Diffusion c4science (master) History

c4science/roles
master720b01ceeafb2377024bbce…

Mar 7 2016

Fix glusterd default config value
720b01ceeafb
·aubort on Mar 7 2016, 13:35.
apache: match serverlimit to ram available, dont read htaccess files
eb68032cf85a
·aubort on Mar 7 2016, 13:35.
discoveryurl for shib too on switchaai prod
f68b38aa8801
·aubort on Mar 7 2016, 13:35.
Use switchaai prod server
a4cce4de4bae
·aubort on Mar 7 2016, 13:35.
Order of condition on mysql create tables script
e8c18fe48aa8
·aubort on Mar 7 2016, 13:35.
remove shib tests from haproxy
7719541794bf
·aubort on Mar 7 2016, 13:35.
Shibboleth on every app instance, connected with mysql galera, phabricator…
83d52ff79fcf
·aubort on Mar 7 2016, 13:35.
correct config file name for apache
14d6d5b943dc
·aubort on Mar 7 2016, 13:35.
Migrate from nginx to apache for app servers (to integrate with mod_shibd)
5a3c7f3b9653
·aubort on Mar 7 2016, 13:35.
make shibboleth work behind haproxy
cc8cd289a212
·aubort on Mar 7 2016, 13:35.
configure and install shibboleth for Switch AAI
641e9caf1985
·aubort on Mar 7 2016, 13:35.
Shibboleth role
c36d5aad8f21
·aubort on Mar 7 2016, 13:35.
Create instance
50f97d0b53e8
·aubort on Mar 7 2016, 13:35.
Configure shib frontend
39caf05a8732
·aubort on Mar 7 2016, 13:35.
Actually add group config file :)
5929d44fac30
·aubort on Mar 7 2016, 13:34.
add groups for nagios
7f881ad188c8
·aubort on Mar 7 2016, 13:33.
Merge branch 'master' of ssh://c4science.ch:2222/diffusion/PHCODE/science
c23a4b2cae80
·aubort on Mar 7 2016, 13:21.
Nagios authentication handled by haproxy
9b51e3c6f7ac
·aubort on Mar 7 2016, 13:21.

Mar 6 2016

correct path in ansible receip
9a0d884ab4e7
·aubort on Mar 6 2016, 21:46.
Ignore Received header relayed by postfix
b4ca0507af68
·aubort on Mar 6 2016, 21:44.

Mar 3 2016

Correct logcheck rule..
5fb4e3d45609
·aubort on Mar 3 2016, 09:23.
logcheck: i fail at regex..
b36fb0c8ebb8
·aubort on Mar 3 2016, 09:20.
Merge branch 'master' of ssh://86.119.26.165:2222/diffusion/PHCODE/science
6e397a4ad9d9
·aubort on Mar 3 2016, 08:51.

Mar 2 2016

Complitely disable selinux
8eede36c5215
·aubort on Mar 2 2016, 15:19.

Mar 1 2016

selinux logs
3dbf87b4eebb
·aubort on Mar 1 2016, 13:12.

Feb 29 2016

Full SSL is now working, it then closes T19
9ad110bb6033
·aubort on Feb 29 2016, 21:56.
Allow acces by ip to phab (cert isnt valid though)
c06e7cadc17d
·aubort on Feb 29 2016, 21:41.
Restart php when phab conf changes
b100305f7024
·aubort on Feb 29 2016, 21:00.

Feb 28 2016

Logcheck ssh
c3ebfdf872a4
·aubort on Feb 28 2016, 19:59.
Logcheck: more precise rule
b0a31425207f
·aubort on Feb 28 2016, 19:49.
correct logcheck rule
a1919777e73a
·aubort on Feb 28 2016, 00:35.
correct again logcheck rule
e45b4e390ce7
·aubort on Feb 28 2016, 00:34.

