Commit graph

792 commits

Author SHA1 Message Date
Jérémy Lecour 2179be09d1 admin-users: passwordless sudo for come commands 2017-07-27 22:26:07 -04:00
Jérémy Lecour 5e949d74fd evomaintenance: check if minifirewall is installed 2017-07-27 21:34:06 -04:00
Jérémy Lecour 66eee11cf7 etc-git: show OS in task name 2017-07-27 21:33:34 -04:00
Jérémy Lecour 2dfd384fb8 admin-users: users are in sudo group for Stretch 2017-07-27 18:58:16 -04:00
Jérémy Lecour 2fc65d1b8b docker-host: use apt preferences and apt role
* the "apt" role can deal with backports lists install
* we'd rather use a preferences file for specific packages
  than simply installing jessie-backports
2017-07-27 18:15:18 -04:00
Jérémy Lecour b6e8c1760e nginx: fix typo for tags 2017-07-27 18:14:56 -04:00
Jérémy Lecour 6871de457a etc_git: fix README to use tasks_from instead of task_from 2017-07-27 16:51:35 -04:00
Jérémy Lecour f20b95f075 etc-git: use the git_config module instead of ini 2017-07-27 16:50:23 -04:00
Jérémy Lecour d033d9773a etc-git: if sudo is used, the real user is the author 2017-07-27 16:49:14 -04:00
Gabriel Périard-Tremblay 2118bfae8c Update docker-host role 2017-07-24 16:38:08 -04:00
Gregory Colpart e212f3043f Set right URL for our custom role 2017-07-23 00:55:23 +02:00
Gregory Colpart f49e720efd Add log2mail stuff for Apache 2017-07-23 00:54:52 +02:00
Gregory Colpart 5c4125263e Quick review of pack-web-apache role 2017-07-23 00:44:06 +02:00
Gregory Colpart a0ccc2e9d5 Review of role Apache, sync with https://wiki.evolix.org/HowtoApache 2017-07-22 22:40:31 +02:00
Gregory Colpart 3b78613b2e Big review of role Bind, sync with https://wiki.evolix.org/HowtoBind 2017-07-22 18:40:00 +02:00
Gregory Colpart bbb0e579a6 Fix #2154 : we don't need lsb-invalid-mta and package is not anymore in stretch 2017-07-22 08:19:14 +02:00
Gregory Colpart b4bfccd7eb no fail when admin_users is empty because we want keep easy the usability 2017-07-22 07:57:46 +02:00
Jérémy Lecour 6e38890808 java8: fix install on stretch 2017-07-20 18:21:46 +02:00
Jérémy Lecour 9269f1e50d Merge branch 'mariadb-fix-munin-plugin' into unstable 2017-07-20 11:00:24 +02:00
Benoît S. 499b2c7def Added a perl mandatory package
If not installed: install_driver(mysql) failed: Can't locate DBD/mysql.pm in
@INC (you may need to install the DBD::mysql module)
2017-07-20 10:43:13 +02:00
Victor LABORIE af1045d788 nagios-nrpe: add check_clamav_db to defaults check 2017-07-19 17:20:44 +02:00
Victor LABORIE 64a134355b evolinux-base: override logmail service 2017-07-19 16:03:36 +02:00
Jérémy Lecour 1a0ba00679 Merge branch 'evocheck-force-install' into unstable 2017-07-19 14:37:10 +02:00
Jérémy Lecour 6f566533a3 evocheck: don't install by default (but possible) 2017-07-19 14:36:30 +02:00
Jérémy Lecour 360dacf9d8 evocheck: don't fail, just print stdout 2017-07-19 14:17:10 +02:00
Jérémy Lecour 383d432bb8 Merge branch '1092-page-for-error-403' into unstable 2017-07-19 14:04:53 +02:00
Jérémy Lecour 515460ee0a Merge branch 'apache-fix-default-vhost' into unstable 2017-07-19 14:02:52 +02:00
Jérémy Lecour f390638263 Merge branch 'kvm-images-path' into unstable 2017-07-19 14:00:49 +02:00
Jérémy Lecour dac4276cad Move ansible-managed to a feature branch 2017-07-19 13:57:23 +02:00
Jérémy Lecour 6106a0a8f5 admin-users: fix AllowUsers
* the command module was doing weird escaping, let's use the shell
module
* insert after a more appropriate position
2017-07-19 13:54:18 +02:00
Jérémy Lecour adc3bd7a93 Fix ssh LogLevel
* the directive can be present but commented
* the version comparison was wrong
2017-07-19 13:49:08 +02:00
Jérémy Lecour 43e9f69314 admin-users: double-escape, dream hands !! 2017-07-19 12:33:35 +02:00
Jérémy Lecour 987e35f104 admin-users: better grep for AllowUsers detection
Now it behaves correctly if the directive exists, but commented
2017-07-19 12:08:06 +02:00
Jérémy Lecour 030425d9f8 fail2ban: unindent notify attribute 2017-07-19 12:06:19 +02:00
Jérémy Lecour da4b7ca41a apache: disable GoAway criteria 2017-07-19 11:55:58 +02:00
Jérémy Lecour 4099d2a3a4 fail2ban: the local jail should not be overwritten 2017-07-19 11:55:04 +02:00
Jérémy Lecour 44c679eb64 admin_users: fix logic error 2017-07-19 11:54:01 +02:00
Jérémy Lecour 3b93ba0768 fail2ban: install local jail before starting 2017-07-19 11:39:38 +02:00
Jérémy Lecour 2077af2992 fail2ban: change ips variables 2017-07-19 11:39:09 +02:00
Jérémy Lecour 7c92645c5c admin users: fix uidisbusy for proper rc check
because of "failed_when: False", the register would never fail
so we check the return code of "getent passwd"
2017-07-19 11:31:21 +02:00
Jérémy Lecour 0115a16675 whitespaces 2017-07-19 11:31:21 +02:00
Jérémy Lecour cb128a897b Apache: new syntax for auth 2017-07-19 11:31:21 +02:00
Gregory Colpart 86e1e057a8 We don't want anymore a 301 redirect for 403 errors, it's too confusing 2017-07-19 10:21:37 +02:00
Gregory Colpart 6e329d2820 Deny by default (default conf allow from all) 2017-07-19 10:20:54 +02:00
Jérémy Lecour 62fbbd2016 Rename role "apt-repositories" to "apt" 2017-07-19 08:56:46 +02:00
Jérémy Lecour 9c797ea273 kvm-host: images path is customizable 2017-07-19 01:34:13 +02:00
Jérémy Lecour 3a8093fb12 Apache: use "Require"
http://httpd.apache.org/docs/2.4/howto/auth.html
2017-07-18 20:13:58 +02:00
Jérémy Lecour 3e3e1c368e Lighter /root/.vimrc 2017-07-18 20:03:57 +02:00
Jérémy Lecour 388a2c058e Over-simplified /root/.gitconfig 2017-07-18 20:00:20 +02:00
Jérémy Lecour 8505bb9d3c … so the backup is not needed anymore 2017-07-18 19:43:28 +02:00