Commit graph

128 commits

Author SHA1 Message Date
Eric Morino 8ec159c444 Add task in postfix for packmail and index.hml + vhost directive for mailgraph
All checks were successful
gitea/ansible-roles/pipeline/head This commit looks good
2023-02-24 15:41:39 +01:00
Jérémy Lecour 21ab9b1e68 Revert ce5e4b12c6
All checks were successful
gitea/ansible-roles/pipeline/head This commit looks good
2022-12-14 11:30:35 +01:00
Jérémy Lecour 1728eaee68 Revert "Add “when: not ansible_check_mode” to allow more --check"
All checks were successful
gitea/ansible-roles/pipeline/head This commit looks good
This reverts commit fafff25c20.
This reverts commit e64471c5a8084f95a8e6f955d3fa918c55b8e846.
2022-12-14 07:41:18 +01:00
David Prevot ce5e4b12c6 Apache: Drop duplicate when keys
All checks were successful
gitea/ansible-roles/pipeline/head This commit looks good
2022-12-12 11:54:00 +01:00
David Prevot fafff25c20 Add “when: not ansible_check_mode” to allow more --check
All checks were successful
gitea/ansible-roles/pipeline/head This commit looks good
2022-12-02 17:40:43 +01:00
Brice Waegeneire 4c6d30a52c apache: block access to .git* and .env* files
Some checks reported errors
continuous-integration/drone/push Build was killed
2021-12-28 16:27:05 +01:00
Eric Morino 7bb7b22d1f Add redirectMath 404 on http request /.git by default
Some checks reported errors
continuous-integration/drone/push Build encountered an error
2021-12-20 09:59:25 +01:00
Jérémy Lecour 4a158ac819 Reduce verbosity 2021-07-02 21:08:07 +02:00
Jérémy Lecour 0fe0244116 Update Galaxy metadata (company, platforms and galaxy_tags) 2021-06-28 15:26:28 +02:00
Jérémy Lecour 7dc6f0b849 remove trailing whitespaces 2021-05-13 15:23:39 +02:00
Jérémy Lecour 3c9be8d913 fix more Ansible syntax 2021-05-09 23:20:15 +02:00
Jérémy Lecour 2ed77c60f0 Improve Ansible syntax
replace « x | changed » by « x is changed »
add explicit « bool » filter
use « length » filter instead of string comparison
2021-05-09 23:06:42 +02:00
Jérémy Lecour 5138065059 Use 'loop' syntax instead of 'with_items' 2021-05-04 14:19:18 +02:00
Jérémy Lecour 2386733231 bash syntax : `` → $()
All checks were successful
continuous-integration/drone/push Build is passing
2021-04-29 10:22:21 +02:00
Gregory Colpart 75675a96b1 add info for NFS and Apache-ITK
All checks were successful
continuous-integration/drone/push Build is passing
2021-04-23 16:24:52 +02:00
Ludovic Poujol d56c545183 apache: new variable for mpm mode (+ updated default config accordingly)
All checks were successful
continuous-integration/drone/push Build is passing
Also, itk package will only be installed if required
2021-04-19 17:35:49 +02:00
Ludovic Poujol df9db31725 deny requests to ^/evolinux_fpm_status-.*
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-22 16:06:57 +01:00
Jérémy Lecour 622bbca4c2 apache: rotate logs daily instead of weekly
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-12 18:05:47 +01:00
Jérémy Lecour 8c54fd8c16 apache: new variables for logrotate + server-status
All checks were successful
continuous-integration/drone/push Build is passing
2021-01-05 17:47:56 +01:00
Jérémy Lecour 7283e34077 Replace version_compare() with version() 2020-02-25 10:45:35 +01:00
Jérémy Lecour 71a2a19847 apache: the default VHost doesn't redirect to https for ".well-known" paths 2020-01-23 14:34:03 +01:00
Jérémy Lecour e04d881988 replace "with_items" in apt modules 2019-12-31 16:18:56 +01:00
Jérémy Lecour 79bb6103b8 Change "|version_compare" with "is version_compare" 2019-12-31 10:18:19 +01:00
Jérémy Lecour e557a3eaae apache: improve permissions in save_apache_status script 2019-12-13 10:44:44 +01:00
Victor LABORIE 6f5e13f8b8 Add evolix prefix to include_role 2019-11-29 14:00:25 +01:00
Benoît S. 62cd28c1f5 apache: Add missing part for munin cgi
Some checks reported errors
continuous-integration/drone/push Build encountered an error
continuous-integration/drone/pr Build is failing
ScriptAlias /munin-cgi/munin-cgi-graph were missing.
2019-07-03 11:56:51 +02:00
Jérémy Lecour 49d90fff09 apache: add a variable to customize the server-status host
All checks were successful
continuous-integration/drone/push Build is passing
2019-06-20 17:29:48 +02:00
Jérémy Lecour 9a489ccf29 apache/nginx: fix server-status replacement 2019-05-02 12:16:47 +02:00
Jérémy Lecour b6499671fa apache/nginx: add server status suffix in default site if missing 2019-04-26 11:02:02 +02:00
Jérémy Lecour 8e618ce70a apache/nginx: add server status suffix in VHost if missing 2019-04-25 17:12:19 +02:00
Jérémy Lecour aa28e9c1b8 change repositories URL 2019-03-21 15:31:58 +01:00
Jérémy Lecour 41c1ed5a70 apache: add Munin configuration for Apache server-status URL 2019-01-01 21:08:51 +01:00
Jérémy Lecour 06a0f0d9b7 apache/nginx/fail2ban: mention ip_whitelist.yml in README.md 2018-11-02 18:18:22 +01:00
Jérémy Lecour 24ddc78a23 apache/nginx: IP adresses can also be removed 2018-11-02 18:15:17 +01:00
Patrick Marchand b776fc3da2 Make ip whitelist tasks more flexible
Now the list of whitelisted ip addresses can be updated simply by
including the specific tasks in an external playbook without polluting
our role list.

