Jérémy Lecour
012dabf657
fail2ban: fix fail2ban_ignore_ips definition
...
If the final variable is combined in the defaults file, it's component
can be overridden, but the final variable can't be overriden.
2018-08-21 23:14:31 +02:00
Jérémy Lecour
77aeb60544
bind: chroot-bind.sh must not be executed in check mode
2018-08-21 18:46:16 +02:00
Jérémy Lecour
26c46bfb96
evocheck: the crontab is updated by the role
2018-08-18 09:41:59 +02:00
Jérémy Lecour
4d7e9b1c3f
evocheck: detect installed packages even if "held" by APT (manual fix)
2018-08-17 14:59:22 +02:00
Jérémy Lecour
40160e0c6e
generate-ldif: detect installed packages even if "held" by APT
2018-08-17 11:56:41 +02:00
Jérémy Lecour
46fed05fa2
evocheck: update upstream script
2018-08-17 10:04:07 +02:00
Jérémy Lecour
bc8858fc0a
evolinux-base: improve hostname configuration
...
We can have a "real" hostname and domain, but also an "internal" hostnae
and domain, used mostly for internal tools.
2018-08-16 16:17:34 +02:00
Jérémy Lecour
ccd8c00e3a
CHANGELOG : add missing entries
2018-08-09 18:24:48 +02:00
Jérémy Lecour
b9b0183ec5
remount-usr: mount doesn't report a change
...
It is arguable that this is a real change or not,
but in practice we have playbooks that report changes only for this and
it's very fun to scroll back each time to see if it's remount-usr or
a "real" change.
2018-08-06 15:01:52 +02:00
Victor LABORIE
57cf0a29ab
kvm-host: install kvm-tools package instead of copying add-vm.sh
2018-07-27 11:27:50 +02:00
Jérémy Lecour
c57b069bf5
Reorder lines in CHANGELOG
2018-07-10 16:28:56 +02:00
Jérémy Lecour
d387ed660a
munin: properly rename Munin cache directory
2018-07-10 16:27:10 +02:00
Jérémy Lecour
1439fdab8f
metricbeat: add a role (copied from filebeat)
2018-07-10 16:27:10 +02:00
Victor LABORIE
f3ab0b361b
tomcat: better nrpe check output
2018-07-03 12:24:11 +02:00
Victor LABORIE
b18b3d3404
roundcube: add missing slash to https redirection
2018-06-25 16:58:03 +02:00
Victor LABORIE
f56f8f7615
evolinux-base: add mail related aliases
2018-06-25 11:20:37 +02:00
Victor LABORIE
f32eee4b68
Update CHANGELOG
2018-06-25 11:12:33 +02:00
Jérémy Lecour
77b5f84567
evoacme: disable old certbot cron also in cron.daily
2018-06-21 17:22:40 +02:00
Victor LABORIE
9f34db8f9a
evoacme: fix module detection in apache config
2018-06-20 11:07:23 +02:00
Jérémy Lecour
045492be85
Update changelog
2018-06-19 16:51:27 +02:00
Jérémy Lecour
fb4a254b9c
mysql-oracle: fix configuration directory variable
2018-06-15 14:41:24 +02:00
Victor LABORIE
6d9fbe8689
nagios-nrpe: add check_postgrey
2018-06-14 13:50:06 +02:00
Jérémy Lecour
17d0c9c6bf
php: clarify configuration
...
* Variables for config file names are normalized* With Sury, Evolix configs are linked to regular 7.0 paths
2018-06-11 17:35:20 +02:00
Victor LABORIE
fbd97a5f08
java: support for Oracle JRE
2018-06-11 10:39:52 +02:00
Jérémy Lecour
03431fc116
mysql: add an option to install the dev client libraries
2018-06-09 13:15:08 +02:00
Jérémy Lecour
d917d867bb
changelog: minor rewording
2018-06-07 10:39:29 +02:00
Jérémy Lecour
d67abef13d
minifirewall: the tail file can be overwritten, or not
2018-06-04 16:31:36 +02:00
Victor LABORIE
17c8093711
nagios-nrpe: use bkctld check subcommand for NRPE check
2018-05-30 17:13:39 +02:00
Bruno TATU
108cd0f597
squid: whiteliste some news sites
2018-05-29 10:56:24 +02:00
Jérémy Lecour
7738de6f41
rbenv: switch from copy to lineinfile for default gems
2018-05-23 16:20:46 +02:00
Jérémy Lecour
3e5ea015c4
rbenv: install Ruby 2.5.1 by default
2018-05-23 16:18:23 +02:00
Jérémy Lecour
b4122be2b3
kibana: log messages go to /var/log/kibana/kibana.log
2018-05-22 15:17:16 +02:00
Jérémy Lecour
0054e4fdea
elasticsearch: add http.publish_host variable
2018-05-22 15:16:27 +02:00
Jérémy Lecour
f8babfd532
elasticsearch: tmpdir configuration compatible with 5.x also
2018-05-16 12:15:04 +02:00
Jérémy Lecour
4f4b7cd8dc
Release 9.2.0
2018-05-16 11:10:31 +02:00
Jérémy Lecour
4d148579c4
Changelog for elasticsearch changes
2018-05-16 11:08:18 +02:00
Jérémy Lecour
3dd1df8236
Changelog for varnish changes
2018-05-16 11:07:12 +02:00
Jérémy Lecour
2451e4d3fa
Changelog for NTP changes
2018-05-16 11:06:06 +02:00
Bruno TATU
a47a787a81
squid: add some domains and fix broken restrictions
2018-05-11 15:37:05 +02:00
Jérémy Lecour
93642b4afa
filebeat: cleanup unused code
2018-05-09 20:57:32 +02:00
Jérémy Lecour
10af35bf41
filebeat: install version 6.x by default
2018-05-09 20:56:48 +02:00
Jérémy Lecour
08d5ca5696
evolinux-users: fix secondary groups
...
With ANsible 2.2 the list of groups must be comma-separated
2018-05-02 17:16:36 +02:00
Jérémy Lecour
170bd6c2c1
Release 9.1.9
2018-04-24 16:45:05 +02:00
Jérémy Lecour
5c5361dbb5
apache: customize logrotate (52 weeks)
2018-04-22 18:10:47 +02:00
Jérémy Lecour
15ebb84bb6
mysql/mysql-oracle: mysqltuner cron scripts is 0755
2018-04-22 17:32:23 +02:00
Jérémy Lecour
8384e8ba43
evolinux: groups for SSH configuration are used with Debian 10 and later
2018-04-20 14:38:55 +02:00
Ludovic Poujol
e37b3f569a
generate-ldif: add a minifirewall service when /etc/default/minifirewall exists
2018-04-19 16:04:21 +02:00
Jérémy Lecour
2f631f1ae7
update Changelog
2018-04-18 12:16:57 +02:00
Jérémy Lecour
b01d9178d0
evolinux-users: split AllowGroups/AllowUsers modes
...
If an AllowGroups directive is found or when using Debian 9+,
we use the AllowGroups directive and comment AllowUsers that may be
already present.
When adding a user, we make sure that the allowed group exists
and the use is in that group, to be sure that at least this user
is allowed to connect.
In other situations, we use the AllowUsers directive.
2018-04-18 12:16:04 +02:00
Jérémy Lecour
b866b6fa0a
evolinux-base: fail2ban is not enabled by default
2018-04-18 12:15:43 +02:00