evolix
/
ansible-roles
16
2
Fork 2
Code Issues 60 Pull Requests 19 Releases 25 Wiki Activity

Releases Tags

  • Stable 22.12 e1e4f39778
    ${ item.name }
    Create tag ${ searchTerm }
    Create branch ${ searchTerm }
    from 'stable'
    ${ noResults }

    Release 22.12

    jlecour released this 2 months ago | 0 commits to stable since this release

    Added

    • all: add signed-by option for additional APT sources
    • all: preliminary work to support Debian 12
    • all: use proper keyrings directory for APT version
    • evolinux-base: replace regular kernel by cloud kernel on virtual servers
    • lxc-php: set php-fpm umask to 007
    • nagios-nrpe: check_ceph_*
    • nagios-nrpe: check_haproxy_stats supports DRAIN status
    • packweb-apache: enable log_forensic module
    • rabbitmq: add link in default page
    • varnish: create special tmp directory for syntax validation

    Changed

    • certbot: auto-detect HAPEE version in renewal hook
    • evocheck: install script according to Debian version
    • evolinux-base: utils.yml can be excluded
    • evolinux-todo: execute tasks only for Debian distribution (because this task is a dependency for others roles used on different distributions)
    • evolinux-user: add sudoers privilege for check php_fpm81
    • evomaintenance: allow missing API endpoint if APi is disabled
    • java: use default JRE package when version is not specified
    • keepalived: change exit code (warning if running but not on expected state ; critical if not running)
    • listupgrade: better detection for PostgreSQL
    • listupgrade: sort/uniq of packages/services lists in email template
    • lxc-solr: detect the real partition options
    • lxc-solr: download URL according to Solr Version
    • lxc-solr: set homedir and port at install
    • minifirewall: whitelist deb.freexian.com
    • openvpn: shellpki upstream release 22.12.2
    • openvpn: specifies that the mail for expirations is for OpenVPN
    • packweb-apache: manual dependencies resolution
    • redis: some values should be quoted
    • redis: variable to disable transparent hugepage (default: do nothing)
    • squid: whitelist deb.freexian.com
    • varnish: better package facts usage with check mode and tags
    • varnish: systemd override depends on Varnish version instead of Debian version

    Fixed

    • evolinux-user: Fix sudoers privilege for check php_fpm80
    • nagios-nrpe: Fix check opendkim for recent change in listening port
    • openvpn: Fix mode of shellpki script
    • proftpd: Fix format of public key files controlled by Ansible
    • proftpd: Fix mode of public key directory and files (they have to be accessible by proftpd:nobody)
    • varnish: fix missing state, that blocked the task

    Removed

    • openvpn: Deleted the task fixing the CRL rights since it has been fixed in upstream
    Downloads
     
  • Stable 22.09 c3670ce897
    ${ item.name }
    Create tag ${ searchTerm }
    Create branch ${ searchTerm }
    from 'stable'
    ${ noResults }

    Release 22.09

    jlecour released this 5 months ago | 77 commits to stable since this release

    Added

    • evolinux_users: create only users who have a certain value for the create key (default: always).
    • php: install php-xml with recent PHP versions
    • vrrp: add an ip.yml task file to help create VRRP addresses
    • webapps/nextcloud: Add compatibility with apache2, and apache2 mod_php.
    • memcached: NRPE check for multi-instance setup
    • munin: Add ipmi_ plugins on dedicated hardware
    • proftpd: Add options to override configs (and add a warning if file was overriden)
    • proftpd: Allow user auth with ssh keys

    Changed

    • evocheck: upstream release 22.09
    • evolinux-base: update-evobackup-canary upstream release 22.06
    • generate-ldif: Support any MariaDB version
    • minifirewall: use handlers to restart minifirewall
    • openvpn: automate the initialization of the CA and the creation of the server certificate ; use openssl_dhparam module instead of a command
    • generate-ldif: support any version of MariaDB (instead of only 10.0, 10.1 and 10.3)
    • openvpn: Run OpenVPN with the _openvpn user and group instead of nobody which is originally for NFS
    • nagios-nrpe: Upgrade check_mongo

