Commit graph

194 commits

Author SHA1 Message Date
Jérémy Lecour 46fed05fa2 evocheck: update upstream script 2018-08-17 10:04:07 +02:00
Jérémy Lecour bc8858fc0a evolinux-base: improve hostname configuration
We can have a "real" hostname and domain, but also an "internal" hostnae 
and domain, used mostly for internal tools.
2018-08-16 16:17:34 +02:00
Jérémy Lecour ccd8c00e3a CHANGELOG : add missing entries 2018-08-09 18:24:48 +02:00
Jérémy Lecour b9b0183ec5 remount-usr: mount doesn't report a change
It is arguable that this is a real change or not,
but in practice we have playbooks that report changes only for this and
it's very fun to scroll back each time to see if it's remount-usr or
a "real" change.
2018-08-06 15:01:52 +02:00
Victor LABORIE 57cf0a29ab kvm-host: install kvm-tools package instead of copying add-vm.sh 2018-07-27 11:27:50 +02:00
Jérémy Lecour c57b069bf5 Reorder lines in CHANGELOG 2018-07-10 16:28:56 +02:00
Jérémy Lecour d387ed660a munin: properly rename Munin cache directory 2018-07-10 16:27:10 +02:00
Jérémy Lecour 1439fdab8f metricbeat: add a role (copied from filebeat) 2018-07-10 16:27:10 +02:00
Victor LABORIE f3ab0b361b tomcat: better nrpe check output 2018-07-03 12:24:11 +02:00
Victor LABORIE b18b3d3404 roundcube: add missing slash to https redirection 2018-06-25 16:58:03 +02:00
Victor LABORIE f56f8f7615 evolinux-base: add mail related aliases 2018-06-25 11:20:37 +02:00
Victor LABORIE f32eee4b68 Update CHANGELOG 2018-06-25 11:12:33 +02:00
Jérémy Lecour 77b5f84567 evoacme: disable old certbot cron also in cron.daily 2018-06-21 17:22:40 +02:00
Victor LABORIE 9f34db8f9a evoacme: fix module detection in apache config 2018-06-20 11:07:23 +02:00
Jérémy Lecour 045492be85 Update changelog 2018-06-19 16:51:27 +02:00
Jérémy Lecour fb4a254b9c mysql-oracle: fix configuration directory variable 2018-06-15 14:41:24 +02:00
Victor LABORIE 6d9fbe8689 nagios-nrpe: add check_postgrey 2018-06-14 13:50:06 +02:00
Jérémy Lecour 17d0c9c6bf php: clarify configuration
* Variables for config file names are normalized* With Sury, Evolix configs are linked to regular 7.0 paths
2018-06-11 17:35:20 +02:00
Victor LABORIE fbd97a5f08 java: support for Oracle JRE 2018-06-11 10:39:52 +02:00
Jérémy Lecour 03431fc116 mysql: add an option to install the dev client libraries 2018-06-09 13:15:08 +02:00
Jérémy Lecour d917d867bb changelog: minor rewording 2018-06-07 10:39:29 +02:00
Jérémy Lecour d67abef13d minifirewall: the tail file can be overwritten, or not 2018-06-04 16:31:36 +02:00
Victor LABORIE 17c8093711 nagios-nrpe: use bkctld check subcommand for NRPE check 2018-05-30 17:13:39 +02:00
Bruno TATU 108cd0f597 squid: whiteliste some news sites 2018-05-29 10:56:24 +02:00
Jérémy Lecour 7738de6f41 rbenv: switch from copy to lineinfile for default gems 2018-05-23 16:20:46 +02:00
Jérémy Lecour 3e5ea015c4 rbenv: install Ruby 2.5.1 by default 2018-05-23 16:18:23 +02:00
Jérémy Lecour b4122be2b3 kibana: log messages go to /var/log/kibana/kibana.log 2018-05-22 15:17:16 +02:00
Jérémy Lecour 0054e4fdea elasticsearch: add http.publish_host variable 2018-05-22 15:16:27 +02:00
Jérémy Lecour f8babfd532 elasticsearch: tmpdir configuration compatible with 5.x also 2018-05-16 12:15:04 +02:00
Jérémy Lecour 4f4b7cd8dc Release 9.2.0 2018-05-16 11:10:31 +02:00
Jérémy Lecour 4d148579c4 Changelog for elasticsearch changes 2018-05-16 11:08:18 +02:00
