Release 10.0.0 #100

Manually merged

jlecour merged 321 commits from unstable into stable 2020-05-13 11:25:49 +02:00

Conversation 0 Commits 321 Files Changed 309 +12614 -1825

321 Commits

Author	SHA1	Message	Date
Jérémy Lecour	4016387ca8	Release 10.0.0	2020-05-13 11:20:45 +02:00
Jérémy Lecour	ac7ee86a9c	minifirewall: /bin/true command doesn't report "changed" anymore	2020-05-11 15:23:52 +02:00
Jérémy Lecour	0da938223e	redis: remove quotes when reading variables	2020-05-09 09:56:13 +02:00
Jérémy Lecour	849ec405d5	evocheck: upstream version 20.04.4	2020-04-28 16:00:45 +02:00
Jérémy Lecour	57e5791728	networkd-to-ifconfig: add variables for configuration by variables	2020-04-26 18:39:25 +02:00
Jérémy Lecour	2f77100b47	evocheck: upstream version 20.04.3	2020-04-26 10:54:49 +02:00
Patrick Marchand	72736751ea	in evobackup_client, made rsync ssh key use the actual variable	2020-04-24 11:09:47 -04:00
Patrick Marchand	ebecda38b6	Fixed evobackup-client not updating the ssh key in the jail ... I have no idea how this got past testing, but apparently, the task did not even exist..	2020-04-24 10:46:10 -04:00
Patrick Marchand	53ae27b250	evobackup-client now uses the default ed25519 key of the server ... We used to prefer creating a specific one for backups, but everybody kept thinking the wrong key was being used and "fixing" it. The advantages of having a specific key for backups did not outweigh the challenge of creating a culture change.	2020-04-24 10:36:36 -04:00
Eric Morino	9e0388c865	Fix task when memcached_instance_name	2020-04-23 12:01:01 +02:00
Patrick Marchand	7173fc06ea	Quote a variable in zz_evobackup.default.sh.j2 ... This allows us to remove the shellcheck ignore warning comment and puts it in line with upstream. Apparently, the file can only contain one PID, so it's okay to quote the variable.	2020-04-20 18:16:39 +02:00
Patrick Marchand	daa97a2314	revert last change to zzz_evobackup, it broke	2020-04-20 11:30:55 -04:00
Patrick Marchand	556b6a6f89	added litteral blocks to zzz_evobackup template ... This makes sure that nothing inside the script is parsed by jinja unless we want it.	2020-04-20 11:27:51 -04:00
Patrick Marchand	6906c41818	Merge branch 'unstable' of gitea.evolix.org:evolix/ansible-roles into unstable	2020-04-20 11:27:41 -04:00
Jérémy Lecour	f3111b42e5	cerbot: add mod_jk and mod_proxy directives for the Apache challenge	2020-04-20 10:49:50 +02:00
Ludovic Poujol	b1b0072377	Merge pull request 'Enhancing our multiphp-setup' (#97) from lpoujol/better-multiphp into unstable	2020-04-17 16:42:11 +02:00
Jérémy Lecour	7a3e6cf61a	lxc: install apparmor on Debian 10	2020-04-17 15:57:22 +02:00
Jérémy Lecour	968973d1f4	whitespaces and syntax	2020-04-17 15:56:54 +02:00
Jérémy Lecour	d013a65cf6	Merge branch 'unstable' into lpoujol/better-multiphp	2020-04-17 12:23:56 +02:00
Jérémy Lecour	7a9624fcc2	evoacme: remove shellcheck warnings	2020-04-16 09:44:25 +02:00
Patrick Marchand	05c3629564	Merge branch 'unstable' of gitea.evolix.org:evolix/ansible-roles into unstable	2020-04-15 14:21:49 -04:00
Jérémy Lecour	6764418e75	evocheck: upstream release 20.04.2	2020-04-15 18:01:55 +02:00
Jérémy Lecour	155c6a5a88	explicit "force: no" for consistency	2020-04-15 10:04:13 +02:00
Jérémy Lecour	257a3476f1	evocheck: upstream release 20.04.1	2020-04-12 22:30:07 +02:00
Jérémy Lecour	e2f5094835	trailing space	2020-04-11 12:31:41 +02:00
Jérémy Lecour	f2613e91aa	evolinux-base: configure cciss-vol-statusd in the proper file ... The default file should be used for configuration instead of the init script.	2020-04-10 11:36:03 +02:00
Ludovic Poujol	6cf62aec11	(fix) packweb-apache : phpContainer can be run by anyone, set the chmod accordingly to 0755	2020-04-08 18:12:50 +02:00
Ludovic Poujol	4720329084	(fix) packweb-apache: Fix a regression introduced by bd63e7037f	2020-04-08 18:10:54 +02:00
Ludovic Poujol	bd201e8791	(change) lxc-php: refactor tasks for better maintainability (again)	2020-04-08 17:58:42 +02:00
Ludovic Poujol	93c043c8e0	(fix) lxc: Fix container existance check to be able to run in check_mode	2020-04-08 17:57:46 +02:00
Ludovic Poujol	bd63e7037f	packweb-apache: Do the install & conffigure phpContainer script (instead of evoadmin-web role)	2020-04-08 17:54:43 +02:00
Jérémy Lecour	35549d2dea	certbot: execute manual install for sources mode	2020-04-03 10:13:02 +02:00
Jérémy Lecour	71a9ac8424	mongodb: mention Buster support in README	2020-04-03 10:12:20 +02:00
Ludovic Poujol	f135f67cd0	(change) php: Cleanup CLI Settings. Also, allow url fopen and don't disable functions (in CLI only) ... Closes #98	2020-04-01 18:22:46 +02:00
Ludovic Poujol	2a1d355192	(fix) php: Correct tasks names in config_cli as they are for all versions, not only jessie ... Signed-off-by: Ludovic Poujol <lpoujol@evolix.fr>	2020-04-01 18:15:38 +02:00
Ludovic Poujol	7fc260a17b	(fix) php: update surry_post.yml to match current latest PHP release	2020-04-01 18:08:57 +02:00
Ludovic Poujol	f442239cec	(fix) packweb-apache: Don't try to install PHPMyAdmin on Buster as it's not available	2020-04-01 18:05:20 +02:00
