c4science/rolesmaster
c4science/roles
master
History Graph
History Graph
Commit | Author | Details | Committed | |||
---|---|---|---|---|---|---|
eb68032cf85a | aubort | apache: match serverlimit to ram available, dont read htaccess files | Mar 7 2016 | |||
f68b38aa8801 | aubort | discoveryurl for shib too on switchaai prod | Mar 7 2016 | |||
a4cce4de4bae | aubort | Use switchaai prod server | Mar 7 2016 | |||
e8c18fe48aa8 | aubort | Order of condition on mysql create tables script | Mar 7 2016 | |||
7719541794bf | aubort | remove shib tests from haproxy | Mar 7 2016 | |||
83d52ff79fcf | aubort | Shibboleth on every app instance, connected with mysql galera, phabricator… | Mar 7 2016 | |||
14d6d5b943dc | aubort | correct config file name for apache | Mar 7 2016 | |||
5a3c7f3b9653 | aubort | Migrate from nginx to apache for app servers (to integrate with mod_shibd) | Mar 7 2016 | |||
cc8cd289a212 | aubort | make shibboleth work behind haproxy | Mar 7 2016 | |||
641e9caf1985 | aubort | configure and install shibboleth for Switch AAI | Mar 7 2016 | |||
c36d5aad8f21 | aubort | Shibboleth role | Mar 7 2016 | |||
50f97d0b53e8 | aubort | Create instance | Mar 7 2016 | |||
39caf05a8732 | aubort | Configure shib frontend | Mar 7 2016 | |||
5929d44fac30 | aubort | Actually add group config file :) | Mar 7 2016 | |||
7f881ad188c8 | aubort | add groups for nagios | Mar 7 2016 | |||
c23a4b2cae80 | aubort | Merge branch 'master' of ssh://c4science.ch:2222/diffusion/PHCODE/science | Mar 7 2016 | |||
9b51e3c6f7ac | aubort | Nagios authentication handled by haproxy | Mar 7 2016 | |||
9a0d884ab4e7 | aubort | correct path in ansible receip | Mar 6 2016 | |||
b4ca0507af68 | aubort | Ignore Received header relayed by postfix | Mar 6 2016 | |||
5fb4e3d45609 | aubort | Correct logcheck rule.. | Mar 3 2016 | |||
b36fb0c8ebb8 | aubort | logcheck: i fail at regex.. | Mar 3 2016 | |||
6e397a4ad9d9 | aubort | Merge branch 'master' of ssh://86.119.26.165:2222/diffusion/PHCODE/science | Mar 3 2016 | |||
8eede36c5215 | aubort | Complitely disable selinux | Mar 2 2016 | |||
3dbf87b4eebb | aubort | selinux logs | Mar 1 2016 | |||
9ad110bb6033 | aubort | Full SSL is now working, it then closes T19 | Feb 29 2016 | |||
c06e7cadc17d | aubort | Allow acces by ip to phab (cert isnt valid though) | Feb 29 2016 | |||
b100305f7024 | aubort | Restart php when phab conf changes | Feb 29 2016 | |||
c3ebfdf872a4 | aubort | Logcheck ssh | Feb 28 2016 | |||
b0a31425207f | aubort | Logcheck: more precise rule | Feb 28 2016 | |||
a1919777e73a | aubort | correct logcheck rule | Feb 28 2016 | |||
e45b4e390ce7 | aubort | correct again logcheck rule | Feb 28 2016 | |||
dd556c15232b | aubort | Add logcheck rule for ntp | Feb 27 2016 | |||
385607ca2910 | aubort | fix logcheck rule for cron | Feb 27 2016 | |||
930b14bae71e | aubort | Fix ssl stuff for postfix | Feb 27 2016 | |||
10b233aa2ef9 | aubort | logcheck: match anything ansible | Feb 27 2016 | |||
e788e1ffc957 | aubort | correct logcheck rules... | Feb 27 2016 | |||
6c2b622cb261 | aubort | logcheck: generic CROND, add rsyslog rule | Feb 27 2016 | |||
d62180e3612d | aubort | Add anacron rule on logcheck | Feb 27 2016 | |||
a0cfc59d6177 | aubort | reorder logcheck rules a bit | Feb 27 2016 | |||
8326f55d36e6 | aubort | Add more logcheck rules | Feb 27 2016 | |||
9298881b854b | aubort | more logcheck rules | Feb 27 2016 | |||
0bcc6b15e5b3 | aubort | Correct cert path for postfix | Feb 26 2016 | |||
4b0257195e47 | aubort | postfix uses letsencrpyt cert, fix logcheck rule | Feb 26 2016 | |||
d01e0a2c9d93 | aubort | fix postfix alias | Feb 26 2016 | |||
60b3823bdba0 | aubort | logcheck: more cutom rules for ssh, cron, systemd | Feb 26 2016 | |||
8561e06d1c2a | aubort | logcheck: more systemd rules | Feb 26 2016 | |||
85cfd8b8a43e | aubort | arc symlink on app | Feb 25 2016 | |||
f01ee99e05a8 | aubort | hostname logs | Feb 25 2016 | |||
895ba78cea45 | aubort | rsyslog and logcheck emails | Feb 25 2016 | |||
