Jérémy Lecour
5582d6e724
redis: socket/pid directories have the correct permissions
2021-03-18 15:15:39 +01:00
Ludovic Poujol
c7c75d3206
Nodejs : Update yarn gpg repo key
continuous-integration/drone/push Build is passing
2021-03-11 10:07:05 +01:00
Patrick Marchand
e5511eafc6
Revert changes to bind log path from apparmor fix
...
continuous-integration/drone/push Build is passing
I realised it wasnt the best idea to change the path we are used to using just for this, so I overwrite the apparmor configuration instead.
2021-03-09 16:58:14 -05:00
Patrick Marchand
ffd3ff97f1
Fix conflict in changelog
continuous-integration/drone/push Build is passing
2021-03-09 12:28:01 -05:00
Patrick Marchand
7da22e243e
Changed log directory for bind9
...
It is now /var/log/named, this is what debian 10 and apparmor expect by default. This fixes the bind9 service crashing at start.
2021-03-09 12:25:15 -05:00
Jérémy Lecour
3103af67a7
redis: escape password in Munin configuration
continuous-integration/drone/push Build is passing
2021-03-09 18:24:15 +01:00
Ludovic Poujol
3cb18faf28
evolinux-users: Add sudo rights for nagios for multi-php lxc
continuous-integration/drone/push Build is passing
2021-03-04 16:48:55 +01:00
Jérémy Lecour
1f4079b1b3
haproxy: possible admin access with login/pass
continuous-integration/drone/push Build is passing
2021-02-27 18:43:59 +01:00
Jérémy Lecour
92b7ce0acd
postfix: always enable sasl authentified for relay
continuous-integration/drone/push Build is passing
2021-02-23 10:05:08 +01:00
Ludovic Poujol
df9db31725
deny requests to ^/evolinux_fpm_status-.*
continuous-integration/drone/push Build is passing
2021-02-22 16:06:57 +01:00
Jérémy Lecour
3709808fdc
redis: use /run instead or /var/run
continuous-integration/drone/push Build is passing
2021-02-18 16:42:54 +01:00
Ludovic Poujol
ddd3e1aa06
nagios-nrpe: new script check_phpfpm_multi
continuous-integration/drone/push Build is passing
2021-02-17 17:23:11 +01:00
Jérémy Lecour
f862ffc42e
beats packages can be upgraded to latest (default: False)
continuous-integration/drone/push Build is passing
2021-02-16 16:35:25 +01:00
Tristan PILAT
22a19519b3
Add NRPE related configuration tasks
continuous-integration/drone/push Build is passing
2021-02-16 11:41:05 +01:00
Tristan PILAT
41e3fb0982
Add check_keepalived NRPE script
2021-02-16 11:40:20 +01:00
Tristan PILAT
3e11b1d31f
Add notify parameter for NRPE check
2021-02-16 11:39:52 +01:00
Tristan PILAT
2889720902
Add restart nagios-nrpe-server handler
2021-02-16 11:37:33 +01:00
Jérémy Lecour
0e3ecccb7f
postfix: restore permit_sasl_authenticated on packmail
continuous-integration/drone/push Build is passing
2021-02-12 18:29:22 +01:00
Jérémy Lecour
622bbca4c2
apache: rotate logs daily instead of weekly
continuous-integration/drone/push Build is passing
2021-02-12 18:05:47 +01:00
Ludovic Poujol
b0cb14eb5b
* nagios-nrpe: update check_phpfpm_status.pl & install perl dependencies
continuous-integration/drone/push Build is passing
2021-02-12 15:22:57 +01:00
Jérémy Lecour
2b328dc764
postfix: add smtpd_relay_restrictions in configuration
continuous-integration/drone/push Build is passing
2021-02-12 14:10:04 +01:00
Tristan PILAT
58f82046cc
Add first version of Keepalived role
continuous-integration/drone/push Build is passing
2021-02-11 17:32:23 +01:00
Jérémy Lecour
17f1a1a55e
update changelog
continuous-integration/drone/push Build is passing
2021-02-11 12:09:32 +01:00
Jérémy Lecour
f940bc3866
cerbot: use the legacy script on Debian 8 and 9
continuous-integration/drone/push Build is passing
2021-02-04 16:34:24 +01:00
Jérémy Lecour
dde2672715
nginx: no more "minimal" mode, but the package remains customizable.
continuous-integration/drone/push Build is passing
2021-02-04 11:31:36 +01:00
Jérémy Lecour
cff309ff41
nginx: add access to server status on default VHost
2021-02-04 11:30:32 +01:00
Jérémy Lecour
e1458e6a35
Mention the CHANGELOG in the README
continuous-integration/drone/push Build is passing
2021-02-04 11:13:05 +01:00
Jérémy Lecour
5588ed6009
minifirewall: change some defaults
...