Ludovic Poujol	135a089341	(change) lxc-php: Use OpenSMTPD for Stretch/Buster containers, and ssmtp for Jessie containers	2020-04-01 17:23:39 +02:00
Ludovic Poujol	a21fcaf663	(fix) php: Chose the debian version repo archive for packages.sury.org	2020-04-01 17:23:39 +02:00
Ludovic Poujol	a680399608	packweb-apache: Add missing dependency to evoacme role	2020-04-01 17:23:39 +02:00
Ludovic Poujol	8bc4ff4ada	lxc-php & webapps/evoadmin-web: Commit missing fixes	2020-04-01 17:17:00 +02:00
Victor LABORIE	84ec361270	evoadmin-web: fix missing bracket in web-add.conf template	2020-04-01 17:17:00 +02:00
Victor LABORIE	3601e802d6	evoadmin-web: fix typo in join filter	2020-04-01 17:17:00 +02:00
Victor LABORIE	47b263e411	lxc-php: fix php56-fpm handler name	2020-04-01 17:17:00 +02:00
Ludovic Poujol	9c420eec4f	packweb-apache: Automagically bootstrap the multiphp containers ... Introducing a new variable `packweb_multiphp_versions: []`. While set empty, packweb-apache will setup a regular packweb. When filled with PHP Versions, it will handle : - LXC Container setup and config (as a dependencie of lxc-php role) - Ensure evoadmin-web will set the rights versions in the config files by setting evoadmin_multiphp_versions Exemple value : `packweb_multiphp_versions: ['php70', 'php73']` That will call lxc-php to create both PHP 7.0 and PHP 7.3 containers.	2020-04-01 17:17:00 +02:00
Ludovic Poujol	0f41638810	webapps/evoadmin-web: Replace evoadmin_multi_php (bool) by evoadmin_multiphp_versions (list) ** breaking ** ... Instead of having evoadmin_multi_php as a boolean, and outputing all versions possible PHP version in evoadmin, we now have evoadmin_multiphp_versions. It's supposed to be a	2020-04-01 17:17:00 +02:00
Ludovic Poujol	e6f2bbb331	lxc-php: An almost complete rewrite ** BREAKING ** ... This is a breaking change as lxc-php should now be called for *each* php containers we want, with the correct lxc_php_version variable. Current valid values are : - php56 - php70 - php73 Other changes includes : - LXC Containers are created by calling lxc as a dependency of the role. - Relying on lxc_container module to do commands into the container (instead of the command module) - PHP 7.3 container is now a Debian Buster container - All containers will have opensmtpd to relay emails to postfix on the host system.	2020-04-01 17:17:00 +02:00
Ludovic Poujol	8ef94a9798	lxc: Allow this role to be called multiple times	2020-04-01 17:17:00 +02:00
Ludovic Poujol	9b80db3772	lxc: Don't stop the container if it already exists	2020-04-01 17:17:00 +02:00
Patrick Marchand	04e1b96833	Fix the test_server() function in zzz_evobackup.default.sh.j2 ... The script was using the wrong ssh key to test the connection, thus reporting a failed connection even if the rest was okay.	2020-03-26 11:18:55 -04:00
Patrick Marchand	d9517e8033	Update evobackup_client zzz_evobackup script ... Use latest evobackup master and adds new evobackup_client__servers_fallback variable.	2020-03-23 10:52:20 -04:00
Jérémy Lecour	5b5b8944c5	java: add Java 11 as possible version to install	2020-03-21 19:07:26 +01:00
Jérémy Lecour	288416f149	elaticsearch: Java version is not forced to 8 anymore	2020-03-21 19:07:26 +01:00
Jérémy Lecour	4718138eca	evomaintenance: install the embedded script by default	2020-03-21 19:07:26 +01:00
Jérémy Lecour	69c98bf562	[WIP] certbot: add support for install from sources on Debian 8	2020-03-21 19:07:26 +01:00
Patrick Marchand	9d7b4dd52d	hotfix jail updated task in evobackup-client ... Found out I wasnt using the right syntax for chaining commands, will fix later.	2020-03-19 15:51:32 -04:00
Jérémy Lecour	4ad785abaf	evolinux-base: simplify sshd syntax validation	2020-03-12 17:04:08 +01:00
Patrick Marchand	a18076e878	Added handling of bkctld sync to evobackup-client	2020-03-11 09:10:01 -04:00
Patrick Marchand	d5731f90e0	Merge branch 'bind9_evocheck_fix' into unstable	2020-03-10 13:48:52 -04:00
Eric Morino	6c4f696ec5	Set handler postgresql with systemctl daemon-reload	2020-03-09 18:04:22 +01:00
Eric Morino	0bda633b0c	Override Unit systemd with OMkill less	2020-03-09 18:04:22 +01:00
Jérémy Lecour	ac98aa2d18	evolinux-base: install Evocheck (default: `True`)	2020-03-09 17:02:23 +01:00
Jérémy Lecour	92dcbf1ab5	rbenv: change default Ruby version to 2.7.0	2020-03-09 17:02:23 +01:00
Jérémy Lecour	ac6414076c	nodejs: change default version to 12 (new LTS)	2020-03-09 17:02:23 +01:00
Eric Morino	61e007d22b	Fix logrotate configuration	2020-03-09 14:40:10 +01:00
Jérémy Lecour	1e3ac40167	mysql: Munin must use the debian-sys-maint user	2020-03-08 22:15:06 +01:00
Jérémy Lecour	ddef475778	mysql: add a missing name to a task	2020-03-08 22:14:40 +01:00
Jérémy Lecour	ec54af596c	evolinux-base: Don't customize the logcheck recipient by default. ... By default the package sends its messages to the logcheck user. By default we alias the "logcheck" user to "root" which is redirected to our custom address.	2020-03-04 14:03:18 +01:00
Jérémy Lecour	783dcb9890	evomaintenance: upstream release 0.6.3	2020-03-02 22:12:58 +01:00
Jérémy Lecour	099691614e	redis: set_facts separately to reuse them	2020-03-02 21:36:41 +01:00
