Commit Graph

2398 Commits

Author SHA1 Message Date
Jérémy Lecour c85864a6a5 Merge pull request 'Release 10.5.0' (#124) from unstable into stable
continuous-integration/drone/push Build is passing Details
continuous-integration/drone/tag Build is passing Details
Reviewed-on: #124
2021-04-01 15:40:50 +02:00
Jérémy Lecour 2686eea2b1 Release 10.5.0
continuous-integration/drone/push Build is passing Details
continuous-integration/drone/pr Build is passing Details
2021-04-01 15:38:10 +02:00
Jérémy Lecour 7041a70eeb elasticsearch: log rotation is more readable/maintainable 2021-04-01 15:36:34 +02:00
Bruno TATU 33837844ee Compress logs about garbage collector for elasticsearch
Whitout this improvement, this logs cannot be compressed:
/var/log/elasticsearch/gc.log.02
/var/log/elasticsearch/gc.log.29
/var/log/elasticsearch/gc.log.12
/var/log/elasticsearch/gc.log.18
2021-04-01 15:36:34 +02:00
Ludovic Poujol 32f2a29161 lxc-php: No need of apt-key for php7.4
continuous-integration/drone/push Build is passing Details
2021-03-31 11:51:26 +02:00
Ludovic Poujol f2ebe2d878 lxc-php: Add php 7.4 support
continuous-integration/drone/push Build is passing Details
2021-03-31 10:57:29 +02:00
Jérémy Lecour d7d057e435 filebeat: fix Ansible syntax error
continuous-integration/drone/push Build is passing Details
2021-03-23 16:29:03 +01:00
Jérémy Lecour 2593784ab0 metricbeat: new variables to configure SSL mode 2021-03-23 16:28:14 +01:00
Jérémy Lecour 3a3cf1395e listupgrade: update script from upstream 2021-03-23 16:27:15 +01:00
Jérémy Lecour 5a4bd28eaf nagios-nrpe: libfcgi-client-perl is not available before Debian 10
continuous-integration/drone/push Build is passing Details
2021-03-18 15:16:23 +01:00
Jérémy Lecour 5582d6e724 redis: socket/pid directories have the correct permissions 2021-03-18 15:15:39 +01:00
Ludovic Poujol c7c75d3206 Nodejs : Update yarn gpg repo key
continuous-integration/drone/push Build is passing Details
2021-03-11 10:07:05 +01:00
Patrick Marchand e5511eafc6 Revert changes to bind log path from apparmor fix
continuous-integration/drone/push Build is passing Details
I realised it wasnt the best idea to change the path we are used to using just for this, so I overwrite the apparmor configuration instead.
2021-03-09 16:58:14 -05:00
Patrick Marchand ffd3ff97f1 Fix conflict in changelog
continuous-integration/drone/push Build is passing Details
2021-03-09 12:28:01 -05:00
Patrick Marchand 7da22e243e Changed log directory for bind9
It is now /var/log/named, this is what debian 10 and apparmor expect by default. This fixes the bind9 service crashing at start.
2021-03-09 12:25:15 -05:00
Jérémy Lecour 3103af67a7 redis: escape password in Munin configuration
continuous-integration/drone/push Build is passing Details
2021-03-09 18:24:15 +01:00
Ludovic Poujol 3cb18faf28 evolinux-users: Add sudo rights for nagios for multi-php lxc
continuous-integration/drone/push Build is passing Details
2021-03-04 16:48:55 +01:00
Jérémy Lecour 1f4079b1b3 haproxy: possible admin access with login/pass
continuous-integration/drone/push Build is passing Details
2021-02-27 18:43:59 +01:00
Jérémy Lecour 92b7ce0acd postfix: always enable sasl authentified for relay
continuous-integration/drone/push Build is passing Details
2021-02-23 10:05:08 +01:00
Ludovic Poujol df9db31725 deny requests to ^/evolinux_fpm_status-.*
continuous-integration/drone/push Build is passing Details
2021-02-22 16:06:57 +01:00
Jérémy Lecour 3709808fdc redis: use /run instead or /var/run
continuous-integration/drone/push Build is passing Details
2021-02-18 16:42:54 +01:00
Ludovic Poujol ddd3e1aa06 nagios-nrpe: new script check_phpfpm_multi
continuous-integration/drone/push Build is passing Details
2021-02-17 17:23:11 +01:00
Jérémy Lecour f862ffc42e beats packages can be upgraded to latest (default: False)
continuous-integration/drone/push Build is passing Details
2021-02-16 16:35:25 +01:00
Tristan PILAT 22a19519b3 Add NRPE related configuration tasks
continuous-integration/drone/push Build is passing Details
2021-02-16 11:41:05 +01:00
Tristan PILAT 41e3fb0982 Add check_keepalived NRPE script 2021-02-16 11:40:20 +01:00
Tristan PILAT 3e11b1d31f Add notify parameter for NRPE check 2021-02-16 11:39:52 +01:00
Tristan PILAT 2889720902 Add restart nagios-nrpe-server handler 2021-02-16 11:37:33 +01:00
Jérémy Lecour 0e3ecccb7f postfix: restore permit_sasl_authenticated on packmail
continuous-integration/drone/push Build is passing Details
2021-02-12 18:29:22 +01:00
Jérémy Lecour 622bbca4c2 apache: rotate logs daily instead of weekly
continuous-integration/drone/push Build is passing Details
2021-02-12 18:05:47 +01:00
Ludovic Poujol b0cb14eb5b * nagios-nrpe: update check_phpfpm_status.pl & install perl dependencies
continuous-integration/drone/push Build is passing Details
2021-02-12 15:22:57 +01:00
Jérémy Lecour 2b328dc764 postfix: add smtpd_relay_restrictions in configuration
continuous-integration/drone/push Build is passing Details
2021-02-12 14:10:04 +01:00
Tristan PILAT 58f82046cc Add first version of Keepalived role
continuous-integration/drone/push Build is passing Details
2021-02-11 17:32:23 +01:00
Jérémy Lecour 17f1a1a55e update changelog
continuous-integration/drone/push Build is passing Details
2021-02-11 12:09:32 +01:00
Jérémy Lecour f940bc3866 cerbot: use the legacy script on Debian 8 and 9
continuous-integration/drone/push Build is passing Details
2021-02-04 16:34:24 +01:00
Jérémy Lecour dde2672715 nginx: no more "minimal" mode, but the package remains customizable.
continuous-integration/drone/push Build is passing Details
2021-02-04 11:31:36 +01:00
Jérémy Lecour cff309ff41 nginx: add access to server status on default VHost 2021-02-04 11:30:32 +01:00
Jérémy Lecour e1458e6a35 Mention the CHANGELOG in the README
continuous-integration/drone/push Build is passing Details
2021-02-04 11:13:05 +01:00
Jérémy Lecour 5588ed6009 minifirewall: change some defaults
Only SSH (22) is open on privilegied IPs
Remove volatile.debian.org domain
2021-02-04 10:55:31 +01:00
Jérémy Lecour 6c84ada361 redis: s/content/block/ to workaround the blockinfile bug 2021-02-04 10:55:31 +01:00
Brice Waegeneire 1785e6a500 nginx: fix server-status
continuous-integration/drone/push Build is passing Details
2021-02-03 16:25:08 +01:00
Jérémy Dubois 02ba81884d MàJ IPs Evolix minifirewall + spamassassin
continuous-integration/drone/push Build is passing Details
2021-01-20 15:45:04 +01:00
Mathieu Trossevin 633d5644cb Merge pull request 'lxc-php: Do not bind the mysql socket by default' (#122) from mtrossevin/ansible-roles:packweb-multi-php2_patch into unstable
continuous-integration/drone/push Build is passing Details
Reviewed-on: #122
2021-01-11 15:27:33 +01:00
Mathieu Trossevin 2e29dc2440 lxc-php: Do not bind the mysql socket by default
continuous-integration/drone/pr Build is failing Details
The lxc-php role can be run on a server without mysql. Attempting to
bindmount the mysql socket in such a case cause the lxc container to
fail to start.