Feb 27 2016

Add logcheck rule for ntp
dd556c15232b
·aubort on Feb 27 2016, 22:49.
fix logcheck rule for cron
385607ca2910
·aubort on Feb 27 2016, 22:48.
Fix ssl stuff for postfix
930b14bae71e
·aubort on Feb 27 2016, 22:47.
logcheck: match anything ansible
10b233aa2ef9
·aubort on Feb 27 2016, 13:15.
correct logcheck rules...
e788e1ffc957
·aubort on Feb 27 2016, 13:12.
logcheck: generic CROND, add rsyslog rule
6c2b622cb261
·aubort on Feb 27 2016, 12:39.
Add anacron rule on logcheck
d62180e3612d
·aubort on Feb 27 2016, 12:35.
reorder logcheck rules a bit
a0cfc59d6177
·aubort on Feb 27 2016, 12:33.
Add more logcheck rules
8326f55d36e6
·aubort on Feb 27 2016, 12:33.
more logcheck rules
9298881b854b
·aubort on Feb 27 2016, 01:08.

Feb 26 2016

Correct cert path for postfix
0bcc6b15e5b3
·aubort on Feb 26 2016, 20:18.
postfix uses letsencrpyt cert, fix logcheck rule
4b0257195e47
·aubort on Feb 26 2016, 13:25.
fix postfix alias
d01e0a2c9d93
·aubort on Feb 26 2016, 13:25.
logcheck: more cutom rules for ssh, cron, systemd
60b3823bdba0
·aubort on Feb 26 2016, 11:36.
logcheck: more systemd rules
8561e06d1c2a
·aubort on Feb 26 2016, 10:53.

Feb 25 2016

arc symlink on app
85cfd8b8a43e
·aubort on Feb 25 2016, 18:35.
hostname logs
f01ee99e05a8
·aubort on Feb 25 2016, 17:36.
rsyslog and logcheck emails
895ba78cea45
·aubort on Feb 25 2016, 15:47.

Feb 24 2016

Configure email aliases for forwarding
4c1aa9e95d8e
·aubort on Feb 24 2016, 17:02.

Feb 23 2016

correct email alias
cefe5db248c2
·aubort on Feb 23 2016, 18:51.
Email alias for phab user
0ba58d5d8aae
·aubort on Feb 23 2016, 18:51.
Add contact group for Nagios
26dd463c9e7f
·aubort on Feb 23 2016, 18:30.
Add www domain to ssl cert
900f99fa573e
·aubort on Feb 23 2016, 17:56.
Moar postfix
60f9aad90d99
·aubort on Feb 23 2016, 17:55.
haproxy stats and nagios/ganglia over TLS
277e18ff2019
·aubort on Feb 23 2016, 15:04.
Add postfix config to jump server
9887e7d25026
·aubort on Feb 23 2016, 14:55.
jenkins: add build status badge, add ViewStatus permission
e429f52c0593
·aubort on Feb 23 2016, 13:29.
excplicitly disabled unused ports on jump server
abefbb3db2ab
·aubort on Feb 23 2016, 12:24.
option to allow http for jenkins
a8c62200f1b6
·aubort on Feb 23 2016, 11:42.

Feb 22 2016

order of options
64345608c4df
·aubort on Feb 22 2016, 21:42.
Moar good ciphers and blacklist tlsv1 and add hsts
60af6983846e
·aubort on Feb 22 2016, 21:39.
May I have secure ciphers ?
d2dbb21ce542
·aubort on Feb 22 2016, 21:36.
SSL everywhere
9690370a0003
·aubort on Feb 22 2016, 18:02.
Correct letsencrypt scripts
6fac146c9cac
·aubort on Feb 22 2016, 18:01.
letsencrypt rename script
42882da235ee
·aubort on Feb 22 2016, 17:27.
letsencrypt renew
689c65c25745
·aubort on Feb 22 2016, 17:27.
jenkins url config
740640ee499d
·aubort on Feb 22 2016, 17:08.
Jenkins is accessed by subdomain instead of by port
c1071710a2c1
·aubort on Feb 22 2016, 16:37.
static domain for files on phab
852233a898bb
·aubort on Feb 22 2016, 16:10.
haproxy: httpcheck and sorry page
ca995d8b1b29
·aubort on Feb 22 2016, 15:52.
Jenkins configuration
3a0311adce2f
·aubort on Feb 22 2016, 15:15.
Configure jenkins with Ownership based permissions
673adfa9ec62
·aubort on Feb 22 2016, 13:36.
Mount docker data volume
beb44e743151
·aubort on Feb 22 2016, 10:48.
Jenkins config: authentication with phab
a33ab65a1e72
·aubort on Feb 22 2016, 09:56.

