Jérémy Lecour
1728eaee68
Revert "Add “when: not ansible_check_mode” to allow more --check"
...
gitea/ansible-roles/pipeline/head This commit looks good
This reverts commit fafff25c20
.
This reverts commit e64471c5a8084f95a8e6f955d3fa918c55b8e846.
2022-12-14 07:41:18 +01:00
David Prevot
ce5e4b12c6
Apache: Drop duplicate when keys
gitea/ansible-roles/pipeline/head This commit looks good
2022-12-12 11:54:00 +01:00
David Prevot
fafff25c20
Add “when: not ansible_check_mode” to allow more --check
gitea/ansible-roles/pipeline/head This commit looks good
2022-12-02 17:40:43 +01:00
Brice Waegeneire
4c6d30a52c
apache: block access to .git* and .env* files
continuous-integration/drone/push Build was killed
2021-12-28 16:27:05 +01:00
Eric Morino
7bb7b22d1f
Add redirectMath 404 on http request /.git by default
continuous-integration/drone/push Build encountered an error
2021-12-20 09:59:25 +01:00
Jérémy Lecour
4a158ac819
Reduce verbosity
2021-07-02 21:08:07 +02:00
Jérémy Lecour
0fe0244116
Update Galaxy metadata (company, platforms and galaxy_tags)
2021-06-28 15:26:28 +02:00
Jérémy Lecour
7dc6f0b849
remove trailing whitespaces
2021-05-13 15:23:39 +02:00
Jérémy Lecour
3c9be8d913
fix more Ansible syntax
2021-05-09 23:20:15 +02:00
Jérémy Lecour
2ed77c60f0
Improve Ansible syntax
...
replace « x | changed » by « x is changed »
add explicit « bool » filter
use « length » filter instead of string comparison
2021-05-09 23:06:42 +02:00
Jérémy Lecour
5138065059
Use 'loop' syntax instead of 'with_items'
2021-05-04 14:19:18 +02:00
Jérémy Lecour
2386733231
bash syntax : `` → $()
continuous-integration/drone/push Build is passing
2021-04-29 10:22:21 +02:00
Gregory Colpart
75675a96b1
add info for NFS and Apache-ITK
continuous-integration/drone/push Build is passing
2021-04-23 16:24:52 +02:00
Ludovic Poujol
d56c545183
apache: new variable for mpm mode (+ updated default config accordingly)
...
continuous-integration/drone/push Build is passing
Also, itk package will only be installed if required
2021-04-19 17:35:49 +02:00
Ludovic Poujol
df9db31725
deny requests to ^/evolinux_fpm_status-.*
continuous-integration/drone/push Build is passing
2021-02-22 16:06:57 +01:00
Jérémy Lecour
622bbca4c2
apache: rotate logs daily instead of weekly
continuous-integration/drone/push Build is passing
2021-02-12 18:05:47 +01:00
Jérémy Lecour
8c54fd8c16
apache: new variables for logrotate + server-status
continuous-integration/drone/push Build is passing
2021-01-05 17:47:56 +01:00
Jérémy Lecour
7283e34077
Replace version_compare() with version()
2020-02-25 10:45:35 +01:00
Jérémy Lecour
71a2a19847
apache: the default VHost doesn't redirect to https for ".well-known" paths
2020-01-23 14:34:03 +01:00
Jérémy Lecour
e04d881988
replace "with_items" in apt modules
2019-12-31 16:18:56 +01:00
Jérémy Lecour
79bb6103b8
Change "|version_compare" with "is version_compare"
2019-12-31 10:18:19 +01:00
Jérémy Lecour
e557a3eaae
apache: improve permissions in save_apache_status script
2019-12-13 10:44:44 +01:00
Victor LABORIE
6f5e13f8b8
Add evolix prefix to include_role
2019-11-29 14:00:25 +01:00
Benoît S.
62cd28c1f5
apache: Add missing part for munin cgi
...
continuous-integration/drone/push Build encountered an error
continuous-integration/drone/pr Build is failing
ScriptAlias /munin-cgi/munin-cgi-graph were missing.
