Compare commits

..

34 commits

Author SHA1 Message Date
Mathieu Gauthier-Pilote 6f387b029c Fix wrong indentation 2024-04-11 15:44:18 -04:00
Mathieu Gauthier-Pilote 7b74e320c9 Adding handlers 2024-04-11 15:44:18 -04:00
Mathieu Gauthier-Pilote c34fe9a477 1 more command instead of shell + more jitsimeet_ prefix 2024-04-11 15:44:18 -04:00
Mathieu Gauthier-Pilote 0dbd76f077 new apt_sources.yml ; systemd + command instead of service + shell 2024-04-11 15:44:18 -04:00
Mathieu Gauthier-Pilote b442d5787e jitsimeet_ prefix for vars + ansible.builtin. prefix for modules 2024-04-11 15:44:18 -04:00
Mathieu Gauthier-Pilote 9e25821ecc Make it a variable 2024-04-11 15:44:18 -04:00
Mathieu Gauthier-Pilote 1c91913c2a To enable colibri stats and allow external visualisation 2024-04-11 15:44:18 -04:00
Mathieu Gauthier-Pilote 82b798972f 3rd-party repo management for Deb 12 2024-04-11 15:44:18 -04:00
Mathieu Gauthier-Pilote 90e25c708a CORS for xmpp-websocket in multidomain setup 2024-04-11 15:44:18 -04:00
Mathieu Gauthier-Pilote 8b94e94165 Deploy with additional domains 2024-04-11 15:44:18 -04:00
Mathieu Gauthier-Pilote 8be19c9032 To allow for other domains 2024-04-11 15:44:18 -04:00
Mathieu Gauthier-Pilote e5f03413a7 Remove hardcoded value 2024-04-11 15:44:18 -04:00
Mathieu Gauthier-Pilote 2860546f00 To preserve custom changes to welcomePageAdditionalContent.html 2024-04-11 15:44:18 -04:00
Mathieu Gauthier-Pilote ecdd26f350 pied perso + proxy stream 2024-04-11 15:44:18 -04:00
Mathieu Gauthier-Pilote e4c0f7838d Simple manual upgrade with .deb packages 2024-04-11 15:44:18 -04:00
Mathieu Gauthier-Pilote f20eb73ed5 More generic 2024-04-11 15:44:18 -04:00
Mathieu Gauthier-Pilote b0510d37ce certbot --deploy-hook 2024-04-11 15:44:18 -04:00
Mathieu Gauthier-Pilote 879d7fc044 coturn 2024-04-11 15:44:18 -04:00
Mathieu Gauthier-Pilote 0350a97f8c Fix bug with jvb/websocket/colibri 2024-04-11 15:44:18 -04:00
Mathieu Gauthier-Pilote 3b8834ffce Enabling websockets 2024-04-11 15:44:18 -04:00
Mathieu Gauthier-Pilote e57b3578f3 Not needed 2024-04-11 15:44:18 -04:00
Mathieu Gauthier-Pilote 91588a7737 Replace hardcoded value with variable 2024-04-11 15:44:18 -04:00
Mathieu Gauthier-Pilote 47de051ab9 Installs a Let's Encrypt cert 2024-04-11 15:44:18 -04:00
Mathieu Gauthier-Pilote 68c443acd1 Basic install; self-signed cert; no websocket in prosody; public stun server used; sctp disabled 2024-04-11 15:44:18 -04:00
Mathieu Gauthier-Pilote 0ac6befce2 New variables for secrets and muc nickname 2024-04-11 15:44:18 -04:00
Mathieu Gauthier-Pilote e52811b7eb variable domain 2024-04-11 15:44:18 -04:00
Mathieu Gauthier-Pilote f51dadc93e debconf, templates, etc 2024-04-11 15:44:18 -04:00
Mathieu Gauthier-Pilote 230c561292 WIP 2024-04-11 15:44:18 -04:00
Brice Waegeneire 5708e7205d nrpe: !disk1 exclude filesystem type overlay 2024-04-11 15:48:37 +02:00
Eric Morino 4bbe2f4f72 Delete 'state' option on template for PGDG repo 2024-04-09 09:12:01 +02:00
Jérémy Lecour 7a9be8d6fa
vrrpd : configure and restart minifirewall before starting VRRP 2024-04-04 18:40:39 +02:00
William Hirigoyen 5acb1956f5 packweb: fix old bug (2017!) .orig file created by module patch and taken in account by ProFTPd 2024-03-27 15:17:48 +01:00
Alexis Ben Miloud--Josselin 96504b1deb evolinux-users: Add sudo mvcli for nagios user 2024-03-27 12:13:49 +01:00
William Hirigoyen 56eef89084 nagios-nrpe: create /etc/bash_completion.d if missing 2024-03-22 11:09:06 +01:00
7 changed files with 50 additions and 23 deletions

View file

@ -18,6 +18,9 @@ The **patch** part is incremented if multiple releases happen the same month
* autosysadmin-agent: upstream release 24.03.2
* evolinux-base: Add new variable to disable global customisation of bash config
* roundcube: Use /var/log/roundcube directly
* evolinux-users: Add sudo mvcli for nagios user
* vrrpd : configure and restart minifirewall before starting VRRP
* nrpe: !disk1 exclude filesystem type overlay
### Fixed
@ -25,6 +28,8 @@ The **patch** part is incremented if multiple releases happen the same month
* keepalived: Fix tasks that use file instead of copy
* memcached: Fix conditions not properly writen (installation was always in multi-instance mode)
* fail2ban: SQLite purge script didn't vacuum as expected + error when vacuum cannot be done
* nagios-nrpe: create /etc/bash_completion.d if missing
* packweb: fix old bug (2017!) .orig file created by module patch and taken in account by ProFTPd
### Removed