Jérémy Lecour 3dd1df8236 Changelog for varnish changes 2018-05-16 11:07:12 +02:00
Jérémy Lecour 2451e4d3fa Changelog for NTP changes 2018-05-16 11:06:06 +02:00
Bruno TATU a47a787a81 squid: add some domains and fix broken restrictions 2018-05-11 15:37:05 +02:00
Jérémy Lecour 93642b4afa filebeat: cleanup unused code 2018-05-09 20:57:32 +02:00
Jérémy Lecour 10af35bf41 filebeat: install version 6.x by default 2018-05-09 20:56:48 +02:00
Jérémy Lecour 08d5ca5696 evolinux-users: fix secondary groups
With ANsible 2.2 the list of groups must be comma-separated
2018-05-02 17:16:36 +02:00
Jérémy Lecour 170bd6c2c1 Release 9.1.9 2018-04-24 16:45:05 +02:00
Jérémy Lecour 5c5361dbb5 apache: customize logrotate (52 weeks) 2018-04-22 18:10:47 +02:00
Jérémy Lecour 15ebb84bb6 mysql/mysql-oracle: mysqltuner cron scripts is 0755 2018-04-22 17:32:23 +02:00
Jérémy Lecour 8384e8ba43 evolinux: groups for SSH configuration are used with Debian 10 and later 2018-04-20 14:38:55 +02:00
Ludovic Poujol e37b3f569a generate-ldif: add a minifirewall service when /etc/default/minifirewall exists 2018-04-19 16:04:21 +02:00
Jérémy Lecour 2f631f1ae7 update Changelog 2018-04-18 12:16:57 +02:00
Jérémy Lecour b01d9178d0 evolinux-users: split AllowGroups/AllowUsers modes
If an AllowGroups directive is found or when using Debian 9+,
we use the AllowGroups directive and comment AllowUsers that may be
already present.
When adding a user, we make sure that the allowed group exists
and the use is in that group, to be sure that at least this user
is allowed to connect.

In other situations, we use the AllowUsers directive.
2018-04-18 12:16:04 +02:00
Jérémy Lecour b866b6fa0a evolinux-base: fail2ban is not enabled by default 2018-04-18 12:15:43 +02:00
Jérémy Lecour 423acc79fd mysql-oracle: copy evolinux config files in mysql.cond.d 2018-04-18 12:06:15 +02:00
Jérémy Lecour 4749667f58 Release 9.1.8 2018-04-16 00:00:13 +02:00
Jérémy Lecour ae6e376048 mysql: properly reload systemd 2018-04-15 23:58:31 +02:00
Victor LABORIE 4612c5ec89 packweb-apache: use check_mode for apg command
* Fix usage of packweb-apache role with --check
2018-04-13 12:13:43 +02:00
Victor LABORIE 81861bad80 mysql: use check_mode for apg command
* Fix usage of mysql role with --check
2018-04-13 12:08:58 +02:00
Victor LABORIE f5a914bf63 Fix CHANGELOG 2018-04-13 12:05:48 +02:00
Victor LABORIE ef127d89dc packweb-apache: use dependencies instead of include_role for apache and php roles 2018-04-13 11:54:42 +02:00
Jérémy Lecour 619a0a8c72 Release 9.1.7 2018-04-06 10:49:23 +02:00
Jérémy Lecour 2e375b9506 update CHANGELOG 2018-04-06 10:43:38 +02:00
Jérémy Lecour 654c0a261f update CHANGELOG 2018-04-06 09:53:37 +02:00
Jérémy Lecour c2ed10e2e4 CHANGELOG cleanup 2018-04-06 09:26:51 +02:00
Jérémy Lecour 8b9c8288c9 Merge branch 'lpoujol-node-yarn' into unstable 2018-04-06 09:23:42 +02:00
Jérémy Lecour b68d0765ed update CHANGELOG 2018-04-06 09:22:05 +02:00
Jérémy Lecour beeb7de0af mongodb: rename logrotate script 2018-04-05 18:43:29 +02:00
Jérémy Lecour 3b8c57faee mongodb: allow unauthenticated packages for Jessie 2018-04-05 15:23:12 +02:00
Jérémy Lecour 786f25731e Update CHANGELOG 2018-04-04 23:46:50 +02:00
Jérémy Lecour ad3383a510 Install ncurses-term for additional terminal types
When connecting to a server from urxvt, the session behaves like one
with xterm.