2019-07-03 11:56:51 +02:00
Jérémy Lecour
49d90fff09
apache: add a variable to customize the server-status host
continuous-integration/drone/push Build is passing
2019-06-20 17:29:48 +02:00
Jérémy Lecour
9a489ccf29
apache/nginx: fix server-status replacement
2019-05-02 12:16:47 +02:00
Jérémy Lecour
b6499671fa
apache/nginx: add server status suffix in default site if missing
2019-04-26 11:02:02 +02:00
Jérémy Lecour
8e618ce70a
apache/nginx: add server status suffix in VHost if missing
2019-04-25 17:12:19 +02:00
Jérémy Lecour
aa28e9c1b8
change repositories URL
2019-03-21 15:31:58 +01:00
Jérémy Lecour
41c1ed5a70
apache: add Munin configuration for Apache server-status URL
2019-01-01 21:08:51 +01:00
Jérémy Lecour
06a0f0d9b7
apache/nginx/fail2ban: mention ip_whitelist.yml in README.md
2018-11-02 18:18:22 +01:00
Jérémy Lecour
24ddc78a23
apache/nginx: IP adresses can also be removed
2018-11-02 18:15:17 +01:00
Patrick Marchand
b776fc3da2
Make ip whitelist tasks more flexible
...
Now the list of whitelisted ip addresses can be updated simply by
including the specific tasks in an external playbook without polluting
our role list.
This change takes effect for nginx, apache and fail2ban.
2018-11-02 18:08:23 +01:00
Jérémy Lecour
bfb591dc74
apache: cleaner way to overwrite the server status suffix
2018-09-09 23:01:43 +02:00
Jérémy Lecour
bb956fb5e7
apache: logrotate replacement is more subtle/precise
...
It replaces only the proper directive and not every occurence of the
word.
2018-08-23 13:02:25 +02:00
Jérémy Lecour
ec535b036c
apt module: Use "state: present" instead of "state: installed"
...
"state: installed" is deprecated in Ansible 2.5
2018-05-18 09:33:25 +02:00
Jérémy Lecour
5c5361dbb5
apache: customize logrotate (52 weeks)
2018-04-22 18:10:47 +02:00
Ludovic Poujol
94118b2536
Apache: Don't turn on modsec if it's available on default vhost
2018-03-12 11:00:57 +01:00
Jérémy Lecour
25a47173b8
create server status parent directory if missing
2018-01-18 17:17:34 +01:00
Jérémy Lecour
86c2bcb398
apache: /usr/share/scripts exists
2018-01-18 17:08:29 +01:00
Jérémy Lecour
b634840b42
apache/nginx: server status suffix
2018-01-03 10:05:20 +01:00
Jérémy Lecour
28954e634c
whitespaces
2018-01-03 10:05:20 +01:00
Jérémy Lecour
aeba94bcba
default/additional variables
...
List of hosts/ip are a combination of 2 lists allowing overrides
2017-12-20 18:04:54 +01:00
Jérémy Lecour
8ef9554746
Combine evolix and additional trusted IP addresses
2017-11-15 23:57:58 +01:00
Victor LABORIE
1c48df025c
Move /usr rw remount into remount-usr role
2017-11-07 13:34:05 +01:00
Victor LABORIE
ce89d5c5a5
apache: fix usr rw remount
2017-10-31 15:28:42 +01:00
Victor LABORIE
2d1504ddf6
apache: add somes modules by defaults
2017-10-27 15:01:06 +02:00
Jérémy Lecour
9527aff68a
apache/nginx: remove compatibility mode
2017-10-11 18:13:15 +02:00
Ludovic Poujol
745c45f88d
Fix remount_usr_rw/yml
2017-10-11 17:58:18 +02:00
Jérémy Lecour
e7e9f9e125
Apache/Nginx: use ipaddr_whitelist
2017-10-07 13:48:04 +02:00