4c1aa9e95d8e | aubort | Configure email aliases for forwarding | Feb 24 2016 | |||
cefe5db248c2 | aubort | correct email alias | Feb 23 2016 | |||
0ba58d5d8aae | aubort | Email alias for phab user | Feb 23 2016 | |||
26dd463c9e7f | aubort | Add contact group for Nagios | Feb 23 2016 | |||
900f99fa573e | aubort | Add www domain to ssl cert | Feb 23 2016 | |||
60f9aad90d99 | aubort | Moar postfix | Feb 23 2016 | |||
277e18ff2019 | aubort | haproxy stats and nagios/ganglia over TLS | Feb 23 2016 | |||
9887e7d25026 | aubort | Add postfix config to jump server | Feb 23 2016 | |||
e429f52c0593 | aubort | jenkins: add build status badge, add ViewStatus permission | Feb 23 2016 | |||
abefbb3db2ab | aubort | excplicitly disabled unused ports on jump server | Feb 23 2016 | |||
a8c62200f1b6 | aubort | option to allow http for jenkins | Feb 23 2016 | |||
64345608c4df | aubort | order of options | Feb 22 2016 | |||
60af6983846e | aubort | Moar good ciphers and blacklist tlsv1 and add hsts | Feb 22 2016 | |||
d2dbb21ce542 | aubort | May I have secure ciphers ? | Feb 22 2016 | |||
9690370a0003 | aubort | SSL everywhere | Feb 22 2016 | |||
6fac146c9cac | aubort | Correct letsencrypt scripts | Feb 22 2016 | |||
42882da235ee | aubort | letsencrypt rename script | Feb 22 2016 | |||
689c65c25745 | aubort | letsencrypt renew | Feb 22 2016 | |||
740640ee499d | aubort | jenkins url config | Feb 22 2016 | |||
c1071710a2c1 | aubort | Jenkins is accessed by subdomain instead of by port | Feb 22 2016 | |||
852233a898bb | aubort | static domain for files on phab | Feb 22 2016 | |||
ca995d8b1b29 | aubort | haproxy: httpcheck and sorry page | Feb 22 2016 | |||
3a0311adce2f | aubort | Jenkins configuration | Feb 22 2016 | |||
673adfa9ec62 | aubort | Configure jenkins with Ownership based permissions | Feb 22 2016 | |||
beb44e743151 | aubort | Mount docker data volume | Feb 22 2016 | |||
a33ab65a1e72 | aubort | Jenkins config: authentication with phab | Feb 22 2016 | |||
e3c61052e571 | aubort | Update submodule | Feb 19 2016 | |||
d9dd7924935d | aubort | docker slave host is not monitored yet | Feb 19 2016 | |||
f46c14000d3a | aubort | Logcheck is not a service | Feb 19 2016 | |||
6b8522a25263 | aubort | Clean host file when doing make init | Feb 19 2016 | |||
f7ee85d1a7f5 | aubort | Gracefull reboot of all instances | Feb 19 2016 | |||
77c7ad41a7ff | aubort | Add shibboleth tests | Feb 17 2016 | |||
afbd0ad6d431 | aubort | set passwords.. | Feb 17 2016 | |||
6f516cf5afdb | aubort | Disable ssl for now | Feb 17 2016 | |||
2aa363d90b58 | aubort | Handle ci slaves | Feb 15 2016 | |||
f2c583191eb2 | aubort | Add docker role, check phab ssl in nagios | Feb 12 2016 | |||
7244d81d3bdc | aubort | disable stat | Feb 11 2016 | |||
3d6605122ad3 | aubort | Merge branch 'master' of ssh://86.119.26.165:2222/diffusion/CODE/c-science | Feb 10 2016 | |||
7fea3c2a7692 | aubort | https by default (not on the app level though it doesnt know it's been accessed… | Feb 10 2016 | |||
1bd1a075eeb5 | aubort | Disable dev mode, config tuning | Feb 10 2016 | |||
b4d79010cf3b | aubort | Enable SSL and some config tuning | Feb 10 2016 | |||
f4878d1edf7b | aubort | Add jenkins config (docker ip must be ansibled*) | Feb 9 2016 | |||
1788a1713d90 | aubort | letsencrypt everything | Feb 9 2016 | |||
d969ed525337 | aubort | better mysql connection check with haproxy | Feb 8 2016 | |||
f0fd26ca9b7d | aubort | balance using source address, ssh is load balanced again (testing it again with… | Feb 8 2016 | |||
e4b5b0c9dce8 | aubort | limit by domains | Feb 5 2016 | |||
34e04fdcacbc | aubort | Merge branch 'master' of ssh://c4science-jump00:2222/diffusion/CODE/c-science | Feb 3 2016 | |||
19c8ddc834a7 | aubort | iftop everywhere | Feb 3 2016 | |||
86a93f0d5a6c | aubort | GlusterFS: initial and maximum number of replica is 3 | Feb 3 2016 | |||
3002b2296463 | aubort | Check repo mount is not ext4 | Feb 3 2016 | |||
3cacb63e7d3f | aubort | Use logcheck | Feb 1 2016 |
c4science · Help