Jérémy Lecour
a94c94018c
normalize some arguments positions
2019-01-01 20:02:50 +01:00
Jérémy Lecour
42d1cb7906
redis: indentation typo
2018-12-21 11:13:40 +01:00
Jérémy Lecour
92a25a9502
redis: add variables to prevent or force restart
2018-12-21 11:11:15 +01:00
Jérémy Lecour
3b63172532
redis: distinction between main and master password
2018-12-21 11:08:18 +01:00
Benoît S.
776839fe61
Typo: rcpbind and not rcpbin
2018-12-19 15:58:47 +01:00
Ludovic Poujol
effdb4c7eb
redis: Configure munin when working in instance mode
2018-12-17 14:47:07 +01:00
Ludovic Poujol
fa49f249e7
redis: Don't set the owner of /var/{lib,log}/redis to a redis instance account
2018-12-17 14:43:42 +01:00
Ludovic Poujol
f46f5ccbde
nagios-nrpe: check_process now return the error code (making the check more usefull than /bin/true)
2018-12-12 14:58:12 +01:00
Jérémy Lecour
d0b3b6d6b8
evomaintenance: database variables must be set or the task fails
2018-12-11 12:08:04 +01:00
Victor LABORIE
2a6cb3b381
evoadmin-mail: complete refactoring, use Debian Package
2018-12-07 15:26:08 +01:00
Ludovic Poujol
f2f595af13
redis: In instance mode, ensure to replace the nrpe check_redis with the instance check script
2018-12-05 16:37:52 +01:00
Ludovic Poujol
c9ba37614c
nginx: Munin url config is now a template to insert the server-status prefix
2018-12-05 16:25:48 +01:00
Jérémy Lecour
69d9b949e2
Release 9.6.0
2018-12-04 14:51:17 +01:00
Jérémy Lecour
2bcc1133c0
minifirewall: all variables are configurable
...
By default, a Null value keeps the variable current value as-is.
Set an Array (can be empty) to replace the value.
2018-12-04 14:49:50 +01:00
Jérémy Lecour
50e16e0dee
minifirewall: compare config before/after (for restart condition)
2018-12-04 14:46:32 +01:00
Jérémy Lecour
59dd03c91e
squid: better replacement in minifirewall config
2018-12-04 14:46:32 +01:00
Jérémy Lecour
33e29657a7
update changelog
2018-12-04 14:46:32 +01:00
Jérémy Lecour
c96e8130ff
squid: minifirewall main file is configurable
2018-12-04 14:45:48 +01:00
Jérémy Lecour
c3e4a78442
minifirewall: main file is configurable
2018-12-04 14:45:48 +01:00
Victor LABORIE
74f25e8183
evolinux-base: deploy custom motd if template are present
2018-11-30 15:14:39 +01:00
Victor LABORIE
6469733d2f
evoacme: fix error handling in sed_cert_path_for_(apache|nginx)
2018-11-22 15:06:23 +01:00
Jérémy Lecour
d5e34a58d2
Release 9.5.0
2018-11-14 17:15:25 +01:00
Jérémy Lecour
b3f9932c4d
evolinux-users: add newaliases handler
2018-11-14 17:04:51 +01:00
Jérémy Lecour
2f8cad3c7c
packweb-apache: mod-security config is already included elsewhere
2018-11-14 17:04:03 +01:00
Jérémy Lecour
5056f93283
mysql: logdir can be customized
2018-11-14 16:13:06 +01:00
Jérémy Lecour
bd1b1a7775
update CHANGELOG
2018-11-14 16:13:06 +01:00
Jérémy Lecour
6b769f5d77
mysql: restart MySQL if systemd unit has changed
2018-11-14 16:13:06 +01:00
Victor LABORIE
f5f1e885f7
ssl: add handler for haproxy reload
2018-11-14 15:39:45 +01:00
Jérémy Lecour
3425711ecf
redis: update CHANGELOG
2018-11-14 15:35:11 +01:00
Jérémy Lecour
e89da9146b
redis: fix shell for redis users
2018-11-14 15:34:03 +01:00
Jérémy Lecour
c60f30b106
redis: fix permissions for multiples instances
2018-11-14 15:33:43 +01:00
Victor LABORIE
a4fde27546
ssl: add missing state parameter
2018-11-14 15:20:53 +01:00
Patrick Marchand
3eadd7d544
Rajout d'un cron a packweb pour ftpd
...
The cronjob that maintains file size caches for ftpadmin
is not present in the packweb, which leads to things like
spinon-www0 listing all directories as being 0 octets big.
2018-11-13 16:58:29 -05:00
Patrick Marchand
9198c1e2c0
ansible-lint does not like trailing whitespace
2018-11-13 16:56:31 -05:00
Patrick Marchand
a1973ebbb3
We misunsderstood how modsecurity used the init rules
...
They do not modify files and are necessary for the core rules to function.
2018-11-13 09:59:34 -05:00
Patrick Marchand
9f2727f55f
Removes modsecurity audit log and rules 910* and 901*
2018-11-13 09:59:34 -05:00
Victor LABORIE
cfb87a7b65
haproxy: add vars for tls configuration
...
Permit simply include of TLS configuration, eg. in [global] :
{{ haproxy_ssl_intermediate | indent(width=4) }}
2018-11-13 11:07:06 +01:00
Jérémy Lecour
df48a60684
evocheck: update script from upstream
2018-11-08 09:46:57 +01:00
Victor LABORIE
9ee245942d
ssl: haproxy package check must no fail
2018-11-06 16:21:16 +01:00
Victor LABORIE
c6a504c6c5
Add an SSL role for certificates deployment
2018-11-06 16:15:48 +01:00
Jérémy Lecour
4a411685ff
evomaintenance: FROM domain is configurable
2018-11-06 10:39:30 +01:00
Jérémy Lecour
06a0f0d9b7
apache/nginx/fail2ban: mention ip_whitelist.yml in README.md
2018-11-02 18:18:22 +01:00
Jérémy Lecour
2f9348e3d1
update CHANGELOG
2018-11-02 18:16:29 +01:00
Jérémy Lecour
24ddc78a23
apache/nginx: IP adresses can also be removed
2018-11-02 18:15:17 +01:00
Patrick Marchand
b776fc3da2
Make ip whitelist tasks more flexible
...
Now the list of whitelisted ip addresses can be updated simply by
including the specific tasks in an external playbook without polluting
our role list.
This change takes effect for nginx, apache and fail2ban.
2018-11-02 18:08:23 +01:00
Jérémy Lecour
3d76454984
update CHANGELOG for postfix
2018-11-02 10:14:49 +01:00
Jérémy Lecour
c03be65ed9
evomaintenance: update script from upstream
2018-11-02 10:13:40 +01:00
Gregory Colpart
1871352fe8
enable SSL/TLS client, cf https://wiki.evolix.org/HowtoPostfix#ssltls
2018-10-31 02:20:54 +01:00
Victor LABORIE
83e9f12669
evolinux-base: install man package
2018-10-23 11:38:52 +02:00
Victor LABORIE
6e6820805d
nginx: add tag for ips management
2018-10-19 10:31:45 +02:00
Jérémy Lecour
Benoît S.
Ludovic Poujol
Victor LABORIE
Patrick Marchand
