Jérémy Lecour
6bf818b52d
fix: path is 2.3+ only
2017-08-04 09:58:57 -04:00
Gregory Colpart
ce0644e976
copy general_alert_email/log2mail_alert_email to Apache role
2017-08-04 09:57:09 -04:00
Romain Dessort
b8894cc509
Remount /usr rw before writing on it
2017-08-03 16:15:27 -04:00
Romain Dessort
b71db80afe
Move variable file to defaults/
2017-08-03 15:18:30 -04:00
Jérémy Lecour
03aae520e8
apache: server-status only for default vhost
2017-07-28 15:28:19 -04:00
Jérémy Lecour
e90d8ceec3
apache: "Require local" instead of "Require ip 127.0.0.1"
2017-07-28 15:28:03 -04:00
Jérémy Lecour
84fdd356fa
apache: formatting
2017-07-28 15:27:34 -04:00
Jérémy Lecour
aaded13176
apache: add missing reload notifications
2017-07-28 15:24:26 -04:00
Jérémy Lecour
c97110f865
minifirewall: embed files instead of git clone
2017-07-27 22:55:07 -04:00
Jérémy Lecour
2179be09d1
admin-users: passwordless sudo for come commands
2017-07-27 22:26:07 -04:00
Jérémy Lecour
5e949d74fd
evomaintenance: check if minifirewall is installed
2017-07-27 21:34:06 -04:00
Jérémy Lecour
66eee11cf7
etc-git: show OS in task name
2017-07-27 21:33:34 -04:00
Jérémy Lecour
2dfd384fb8
admin-users: users are in sudo group for Stretch
2017-07-27 18:58:16 -04:00
Jérémy Lecour
2fc65d1b8b
docker-host: use apt preferences and apt role
...
* the "apt" role can deal with backports lists install
* we'd rather use a preferences file for specific packages
than simply installing jessie-backports
2017-07-27 18:15:18 -04:00
Jérémy Lecour
b6e8c1760e
nginx: fix typo for tags
2017-07-27 18:14:56 -04:00
Jérémy Lecour
6871de457a
etc_git: fix README to use tasks_from instead of task_from
2017-07-27 16:51:35 -04:00
Jérémy Lecour
f20b95f075
etc-git: use the git_config module instead of ini
2017-07-27 16:50:23 -04:00
Jérémy Lecour
d033d9773a
etc-git: if sudo is used, the real user is the author
2017-07-27 16:49:14 -04:00
Gabriel Périard-Tremblay
2118bfae8c
Update docker-host role
2017-07-24 16:38:08 -04:00
Gregory Colpart
e212f3043f
Set right URL for our custom role
2017-07-23 00:55:23 +02:00
Gregory Colpart
f49e720efd
Add log2mail stuff for Apache
2017-07-23 00:54:52 +02:00
Gregory Colpart
5c4125263e
Quick review of pack-web-apache role
2017-07-23 00:44:06 +02:00
Gregory Colpart
a0ccc2e9d5
Review of role Apache, sync with https://wiki.evolix.org/HowtoApache
2017-07-22 22:40:31 +02:00
Gregory Colpart
3b78613b2e
Big review of role Bind, sync with https://wiki.evolix.org/HowtoBind
2017-07-22 18:40:00 +02:00
Gregory Colpart
bbb0e579a6
Fix #2154 : we don't need lsb-invalid-mta and package is not anymore in stretch
2017-07-22 08:19:14 +02:00
Gregory Colpart
b4bfccd7eb
no fail when admin_users is empty because we want keep easy the usability
2017-07-22 07:57:46 +02:00
Jérémy Lecour
6e38890808
java8: fix install on stretch
2017-07-20 18:21:46 +02:00
Jérémy Lecour
9269f1e50d
Merge branch 'mariadb-fix-munin-plugin' into unstable
2017-07-20 11:00:24 +02:00
Benoît S.
499b2c7def
Added a perl mandatory package
...
If not installed: install_driver(mysql) failed: Can't locate DBD/mysql.pm in
@INC (you may need to install the DBD::mysql module)
2017-07-20 10:43:13 +02:00
Victor LABORIE
af1045d788
nagios-nrpe: add check_clamav_db to defaults check
2017-07-19 17:20:44 +02:00
Victor LABORIE
64a134355b
evolinux-base: override logmail service
2017-07-19 16:03:36 +02:00
Jérémy Lecour
1a0ba00679
Merge branch 'evocheck-force-install' into unstable
2017-07-19 14:37:10 +02:00
Jérémy Lecour
6f566533a3
evocheck: don't install by default (but possible)
2017-07-19 14:36:30 +02:00
Jérémy Lecour
360dacf9d8
evocheck: don't fail, just print stdout
2017-07-19 14:17:10 +02:00
Jérémy Lecour
383d432bb8
Merge branch '1092-page-for-error-403' into unstable
2017-07-19 14:04:53 +02:00
Jérémy Lecour
515460ee0a
Merge branch 'apache-fix-default-vhost' into unstable
2017-07-19 14:02:52 +02:00
Jérémy Lecour
f390638263
Merge branch 'kvm-images-path' into unstable
2017-07-19 14:00:49 +02:00
Jérémy Lecour
dac4276cad
Move ansible-managed to a feature branch
2017-07-19 13:57:23 +02:00
Jérémy Lecour
6106a0a8f5
admin-users: fix AllowUsers
...
* the command module was doing weird escaping, let's use the shell
module
* insert after a more appropriate position
2017-07-19 13:54:18 +02:00
Jérémy Lecour
adc3bd7a93
Fix ssh LogLevel
...
* the directive can be present but commented
* the version comparison was wrong
2017-07-19 13:49:08 +02:00
Jérémy Lecour
43e9f69314
admin-users: double-escape, dream hands !!
2017-07-19 12:33:35 +02:00
Jérémy Lecour
987e35f104
admin-users: better grep for AllowUsers detection
...
Now it behaves correctly if the directive exists, but commented
2017-07-19 12:08:06 +02:00
Jérémy Lecour
030425d9f8
fail2ban: unindent notify attribute
2017-07-19 12:06:19 +02:00
Jérémy Lecour
da4b7ca41a
apache: disable GoAway criteria
2017-07-19 11:55:58 +02:00
Jérémy Lecour
4099d2a3a4
fail2ban: the local jail should not be overwritten
2017-07-19 11:55:04 +02:00
Jérémy Lecour
44c679eb64
admin_users: fix logic error
2017-07-19 11:54:01 +02:00
Jérémy Lecour
3b93ba0768
fail2ban: install local jail before starting
2017-07-19 11:39:38 +02:00
Jérémy Lecour
2077af2992
fail2ban: change ips variables
2017-07-19 11:39:09 +02:00
Jérémy Lecour
7c92645c5c
admin users: fix uidisbusy for proper rc check
...
because of "failed_when: False", the register would never fail
so we check the return code of "getent passwd"
2017-07-19 11:31:21 +02:00
Jérémy Lecour
0115a16675
whitespaces
2017-07-19 11:31:21 +02:00