    Fixed

    • fail2ban: fix dovecot-evolix regex syntax
    • haproxy: make it so that munin doesn't break if there is a non default haproxy_stats_path
    • mysql: Add missing Munin conf for Debian 11
    • redis: config directory must be owned by the user that runs the service (to be able to write tmp config files in it)
    • varnish: make -j <jail_config> the first argument on jessie/stretch as it has to be the first argument there.
    • webapps/nextcloud: Add missing dependencies for imagick

    Removed

    • evocheck: remove failure if deprecated variable is used
    • webapps/nextcloud: Drop support for Nginx
    Downloads
     
  • Stable 22.07.1 296f081d2f
    ${ item.name }
    Create tag ${ searchTerm }
    Create branch ${ searchTerm }
    from 'stable'
    ${ noResults }

    Release 22.07.1

    jlecour released this 6 months ago | 154 commits to stable since this release

    Changed

    • evocheck: upstream release 22.07
    • evomaintenance: upstream release 22.07
    • mongodb: replace version_compare() with version()
    • nagios-nrpe: check_disk1 returns only alerts
    • nagios-nrpe: use regexp to exclude paths/devices in check_disk1
    Downloads
     
  • Stable 22.07 f8cb5d9496
    ${ item.name }
    Create tag ${ searchTerm }
    Create branch ${ searchTerm }
    from 'stable'
    ${ noResults }

    Release 22.07

    jlecour released this 7 months ago | 176 commits to stable since this release

    Added

    • evolinux-base: session timeout is configurable (default: 36000 seconds = 10 hours)
    • haproxy: add haproxy_allow_ip_nonlocal_bind to set sysctl value (optional)
    • kvm-host: fix depreciation of "drbd-overview" by "drbdadm status" in add-vm.sh
    • openvpn: configure logrotate

    Changed

    • openvpn: minimal rights on /etc/shellpki/ and crl.pem

    Fixed

    • evolinux-base: Update PermitRootLogin task to work on Debian 11
    • evolinux-user: Update PermitRootLogin task to work on Debian 11
    • minifirewall: docker mode is configurable
    Downloads
     
  • Stable 22.06.3 5581801cc9
    ${ item.name }
    Create tag ${ searchTerm }
    Create branch ${ searchTerm }
    from 'stable'
    ${ noResults }

    Release 22.06.3

    jlecour released this 8 months ago | 191 commits to stable since this release

    Changed

    • evolinux-base: blacklist and do not install megaclisas-status package on incompatible servers
    Downloads
     
  • Stable 22.06.2 e3715ca2d6
    ${ item.name }
    Create tag ${ searchTerm }
    Create branch ${ searchTerm }
    from 'stable'
    ${ noResults }

    Release 22.06.2

    jlecour released this 8 months ago | 198 commits to stable since this release

    Added

    • postgresql: add variable to configure binding addresses (default: 127.0.0.1)

    Changed

    • evocheck: upstream release 22.06.2
    • fail2ban: Give the possibility to override jail.local (with fail2ban_override_jaillocal)
    • fail2ban: If jail.local was overriden, add a warning
    • fail2ban: Allow to tune some jail settings (maxretry, bantime, findtime) with ansible
    • fail2ban: Allow to tune the default action with ansible
    • fail2ban: Change default action to ban only (instead of ban + mail with whois report)
    • fail2ban: Configure recidive jail (off by default) + extend dbpurgeage
    • redis: binding is possible on multiple interfaces (breaking change)

    Fixed

    • Enforce String notation for mode
    • postgresql: fix nested loop for Munin plugins
    • postgresql: Fix task order when using pgdg repo
    • postgresql: Install the right pg version
    Downloads
     
