evolix
/
ansible-roles
22
2
Fork 2
Code Issues 61 Pull Requests 18 Releases 32 Wiki Activity
1,692 Commits 76 Branches 56 Tags 128 MiB
Commit Graph

51 Commits

Author SHA1 Message Date
Jérémy Lecour bd8644ae60 whitespaces 2019-05-14 14:03:03 +02:00
Jérémy Lecour aa28e9c1b8 change repositories URL 2019-03-21 15:31:58 +01:00
Jérémy Lecour a94c94018c normalize some arguments positions 2019-01-01 20:02:50 +01:00
Jérémy Lecour 2bcc1133c0 minifirewall: all variables are configurable 
By default, a Null value keeps the variable current value as-is.
Set an Array (can be empty) to replace the value.
 2018-12-04 14:49:50 +01:00
Jérémy Lecour 50e16e0dee minifirewall: compare config before/after (for restart condition) 2018-12-04 14:46:32 +01:00
Jérémy Lecour c3e4a78442 minifirewall: main file is configurable 2018-12-04 14:45:48 +01:00
Patrick Marchand 9198c1e2c0 ansible-lint does not like trailing whitespace 2018-11-13 16:56:31 -05:00
Jérémy Lecour c25c3c6a31 minifirewall: improve variables values and documentation 2018-08-30 17:06:21 +02:00
Jérémy Lecour 9787328a0b minifirewall: add a variable to force a restart of the firewall 2018-08-30 17:05:30 +02:00
Jérémy Lecour 96cd04ae40 minifirewall: add a variable to disable the restart handler 2018-08-30 17:04:14 +02:00
Jérémy Lecour d67abef13d minifirewall: the tail file can be overwritten, or not 2018-06-04 16:31:36 +02:00
Jérémy Lecour 831b733dfe minifirewall: nrpe/sudo config only if possible 2018-04-06 10:35:43 +02:00
Jérémy Lecour e984e46b83 minifirewall: nagios plugins directory is configurable 2018-04-06 09:52:18 +02:00
Jérémy Lecour 03c53433d6 Add minifirewal_status and check_minifirewall 
minifirewall_status returns "started" on stdout and exit code 0,
or "stopped" on stdout and exit code 1. The state of minifirewall
is determined by looking for common iptables rules applied by
minifirewall.

