Commit Graph

1692 Commits

Author SHA1 Message Date
Jérémy Lecour bd8644ae60 whitespaces 2019-05-14 14:03:03 +02:00
Jérémy Lecour 7cc1777cf5 apt: add a script to manage packages with "hold" mark 2019-05-13 17:48:55 +02:00
Victor LABORIE e40aefb4e0 redmine: enable gzip compression in nginx vhost 2019-05-13 12:06:22 +02:00
Victor LABORIE 0dd7b26ade redmine: update default version to 4.0.3 2019-05-13 11:21:32 +02:00
Victor LABORIE c2ed7faeb7 rbenv: update defaults rbenv version to 1.1.2 and ruby version to 2.5.5 2019-05-13 11:21:32 +02:00
Victor LABORIE 4a703978a8 rbenv: add check_mode for versions checking 2019-05-13 11:21:32 +02:00
Tristan PILAT d8d4924b5c Add mailevomaintenance.sh along with a cron (disabled by default) in the OpenBSD task to send a mail everyday if something's not commited in /etc 2019-05-11 21:37:00 +02:00
Tristan PILAT 38a905dd8d No need for two tasks to copy evomaintenance script and template, let's use with_items instead 2019-05-11 21:34:10 +02:00
Gregory Colpart c1e727d161 Add deb.nodesource.com in default Squid whitelist 2019-05-07 12:36:34 +02:00
Victor LABORIE 079f1e982b redmine: add nginx tag to nginx task 2019-05-03 16:49:22 +02:00
Tristan PILAT d9581d3696 Merge branch 'fix-weird-git-issue' into unstable
Had a rebase go wrong, and the commit showed with git show but not in git log and could not be pushed.
A git checkout of the commit hash put us in detached state and allowed to create a new branch which
 could then be merged into this one.
2019-05-02 15:28:26 +02:00
Tristan PILAT 6a5093f8ce This task has to be move after /etc/apache2/sites-available/000-evolinux-default.conf is created otherwise it's complaining about 000-evolinux-default.conf being missing 2019-05-02 15:14:47 +02:00
Jérémy Lecour 9a489ccf29 apache/nginx: fix server-status replacement 2019-05-02 12:16:47 +02:00
Tristan PILAT 992f279064 Add dependencies for OpenBSD 2019-05-01 23:22:43 +02:00
Tristan PILAT e1e013052c No need to include minifirewall task if the OS is not Debian 2019-05-01 23:21:03 +02:00
Jérémy Lecour 7f1efbfc86 Merge branch 'evomaintenance-api' of evolix/ansible-roles into unstable 2019-04-26 11:13:37 +02:00
Jérémy Lecour 4394d795e0 update changelog 2019-04-26 11:09:36 +02:00
Jérémy Lecour f7057a6787 evomaintenance: set default API variable to Null by default 2019-04-26 11:08:10 +02:00
Nicolas Roman 46033ec8ce remove assert for database and add assert for api 2019-04-26 11:06:42 +02:00
Nicolas Roman b0e9dfd109 add git as dependency for debian 2019-04-26 11:06:42 +02:00
Nicolas Roman f7df73d586 api hook for evomaintenance.sh 2019-04-26 11:06:42 +02:00
Nicolas Roman 385a4f44fa added variables for the API 2019-04-26 11:06:42 +02:00
Jérémy Lecour b6499671fa apache/nginx: add server status suffix in default site if missing 2019-04-26 11:02:02 +02:00
Jérémy Lecour 8e618ce70a apache/nginx: add server status suffix in VHost if missing 2019-04-25 17:12:19 +02:00
Jérémy Lecour 5dc84d42f3 whitespaces 2019-04-25 13:36:25 +02:00
Jérémy Lecour 4e6cbf514d ssl: strengthen SSL private key permissions 2019-04-25 13:36:17 +02:00
Jérémy Lecour afea232858 evocheck : version 19.04 from upstream 2019-04-25 13:34:28 +02:00
Tristan PILAT e851b8cbfe Add fluentd installation role 2019-04-23 17:15:28 +02:00
Jérémy Lecour daae099aef Release 9.9.0 2019-04-16 16:41:28 +02:00
Jérémy Lecour 69e45dab84 update CHANGELOG for lxc changes 2019-04-16 16:36:27 +02:00
Jérémy Lecour 1c5505b36b typo 2019-04-16 16:30:05 +02:00
Jérémy Lecour c61e40bdf8 clean CHANGELOG 2019-04-16 16:27:10 +02:00
Jérémy Lecour 7bb15e7b70 evocheck : add "x-frame-options: sameorigin" for Munin 2019-04-16 10:47:26 +02:00
Jérémy Lecour 6b52f89ad3 evocheck : update script from upstream 2019-04-16 10:46:44 +02:00
Jérémy Lecour c86c53146d Merge branch '29-add-sury-preferences' of evolix/ansible-roles into unstable 2019-04-15 17:29:49 +02:00
Benoît S. c019c4230c PHP: For sury add packages to preferences
Closes #39
2019-04-15 16:55:45 +02:00
Tristan PILAT cd82c2609e PHP sury is now 7.3 2019-04-10 15:27:15 +02:00
Tristan PILAT 531dc80207 We want /home mounted inside the container by default 2019-04-09 19:53:26 +02:00
Ludovic Poujol b5cc808635 apt: Ensure jessie-backport from archives.debian.org is accepted
(typo in the when condition)
2019-04-08 17:51:26 +02:00
Ludovic Poujol 48226ff7b6 apt: Ensure jessie-backport from archives.debian.org is accepted 2019-04-08 16:11:10 +02:00
Ludovic Poujol b185012469 apt: Remove jessie-update suite as it's no longer exists 2019-04-08 15:40:03 +02:00
Benoît S. 19800c071c Merge branch 'fail2ban-sshd-use-port-2222-too' into unstable 2019-04-04 16:20:27 +02:00
Benoît S. c91186c4f9 Merge branch 'fail2ban-increase-ban-limit' of evolix/ansible-roles into unstable 2019-04-04 16:15:56 +02:00
Eric Morino 48becaecf4 Replace mirror.evolix.org by archives.debian.org for jessie-backport 2019-04-03 15:08:06 +02:00
Eric Morino 951309e4a3 Remplace mirror.evolix.org by archives.debian.org for jessie-backport 2019-04-03 15:05:14 +02:00
Eric Morino eb0bbe4661 Set correct permissions on folder /etc/opendkim and add package dns-root-data in dependencies 2019-03-27 14:49:19 +01:00
Eric Morino 36515c9c89 aligning roles with our conventions, major changes in opendkim-add.sh 2019-03-27 11:01:11 +01:00
Jérémy Lecour 66381ae454 evomaintenance: embed version 0.5.0 2019-03-26 15:06:20 +01:00
Benoît S. 1a7349ee3d fail2ban: For sshd jail, protect 2222 port too
2222 port is heavily attacked by bots like 22.
2019-03-22 11:39:20 +01:00
Benoît S. 3ab6ecbf0e fail2ban: Add local sshd jail with maxretry at 10
Default of 3 maxretry is too low!
2019-03-22 11:35:23 +01:00