Jérémy Lecour	bc1a6f347a	redis: add log2mail configuration for Redis if installed	2020-03-02 21:19:50 +01:00
Jérémy Lecour	e510c44a4a	Merge remote-tracking branch 'origin/T47076' into unstable	2020-03-02 20:54:27 +01:00
Jérémy Lecour	68a1d4eb27	update changelog	2020-03-02 20:53:54 +01:00
Jérémy Lecour	37b8d1fbc4	fix syntax	2020-03-02 20:37:35 +01:00
Jérémy Lecour	bb958b34b0	redis: quote some variables	2020-03-02 20:34:20 +01:00
Jérémy Lecour	af53a6b2ec	evomaintenance: upstream release 0.6.2	2020-03-02 14:45:41 +01:00
Jérémy Lecour	eb74bda22a	nagios-nrpe: check_mode per cpu dynamically	2020-02-28 12:14:20 +01:00
Eric Morino	3a20f5f501	Suppression du paquet zoo	2020-02-27 15:00:32 +01:00
Jérémy Lecour	1b29f2d793	update listupgrade from upstream	2020-02-27 13:41:04 +01:00
Jérémy Lecour	d31dddc9aa	evocheck: upstream verison 20.02.1	2020-02-27 11:37:01 +01:00
Jérémy Lecour	65bc2c657d	certbot: commit hook must be executed at the end	2020-02-25 10:46:21 +01:00
Jérémy Lecour	7283e34077	Replace version_compare() with version()	2020-02-25 10:45:35 +01:00
Jérémy Lecour	ff7f8669ef	evomaintenance: install PG dependencies only when needed	2020-02-25 10:43:23 +01:00
Tristan PILAT	c06fe36796	Switch to Solr 8.4.1	2020-02-25 10:15:56 +01:00
Ludovic Poujol	7a865b0ace	minifirewall: Properly detect alert5.sh to turn on firewall at boot	2020-02-17 16:36:48 +01:00
Ludovic Poujol	704b76e6de	minifirewall: Properly detect alert5.sh to turn on firewall at boot	2020-02-17 16:02:48 +01:00
Ludovic Poujol	02e8754d75	minifirewall: Backport changes from minifirewall (properly open outgoing smtp(s))	2020-02-17 10:56:38 +01:00
Patrick Marchand	fefd10ae2a	The GPG key for yarn changed	2020-02-11 10:20:12 -05:00
Jérémy Lecour	ca4c4adb59	certbot: commit all changes in /etc/.git ... On some servers, certificates can be copied directly in final directories over SSH.	2020-02-11 12:06:40 +01:00
Jérémy Lecour	f57af13349	minifirewall: better alert5 activation	2020-02-10 10:36:00 +01:00
Jérémy Lecour	68b7a88e63	apt: added buster backports prerferences	2020-02-10 10:35:18 +01:00
Patrick Marchand	896b8bd7e4	Merge branch 'evobackup-client' into unstable ... Import evobackup client code into mainline.	2020-02-06 16:29:02 -05:00
Patrick Marchand	c195806918	Allow different postgres versions on buster and stretch	2020-02-06 16:06:34 -05:00
Jérémy Lecour	07fd68b6a4	apt: fix syntax	2020-02-04 18:37:00 +01:00
Jérémy Lecour	72f5dc70f8	apt: hold packages only if package is installed	2020-02-04 18:14:57 +01:00
Jérémy Lecour	dc7358bc4c	nagios-nrpe: change default haproxy socket path	2020-01-23 15:04:25 +01:00
Jérémy Lecour	02858692bb	evomaintenance: don't configure firewall for database if not necessary	2020-01-23 14:34:03 +01:00
Jérémy Lecour	71a2a19847	apache: the default VHost doesn't redirect to https for ".well-known" paths	2020-01-23 14:34:03 +01:00
Eric Morino	3740a6782b	Add packages dependencies for Postgis	2020-01-21 15:48:03 +01:00
Jérémy Lecour	adc1aad883	redis: data directory is configurable	2020-01-17 14:54:05 +01:00
Ludovic Poujol	d3dc98a778	Merge branch 'lpoujol/fpm-php' of evolix/ansible-roles into unstable	2020-01-16 15:56:29 +01:00
Ludovic Poujol	31df2d2fbc	php: Add a task to remove Debian's default FPM pool file (off by default) ... Can be triggered by switching php_fpm_remove_default_pool to True.	2020-01-16 15:55:35 +01:00
Ludovic Poujol	ef5ed6911e	php: Change the default pool names to something more explicit (and same for the variables names) ... Because it's more than just pure configuration, but a fpm pool definition, I've changed the following variables in Ansible : - php_fpm_defaults_conf_file to replaced by php_fpm_default_pool_file - php_fpm_custom_conf_file to php_fpm_default_pool_custom_file. On the FPM side, I've also changed the files names of the pool to make them more explicit. No more z and zzz. It's the www pool, so let's put www in the file name for coherence : - z-evolinux-defaults.conf changes to www-evolinux-defaults.conf - zzz-evolinux-custom.conf changes to www-evolinux-zcustom.conf	2020-01-16 15:55:25 +01:00
Ludovic Poujol	c9d3635cf8	php: Make sure the default pool we define can be fully functionnal witout debian's default pool file	2020-01-16 15:55:17 +01:00
Patrick Marchand	af61b7f97d	Temp fix for regression introduced by bkctld 2.x ... The erroneous error codes returned by bkctld will make playbooks fail even though the commands run succesfully. See evolix/evobackup#31	2020-01-16 12:18:51 +01:00
Jérémy Lecour	80081aa26e	evolinux-base: remove the chrony package	2020-01-16 10:57:47 +01:00
Patrick Marchand	131004136e	Fix mistake in bind logrotate template name ... Just a minor typo, but stops it from running.	2020-01-14 15:15:58 +01:00
Eric Morino	c4ede03f3a	Add package list in board for compatibility Ansible 2.7	2020-01-09 15:40:47 +01:00
Eric Morino	12cdf35126	Add multi: "" patch	2020-01-09 15:40:46 +01:00
Jérémy Lecour	65d914098c	whitespaces	2020-01-09 15:05:44 +01:00
Alexis Ben Miloud--Josselin	3ba846cc38	redis: change log path	2020-01-08 17:24:27 +01:00
Alexis Ben Miloud--Josselin	97719d28f2	redis: add log2mail	2020-01-08 17:23:05 +01:00
