Benoît S.
0cd889e4fb
generate-ldif: Add NVMe disk support
2020-06-30 04:10:03 +02:00
Benoît S.
9a8f1979bc
evolinux-base: check_hpraid.cron.sh: Fixed wrong else
...
continuous-integration/drone/push Build is passing
The logic was wrong, an else part was not necessary.
2020-06-26 17:57:50 +09:00
Benoît S.
a28b9558cb
evolinux-base: check_hpraid.cron.sh: Better logic and use mail
...
continuous-integration/drone/push Build is passing
First step is to detect errors
Second step is to detect different state
Added mail comand to replace cron output
2020-06-24 18:57:08 +09:00
Jérémy Lecour
9bdd5ad9e7
haproxy: rotate logs with date extension and immediate compression
continuous-integration/drone/push Build is passing
2020-06-22 19:02:29 +02:00
Mathieu Trossevin
5e13f8da4e
lxc-php: Make mysql socket binding work on fresh install
...
/var/run/mysqld only exist after mysql is installed, as such the role
lxc-php need to run after the role mysql.
Also only cause a restart of the containers when their configuration has
been changed.
For now socket binding might only work for mysql and not mysql-oracle
(it's default socket seems to be /tmp/mysql.sock).
2020-06-17 16:06:54 +02:00
Mathieu Trossevin
49b20f9b12
lxc-php: Have mysqld.sock inside of a directory
...
Bind mount don't seems to work on a file so the default socket is now
always named mysqld.sock and the configurable variable is
php_conf_mysql_socket_dir that define the directory the socket will be
in.
2020-06-17 16:06:54 +02:00
Mathieu Trossevin
1d9ab0f1f3
Allows using localhost to connect to MySQL in lxc
...
Add 'php_conf_mysql_default_socket' variable to lxc-php role that
configure both the lxc containers and PHP so that a local MySQL database
may be used through localhost.
The PHP containers will automount /var/run/mysqld/mysqld.sock (the
default path to the mysql socket) to the path defined by the variable
'php_conf_mysql_default_socket' which will be the path used by php to
contact MySQL both with mysqli and PDO_MYSQL.
2020-06-17 16:06:53 +02:00
Benoît S.
de908ae5bd
nagios-nrpe: check_amavis: Update regex
...
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
I just installed a Debian Stretch with a pack mail and the check_amavis
was not checking the right regex.
Amavis is returning:
2.7.0 Ok, discarded, id=17556-09 - INFECTED: Eicar-Signature
So the regex should be:
-if ($result =~/2.7.0 Ok, discarded, id=[^,]+ - INFECTED: Eicar-Test-Signature/) {
+if ($result =~/2.7.0 Ok, discarded, id=\S+ - INFECTED: Eicar-Signature/) {
2020-06-17 12:20:33 +09:00
Benoît S.
1d7d2ce08d
squid: Update regex for sa-update domains.
...
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
List of domains is like:
http://sa-update.dnswl.org/ weight=3
http://www.sa-update.pccc.com/ weight=5
http://sa-update.secnap.net/ weight=5
http://sa-update.space-pro.be/ weight=1
http://sa-update.ena.com/ weight=5
http://sa-update.razx.cloud/ weight=5
http://sa-update.fossies.org/ weight=1
http://sa-update.verein-clean.net/ weight=10
http://sa-update.bitwell.fi/ weight=5
http://sa-update.spamassassin.org/ weight=10
They all start sa-update.*, except for http://www.sa-update.pccc.com/ .
In that case, we just match sa-update on the domain name.
2020-06-17 11:25:24 +09:00
Jérémy Lecour
977c28c720
varnish: fix start command when multiple addresses are present
continuous-integration/drone/push Build is passing
2020-06-16 13:51:07 +02:00
Benoît S.
766b4dfa82
evolinux-base: check_hpraid cron: Add -p
continuous-integration/drone/push Build is passing
2020-06-16 13:20:43 +09:00
Benoît S.
a74f4e1890
evolinux-base/tasks/hardware.yml: Removed trailing whitespace
continuous-integration/drone/push Build is passing
2020-06-16 12:42:33 +09:00
Benoît S.
4bec21a9f3
evolinux-base: harware: Support HP gen >=10 RAID controller
continuous-integration/drone/push Build is passing
2020-06-16 12:35:56 +09:00
Benoît S.
241f50d27e
nagios-nrpe: check_hpraid: Update known working RAID controllers
2020-06-16 12:34:48 +09:00
Benoît S.
74229809ff
nagios-nrpe: Add check_hpraid in template
2020-06-16 12:28:10 +09:00
Benoît S.
09e17ffe6c
nagios-nrpe: check_hpraid: Use printf for return lines
continuous-integration/drone/push Build is passing
2020-06-16 11:16:44 +09:00
Benoît S.
b47d2b872c
nagios-nrpe: check_hpraid: Fixed wrong grep in EXCLUDE_BATTERY
continuous-integration/drone/push Build is passing
2020-06-16 10:57:18 +09:00
Benoît S.
d49da6954a
nagios-nrpe: check_hpraid: Fix wrong command name in examples
continuous-integration/drone/push Build is passing
2020-06-16 10:53:00 +09:00
Benoît S.
6126be95e3
nagios-nrpe: check_hpraid: Be sure that variables are bound
continuous-integration/drone/push Build is passing
2020-06-16 10:36:24 +09:00
Jérémy Lecour
ce7468816f
haproxy: deport SSL tuning to Mozilla SSL generator
...
continuous-integration/drone/push Build is passing
There are too many combinations and they change every so often.