2018-03-29 16:42:33 +02:00
Jérémy Lecour f5339568ed nginx: don't debug variables in verbosity 0 2018-03-28 21:12:24 +02:00
Jérémy Lecour d9bf95e7b3 Merge branch 'improve-php' into unstable 2018-03-26 21:53:51 +02:00
Jérémy Lecour 690318e435 Update CHANGELOG for php changes 2018-03-26 21:53:32 +02:00
Ludovic Poujol 24aeff2e72 rbenv: fix become user issue with copy tasks 2018-03-26 09:53:54 +02:00
Ludovic Poujol 4c36fd075c webapps/evoadmin-web: Fail if variable evoadmin_contact_email isn't defined 2018-03-19 16:48:12 +01:00
Jérémy Lecour 98486fd771 etc-git: add tags for Ansible 2018-03-16 14:21:01 +01:00
Ludovic Poujol 3c2443181b evolinux-base: Exec the firewall tasks sooner to avoid dependency issues 2018-03-15 12:04:35 +01:00
Jérémy Lecour a12dca0b70 mysql/mysql-oracle: mysqltuner cron task is executable 2018-03-14 09:35:26 +01:00
Jérémy Lecour b81ef36f92 mysql: remount /usr (if needed) before creating scripts directory 2018-03-14 09:33:14 +01:00
Victor LABORIE 61ee8052e5 dovecot: update CHANGELOG 2018-03-13 10:25:45 +01:00
Victor LABORIE 5e3c33eb7a proftpd: update README and CHANGELOG 2018-03-13 10:25:26 +01:00
Jérémy Lecour ad4714856b mongodb: don't overwrite config by default 2018-03-13 09:40:37 +01:00
Jérémy Lecour 23ae74d422 update changelog 2018-02-28 17:42:02 +01:00
Jérémy Lecour ace68db4b4 packweb-apache can use MySQL from Oracle. 2018-02-28 17:25:47 +01:00
Jérémy Lecour 738d56db68 Add mysql-oracle role
Install and configure MySQL 5.7 with packages from Oracle
2018-02-28 17:12:25 +01:00
Jérémy Lecour 54159f8e87 mongodb: configuration is forced by default but it's configurable 2018-02-23 18:44:26 +01:00
Jérémy Lecour 1ac3300ade nginx: package name can be specified (default: nginx-full) 2018-02-22 00:10:14 +01:00
Jérémy Lecour 41f7b029b2 Update changelog for commits on nagios-nrpe 2018-02-20 15:08:40 +01:00
Jérémy Lecour 62a85ef72a elasticsearch: RESTART_ON_UPGRADE is configurable 2018-02-20 15:06:07 +01:00
Jérémy Lecour c6d3b804d9 nginx: fix basic auth for default vhost 2018-02-08 11:11:47 +01:00
Jérémy Lecour 23062e7b18 elasticsearch: ES_TMPDIR variable for custom tmpdir 2018-02-07 17:36:04 +01:00
Jérémy Lecour 8a498bb3a3 postfix: add lines in /etc/.gitignore 2018-02-04 11:49:14 +01:00
Jérémy Lecour afe2446d54 Release 9.1.6 2018-02-02 20:10:20 +01:00
Jérémy Lecour 24a5f0df7e nginx: fix servers status dirname 2018-02-01 12:27:18 +01:00
Jérémy Lecour 8bd94a7c44 fail2ban: fix horrible typo, Python is not Ruby 2018-01-23 18:31:31 +01:00
Jérémy Lecour 6ed1f04c85 nagios-nrpe: allowed_hosts can be updated 2018-01-23 17:41:58 +01:00
Jérémy Lecour 19b2da5b92 evoacme: exclude typical certbot directories 2018-01-22 18:27:37 +01:00
Jérémy Lecour 88bdf270d7 Added emphasis on version number significance 2018-01-22 18:27:37 +01:00
Jérémy Lecour 1f007c1ff0 update changelog 2018-01-20 19:57:58 +01:00
Jérémy Lecour b4ffe48282 Changelog: backfill of a few releases 2018-01-20 19:55:41 +01:00
Jérémy Lecour 141da62b9f Changelog: backfill previous release notes (9.1.4 and 9.1.3) 2018-01-18 23:37:56 +01:00
Jérémy Lecour cf8b110abb Add a changelog 2018-01-18 18:41:15 +01:00