Jérémy Lecour	e7952dc3c8	etc-git: fix warnings ansible-lint	2020-01-08 17:19:36 +01:00
Jérémy Lecour	bf7de332ea	minifirewall: fix warnings ansible-lint	2020-01-08 17:19:13 +01:00
Jérémy Lecour	f79b30eeb4	update changelog	2020-01-03 16:40:53 +01:00
Jérémy Lecour	6801f4e00e	Add names to many blocks	2019-12-31 16:56:03 +01:00
Jérémy Lecour	3b258cc43e	tomcat: package version derived from Debian version if missing	2019-12-31 16:43:51 +01:00
Jérémy Lecour	b8bdedaa2e	packweb-apache: update phpmyadmin package for Debian 10+ ... phpmyadmin_4.6.6-5_all.deb is no longer available, let's use 4.6.6-4	2019-12-31 16:27:05 +01:00
Jérémy Lecour	27e217467e	Change "|changed" with "is changed"	2019-12-31 16:18:56 +01:00
Jérémy Lecour	eded11f88f	Change "|search" with "is search"	2019-12-31 16:18:56 +01:00
Jérémy Lecour	e04d881988	replace "with_items" in apt modules	2019-12-31 16:18:56 +01:00
Jérémy Lecour	79bb6103b8	Change "|version_compare" with "is version_compare"	2019-12-31 10:18:19 +01:00
Jérémy Lecour	5b847ec91c	whitespace	2019-12-31 09:54:59 +01:00
Eric Morino	270e42ac77	Remove hooks directories if debian 10 and superior	2019-12-30 17:32:08 +01:00
Eric Morino	be2ea39158	Add buster for RabbitMQ	2019-12-30 17:27:39 +01:00
Eric Morino	1bf271a4f4	Add install PostGIS in postgresql rôle	2019-12-26 16:16:05 +01:00
Patrick Marchand	20191c8873	Fixed regression introduced by commit 276177900b ... The default behavior for ansible template is to overwrite the targeted file. Since we dont always want to overwrite a file when we play this role, we set `force` to `False` by default. This means that if the `dest` already exists, ansible will not overwrite it with it's given template. This is fine for most of the tasks in this role, but in the case of `{{ evoadmin_scripts_dir }}/web-mail.tpl`,the file is created by a task that runs prior to the template task, so setting it to `False` by default means it never gets updated and clients dont get notified when they create new websites.	2019-12-24 14:10:24 -05:00
Patrick Marchand	0b4095d8dd	bkctld restart works better than bkctld start ... a simple start will fail if the jail is already started, there is potential for a race condition.	2019-12-19 10:30:58 -05:00
Victor LABORIE	2a1e0b7ef6	evolinux-base: install ssacli for HP Smart Array	2019-12-13 11:00:20 +01:00
Jérémy Lecour	ce45a39b8b	redis: manage runtime directories manually on Jessie	2019-12-13 10:44:44 +01:00
Jérémy Lecour	607ee119ec	redis: sudo nopasswd for nagios check	2019-12-13 10:44:44 +01:00
Jérémy Lecour	e557a3eaae	apache: improve permissions in save_apache_status script	2019-12-13 10:44:44 +01:00
Eric Morino	8b6c1341f9	Fix logrotate configuration	2019-12-10 14:29:57 +01:00
Victor LABORIE	1b74db194a	Add missing evolix prefix to role dependencies	2019-12-03 14:32:34 +01:00
Victor LABORIE	0873bb49e0	Add evolix prefix to role dependencies	2019-11-29 14:19:52 +01:00
Victor LABORIE	6f5e13f8b8	Add evolix prefix to include_role	2019-11-29 14:00:25 +01:00
Ludovic Poujol	6e918d166e	evolinux-base: Don't make alert5.service executable ... Every 3 mins, systemd complain that the service file is marked as executable, and asks the executable bit to be remove. Nov 27 01:35:11 foo systemd[1]: Configuration file /etc/systemd/system/alert5.service is marked executable. Please remove executable permission bits. Proceeding anyway.	2019-11-28 10:59:29 +01:00
Patrick Marchand	cf8cca745e	hardcode chrooted bind variables ... The current chroot-bind.sh is legacy code that cannot be migrated without a proper understanding of it's historical context. This context might still apply and this script is still used on a variety of new and old machines. By hardcoding the paths when the user requests a chroot, we limit possible breakage.	2019-11-26 17:17:48 -05:00
Patrick Marchand	5008b79ef5	Remove remaining hardcoded log paths from bind role ... We had variables for the log paths, but these were not being used by all templates.	2019-11-26 14:04:20 -05:00
Patrick Marchand	7728f5f0c5	Made sure munin and logrotate use the proper path for bind logs ... Not all code paths made sure that the chroot was taken into account.	2019-11-26 14:02:28 -05:00
Patrick Marchand	b7a223dbdd	use yes / no instead of True / False for certain flags in bind role	2019-11-26 11:58:42 -05:00
Patrick Marchand	3ede484242	Standardization of booleans for bind role	2019-11-26 11:53:05 -05:00
Patrick Marchand	839db42c81	Revert "yaml lint and quoting standardisation for bind role" ... This reverts commit 6118dda7c9.	2019-11-26 11:48:21 -05:00
Ludovic Poujol	0e58f34e18	certbot: Properly evaluate when apache is installed ... Checking the existence of /etc/apache2 is not enough as a condition to validate the presence of apache. Indeed, some packages (including certbot!!!), put some files in /etc/apache2/conf-available even if apache isn't installed. In those cases, the check is not correct, and we'll enter in the apache block, and fail when we try to enable the configuration. With this commit, we now validate the presence apache with the presence of /usr/sbin/apachectl	2019-11-26 11:58:52 +01:00