Feb 19 2016

Update submodule
e3c61052e571
·aubort on Feb 19 2016, 15:16.
docker slave host is not monitored yet
d9dd7924935d
·aubort on Feb 19 2016, 15:16.
Logcheck is not a service
f46c14000d3a
·aubort on Feb 19 2016, 15:16.
Clean host file when doing make init
6b8522a25263
·aubort on Feb 19 2016, 15:15.
Gracefull reboot of all instances
f7ee85d1a7f5
·aubort on Feb 19 2016, 15:14.

Feb 17 2016

Add shibboleth tests
77c7ad41a7ff
·aubort on Feb 17 2016, 17:09.
set passwords..
afbd0ad6d431
·aubort on Feb 17 2016, 14:25.
Disable ssl for now
6f516cf5afdb
·aubort on Feb 17 2016, 10:20.

Feb 15 2016

Handle ci slaves
2aa363d90b58
·aubort on Feb 15 2016, 15:10.

Feb 12 2016

Add docker role, check phab ssl in nagios
f2c583191eb2
·aubort on Feb 12 2016, 15:05.

Feb 11 2016

disable stat
7244d81d3bdc
·aubort on Feb 11 2016, 11:08.

Feb 10 2016

Merge branch 'master' of ssh://86.119.26.165:2222/diffusion/CODE/c-science
3d6605122ad3
·aubort on Feb 10 2016, 11:19.
https by default (not on the app level though it doesnt know it's been accessed…
7fea3c2a7692
·aubort on Feb 10 2016, 11:18.
Disable dev mode, config tuning
1bd1a075eeb5
·aubort on Feb 10 2016, 11:11.
Enable SSL and some config tuning
b4d79010cf3b
·aubort on Feb 10 2016, 11:10.

Feb 9 2016

Add jenkins config (docker ip must be ansibled*)
f4878d1edf7b
·aubort on Feb 9 2016, 12:42.
letsencrypt everything
1788a1713d90
·aubort on Feb 9 2016, 10:14.

Feb 8 2016

better mysql connection check with haproxy
d969ed525337
·aubort on Feb 8 2016, 10:56.
balance using source address, ssh is load balanced again (testing it again with…
f0fd26ca9b7d
·aubort on Feb 8 2016, 10:35.

Feb 5 2016

limit by domains
e4b5b0c9dce8
·aubort on Feb 5 2016, 13:32.

Feb 3 2016

Merge branch 'master' of ssh://c4science-jump00:2222/diffusion/CODE/c-science
34e04fdcacbc
·aubort on Feb 3 2016, 21:06.
iftop everywhere
19c8ddc834a7
·aubort on Feb 3 2016, 16:45.
GlusterFS: initial and maximum number of replica is 3
86a93f0d5a6c
·aubort on Feb 3 2016, 16:16.
Check repo mount is not ext4
3002b2296463
·aubort on Feb 3 2016, 15:53.

c4science/rolesmaster720b01ceeafb2377024bbce…

Mar 7 2016

Mar 6 2016

Mar 3 2016

Mar 2 2016

Mar 1 2016

Feb 29 2016

Feb 28 2016

Feb 27 2016

Feb 26 2016

Feb 25 2016

Feb 24 2016

Feb 23 2016

Feb 22 2016

Feb 19 2016

Feb 17 2016

Feb 15 2016

Feb 12 2016

Feb 11 2016

Feb 10 2016

Feb 9 2016

Feb 8 2016

Feb 5 2016

Feb 3 2016

c4science/roles
master720b01ceeafb2377024bbce…