Jérémy Lecour
52fff750df
evolinux-base: move "/sbin/deny" install to utils.yml tasks file
2022-01-25 17:44:42 +01:00
Jérémy Lecour
0e34d4cd4b
Merge remote-tracking branch 'origin/bullseye-swap-top' into unstable
continuous-integration/drone/push Build was killed
2022-01-25 15:15:05 +01:00
Jérémy Lecour
8f8c024163
Merge branch 'unstable' into bullseye-swap-top
continuous-integration/drone/push Build was killed
continuous-integration/drone/pr Build was killed
2022-01-25 15:13:10 +01:00
Jérémy Lecour
1f4ee2de79
Prepare CHANGELOG for 22.01 release
continuous-integration/drone/push Build was killed
2022-01-25 15:00:03 +01:00
Jérémy Lecour
0fce412cf5
add WIP warning to check_async
2022-01-25 14:56:39 +01:00
Jérémy Lecour
544b213529
evomaintenance: Upstream release 22.01
2022-01-25 14:56:39 +01:00
Jérémy Lecour
266289c72e
whitespaces
2022-01-25 14:56:39 +01:00
Jérémy Lecour
51bc48623b
dovecot: switch to TLS 1.2+ and external DH params
2022-01-25 14:56:39 +01:00
Mathieu Trossevin
7a969a0be2
Merge pull request 'lxc-php: Fix config for opensmtpd on bullseye' ( #137 ) from mtrossevin/ansible-roles:opensmtpd-bullseye into unstable
...
continuous-integration/drone/push Build was killed
Reviewed-on: #137
2022-01-25 12:00:01 +01:00
Mathieu Trossevin
1902c40c3c
lxc-php: Fix config for opensmtpd on bullseye
continuous-integration/drone/pr Build was killed
2022-01-25 11:57:41 +01:00
Mathieu Trossevin
fec9e49c18
Repair munin role
continuous-integration/drone/push Build was killed
2022-01-25 11:01:45 +01:00
Jérémy Dubois
3822696db6
Update CHANGELOG for new openvpn role
continuous-integration/drone/push Build was killed
2022-01-24 19:23:26 +01:00
Jérémy Dubois
4effe91b9f
Write an openvpn role
continuous-integration/drone/push Build was killed
2022-01-24 19:12:48 +01:00
Brice Waegeneire
168b0fa9b7
nginx: Add snippet for custom server block config.
continuous-integration/drone/push Build was killed
2022-01-20 10:44:02 +01:00
Jérémy Lecour
c4fab71d7a
evolinux-base: add new states to backup-server-states
continuous-integration/drone/push Build was killed
2022-01-15 18:51:03 +01:00
Ludovic Poujol
c8a862c5e7
nagios-nrpe: Amélioration du check phpfpm_status et phpfpm_multi
...
continuous-integration/drone/push Build was killed
Pour phpfpm_status > Ajout de la possibilité d'avoir un seuil de max procs actifs
Pour phpfpm_multi > Utilisation des seuils max (calculé sur le pm.max_children) + timeout
2022-01-14 17:06:48 +01:00
Jérémy Lecour
ea382a1686
varnish: add additional options
continuous-integration/drone/push Build was killed
2022-01-12 13:04:22 +01:00
Jérémy Lecour
ca1f465aaa
nodejs: default to version 16 LTS
2022-01-12 13:04:22 +01:00
William Hirigoyen (Evolix)
bd39adaf68
Fail if /var has nodev or noexec option enabled.
continuous-integration/drone/push Build was killed
2022-01-11 11:48:57 +01:00
William Hirigoyen (Evolix)
14883aa95e
Ensure that /var is mounted with dev and exec options prior to LXC container creation.
continuous-integration/drone/push Build was killed
2022-01-11 11:02:09 +01:00
Brice Waegeneire
4c6d30a52c
apache: block access to .git* and .env* files
continuous-integration/drone/push Build was killed
2021-12-28 16:27:05 +01:00
Jérémy Lecour
1893b6dea5
don't enable alert5 service in check mode
continuous-integration/drone/push Build was killed
2021-12-23 16:56:43 +01:00
Jérémy Lecour
ec346a42a5
munin: systemd override to unprotect home directory
continuous-integration/drone/push Build was killed
2021-12-23 16:56:23 +01:00
William Hirigoyen (Evolix)
1c754f7eb0
Fix Filebeat role for --check mode.