Ludovic Poujol	dc1c78e08a	evolinux-base: Fix our zsyslog rotate config that doesn't work on Debian 10 ... I've noticed that some log files, especially /var/log/syslog were empty. After investigating, I've realized that it was happening after a log rotation by logrotate. The old mechanism, `invoke-rc.d rsyslog rotate` isn't working anymore on Debian 10. It will fail with a not so explicit message : [FAIL] Closing open files: rsyslogd failed! Long story short, it seems that the pid file (`/run/rsyslogd.pid`) isn't created any more, so start-stop-daemon as used by /etc/init.d/rsyslog will fail. Explaining the error message. Debian 10 rsyslog now brings `/usr/lib/rsyslog/rsyslog-rotate` that is used by logrotate. It will send the signal HUP the 'right' way, so rsyslog will be aware of the log rotation. Sadly, this script isn't present in Debian 9 nor 8, so the logrotate configuration for rsyslog is now a template, using the right command for the right version.	2019-11-22 16:48:19 +01:00
Jérémy Lecour	473bcb4cd6	apt: verify that /etc/evolinux is present	2019-11-20 11:34:47 +01:00
Eric Morino	e20d95786a	Change config file name conf.d/evolinux.conf by conf.d/zz-evolinux.conf	2019-11-18 09:31:24 +01:00
Eric Morino	d10441fb0b	Replace ptop by pgtop for buster	2019-11-14 16:10:23 +01:00
Eric Morino	9d5a272472	Add set and reconfigure locales for postgresql	2019-11-14 15:56:41 +01:00
Eric Morino	c15f8963e4	Add compatibility for debian 9 and debian 10 in HW tool and megacli package	2019-11-14 14:29:04 +01:00
Eric Morino	eb81c69327	Add modification for buster and postgresql 11 requirements	2019-11-14 11:39:02 +01:00
Jérémy Lecour	26dd244ae0	nagios-nrpe: update check_redis_instances	2019-11-13 09:47:23 +01:00
Ludovic Poujol	174bfa5ba0	Fix a syntax error in a task name (a missplaced double quote)	2019-11-12 17:59:36 +01:00
Eric Morino	dc162ec67f	Add check_mysql_health	2019-11-08 13:47:34 +01:00
Jérémy Lecour	7f6ad406a5	evocheck: upstream version 19.11.2	2019-11-07 10:38:32 +01:00
Jérémy Lecour	767760cbe0	evocheck: upstream version 19.11.1	2019-11-06 07:50:45 +01:00
Jérémy Lecour	049d36ab8f	etc-git: add versioning for /usr/share/scripts on Debian 10+ ... The repository.yml task file is generic and can be called for vrious repositories. On Debian 10, /usr/share/scripts is versioned	2019-11-05 17:00:22 +01:00
Jérémy Lecour	6b77372f24	evocheck: upstream version 19.11	2019-11-05 16:20:07 +01:00
Jérémy Lecour	a55e29186f	evomaintenance: upstream version 0.6.0	2019-11-05 14:52:59 +01:00
Jérémy Lecour	ab8c6b13b8	evoacme: upstream version 19.11	2019-11-05 14:08:02 +01:00
Jérémy Lecour	7e50a460a8	minifirewall: add a variable to force the check scripts update	2019-11-05 10:52:14 +01:00
Jérémy Lecour	1c0e3af490	squid: add "checkmode: no" on a read-only task	2019-11-05 10:51:09 +01:00
Jérémy Lecour	5476538eb1	minifirewall: no http filtering by default	2019-10-30 14:37:22 +01:00
Jérémy Lecour	f2dacac139	evolinux-base: add /usr/share/scripts in root's PATH (Debian 10+)	2019-10-30 14:32:32 +01:00
Jérémy Lecour	8679da4cb6	evolinux-base: install /sbin/deny	2019-10-30 14:32:32 +01:00
Jérémy Lecour	78ea4a61e1	typo	2019-10-30 14:32:32 +01:00
Jérémy Lecour	772c333623	apt: remove jessie/buster sources from Gandi servers	2019-10-30 14:32:32 +01:00
Jérémy Dubois	08a98e0bd5	Added a new nagios-nrpe plugin: check_vrrpd	2019-10-29 14:40:43 +01:00
Jérémy Lecour	cd9e17e8f6	certbot: reload the correct daemon	2019-10-25 18:21:23 +02:00
Jérémy Lecour	e80e4197c2	evocheck: upstream version 19.10	2019-10-25 13:17:16 +02:00
Jérémy Lecour	d5a6487315	Merge branch 'mongodb-buster' into unstable	2019-10-24 17:23:53 +02:00
Jérémy Lecour	5eff84bc07	mongodb: fix systemd service	2019-10-24 16:43:24 +02:00
Jérémy Lecour	27adad616f	squid: compatibility wit Debian 10	2019-10-24 16:23:48 +02:00
Jérémy Lecour	a9b61161e0	fix typos	2019-10-24 15:55:40 +02:00
Jérémy Lecour	85b0e36f33	CHANGELOG: sort alphabetically	2019-10-24 15:37:58 +02:00
Jérémy Lecour	76864f226e	WIP mongodb: compatibility with Debian 10	2019-10-24 15:36:51 +02:00
Gregory Colpart	7deee9b1e6	modifications variables	2019-10-24 15:12:55 +02:00
Jérémy Lecour	ee72dd07ff	rbenv: install Ruby 2.6.5 by default	2019-10-22 15:03:45 +02:00
Jérémy Lecour	2ea88dc385	mysql-oracle: backport tasks from mysql role	2019-10-21 16:32:59 +02:00
Jérémy Lecour	24edbd680a	Add crontabs only when cron package is installed (many roles)	2019-10-21 15:26:03 +02:00
Jérémy Lecour	bc5e19c002	redis: reload redis when configuration is changed	2019-10-21 15:26:03 +02:00
Jérémy Lecour	16c44ab867	lxc : add name of container in task names	2019-10-21 15:26:03 +02:00
Jérémy Lecour	12cebfa71c	lxc-php: refactor tasks for better maintainability	2019-10-21 15:26:03 +02:00
Ludovic Poujol	2d2889ac16	php: Don't set a chroot for the default fpm pool	2019-10-16 15:59:33 +02:00
Ludovic Poujol	0a7262081a	php: add missing handler for php7.3-fpm	2019-10-16 15:17:35 +02:00
Jérémy Lecour	beb39988e7	git ignore .swp files	2019-10-11 21:27:01 +02:00
Jérémy Lecour	7fe89d2419	haproxy: add another variable for configuration	2019-10-11 21:24:32 +02:00
