Commit Graph

60 Commits

Author SHA1 Message Date
Ludovic Poujol b120a92203 evolinux-users + nagios-nrpe: Add support for php-fpm80 in lxc 2021-10-20 15:59:20 +02:00
Ludovic Poujol e130728034 evolix-users: Add missing sudo auth for check_raid for HP hardware 2021-09-24 14:33:56 +02:00
Ludovic Poujol 6a2cd59e6d nagios-nrpe + evolinux-users: new check ipmi 2021-09-16 16:48:03 +02:00
Ludovic Poujol 51fd2337f0 nagios-nrpe + evolinux-users: new check raid (soft + hard) 2021-09-16 16:40:57 +02:00
Jérémy Lecour 2c7380240c nagios-nrpe + evolinux-users: new checks for bkctld 2021-08-25 11:56:26 +02:00
Jérémy Lecour 0fe0244116 Update Galaxy metadata (company, platforms and galaxy_tags) 2021-06-28 15:26:28 +02:00
Jérémy Lecour 9b2a3a6db2 evolinux-users: convert uid to string
continuous-integration/drone/push Build is passing Details
2021-05-10 07:42:19 +02:00
Jérémy Lecour 2ed77c60f0 Improve Ansible syntax
replace « x | changed » by « x is changed »
add explicit « bool » filter
use « length » filter instead of string comparison
2021-05-09 23:06:42 +02:00
Jérémy Lecour 07fd6451e1 Use 'loop' syntax instead of 'with_dict' 2021-05-04 14:20:53 +02:00
Jérémy Lecour 5138065059 Use 'loop' syntax instead of 'with_items' 2021-05-04 14:19:18 +02:00
Ludovic Poujol 3cb18faf28 evolinux-users: Add sudo rights for nagios for multi-php lxc
continuous-integration/drone/push Build is passing Details
2021-03-04 16:48:55 +01:00
Jérémy Lecour 81fbd98a5f evolinux-users: improve uid/login checks
continuous-integration/drone/push Build is passing Details
2020-12-17 15:25:48 +01:00
Jérémy Dubois 6c202dcf4f Check that ansible_distribution_major_version is defined in sudo task
continuous-integration/drone/push Build is passing Details
This variable does not exist when run on OpenBSD servers, making the ansible
playbook to exit in a fatal state.
2020-11-06 16:28:35 +01:00
Jérémy Lecour 7283e34077 Replace version_compare() with version() 2020-02-25 10:45:35 +01:00
Jérémy Lecour 79bb6103b8 Change "|version_compare" with "is version_compare" 2019-12-31 10:18:19 +01:00
Ludovic Poujol 890055753e evolinux-users: Validate sshd config with "-t" instead of "-T"
See #52
2019-06-17 10:23:56 +02:00
Jérémy Lecour bd8644ae60 whitespaces 2019-05-14 14:03:03 +02:00
Jérémy Lecour aa28e9c1b8 change repositories URL 2019-03-21 15:31:58 +01:00
Jérémy Lecour b3f9932c4d evolinux-users: add newaliases handler 2018-11-14 17:04:51 +01:00
Victor LABORIE 8cd689f9b4 haproxy: move check_haproxy_stats to nagios-nrpe role 2018-09-28 15:21:42 +02:00
Jérémy Lecour c76cbd1887 evolinux-users: add user to /etc/aliases 2018-09-09 23:42:38 +02:00
Victor LABORIE 17c8093711 nagios-nrpe: use bkctld check subcommand for NRPE check 2018-05-30 17:13:39 +02:00
Jérémy Lecour 08d5ca5696 evolinux-users: fix secondary groups
With ANsible 2.2 the list of groups must be comma-separated
2018-05-02 17:16:36 +02:00
Jérémy Lecour c87e3ee576 evolinux-users: add user to internal group if defined and Debian >= 9 2018-05-02 17:12:27 +02:00
Jérémy Lecour 74ca43fe05 evolinux-users: add documentation for variables 2018-05-02 17:12:27 +02:00