This commit add a variable, lxc_php_create_mysql_link defaulting to
false telling ansible if it should bindmount the MySQL socket to the
container.
2021-01-11 15:20:25 +01:00
Brice Waegeneire 1576375417 postgresql: Fix postgresql@.service customization
continuous-integration/drone/push Build is passing Details
2021-01-08 14:46:38 +01:00
Jérémy Lecour 024d30ea43 evoacme: upstream release 21.01
continuous-integration/drone/push Build is passing Details
2021-01-07 19:16:06 +01:00
Jérémy Lecour 0e32e0d2aa certbot: use a fixed 1.9.0 version of the certbot-auto script (renamed "letsencrypt-auto")
continuous-integration/drone/push Build is passing Details
2021-01-07 18:55:44 +01:00
Jérémy Lecour 8c54fd8c16 apache: new variables for logrotate + server-status
continuous-integration/drone/push Build is passing Details
2021-01-05 17:47:56 +01:00
Jérémy Lecour 6e7acd1abd Merge pull request 'Release 10.4.0' (#121) from unstable into stable
continuous-integration/drone/tag Build is passing Details
continuous-integration/drone/push Build is passing Details
Reviewed-on: #121
2020-12-24 14:02:32 +01:00
Jérémy Lecour 19da5ea1f7 Release 10.4.0
continuous-integration/drone/push Build is passing Details
continuous-integration/drone/pr Build is passing Details
2020-12-24 14:00:37 +01:00
Jérémy Lecour 7ec0748383 certbot: detect domains if missing
continuous-integration/drone/push Build is passing Details
2020-12-24 13:56:43 +01:00