:00
Jérémy Lecour 5c5361dbb5 apache: customize logrotate (52 weeks) 2018-04-22 18:10:47 +02:00
Jérémy Lecour 15ebb84bb6 mysql/mysql-oracle: mysqltuner cron scripts is 0755 2018-04-22 17:32:23 +02:00
Jérémy Lecour 8384e8ba43 evolinux: groups for SSH configuration are used with Debian 10 and later 2018-04-20 14:38:55 +02:00
Ludovic Poujol e37b3f569a generate-ldif: add a minifirewall service when /etc/default/minifirewall exists 2018-04-19 16:04:21 +02:00
Jérémy Lecour 2f631f1ae7 update Changelog 2018-04-18 12:16:57 +02:00
Jérémy Lecour b01d9178d0 evolinux-users: split AllowGroups/AllowUsers modes
If an AllowGroups directive is found or when using Debian 9+,
we use the AllowGroups directive and comment AllowUsers that may be
already present.
When adding a user, we make sure that the allowed group exists
and the use is in that group, to be sure that at least this user
is allowed to connect.

In other situations, we use the AllowUsers directive.
2018-04-18 12:16:04 +02:00
Jérémy Lecour b866b6fa0a evolinux-base: fail2ban is not enabled by default 2018-04-18 12:15:43 +02:00
Jérémy Lecour 423acc79fd mysql-oracle: copy evolinux config files in mysql.cond.d 2018-04-18 12:06:15 +02:00
Jérémy Lecour 4749667f58 Release 9.1.8 2018-04-16 00:00:13 +02:00
Jérémy Lecour ae6e376048 mysql: properly reload systemd 2018-04-15 23:58:31 +02:00
Victor LABORIE 4612c5ec89 packweb-apache: use check_mode for apg command
* Fix usage of packweb-apache role with --check
2018-04-13 12:13:43 +02:00
Victor LABORIE 81861bad80 mysql: use check_mode for apg command
* Fix usage of mysql role with --check
2018-04-13 12:08:58 +02:00
Victor LABORIE f5a914bf63 Fix CHANGELOG 2018-04-13 12:05:48 +02:00
Victor LABORIE ef127d89dc packweb-apache: use dependencies instead of include_role for apache and php roles 2018-04-13 11:54:42 +02:00
Jérémy Lecour 619a0a8c72 Release 9.1.7 2018-04-06 10:49:23 +02:00
Jérémy Lecour 2e375b9506 update CHANGELOG 2018-04-06 10:43:38 +02:00
Jérémy Lecour 654c0a261f update CHANGELOG 2018-04-06 09:53:37 +02:00
Jérémy Lecour c2ed10e2e4 CHANGELOG cleanup 2018-04-06 09:26:51 +02:00
Jérémy Lecour 8b9c8288c9 Merge branch 'lpoujol-node-yarn' into unstable 2018-04-06 09:23:42 +02:00
Jérémy Lecour b68d0765ed update CHANGELOG 2018-04-06 09:22:05 +02:00
Jérémy Lecour beeb7de0af mongodb: rename logrotate script 2018-04-05 18:43:29 +02:00
Jérémy Lecour 3b8c57faee mongodb: allow unauthenticated packages for Jessie 2018-04-05 15:23:12 +02:00
Jérémy Lecour 786f25731e Update CHANGELOG 2018-04-04 23:46:50 +02:00
Jérémy Lecour ad3383a510 Install ncurses-term for additional terminal types
When connecting to a server from urxvt, the session behaves like one
with xterm.