Only SSH (22) is open on privilegied IPs
Remove volatile.debian.org domain
2021-02-04 10:55:31 +01:00
Jérémy Lecour
6c84ada361
redis: s/content/block/ to workaround the blockinfile bug
2021-02-04 10:55:31 +01:00
Brice Waegeneire
1785e6a500
nginx: fix server-status
continuous-integration/drone/push Build is passing
2021-02-03 16:25:08 +01:00
Jérémy Dubois
02ba81884d
MàJ IPs Evolix minifirewall + spamassassin
continuous-integration/drone/push Build is passing
2021-01-20 15:45:04 +01:00
Mathieu Trossevin
633d5644cb
Merge pull request 'lxc-php: Do not bind the mysql socket by default' ( #122 ) from mtrossevin/ansible-roles:packweb-multi-php2_patch into unstable
...
continuous-integration/drone/push Build is passing
Reviewed-on: #122
2021-01-11 15:27:33 +01:00
Mathieu Trossevin
2e29dc2440
lxc-php: Do not bind the mysql socket by default
...
continuous-integration/drone/pr Build is failing
The lxc-php role can be run on a server without mysql. Attempting to
bindmount the mysql socket in such a case cause the lxc container to
fail to start.
This commit add a variable, lxc_php_create_mysql_link defaulting to
false telling ansible if it should bindmount the MySQL socket to the
container.
2021-01-11 15:20:25 +01:00
Brice Waegeneire
1576375417
postgresql: Fix postgresql@.service customization
continuous-integration/drone/push Build is passing
2021-01-08 14:46:38 +01:00
Jérémy Lecour
024d30ea43
evoacme: upstream release 21.01
continuous-integration/drone/push Build is passing
2021-01-07 19:16:06 +01:00
Jérémy Lecour
0e32e0d2aa
certbot: use a fixed 1.9.0 version of the certbot-auto script (renamed "letsencrypt-auto")
continuous-integration/drone/push Build is passing
2021-01-07 18:55:44 +01:00
Jérémy Lecour
8c54fd8c16
apache: new variables for logrotate + server-status
continuous-integration/drone/push Build is passing
2021-01-05 17:47:56 +01:00
Jérémy Lecour
6e7acd1abd
Merge pull request 'Release 10.4.0' ( #121 ) from unstable into stable
...
continuous-integration/drone/tag Build is passing
continuous-integration/drone/push Build is passing
Reviewed-on: #121
2020-12-24 14:02:32 +01:00
Jérémy Lecour
19da5ea1f7
Release 10.4.0
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2020-12-24 14:00:37 +01:00
Jérémy Lecour
7ec0748383
certbot: detect domains if missing
continuous-integration/drone/push Build is passing
2020-12-24 13:56:43 +01:00
Jérémy Lecour
442e9bcda8
cerbot: hook to sync certificates to remote servers
2020-12-24 13:56:43 +01:00
Jérémy Lecour
4dbd1b0bee
certbot: disable auth for Let's Encrypt challenge
2020-12-24 10:33:48 +01:00
Eric Morino
feda9a63d8
Add directive auth_basic off for nginx configuration
continuous-integration/drone/push Build is passing
2020-12-24 10:03:43 +01:00
Eric Morino
dd8b989bbe
Add directive auth_basic off for nginx configuration
continuous-integration/drone/push Build is passing
2020-12-24 10:02:27 +01:00
Jérémy Lecour
1d56e002b4
nginx: change from "nginx_status-XXX" to "server-status-XXX"
continuous-integration/drone/push Build is passing
2020-12-23 15:53:36 +01:00
Jérémy Lecour
51cec4bce1
whitespaces
2020-12-23 15:51:59 +01:00
Jérémy Lecour
6ee66d0a74
varnish: add tags
2020-12-23 15:43:05 +01:00
Jérémy Lecour
74ac4c7570
haproxy: add tags
2020-12-23 15:42:57 +01:00
Jérémy Lecour
66a6e67de2
varnish: variable for jail configuration
continuous-integration/drone/push Build is passing
2020-12-21 23:33:14 +01:00
Jérémy Lecour
03b91177b1
Merge pull request 'Release 10.3.0' ( #120 ) from unstable into stable
...
continuous-integration/drone/tag Build is passing
continuous-integration/drone/push Build is passing
Reviewed-on: #120
2020-12-21 16:12:22 +01:00