continuous-integration/drone/push Build encountered an error
2021-12-21 15:27:46 +01:00
Eric Morino
7bb7b22d1f
Add redirectMath 404 on http request /.git by default
continuous-integration/drone/push Build encountered an error
2021-12-20 09:59:25 +01:00
Ludovic Poujol
7c7ccf07eb
generate-ldif: fix typo in var name (cap)
continuous-integration/drone/push Build encountered an error
2021-12-13 17:01:59 +01:00
Ludovic Poujol
64b632c000
evolinux-base: Donner le choix (ou non) de virer apt-listchanges
continuous-integration/drone/push Build encountered an error
2021-12-10 11:37:56 +01:00
Ludovic Poujol
8b701e615f
evolinux-base: Donner le choix de changer (ou non) le motd
2021-12-10 11:37:33 +01:00
Ludovic Poujol
d27d6b69cd
evolinux-base: Add missing dependency dmidecode
continuous-integration/drone/push Build encountered an error
2021-12-08 18:35:55 +01:00
Ludovic Poujol
bd429275d1
generate-ldif: properly flag virtual machines on vmware as virtual machines
continuous-integration/drone/push Build encountered an error
2021-12-08 18:07:53 +01:00
Eric Morino
cd7c488713
Add rule .well-know to allow letsencrypt challenge
continuous-integration/drone/push Build is failing
2021-11-26 16:37:00 +01:00
Eric Morino
7e36d03804
Add new location by default for /.well-know, fix some warning in Nextcloud check setup
continuous-integration/drone/push Build is failing
2021-11-26 15:42:39 +01:00
Eric Morino
2ec026c2b3
Change variable item by kvm_pair and disable loop on all 'hypervisor' group
continuous-integration/drone/push Build is failing
2021-11-26 11:08:43 +01:00
Mathieu Trossevin
53cd3ba342
Merge pull request 'nagios-nrpe: Fix check_nfsserver for buster and bullseye' ( #138 ) from mtrossevin/ansible-roles:check_nfsserver-buster into unstable
...
continuous-integration/drone/push Build is failing
Reviewed-on: #138
2021-11-24 11:12:11 +01:00
Mathieu Trossevin
d3eef71127
nagios-nrpe: Fix check_nfsserver for buster and bullseye
...
continuous-integration/drone/pr Build is failing
From buster onward the nfs server doesn't run NFSv4 over UDP (it is out
of spec, see RFC 7530). As such the check broke as it attempt to check
the availability of NFSv4 over UDP.
Right now the check doesn't check for NFSv2 over UDP as it would need to
check if it exist first, as on bullseye it isn't supported by default
anymore.
2021-11-24 11:11:39 +01:00
Ludovic Poujol
82694ef5e9
generate-ldif: Don't miss detect deb11 as VM
continuous-integration/drone/push Build is failing
2021-11-22 17:40:49 +01:00
Ludovic Poujol
a35139fcee
Add missing sudoers line (for old debian 9)
continuous-integration/drone/push Build is failing
2021-11-22 16:28:30 +01:00
Eric Morino
8dca949564
Add *xml to crontab for sync libvirt xml file
continuous-integration/drone/push Build is failing
2021-11-22 11:44:07 +01:00
Eric Morino
c9af7db827
re-activation task ssh.yml + modify crontab for sync list of running vm + add tags
continuous-integration/drone/push Build is failing
2021-11-22 11:38:10 +01:00
Eric Morino
21bd4021d3
add virsh list --all on kvm host and this neighbor
continuous-integration/drone/push Build is failing
2021-11-22 10:42:46 +01:00
Eric Morino
4fb885a33b
Fix right for redis log dir and log file
continuous-integration/drone/push Build is failing
2021-11-15 11:33:34 +01:00
Jérémy Lecour
e4bb0c6f55
filebeat/metricbeat: version 7.x y default
continuous-integration/drone/push Build is failing
2021-11-12 10:07:43 +01:00
Jérémy Lecour
039c740ef3
mysql: add evomariabackup 21.11
2021-11-01 10:16:55 +01:00
William Hirigoyen (Evolix)
51aaac0cbc
Fix evocheck_force_install VARIABLE IS NOT DEFINED (validé par jlecour)
2021-10-29 14:54:44 +02:00
Jérémy Lecour
6cf8195744
evolinux-base: fix alert5.service dependency syntax
2021-10-29 07:52:38 +02:00
Alexis Ben Miloud--Josselin
0247216429
[kvmstats] Sort domain list
2021-10-28 10:27:44 +02:00
Eric Morino
2ea8d279d5
Add replication graph for mysql
2021-10-27 10:43:17 +02:00
William Hirigoyen (Evolix)
b9c1e9eafe
Fix missing quote, option createhome -> create_home in Ansible 3.10, no mode option in user module (fix error introduced in e75eeb8c3f
)
2021-10-26 15:34:13 +02:00
Jérémy Lecour
dcfea674a4
listupgrade: old-kernel-removal version 21.10
2021-10-25 14:23:52 +02:00
Jérémy Lecour
646a7b1813
evocheck: package install is not supported anymore
2021-10-25 10:08:40 +02:00