Ludovic Poujol 732087235c evolinux-users: Fix check_minifirewall path in sudoers file 2018-04-25 17:36:11 +02:00
Jérémy Lecour 8384e8ba43 evolinux: groups for SSH configuration are used with Debian 10 and later 2018-04-20 14:38:55 +02:00
Jérémy Lecour e79640d770 evolinux: Name and improve compatibility checks 2018-04-20 14:38:55 +02:00
Jérémy Lecour bc3b1182ea evolinux-users: default to AllowGroups (for SSH) in Debian 10 2018-04-20 10:25:14 +02:00
Jérémy Lecour 43d86f5541 evolinux-users: cover more cases for AllowUsers/Groups in sshd config 2018-04-18 18:21:09 +02:00
Jérémy Lecour b0b4e13130 evolinux-users: Add users to group for SSH on Debian 9+ 2018-04-18 12:16:04 +02:00
Jérémy Lecour 32c289d915 evolinux: improve case switching
A case was missing : no AllowUsers/AllowGroups, on Debian 9
2018-04-18 12:16:04 +02:00
Jérémy Lecour 5bcd7e44cf evolinux-users: really look for evomaintenance
The file was missing in the grep command :/
2018-04-18 12:16:04 +02:00
Jérémy Lecour a782ef3180 evolinux-users: better names for a fewtasks 2018-04-18 12:16:04 +02:00
Jérémy Lecour dba26fbbaf evolinux-users: sudoers file should be 0440 also in Stretch 2018-04-18 12:16:04 +02:00
Jérémy Lecour f065310ca6 evolinux-users: use command instead of shell when possible 2018-04-18 12:16:04 +02:00
Jérémy Lecour 2027420877 whitespaces 2018-04-18 12:16:04 +02:00
Jérémy Lecour 13abc44992 evolinux-users: use assert instead of fail 2018-04-18 12:16:04 +02:00
Jérémy Lecour f152ba66cd evolinux-users: regroup tasks
1. create all accounts
2. configure sudo for everyone
3. configure ssh for everyone
2018-04-18 12:16:04 +02:00
Jérémy Lecour e0ac7760f0 Use AllowGroups mode also if no AllowUsers is present at all 2018-04-18 12:16:04 +02:00
Jérémy Lecour 4fc58e4b1e evolinux-users: rename included files 2018-04-18 12:16:04 +02:00
Jérémy Lecour b01d9178d0 evolinux-users: split AllowGroups/AllowUsers modes
If an AllowGroups directive is found or when using Debian 9+,
we use the AllowGroups directive and comment AllowUsers that may be
already present.
When adding a user, we make sure that the allowed group exists
and the use is in that group, to be sure that at least this user
is allowed to connect.

In other situations, we use the AllowUsers directive.
2018-04-18 12:16:04 +02:00
Jérémy Lecour 46a6a35486 evolinux-users: add check_minifirewall in sudoers commands 2018-04-06 10:36:48 +02:00
Jérémy Lecour 8abed3e258 Use "command" instead of "shell" where possible 2018-04-04 23:36:00 +02:00
Jérémy Lecour 84924c38f4 evolinux-users: create .profile for evomaintenance if missing 2018-03-13 09:37:27 +01:00
Jérémy Lecour 097f732922 evolinux-users: evomaintenance trap detection also with check_mode 2018-02-08 15:33:28 +01:00
Jérémy Lecour c18b83d974 evolinux-users: deal with AllowGroups and AllowUsers differently 2018-02-08 15:29:53 +01:00
Jérémy Lecour 290dfd300a evolinux-users: add users to adm group for Stretch 2017-12-28 11:01:31 +01:00
Jérémy Lecour b7cede7654 Don't add the trap if it is present or commented 2017-10-17 18:07:51 +02:00
Jérémy Lecour 71cd04029c Insert "Match User" if missing (Jessie only) 2017-10-17 10:28:49 +02:00