View file

@ -24,6 +24,8 @@ nagios ALL = NOPASSWD: /sbin/megacli -LdInfo -Lall -aALL -NoLog
nagios ALL = NOPASSWD: /sbin/megacli -AdpBbuCmd -GetBbuStatus -aALL -NoLog
nagios ALL = NOPASSWD: /sbin/ssacli controller all show status
nagios ALL = NOPASSWD: /sbin/ssacli controller slot=0 logicaldrive all show
nagios ALL = NOPASSWD: /usr/local/bin/mvcli info -o blk
nagios ALL = NOPASSWD: /usr/local/bin/mvcli info -o vd
nagios ALL = NOPASSWD: /usr/local/lib/nagios/plugins/check_gluster.rb
nagios ALL = (clamav) NOPASSWD: /usr/bin/clamscan /tmp/safe.txt

View file

@ -15,10 +15,16 @@
dest: /usr/local/bin/check-local
mode: "0755"
- name: Package bash-completion is intalled
- name: Package bash-completion is installed
ansible.builtin.apt:
name: bash-completion
- name: Directory /etc/bash_completion.d exists
ansible.builtin.file:
path: '/etc/bash_completion.d'
state: directory
mode: '0644'
- name: Completion for utilitary check-local is installed
ansible.builtin.copy:
src: check-local_completion

View file

@ -9,7 +9,7 @@ allowed_hosts={{ nagios_nrpe_allowed_hosts | join(',') }}
# System checks
command[check_load]=/usr/lib/nagios/plugins/check_load --percpu --warning=0.7,0.6,0.5 --critical=0.9,0.8,0.7
command[check_swap]=/usr/lib/nagios/plugins/check_swap -a -w 30% -c 20%
command[check_disk1]=/usr/lib/nagios/plugins/check_disk -e -w 10% -c 3% -W 10% -K 3% -C -w 5% -c 2% -W 5% -K 2% -p /home -x /lib/init/rw -x /dev -x /dev/shm -x /run -I '^/run/' -I '^/sys/'
command[check_disk1]=/usr/lib/nagios/plugins/check_disk -e -w 10% -c 3% -W 10% -K 3% -C -w 5% -c 2% -W 5% -K 2% -p /home -x /lib/init/rw -x /dev -x /dev/shm -x /run -I '^/run/' -I '^/sys/' -X overlay
command[check_zombie_procs]=sudo /usr/lib/nagios/plugins/check_procs -w 5 -c 10 -s Z
command[check_total_procs]=sudo /usr/lib/nagios/plugins/check_procs -w 400 -c 600
command[check_users]=/usr/lib/nagios/plugins/check_users -w 5 -c 10

View file

@ -36,7 +36,6 @@
ansible.builtin.template:
src: postgresql.sources.j2
dest: /etc/apt/sources.list.d/postgresql.sources
state: present
register: postgresql_sources
when: ansible_distribution_major_version is version('12', '>=')

View file

@ -1,25 +1,6 @@
---
- name: set unit name
ansible.builtin.set_fact:
vrrp_systemd_unit_name: "vrrp-{{ vrrp_address.id }}.service"
- name: add systemd unit
ansible.builtin.template:
src: vrrp.service.j2
dest: "/etc/systemd/system/{{ vrrp_systemd_unit_name }}"
force: true
register: vrrp_systemd_unit
- name: enable and start systemd unit
ansible.builtin.systemd:
name: "{{ vrrp_systemd_unit_name }}"
daemon_reload: yes
enabled: yes
state: "{{ vrrp_address.state }}"
when:
- vrrp_systemd_unit is changed
- not ansible_check_mode
# Configure and restart minifirewall before starting the VRRP service
- name: Check if a recent minifirewall is present
ansible.builtin.stat:
@ -55,3 +36,31 @@
loop_var: peer
notify: "{{ minifirewall_restart_handler_name }}"
when: _minifirewall_dir.stat.exists
- name: Flush handlers to restart minifirewall
ansible.builtin.meta: flush_handlers
when: _minifirewall_dir.stat.exists
# Configure VRRP service
- name: set unit name
ansible.builtin.set_fact:
vrrp_systemd_unit_name: "vrrp-{{ vrrp_address.id }}.service"
- name: add systemd unit
ansible.builtin.template:
src: vrrp.service.j2
dest: "/etc/systemd/system/{{ vrrp_systemd_unit_name }}"
force: true
register: vrrp_systemd_unit
- name: enable and start systemd unit
ansible.builtin.systemd:
name: "{{ vrrp_systemd_unit_name }}"
daemon_reload: yes
enabled: yes
state: "{{ vrrp_address.state }}"
when:
- vrrp_systemd_unit is changed
- not ansible_check_mode

View file

@ -10,3 +10,9 @@
remote_src: False
src: ftp/evolinux.conf.diff
dest: /etc/proftpd/conf.d/z-evolinux.conf
- name: Remove .orig file created by previous patch task
ansible.builtin.file:
path: /etc/proftpd/conf.d/z-evolinux.conf.orig
state: absent