Patrick Marchand	5178e99e7c	typo in evobackup jail file task name	2019-10-10 15:40:00 -04:00
Jérémy Lecour	edb5ace762	haproxy: add a variable to keep the existing configuration	2019-10-10 11:27:39 +02:00
Patrick Marchand	6118dda7c9	yaml lint and quoting standardisation for bind role	2019-10-09 12:15:55 -04:00
Patrick Marchand	2bbebded9e	Migrated bind role to python booleans	2019-10-09 12:07:14 -04:00
Patrick Marchand	c6804e73e7	Adapted the bind role to respect the evocheck warnings ... The required munin plugins and the logging necessary for them to work is now activated depending on the type of resolver and the logrotate file is changed from bind to bind9.	2019-10-09 11:54:30 -04:00
Patrick Marchand	5a20292ec9	rename create_jail.yml to jail.yml in evobackup-client	2019-10-07 13:53:55 -04:00
Patrick Marchand	d4742b411d	Added evobackup sync when more than one host	2019-10-07 13:53:10 -04:00
Patrick Marchand	daad12fdeb	Handle backup jail creation ... Does not handle sync step yet	2019-10-07 12:28:25 -04:00
Patrick Marchand	4851af7432	Fix minifirewall restart handler	2019-10-03 10:44:21 -04:00
Gregory Colpart	569ad4d38a	update evocheck.sh in evocheck role	2019-10-03 16:01:42 +02:00
Ludovic Poujol	4aaeb4590b	lxc: rely on lxc_container module instead of command module	2019-10-02 16:32:20 +02:00
Ludovic Poujol	e985f5778c	evoadmin-web: Put the php config at the right place for Buster	2019-10-02 15:48:03 +02:00
Jérémy Lecour	429fc39b86	redis: improve check_redis_instances ... * a disabled instances is UNCHK (not CRITICAL) * output is copied directly from check_redis	2019-10-02 14:13:59 +02:00
Ludovic Poujol	a5378c783e	lxc: update our default template to be compatible with Debian 10	2019-10-01 17:54:13 +02:00
Ludovic Poujol	ae97276e13	lxc: remove useless loop in apt execution	2019-10-01 17:54:13 +02:00
Tristan PILAT	f96c0b82ff	Fix condition in main task ... The Buster task should not be triggered with Debian Stretch systems	2019-10-01 17:26:33 +02:00
Jérémy Lecour	a478c773eb	apt: check if cron is installed before adding a cron job	2019-09-30 14:12:38 +02:00
Jérémy Lecour	eec8aef129	Merge branch 'certbot' of evolix/ansible-roles into unstable ... Let's merge this into unstable and test it on a few servers.	2019-09-27 14:06:38 +02:00
Jérémy Lecour	68e6d6cb23	improve hooks maintainability	2019-09-27 14:03:39 +02:00
Jérémy Lecour	44b2480e03	certbot: improve hooks	2019-09-27 10:15:33 +02:00
Jérémy Lecour	3521d4a765	certbot: verify generated combined certificate file for HAProxy	2019-09-27 09:47:51 +02:00
Jérémy Lecour	86108999c1	certbot: check syntax in hooks just before reload	2019-09-27 09:31:22 +02:00
Jérémy Lecour	394e28b815	WIP: new certbot role	2019-09-27 00:21:29 +02:00
Jérémy Lecour	0a8061bbd6	return items on separate lines	2019-09-26 15:33:54 +02:00
Jérémy Lecour	b6b0c7716c	apt: back to dynamic release name	2019-09-26 09:55:25 +02:00
Jérémy Lecour	e3e908dd4c	Merge branch 'redis-instances' into unstable	2019-09-25 22:25:42 +02:00
Jérémy Lecour	2cf5027df9	redis: check_redis_instances supports password	2019-09-25 22:21:32 +02:00
Gregory Colpart	6fe86a76c5	remove reload-vcl.sh (Custom Varnish ExecReload script) when Debian >= 10	2019-09-24 14:00:22 +02:00
Jérémy Lecour	f09a405d84	mongodb: still incompatible with Debian 10	2019-09-23 22:18:52 +02:00
Jérémy Lecour	9ea567ee2d	squid: install systemd unit and restart only if needed	2019-09-23 21:58:08 +02:00
Jérémy Lecour	c98be7c864	evoadmin-web: better comment	2019-09-23 21:57:52 +02:00
Jérémy Lecour	732e26275e	evoadmin-web: fix config file name	2019-09-23 21:57:35 +02:00
Jérémy Lecour	ce02a68a8d	evoadmin-web: use python/yaml native values	2019-09-23 21:57:08 +02:00
Patrick Marchand	6a89f253e9	Fix typo in evoadmin-web config template	2019-09-23 15:46:16 -04:00
Patrick Marchand	1b7f5bb46d	Adds a default htpasswd for evoadmin-web	2019-09-23 15:32:17 -04:00
Patrick Marchand	87202fa264	fixed typo in evobackup-cilent ... Not sure how this slipped in	2019-09-23 15:26:30 -04:00
Jérémy Lecour	bea11352be	Merge branch 'buster' into unstable	2019-09-23 18:34:35 +02:00
Jérémy Lecour	45d48eedb0	changelog cleanup	2019-09-23 13:47:19 +02:00
Jérémy Lecour	3999e7d4f8	listupgrade: install old-kernel-autoremoval script	2019-09-23 13:46:29 +02:00
Jérémy Lecour	0829efc8a6	evocheck: upstream version 19.09	2019-09-23 09:22:58 +02:00
Jérémy Lecour	9f619adf68	evocheck: cron jobs execute in verbose	2019-09-23 09:22:40 +02:00
Jérémy Lecour	1a647d0546	evocheck : update (version 19.09) from upstream	2019-09-22 22:41:03 +02:00
Jérémy Lecour	b31159c9d2	evolinux-base: use "evolinux_internal_group" for SSH authentication	2019-09-22 22:26:21 +02:00
Jérémy Lecour	8f868b8612	evolinux-base: default value for "evolinux_ssh_group"	2019-09-22 22:25:30 +02:00
Jérémy Lecour	2d249f1815	squid: split systemd tasks into own file	2019-09-22 22:18:09 +02:00
Patrick Marchand	a358db065b	Merge branch 'htpasswd_evoadmin' into unstable	2019-09-20 10:06:20 -04:00
Patrick Marchand	0009272462	Allow setting a custom mysql server_id	2019-09-12 11:46:12 -04:00
Jérémy Lecour	508f725193	squid: add a warning about local mode in the README	2019-09-12 16:05:42 +02:00