It's better to direct the user to the generator to have a good
configuration.
2020-06-15 22:47:08 +02:00
Jérémy Lecour
30cdbae981
haproxy: split stats variables
2020-06-15 22:45:22 +02:00
Jérémy Lecour
011761eb8f
haproxy: add deny_ips file to reject connections
continuous-integration/drone/push Build is passing
2020-06-14 23:28:29 +02:00
Jérémy Lecour
8465743973
haproxy: add some comments to default config
2020-06-14 23:27:50 +02:00
Jérémy Lecour
01a486b20a
haproxy: simplify syntax fos stats section
2020-06-14 23:19:40 +02:00
Jérémy Lecour
ac4ef5ff96
whitespaces
2020-06-14 19:47:16 +02:00
Jérémy Lecour
4bf5b1daa6
nginx: read server-status values before changing the config
continuous-integration/drone/push Build is passing
2020-06-14 12:49:10 +02:00
Jérémy Lecour
f47af9f54f
haproxy: preconfigure SSL with defaults
continuous-integration/drone/push Build is passing
2020-06-14 12:37:04 +02:00
Jérémy Lecour
7f54b8ab60
haproxy: adapt backports installed package list to distibution
2020-06-14 12:37:04 +02:00
Jérémy Lecour
e5d4ea3c18
nginx: make default vhost configurable
2020-06-14 12:37:04 +02:00
Jérémy Lecour
ce0d61bcbd
certbot: detect HAProxy cert directory
2020-06-14 12:37:04 +02:00
Patrick Marchand
0fee07f47e
Fix variable par défaut manquante dans mysql
...
continuous-integration/drone/push Build is passing
Le lower_case_table_names doit être mis à Null pour que le check marche.
2020-06-10 10:37:36 -04:00
Jérémy Lecour
a8887aaa8e
update changelog
continuous-integration/drone/push Build is passing
2020-06-09 11:45:19 +02:00
Jérémy Lecour
4c71ea2012
haproxy: enable stats frontend with access lists
continuous-integration/drone/push Build is passing
2020-06-09 11:41:33 +02:00
Patrick Marchand
c9daa8ba35
evobackup-client: Fix ssh connection test in zzz_evobackup.sh
...
continuous-integration/drone/push Build is passing
When I made the ssh key name a variable and defaulted it to id_ed25519,
I forgot to change the hardcoded value for the ssh test in
evobackup-client/templates/zzz_evobackup.default.sh.j2
2020-06-08 17:22:18 -04:00
Jérémy Lecour
d9f9d03140
evoacme: read values from environment before defaults file
continuous-integration/drone/push Build is passing
2020-06-05 11:31:42 +02:00
Jérémy Lecour
1ade990526
mongodb: fix logrotate patterm on Debian buster
continuous-integration/drone/push Build is passing
2020-06-05 11:02:54 +02:00
Eric Morino
2fbf1ff9f9
Force owner opendkim for /etc/opendkim/ folder
continuous-integration/drone/push Build is passing
2020-06-05 11:00:22 +02:00
Jérémy Lecour
7f0931510f
evoacme: upstream release 20.06.1
continuous-integration/drone/push Build is passing
2020-06-05 11:01:42 +02:00
Ludovic Poujol
ebffccae59
lxc-php: Do --no-install-recommends for ssmtp/opensmtpd
continuous-integration/drone/push Build is passing
2020-06-05 11:01:22 +02:00
Ludovic Poujol
186f3d90b9
lxc-php: Install opensmtpd as intended
2020-06-05 10:57:49 +02:00
Ludovic Poujol
0dfb92360f
php: Don't disable putenv() by default in PHP settings
continuous-integration/drone/push Build is passing
2020-06-04 11:52:04 +02:00
Ludovic Poujol
90704dc712
lxc-php: Don't disable putenv() by default in PHP settings
2020-06-04 11:51:25 +02:00
Ludovic Poujol
ead0b7fd88
lxc-php: Install php-sqlite by default
continuous-integration/drone/push Build is passing
2020-06-04 11:42:17 +02:00
Ludovic Poujol
8c883c44dd
php: Install php-sqlite by default
2020-06-04 11:39:51 +02:00
Ludovic Poujol
c7d456471b
packweb-apache: Install zip & unzip by default
2020-06-04 11:34:26 +02:00
Jérémy Lecour
2ca7872eef
haproxy: syntax and whitespaces
continuous-integration/drone/push Build is passing
2020-06-04 11:22:58 +02:00
Jérémy Lecour
3bd0a4ffb3
certbot: restore compatibility with old Nginx
2020-06-04 11:22:58 +02:00
Jérémy Lecour
9aed38b637
certbot: install certbot dependencies non-interactively for jessie
2020-06-04 11:22:58 +02:00
Jérémy Dubois
1a0872c507
nagios-nrpe / evolinux-base : new ntp server variable
...
continuous-integration/drone/push Build is passing
Online hosted servers must use ntp.online.net as
ntp server, because others one are rate limited.
Default ntp server is pool.ntp.org, and a custom
one can be set with the nagios_nrpe_ntp_server
variable.
2020-06-04 10:55:48 +02:00
Benoît S.
342810362d
evolinux-base: check_hpraid.sh: Fix missing copy of RAID state
continuous-integration/drone/push Build is passing
2020-06-04 17:32:49 +09:00