818 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Florian Pritz	9c27c789be	Update kanboard to 1.2.2 ... Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-31 15:27:28 +02:00
Florian Pritz	fa79adcb75	Give demize multilib access ... Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-29 23:13:14 +02:00
Florian Pritz	83a8fef6a4	php: Log error to syslog ... Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-26 00:00:38 +02:00
Florian Pritz	44c019e885	postfix: Disable SMTPUTF8 ... postfix has autodetection for enabling it, but when it is enabled and the remote doesn't support it, the mail bounces. Disable for now until we actually have a need for it. Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-24 21:07:20 +01:00
Florian Pritz	d00e5a5bf6	borg/backup-my.cnf: Quote password ... The password for luna contains some special chars that apparently don't work properly without quotes. Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-24 20:37:33 +01:00
Florian Pritz	a491fa6212	Configure borg-backup for luna ... Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-24 20:37:33 +01:00
Florian Pritz	5b52fed9d5	playbooks/all-hosts-basic: Remove old comment regarding borg-client ... Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-24 20:37:33 +01:00
Bartłomiej Piotrowski	b9aac3c0eb	Use sgp.mirror as build server	2018-03-24 20:13:40 +01:00
Bartłomiej Piotrowski	3244a80b29	Remove dead servers from hosts file	2018-03-24 20:01:24 +01:00
Florian Pritz	05abef50ee	common/zshrc: Show full hostname in prompt ... Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-24 15:02:46 +01:00
Florian Pritz	c0afd1e934	nginx-zabbix: Catch more write errors ... Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-22 12:13:39 +01:00
Florian Pritz	04e0e47a1f	arch-boxes: Update to 1.1.0 ... Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-21 16:53:28 +01:00
Florian Pritz	bd06381346	arch-boxes: Enable CPU/Memory accounting ... Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-21 15:51:56 +01:00
Florian Pritz	3d218efba2	arch-boxes: Pin git commit ... Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-21 15:51:42 +01:00
Florian Pritz	30947ebd5d	arch-boxes: Use vbox modules that are installed on soyuz ... Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-21 15:51:26 +01:00
Florian Pritz	479405be7f	zabbix-agent: Fix missing quotes for systemd.unit_data[] ... Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-21 15:43:33 +01:00
Florian Pritz	bbe72f4028	zabbix: Always install perl-json for system unit monitoring ... Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-21 15:39:21 +01:00
Florian Pritz	6f7e270939	zabbix/borg: Force scalar context for borg output ... This ensure compatability with JSON::PP which accepts a list rather than only a single argument. Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-21 15:37:40 +01:00
Florian Pritz	aa4b958283	common: Track /etc/systemd/system.conf ... For memory/cpu accounting to be disabled so that zabbix doesn't try to monitor all units on the machine. Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-21 15:18:27 +01:00
Florian Pritz	2869877025	zabbix-server: Increase poller count to 30 ... Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-21 13:42:54 +01:00
Florian Pritz	b847916c61	Disable firewalld tasks ... Disable firewall because python2 module is not avaible and the tasks fail which makes the playbooks fail and leads to handlers not being run. https://github.com/ansible/ansible/issues/24855 Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-21 12:38:01 +01:00
Florian Pritz	a960e513fc	zabbix-agent: Treat unset accounting values as 0 ... E.g. borg-backup.service has unset values when it is not running, but zabbix doesn't know what to do with a string when it expects an integer so fix those values here. Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-21 12:35:49 +01:00
Florian Pritz	b54f6b0c8b	nginx-zabbix: Let systemd restart us on SIGPIPE ... For some reason tail behaves strangely and the code that should trap the PIPE signal doesn't seem to do that. Let it die for now to maybe better see what happens. Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-16 10:17:04 +01:00
Florian Pritz	4b9233fd8b	Add new TU - Robin Broda ... Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-15 21:39:58 +01:00