2018-03-29 16:42:33 +02:00
Jérémy Lecour f5339568ed nginx: don't debug variables in verbosity 0 2018-03-28 21:12:24 +02:00
Jérémy Lecour d9bf95e7b3 Merge branch 'improve-php' into unstable 2018-03-26 21:53:51 +02:00
Jérémy Lecour 690318e435 Update CHANGELOG for php changes 2018-03-26 21:53:32 +02:00
Ludovic Poujol 24aeff2e72 rbenv: fix become user issue with copy tasks 2018-03-26 09:53:54 +02:00
Ludovic Poujol 4c36fd075c webapps/evoadmin-web: Fail if variable evoadmin_contact_email isn't defined 2018-03-19 16:48:12 +01:00
Jérémy Lecour 98486fd771 etc-git: add tags for Ansible 2018-03-16 14:21:01 +01:00
Ludovic Poujol 3c2443181b evolinux-base: Exec the firewall tasks sooner to avoid dependency issues 2018-03-15 12:04:35 +01:00
Jérémy Lecour a12dca0b70 mysql/mysql-oracle: mysqltuner cron task is executable 2018-03-14 09:35:26 +01:00
Jérémy Lecour b81ef36f92 mysql: remount /usr (if needed) before creating scripts directory 2018-03-14 09:33:14 +01:00
Victor LABORIE 61ee8052e5 dovecot: update CHANGELOG 2018-03-13 10:25:45 +01:00
Victor LABORIE 5e3c33eb7a proftpd: update README and CHANGELOG 2018-03-13 10:25:26 +01:00
Jérémy Lecour ad4714856b mongodb: don't overwrite config by default 2018-03-13 09:40:37 +01:00
Jérémy Lecour 23ae74d422 update changelog 2018-02-28 17:42:02 +01:00
Jérémy Lecour ace68db4b4 packweb-apache can use MySQL from Oracle. 2018-02-28 17:25:47 +01:00
Jérémy Lecour 738d56db68 Add mysql-oracle role
Install and configure MySQL 5.7 with packages from Oracle
2018-02-28 17:12:25 +01:00
Jérémy Lecour 54159f8e87 mongodb: configuration is forced by default but it's configurable 2018-02-23 18:44:26 +01:00
Jérémy Lecour 1ac3300ade nginx: package name can be specified (default: nginx-full) 2018-02-22 00:10:14 +01:00
Jérémy Lecour 41f7b029b2 Update changelog for commits on nagios-nrpe 2018-02-20 15:08:40 +01:00
Jérémy Lecour 62a85ef72a elasticsearch: RESTART_ON_UPGRADE is configurable 2018-02-20 15:06:07 +01:00
Jérémy Lecour c6d3b804d9 nginx: fix basic auth for default vhost 2018-02-08 11:11:47 +01:00
Jérémy Lecour 23062e7b18 elasticsearch: ES_TMPDIR variable for custom tmpdir 2018-02-07 17:36:04 +01:00
Jérémy Lecour 8a498bb3a3 postfix: add lines in /etc/.gitignore 2018-02-04 11:49:14 +01:00
Jérémy Lecour afe2446d54 Release 9.1.6 2018-02-02 20:10:20 +01:00
Jérémy Lecour 24a5f0df7e nginx: fix servers status dirname 2018-02-01 12:27:18 +01:00
Jérémy Lecour 8bd94a7c44 fail2ban: fix horrible typo, Python is not Ruby 2018-01-23 18:31:31 +01:00
Jérémy Lecour 6ed1f04c85 nagios-nrpe: allowed_hosts can be updated 2018-01-23 17:41:58 +01:00
Jérémy Lecour 19b2da5b92 evoacme: exclude typical certbot directories 2018-01-22 18:27:37 +01:00
Jérémy Lecour 88bdf270d7 Added emphasis on version number significance 2018-01-22 18:27:37 +01:00
Jérémy Lecour 1f007c1ff0 update changelog 2018-01-20 19:57:58 +01:00
Jérémy Lecour b4ffe48282 Changelog: backfill of a few releases 2018-01-20 19:55:41 +01:00
Jérémy Lecour 141da62b9f Changelog: backfill previous release notes (9.1.4 and 9.1.3) 2018-01-18 23:37:56 +01:00
Jérémy Lecour cf8b110abb Add a changelog 2018-01-18 18:41:15 +01:00