Patrick Marchand	cf83732946	The mysql readme had an erroneous line removal	2019-09-12 08:59:04 -04:00
Patrick Marchand	109191ccd8	Added mysql_log_bin variable to enable binary logs	2019-09-12 08:54:18 -04:00
Patrick Marchand	b36202f8d1	minifirewall was not restarted by evobackup-client after mods.	2019-09-06 17:53:48 -04:00
Patrick Marchand	11e006201a	Revert to default zzz_evobackup from git ... The suggested default is better, following peer review. Though some changes will probably need to be made once we decide how to handle system only backups.	2019-09-06 17:52:14 -04:00
Patrick Marchand	d226ce594a	Changed variables to all lower snake case for evobackup-client ... Not just esthetic, for some reason ansible refused to run with '-' somewhere and I just could not find where, changing variables and tags to use '_' fixed it. It's more consistent anyway.	2019-09-06 17:49:40 -04:00
Jérémy Lecour	442353ce73	Update changelog	2019-09-06 16:04:47 +02:00
Jérémy Lecour	a57b734486	Revert "NRPE checks probably don't need sudo" ... This reverts commit d05897fe93.	2019-09-06 16:02:00 +02:00
Jérémy Lecour	c6cba6d9e0	sudo without password for nagios	2019-09-06 15:55:35 +02:00
Jérémy Lecour	d05897fe93	NRPE checks probably don't need sudo	2019-09-06 14:02:52 +02:00
Jérémy Lecour	961f50c1a6	Fix permissions for check_redis and check_redis_instances	2019-09-06 14:00:44 +02:00
Jérémy Lecour	3768f6553a	Rewrite NRPE checks	2019-09-06 13:55:12 +02:00
Jérémy Lecour	795d397eab	better compatibility with Debian Jessie	2019-09-06 13:54:41 +02:00
Jérémy Lecour	e0ec9e63cb	improve task names	2019-09-05 12:22:02 +02:00
Jérémy Lecour	244b2ef96b	Copy hooks example files	2019-09-05 12:21:51 +02:00
Jérémy Lecour	a3bbc6fe87	use real booleans in Ansible configuration	2019-09-05 09:46:54 +02:00
Jérémy Lecour	62e43f85d9	change variable name for log level	2019-09-05 09:44:25 +02:00
Jérémy Lecour	d972c6c794	rewrite systemd unit, separate configuration files	2019-09-05 09:41:58 +02:00
Jérémy Lecour	d0111f9a4f	WIP: separate Redis instances from default server	2019-09-05 06:50:07 +02:00
Jérémy Lecour	415aedb78a	Install Sentinel if needed	2019-09-05 05:58:59 +02:00
Patrick Marchand	f9b55c0c91	Got rid of forgotten attempt at mapping hosts in evobackup-client	2019-09-03 12:13:05 -04:00
Patrick Marchand	71bf970811	Fix extra space in zzz_evobackup template ... Not the best solution, a mix of map, format, join would of been better, but I could not find out how to make it work with multiple attributes.	2019-09-03 11:14:48 -04:00
Patrick Marchand	0f7d9e9f24	Allow heterogeneous ports ... This makes it a bit more annoying to define default hosts for multiple machines, but it's not that bad and it's better than not being able to define heterogeous ports.	2019-09-03 10:29:05 -04:00
Patrick Marchand	c773c901f2	Fix to evobackup-client variable names ... Somehow, an extra _ managed to slide itself in a few places.	2019-09-03 09:51:46 -04:00
Patrick Marchand	7d6a552c09	Apply README fixes from peer review ... Removes unecessary precision.	2019-09-03 09:50:13 -04:00
Jérémy Lecour	13b7ca204f	whitespaces	2019-09-02 10:39:49 +02:00
Jérémy Lecour	4acd61a072	generate-ldif: support MariaDB 10.3	2019-09-02 10:39:49 +02:00
Patrick Marchand	1c12827c9c	Added evobackup-client role	2019-08-30 14:43:52 -04:00
Patrick Marchand	d75846ed28	Make it possible to add an htpasswd file to evoadmin	2019-08-30 10:32:44 -04:00
Patrick Marchand	02415b7a2c	Missed a few instances of multi-php checks during merge	2019-08-30 10:19:51 -04:00
Jérémy Lecour	5925a12b3d	evocheck: upstream version 19.08	2019-08-30 14:23:35 +02:00
Jérémy Lecour	6db519c2b0	redis: max clients is configurable	2019-08-30 08:53:12 +02:00
Jérémy Lecour	2c2f13e17f	update CHANGELOG	2019-08-30 08:52:08 +02:00
Jérémy Lecour	921c0badb8	evocheck : explicit PATH ... By default the PATH set by crontab is "/usr/bin:/bin" so all sbin commands are out of scope.	2019-08-30 08:51:16 +02:00
Patrick Marchand	276177900b	Merge branch 'evoadmin-web-template-override' into unstable ... I had to apply some of the yamllint fixes to the new multi-php tasks as well. Notably it removes the need to explicitely check for the truthy "True"	2019-08-27 10:23:04 -04:00
Patrick Marchand	67664ec0e2	Pass evoadmin-web role through yamllint and ansible-lint ... Recommends using true or false values directly instead of the truthy and falsie yes True and etc. This also means that we can get rid of the cast to booleans in some of the checks. The other fixes are mostly in the realm of indentation and whitespace.	2019-08-27 09:58:08 -04:00
Patrick Marchand	1ecc38f9c2	Modified evoadmin-web template overriding variable names ... Made them more in line with the rest of the role.	2019-08-27 09:45:32 -04:00
Ludovic Poujol	4695c07ffa	listupgrade: listupgrade.sh and it's cron are not jinja templates, use copy instead of template	2019-08-27 14:53:42 +02:00
Benoît S.	269c66365d	listupgrade: Update README	2019-08-22 17:11:32 +02:00
Ludovic Poujol	ab00a46e19	nginx: fix munin fcgi not working (missing chmod 660 on logs)	2019-08-22 15:14:36 +02:00
