Commit Graph

2692 Commits

Author SHA1 Message Date
Jérémy Lecour cd26081add rbenv: install Ruby 3.1.0 by default 2022-01-28 16:27:20 +01:00
Jérémy Lecour 8beb1e7460 evolinux-base: backup-server-state: fix systemctl invocation 2022-01-28 16:25:28 +01:00
Jérémy Lecour 6d5aa67045 evolinux-base: backup-server-state: add "force" mode 2022-01-28 16:25:17 +01:00
Jérémy Lecour 359719d0d0 Merge pull request 'Release 22.01.2' (#144) from unstable into stable
continuous-integration/drone/push Build was killed Details
continuous-integration/drone/tag Build was killed Details
Reviewed-on: #144
2022-01-27 14:13:53 +01:00
Jérémy Lecour bb30402df3 Release 22.01.2
continuous-integration/drone/push Build was killed Details
continuous-integration/drone/pr Build was killed Details
2022-01-27 14:12:40 +01:00
Jérémy Lecour 6ccd0ea440 Release 22.01.1
continuous-integration/drone/pr Build was killed Details
continuous-integration/drone/push Build was killed Details
2022-01-27 14:04:41 +01:00
Jérémy Lecour 88cd8a0976 evolinux-base: backup-server-state: rename options and use mysqladmin instead of mysql
continuous-integration/drone/push Build was killed Details
2022-01-27 12:21:32 +01:00
Jérémy Lecour 519228ff9f evolinux-base: backup-server-state: add disks and uname state
continuous-integration/drone/push Build was killed Details
2022-01-27 12:09:04 +01:00
Brice Waegeneire 6dc17658a9 evolinux-base: backup-server-state: Add options.
continuous-integration/drone/push Build was killed Details
New options:
- --dmesg / --no-dmesg
- --mysql / --no-mysql
- --services / --no-services
2022-01-27 11:50:18 +01:00
Jérémy Lecour 2849039fad remount-usr: use findmnt to find if usr is a readonly partition
continuous-integration/drone/push Build was killed Details
2022-01-27 11:21:19 +01:00
Jérémy Lecour 80f8a94798 evolinux-base: many improvements for backup-server-state script
continuous-integration/drone/push Build was killed Details
2022-01-27 10:29:08 +01:00
Eric Morino 0a244894eb Add fix repository in source.list for bullseye
continuous-integration/drone/push Build was killed Details
2022-01-26 11:07:10 +01:00
Jérémy Lecour 2c6a3601de Merge pull request 'Release 22.01' (#142) from unstable into stable
continuous-integration/drone/tag Build was killed Details
continuous-integration/drone/push Build was killed Details
Reviewed-on: #142
2022-01-25 18:30:07 +01:00
Jérémy Lecour bff8fcfebb apt: upgrade packages after all the configuration is done
continuous-integration/drone/push Build was killed Details
continuous-integration/drone/pr Build was killed Details
2022-01-25 18:25:47 +01:00
Jérémy Lecour 93929864be lxc-php: use bullseye-php80 for php80 container
continuous-integration/drone/push Build was killed Details
2022-01-25 17:45:17 +01:00
Jérémy Lecour 52fff750df evolinux-base: move "/sbin/deny" install to utils.yml tasks file 2022-01-25 17:44:42 +01:00
Jérémy Lecour 0e34d4cd4b Merge remote-tracking branch 'origin/bullseye-swap-top' into unstable
continuous-integration/drone/push Build was killed Details
2022-01-25 15:15:05 +01:00
Jérémy Lecour 8f8c024163 Merge branch 'unstable' into bullseye-swap-top
continuous-integration/drone/push Build was killed Details
continuous-integration/drone/pr Build was killed Details
2022-01-25 15:13:10 +01:00
Jérémy Lecour 1f4ee2de79 Prepare CHANGELOG for 22.01 release
continuous-integration/drone/push Build was killed Details
2022-01-25 15:00:03 +01:00
Jérémy Lecour 0fce412cf5 add WIP warning to check_async 2022-01-25 14:56:39 +01:00
Jérémy Lecour 544b213529 evomaintenance: Upstream release 22.01 2022-01-25 14:56:39 +01:00
Jérémy Lecour 266289c72e whitespaces 2022-01-25 14:56:39 +01:00
Jérémy Lecour 51bc48623b dovecot: switch to TLS 1.2+ and external DH params 2022-01-25 14:56:39 +01:00
Mathieu Trossevin 7a969a0be2 Merge pull request 'lxc-php: Fix config for opensmtpd on bullseye' (#137) from mtrossevin/ansible-roles:opensmtpd-bullseye into unstable
continuous-integration/drone/push Build was killed Details
Reviewed-on: #137
2022-01-25 12:00:01 +01:00
Mathieu Trossevin 1902c40c3c
lxc-php: Fix config for opensmtpd on bullseye
continuous-integration/drone/pr Build was killed Details
2022-01-25 11:57:41 +01:00
Mathieu Trossevin fec9e49c18
Repair munin role
continuous-integration/drone/push Build was killed Details
2022-01-25 11:01:45 +01:00
Jérémy Dubois 3822696db6 Update CHANGELOG for new openvpn role
continuous-integration/drone/push Build was killed Details