  • Stable 22.06.1 78ef69bb6e
    ${ item.name }
    Create tag ${ searchTerm }
    Create branch ${ searchTerm }
    from 'stable'
    ${ noResults }

    Release 22.06.1

    jlecour released this 8 months ago | 209 commits to stable since this release

    Changed

    • evocheck: upstream release 22.06.1
    • minifirewall: upstream release 22.06
    • mysql: evomariabackup release 22.06.1
    • mysql: reorganize evomariabackup to use mtree instead of our own dir-check
    Downloads
     
  • Stable 22.06 24f34b200c
    ${ item.name }
    Create tag ${ searchTerm }
    Create branch ${ searchTerm }
    from 'stable'
    ${ noResults }

    Release 22.06

    jlecour released this 8 months ago | 224 commits to stable since this release

    Added

    • certbot: add hapee (HAProxy Enterprise Edition) deploy hook
    • evolinux-base: add dir-check script
    • evolinux-base: add update-evobackup-canary script
    • mysql: add post-backup-hook to evomariabackup
    • mysql: use dir-check inside evomariabackup

    Changed

    • docker: Allow "live-restore" to be toggled with docker_conf_live_restore
    • evocheck: upstream release 22.06
    • mysql: add "set crypt_use_gpgme=no" Mutt option, for mysqltuner
    Downloads
     
  • Stable 22.05.1 40546d077a
    ${ item.name }
    Create tag ${ searchTerm }
    Create branch ${ searchTerm }
    from 'stable'
    ${ noResults }

    Release 22.05.1

    jlecour released this 9 months ago | 249 commits to stable since this release

    Added

    • docker : Introduce new default settings + allow to change the docker data directory
    • docker : Introduce new variables to tweak daemon settings

    Changed

    • evocheck: upstream release 22.05

    Removed

    • docker : Removed Debian Jessie support
    Downloads
     
  • Stable 22.05 c273117c5f
    ${ item.name }
    Create tag ${ searchTerm }
    Create branch ${ searchTerm }
    from 'stable'
    ${ noResults }

    Release 22.05

    jlecour released this 9 months ago | 257 commits to stable since this release

    Added

    • etc-git: use "ansible-commit" to efficiently commit all available repositories (including /etc inside LXC) from Ansible
    • minifirewall: compatibility with "legacy" version of minifirewall
    • minifirewall: configure proxy/backup/sysctl values
    • munin: Add possibility to install local plugins, and install dhcp_pool plugin
    • nagios-nrpe: Add a check dhcp_pool
    • redis: Activate overcommit sysctl
    • redis: Add log2mail user to redis group

    Changed

    • dump-server-state: upstream release 22.04.3
    • evocheck: upstream release 22.04.1
    • evolinux-base: Add non-free repos & install non-free firmware on dedicated hardware
    • evolinux-base: rename backup-server-state to dump-server-state
    • generate-ldif: Add services check for bkctld
    • minifirewall: restore "force-restart" and fix "restart-if-needed"
    • minifirewall: tail template follows symlinks
    • minifirewall: upstream release 22.05
    • opendkim : add generate opendkim-genkey in sha256 and key 4096
    • openvpn: use a local copy of files instead of cloning an external git repository
    • openvpn: use a subnet topology instead of the net30 default topology
    • tomcat: Tomcat 9 by default with Debian 11
    • vrrpd: Store sysctl values in specific file

    Fixed

    • etc-git : Remount /usr in rw for git gc in in /usr/share/scripts/
    • etc-git: Make evocommit fully compatible with OpenBSD
    • generate-ldif: Correct generated entries for php-fpm in containers
    • keepalived: repair broken role
    • minifirewall: fix failed_when condition on restart
    • postfix: Do not send mails through milters a second time after amavis (in packmail)
    • redis: Remount /usr with RW before adding nagios plugin
    Downloads