Ludovic Poujol	8d71965ec9	nginx: fix munin fcgi not working (missing chmod 660 on logs)	2019-08-22 14:47:32 +02:00
Ludovic Poujol	e2fd56bdcd	php: By default, allow 128M for OpCache (instead of 64M)	2019-08-21 15:56:35 +02:00
Jérémy Lecour	f5f4a82114	evomaintenance: upstream version 0.5.1	2019-08-21 15:40:15 +02:00
Ludovic Poujol	b116c47b58	packweb-apache: Deploy opcache.php to give some insights on PHP's opcache status	2019-08-21 15:24:58 +02:00
Jérémy Lecour	c0ed2fa620	php: variable to install the mysqlnd module instead of the default mysql module	2019-08-16 10:11:23 +02:00
Ludovic Poujol	6d2db1341f	evomaintenance: Turn on API by default (instead of DB)	2019-08-07 15:42:23 +02:00
Ludovic Poujol	b7844dd804	squid: Remove wait time when we turn off squid	2019-08-06 10:26:47 +02:00
Ludovic Poujol	f630d93587	evolinux-base: On debian 10 and later, add noexec on /dev/shm	2019-07-23 18:18:29 +02:00
Victor LABORIE	cb8116fff0	tomcat: fix typo for default tomcat_version	2019-07-12 15:29:05 +02:00
Benoît S.	7a00ccfd3c	Merge branch 'munin-missing-cgi-part' of evolix/ansible-roles into unstable	2019-07-12 09:53:42 +02:00
Victor LABORIE	031c4c29b9	roundcube: fix typo for roundcube vhost	2019-07-08 15:35:05 +02:00
Benoît S.	755eaab60a	minifirewall: use systemctl is-enabled ... Fixes #66	2019-07-04 17:41:59 +02:00
Benoît S.	a7ef7be973	evoadmin-web: download sid package for php-log	2019-07-04 17:16:43 +02:00
Benoît S.	4e02e8ee94	squid: typo for copy task	2019-07-04 17:16:34 +02:00
Tristan PILAT	87d49d8e58	We want Solr to run on an alternative port	2019-07-04 12:37:53 +02:00
Tristan PILAT	4d72c38e8a	We want the Solr home directory to be moved in /home/solr/	2019-07-04 12:37:09 +02:00
Tristan PILAT	eaa229791a	We don't need these tasks anymore since we now have an init script	2019-07-04 12:34:39 +02:00
Tristan PILAT	a9b56f3dfe	Let's use the install_solr_service.sh script to install Solr	2019-07-04 12:33:08 +02:00
Tristan PILAT	d3a15d69d9	We want Solr to be extracted in /root to let the install_solr_service.sh script install it is own way	2019-07-04 12:31:57 +02:00
Tristan PILAT	5708c701a7	Solr recommends to install the lsof program to detect in a better way if it's running	2019-07-04 12:28:41 +02:00
Tristan PILAT	a141847445	We don't want Solr to run as root!	2019-07-04 12:26:05 +02:00
Tristan PILAT	57e93eddd4	Add a task to make sure the rootfs directory of each container has 755 rights	2019-07-04 12:22:46 +02:00
Benoît S.	62cd28c1f5	apache: Add missing part for munin cgi ... ScriptAlias /munin-cgi/munin-cgi-graph were missing.	2019-07-03 11:56:51 +02:00
Benoît S.	bb288ca991	squid: Custom systemd unit file for Debian >=10 ... Fixes #63	2019-07-03 10:07:00 +02:00
Benoît S.	d5751150af	evolinux-base: spectre-meltdown-checker need binutils	2019-07-03 09:56:17 +02:00
Benoît S.	771c75c1de	all-roles: Dot not use ansible_lsb as it is deprecated ... We move from `ansible_lsb.codename` to `ansible_distribution_release`.	2019-07-03 09:41:35 +02:00
Benoît S.	0b8681cf59	packweb-apache: install phpmyadmin using .deb for Buster ... Fixes #64 /!\ Warning: this is a temporary hack!	2019-07-03 09:37:57 +02:00
Tristan PILAT	8de8736dbc	Add lxc-solr role	2019-07-02 18:11:54 +02:00
Jérémy Lecour	f5ad70a2e4	Merge branch 'unstable' into buster	2019-07-01 17:19:35 +02:00
Jérémy Lecour	11a039bfac	elasticsearch: listen on local interface only by default	2019-07-01 17:17:32 +02:00
Jérémy Lecour	2e83fc00cc	whitespaces	2019-06-27 16:34:01 +02:00
Jérémy Lecour	5199a384c3	packweb-apache : create phpmyadmin directory if missing	2019-06-27 16:33:11 +02:00
Jérémy Lecour	2b9354b549	re-enable phpmyadmin	2019-06-27 16:19:17 +02:00
Jérémy Lecour	b773e17560	whitespaces	2019-06-27 16:16:19 +02:00
Eric Morino	1b972caa83	Add install package percona-toolkit by default	2019-06-26 18:12:39 +02:00
Jérémy Lecour	c147a4674d	mysql : mytop dependencies for buster	2019-06-26 17:46:36 +02:00
Jérémy Lecour	a4236a0708	php: look for PHP 7.3 with buster	2019-06-26 17:39:22 +02:00
Ludovic Poujol	e13543bf07	lxc-php: Don't remove the default pool - That's making PHP-FPM sad :(	2019-06-26 11:10:23 +02:00
Jérémy Lecour	bb6191d104	apt: the the public source list for Stretch until it's ready for Buster	2019-06-24 17:08:33 +02:00
Jérémy Lecour	fecdbb0406	evolinux-base: use the variable for the "ssh" group name	2019-06-24 17:08:01 +02:00
Jérémy Lecour	879c5c16cd	Merge branch 'unstable' into buster	2019-06-21 14:53:11 +02:00
Jérémy Lecour	77246710b6	utilisation du lsb.codename	2019-06-20 17:38:37 +02:00
Jérémy Lecour	b83574592f	evolinux-base: install "spectre-meltdown-checker" (Debian 10 and later)	2019-06-19 15:13:25 +02:00
Jérémy Lecour	b362f422df	evolinux-base: packages for Buster and later	2019-06-19 15:08:54 +02:00
Jérémy Lecour	bee57a0b3c	change distribution release codename ... Ansible 2.2 is too old to know about buster. Let's use LSB for that.	2019-06-18 17:35:28 +02:00
Patrick Marchand	1fc8b2b9f9	Fixed errors in filenames	2019-05-06 23:41:36 +02:00
Patrick Marchand	d8385bff84	Make it possible to overwrite the default evoadmin-web templates ... The templates can also be forced to update if so desired.	2019-05-06 22:00:45 +02:00