This change takes effect for nginx, apache and fail2ban.
2018-11-02 18:08:23 +01:00
Jérémy Lecour bfb591dc74 apache: cleaner way to overwrite the server status suffix 2018-09-09 23:01:43 +02:00
Jérémy Lecour bb956fb5e7 apache: logrotate replacement is more subtle/precise
It replaces only the proper directive and not every occurence of the 
word.
2018-08-23 13:02:25 +02:00
Jérémy Lecour ec535b036c apt module: Use "state: present" instead of "state: installed"
"state: installed" is deprecated in Ansible 2.5
2018-05-18 09:33:25 +02:00
Jérémy Lecour 5c5361dbb5 apache: customize logrotate (52 weeks) 2018-04-22 18:10:47 +02:00
Ludovic Poujol 94118b2536 Apache: Don't turn on modsec if it's available on default vhost 2018-03-12 11:00:57 +01:00
Jérémy Lecour 25a47173b8 create server status parent directory if missing 2018-01-18 17:17:34 +01:00
Jérémy Lecour 86c2bcb398 apache: /usr/share/scripts exists 2018-01-18 17:08:29 +01:00
Jérémy Lecour b634840b42 apache/nginx: server status suffix 2018-01-03 10:05:20 +01:00
Jérémy Lecour 28954e634c whitespaces 2018-01-03 10:05:20 +01:00
Jérémy Lecour aeba94bcba default/additional variables
List of hosts/ip are a combination of 2 lists allowing overrides
2017-12-20 18:04:54 +01:00
Jérémy Lecour 8ef9554746 Combine evolix and additional trusted IP addresses 2017-11-15 23:57:58 +01:00
Victor LABORIE 1c48df025c Move /usr rw remount into remount-usr role 2017-11-07 13:34:05 +01:00
Victor LABORIE ce89d5c5a5 apache: fix usr rw remount 2017-10-31 15:28:42 +01:00
Victor LABORIE 2d1504ddf6 apache: add somes modules by defaults 2017-10-27 15:01:06 +02:00
Jérémy Lecour 9527aff68a apache/nginx: remove compatibility mode 2017-10-11 18:13:15 +02:00