2022-01-24 19:23:26 +01:00
Jérémy Dubois 4effe91b9f Write an openvpn role
continuous-integration/drone/push Build was killed Details
2022-01-24 19:12:48 +01:00
Brice Waegeneire 168b0fa9b7 nginx: Add snippet for custom server block config.
continuous-integration/drone/push Build was killed Details
2022-01-20 10:44:02 +01:00
Jérémy Lecour c4fab71d7a evolinux-base: add new states to backup-server-states
continuous-integration/drone/push Build was killed Details
2022-01-15 18:51:03 +01:00
Ludovic Poujol c8a862c5e7 nagios-nrpe: Amélioration du check phpfpm_status et phpfpm_multi
continuous-integration/drone/push Build was killed Details
Pour phpfpm_status > Ajout de la possibilité d'avoir un seuil de max procs actifs
Pour phpfpm_multi > Utilisation des seuils max (calculé sur le pm.max_children) + timeout
2022-01-14 17:06:48 +01:00
Jérémy Lecour ea382a1686 varnish: add additional options
continuous-integration/drone/push Build was killed Details
2022-01-12 13:04:22 +01:00
Jérémy Lecour ca1f465aaa nodejs: default to version 16 LTS 2022-01-12 13:04:22 +01:00
William Hirigoyen (Evolix) bd39adaf68 Fail if /var has nodev or noexec option enabled.
continuous-integration/drone/push Build was killed Details
2022-01-11 11:48:57 +01:00
William Hirigoyen (Evolix) 14883aa95e Ensure that /var is mounted with dev and exec options prior to LXC container creation.
continuous-integration/drone/push Build was killed Details
2022-01-11 11:02:09 +01:00
Brice Waegeneire 4c6d30a52c apache: block access to .git* and .env* files
continuous-integration/drone/push Build was killed Details
2021-12-28 16:27:05 +01:00
Jérémy Lecour 1893b6dea5 don't enable alert5 service in check mode
continuous-integration/drone/push Build was killed Details
2021-12-23 16:56:43 +01:00
Jérémy Lecour ec346a42a5 munin: systemd override to unprotect home directory
continuous-integration/drone/push Build was killed Details
2021-12-23 16:56:23 +01:00
William Hirigoyen (Evolix) 1c754f7eb0 Fix Filebeat role for --check mode.
continuous-integration/drone/push Build encountered an error Details
2021-12-21 15:27:46 +01:00
Eric Morino 7bb7b22d1f Add redirectMath 404 on http request /.git by default
continuous-integration/drone/push Build encountered an error Details
2021-12-20 09:59:25 +01:00
Ludovic Poujol 7c7ccf07eb generate-ldif: fix typo in var name (cap)
continuous-integration/drone/push Build encountered an error Details
2021-12-13 17:01:59 +01:00
Ludovic Poujol 64b632c000 evolinux-base: Donner le choix (ou non) de virer apt-listchanges
continuous-integration/drone/push Build encountered an error Details
2021-12-10 11:37:56 +01:00
Ludovic Poujol 8b701e615f evolinux-base: Donner le choix de changer (ou non) le motd 2021-12-10 11:37:33 +01:00
Ludovic Poujol d27d6b69cd evolinux-base: Add missing dependency dmidecode
continuous-integration/drone/push Build encountered an error Details
2021-12-08 18:35:55 +01:00
Ludovic Poujol bd429275d1 generate-ldif: properly flag virtual machines on vmware as virtual machines
continuous-integration/drone/push Build encountered an error Details
2021-12-08 18:07:53 +01:00
Eric Morino cd7c488713 Add rule .well-know to allow letsencrypt challenge
continuous-integration/drone/push Build is failing Details
2021-11-26 16:37:00 +01:00
Eric Morino 7e36d03804 Add new location by default for /.well-know, fix some warning in Nextcloud check setup
continuous-integration/drone/push Build is failing Details
2021-11-26 15:42:39 +01:00
Eric Morino 2ec026c2b3 Change variable item by kvm_pair and disable loop on all 'hypervisor' group
continuous-integration/drone/push Build is failing Details
2021-11-26 11:08:43 +01:00
Mathieu Trossevin 53cd3ba342 Merge pull request 'nagios-nrpe: Fix check_nfsserver for buster and bullseye' (#138) from mtrossevin/ansible-roles:check_nfsserver-buster into unstable
continuous-integration/drone/push Build is failing Details
Reviewed-on: #138
2021-11-24 11:12:11 +01:00
Mathieu Trossevin d3eef71127
nagios-nrpe: Fix check_nfsserver for buster and bullseye
continuous-integration/drone/pr Build is failing Details
From buster onward the nfs server doesn't run NFSv4 over UDP (it is out
of spec, see RFC 7530). As such the check broke as it attempt to check
the availability of NFSv4 over UDP.

Right now the check doesn't check for NFSv2 over UDP as it would need to
check if it exist first, as on bullseye it isn't supported by default
anymore.
2021-11-24 11:11:39 +01:00