Jelle van der Waa	0be60550cb	Update archweb to latest commit ... Update archweb to a new release, which contains more tests, an change in the mirror json output and the addition of the donation import script.	2018-03-12 21:59:13 +01:00
Florian Pritz	4c649da3b9	zabbix-agent: Use sudo to get borg output ... Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-12 17:15:23 +01:00
Florian Pritz	83dfa015c1	zabbix-agent: Use JSON::XS for borg parsing ... JSON::PP doesn't parse json that contains newslines (human readble json), but JSON::XS parses that just fine. borg outputs readable json so this is necessary. Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-12 15:50:07 +01:00
Florian Pritz	04451fe4c6	zabbix-agent: Use borg wrapper for monitoring ... Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-12 15:42:59 +01:00
Florian Pritz	690945a156	zabbix-agent: Monitor borg backup age ... Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-12 15:41:30 +01:00
Florian Pritz	f116173785	mariadb: Disable firewall rules when networking is disabled ... Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-11 00:47:37 +01:00
Florian Pritz	669f7f5420	mariadb: Disable networking ... We don't use it so it doesn't need to listen. Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-11 00:40:16 +01:00
Phillip Smith	b1744e6919	Merge branch 'wip/add-firewalld'	2018-03-08 09:49:42 +11:00
Phillip Smith	ef9f4b831d	tag firewall with "firewall" instead of "firewalld"	2018-03-08 09:49:13 +11:00
Florian Pritz	cd0b327317	archwiki: Disable 5second delay when running update script ... Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-07 12:08:12 +01:00
Florian Pritz	9dc3210259	archwiki: Deploy TitleKey extension ... This requires the update script to be run so add a handler for it. Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-07 12:02:02 +01:00
Phillip Smith	59807399ed	initial commit of firewalld role and tasks	2018-03-06 08:46:24 +11:00
Florian Pritz	9e0555f0bc	archwiki: Use SMTP to queue mail ... sendmail doesn't work from php due to our service file disabling setuid. Use SMTP just like the other services do. Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-05 22:19:43 +01:00
Bartłomiej Piotrowski	09b368f12f	Reserve servers for reproducible builds	2018-03-05 18:33:54 +01:00
Bartłomiej Piotrowski	6174080c9f	Remove nymeria from [dragon-backups]	2018-03-05 18:33:07 +01:00
Florian Pritz	5fdf684e6c	nginx-zabbix: Measure number of cached requests (0.000 request time) ... Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-05 17:04:41 +01:00
Florian Pritz	e28df1c7a1	php: Load opcache extension ... Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-03 15:12:28 +01:00
Florian Pritz	6888d2ec45	php: Uncomment opcache settings ... Enablding them doesn't really work well if they are still commented... Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-03 15:00:41 +01:00
Florian Pritz	7bce52d386	php: Enable opcache and opcache security settings ... Before validate_root and validate_permission opcache was insecure in a multiuser environment. Now it should be fine. Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-03 14:51:42 +01:00
Florian Pritz	b94de5bbc6	zabbix: Restart service when nginx-zabbix.pl changes ... Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-03 13:58:55 +01:00
Florian Pritz	ec121e92f8	nginx-zabbix: Ignore request time of 0 for stats ... All the cached requests have 0 request time and that brings the median request time to 0 nearly all the time thus rendering the stats useless. Since we want to know how the application requests perform, we can just ignore 0 values. Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-03 13:43:58 +01:00
Florian Pritz	1fa9697e41	php: Enable cpu/memory/io accounting for all fpm workers ... Signed-off-by: Florian Pritz <bluewind@xinu.at>	2018-03-03 11:28:36 +01:00
Giancarlo Razzolini	a40d6e1f98	Fix typo in the tags for the archwiki role	2018-03-02 22:31:22 -03:00
Giancarlo Razzolini	3d54465fab	Added the repository and version as variables ... Make the role fully idempotent by pinning the version and also use a variable for setting the repository.	2018-03-02 20:11:37 -03:00
Giancarlo Razzolini	2db718179c	Fix the description of the Prune Cache timer ... Fixed the description of the archwiki-prune-cache.timer.	2018-03-02 20:04:41 -03:00
Giancarlo Razzolini	bf43586686	Add the archwiki role to the apollo playbook ... Added the archwiki role to the apollo playbook and also added the intl extension to the php-fpm role.	2018-03-02 19:57:44 -03:00