check_minifirewall is an NRPE plugin for minifirewall. It returns:
* 0 (OK) if the firewall state is consistent with its configuration
(from the alert5 script)
* 1 (WARNING) if the firewall is started but alert5 is not configured
properly
* 2 (CRITICAL) if the firewall is not running but it should be.
 2018-04-06 09:52:18 +02:00
Romain Dessort 0f12501760 Add security-cdn.debian.org to HTTPSITES whitelist 
Debian migrated its security.debian.org repository to Fastly CDN
(security-cdn.debian.org) so we have to whitelist it too to make
security upgrades possible.
 2018-01-29 11:15:11 -05:00
Jérémy Lecour aeba94bcba default/additional variables 
List of hosts/ip are a combination of 2 lists allowing overrides
 2017-12-20 18:04:54 +01:00
Ludovic Poujol b90260ae28 minifirewall: Make outgoing SSH in IPv6 works 2017-12-15 14:49:21 +01:00
Jérémy Lecour 0dfc66683a remove zidane.evolix.net from minifirewall 2017-11-27 10:19:04 +01:00
Jérémy Lecour bcd3553cbb minifirewall: add debug for variables 2017-11-26 12:32:33 +01:00
Jérémy Lecour 8ef9554746 Combine evolix and additional trusted IP addresses 2017-11-15 23:57:58 +01:00
Jérémy Lecour 97b0225232 Minifirewall can deal with evomaintenance 
Each role has to know how to deal with the other.
Otherwise, depending on order of execution, the firewall might not
allow connections for evomaintenance
 2017-10-08 00:00:24 +02:00
Jérémy Lecour 98c5619721 minifirewall: install dependencies in install.yml 2017-10-08 00:00:24 +02:00
Jérémy Lecour 3d7a544820 minifirewall: restore default ports 
Copied from
https://forge.evolix.org/projects/minifirewall/repository/revisions/master/entry/minifirewall.conf
 2017-10-07 10:59:22 +02:00
Gregory Colpart b4130797cb ensure iptables is installed 2017-09-29 01:43:31 +02:00
Jérémy Lecour 685282bf93 minifirewall: fallback when no trusted ip is provided 2017-09-14 14:26:44 +02:00
Gregory Colpart 409ac0d503 ajust minfirewall default config (mostly let port 22 in public port to avoid failure during Ansible connection) 2017-08-31 04:05:33 +02:00
Jérémy Lecour c97110f865 minifirewall: embed files instead of git clone 2017-07-27 22:55:07 -04:00
Jérémy Lecour fc2bd395b9 Minifirewall: install Git for tests 2017-07-13 16:36:27 +02:00
Jérémy Lecour b2278a151c minifirewall: merge the "tail" pattern back into the main role 2017-07-13 15:06:49 +02:00
Gabriel Periard-Tremblay 87ebadcadd Kitchen: Change base image to evolix/ansible 2017-06-02 08:38:08 -04:00
Jérémy Lecour 64fef56166 Minifirewall: add some context for tests 2017-05-21 11:00:13 +02:00
Jérémy Lecour 9fae99f8dc Minor syntax and whitespaces fixes 2017-05-19 22:29:53 +02:00
Jérémy Lecour 033ebaa593 Add tests for many roles 2017-05-18 15:44:21 +02:00
Victor LABORIE 584fdafa7e minifirewall: fix config file right 2017-05-02 17:50:40 +02:00
Tristan PILAT 04a718c159 Add autostart option 2017-05-02 10:56:12 +02:00
Jérémy Lecour 86372199ec minifirewall: simplify debug 2017-04-11 16:13:53 +02:00
Jérémy Lecour cda0932aad whitespaces 2017-03-30 16:05:46 +02:00
Jérémy Lecour 5b2ab0d8d3 Ansible >= 2.2 supported 2017-03-24 14:15:09 +01:00
Jérémy Lecour 5efb9b04e1 Minifirewall: ensure that at least 1 trusted IP is provided 2017-03-22 18:12:30 +01:00
Jérémy Lecour 1f653b1fdc minifirewall: the return of the comments 2017-01-31 17:44:31 +01:00
Jérémy Lecour dd432a9c11 minifirewall: restart manually (systemd unit is not working) 2017-01-31 17:43:10 +01:00
Jérémy Lecour 0273f2ad56 minifirewall: debug for current status 2017-01-31 17:42:32 +01:00
Jérémy Lecour 277de88d44 minifirewall: command → shell 2017-01-31 17:41:33 +01:00
Jérémy Lecour 8920ff1ee4 Add "always_run: yes" where it's pertinent 
There is also the "check_mode: no", but commented,
for when we switch to Ansible 2.2
 2017-01-31 11:45:35 +01:00
Jérémy Lecour 82a4faa578 Minifirewall: disable check_mode for status check 2017-01-10 14:35:26 +01:00
Jérémy Lecour caf929b45b minifirewall: forgot a double quote 2017-01-09 16:47:07 +01:00
Jérémy Lecour 8cc7a032c2 minifirewall: restart if needed 2017-01-09 16:38:59 +01:00
Jérémy Lecour 9570efcaed Minifirewall: extend configuration abilities with blocks 2017-01-06 15:50:48 +01:00
Jérémy Lecour 61f5219f48 Improve documentation 
Each role has a README and a meta/main.yml file
 2017-01-05 18:22:06 +01:00
Jérémy Lecour e815a62112 minifirewall: git clone in /tmp 
/usr is often mounted as read-only
 2016-12-23 16:24:56 +01:00