Commit graph

945 commits

Author SHA1 Message Date
5d319cf167 Define rsyslog_{inputs,outputs} for all hosts 2021-03-02 00:52:38 +01:00
529550f594 Don't use 'imjournal' ('imuxsock' is already used)
I still don't understand why it increased the size of the firewall logs
by a factor of 5 to 10, but we don't really need structured logs from
systemd-journald and the author seems to discourage it's use, so I will
not investigate further.
2021-03-02 00:46:16 +01:00
ee041b9ead Use 'simple' instead of 'oneshot' (rotate service) 2021-03-02 00:14:25 +01:00
1f6bfeee23 Fix broadcast address on routeur-aurore
Some checks failed
continuous-integration/drone/push Build is failing
2021-03-01 20:04:38 +01:00
0f55b90de9 Remove 10.129.0.1 gateway on routeur-aurore-* 2021-03-01 20:04:02 +01:00
b13b22da05 Add ignored destinations for firewall logs
Some checks failed
continuous-integration/drone/push Build is failing
2021-03-01 19:39:11 +01:00
8f815a30c5 Remove useless date (already added by journald)
Some checks failed
continuous-integration/drone/push Build is failing
2021-03-01 17:47:12 +01:00
acd5721a5b Fix typos in rotate-remote-logs.service.j2 2021-03-01 17:45:17 +01:00
9547868c7d Send nginx logs to local syslog
Some checks failed
continuous-integration/drone/push Build is failing
2021-03-01 17:40:05 +01:00
cdb9f88614 Do not rate limit collection of journald logs
Some checks failed
continuous-integration/drone/push Build is failing
2021-03-01 16:31:52 +01:00
9eeb8ccd73 Remove non-Ansible SSH root keys
Some checks failed
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
2021-03-01 16:08:08 +01:00
1fe8d1d28b Remove "Root Aurore" SSH key + add histausse key 2021-03-01 13:28:49 +01:00
9252249d18 Use 'true' instead of 'yes'
Some checks failed
continuous-integration/drone/push Build is failing
2021-03-01 04:15:54 +01:00
e4b58c0bf4 Fix typo in 20-collector.conf.j2
Some checks failed
continuous-integration/drone/push Build is failing
2021-03-01 04:07:17 +01:00
c65b3f090b Compress and delete old remote logs
Some checks failed
continuous-integration/drone/push Build is failing
Logrotate is not used because I didn't found an easy way to configure it
to handle the compression/deletion of log files already rotated by
rsyslog (it is probably possible, but I found the script to be easier).
2021-03-01 03:58:58 +01:00
f7183095c1 Add explicit permissions for directories
Some checks failed
continuous-integration/drone/push Build is failing
2021-03-01 02:26:22 +01:00
ba8b4e8c29 Fix the ordering of rsyslog.d files
Some checks failed
continuous-integration/drone/push Build is failing
A call to sendLogsToRemote for logs received through RELP/UDP has
been added (to send them to Logstash/Redis/…), so common.conf's prefix
must be lower than collector.conf's.

Note: future "third-party" config files will also call sendLogsToRemote
and thus will also have to use a prefix higher than 10.
2021-03-01 02:15:28 +01:00
02a8cb84df Add log.yml playbook
Some checks failed
continuous-integration/drone/push Build is failing
2021-03-01 01:29:16 +01:00
4a43bf8a16 Add logging configuration for log.adm.auro.re 2021-03-01 01:28:30 +01:00
7fd1b5ff5d Add rsyslog_collector role 2021-03-01 01:27:56 +01:00
6263c31785 Add rsyslog_common role 2021-03-01 01:27:30 +01:00
89181c6cd6 Add log.adm.auro.re to inventory
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-28 22:59:36 +01:00
c3d24c1cd0 Add SSH key for Jeltz
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-28 21:47:42 +01:00
ynerant
52f73288b4 Merge pull request '[certbot] Fix certificates for auro.re' (#26) from certbot_aurore into master
All checks were successful
continuous-integration/drone/push Build is passing
Reviewed-on: Aurore/ansible#26
2021-02-24 13:59:36 +01:00
ba6da939ab
[certbot] Fix certificates for auro.re
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-24 13:57:59 +01:00
ynerant
ce821cbb1a Merge pull request '[nginx/certbot] Clone roles from Crans' (#25) from new_nginx into master
All checks were successful
continuous-integration/drone/push Build is passing
Reviewed-on: Aurore/ansible#25
2021-02-24 11:48:02 +01:00
ae151321db
[nginx/certbot] Clone roles from Crans
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
2021-02-24 11:46:37 +01:00
otthorn
f49194b423 Merge pull request 'Global_monitoring' (#24) from Global_monitoring into master
All checks were successful
continuous-integration/drone/push Build is passing
Reviewed-on: Aurore/ansible#24
2021-02-18 18:03:04 +01:00
d7d0676f5e Remove .save file; remove fo fleming prometheus
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2021-02-18 17:53:15 +01:00
a35488efdd [Docker] do not cache pip
Some checks failed
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
2021-02-18 00:14:12 +01:00
74c30b81df Merge branch 'master' into Global_monitoring
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2021-02-17 19:41:06 +01:00
b278b02bc2 Remove percentage sign for load alert
Some checks failed
continuous-integration/drone/push Build is failing
2021-02-17 19:37:33 +01:00
0b90c9944b Fix CI warning from last commit
Some checks failed
continuous-integration/drone/push Build is failing
2021-02-17 18:15:31 +01:00
61001e09f5 Add alert for load usage
Some checks failed
continuous-integration/drone/push Build is failing
2021-02-17 18:08:39 +01:00
a5b4deacee Rename federate role; update of alerts of federate prometheus; update of configuration of federate prometheus
Some checks failed
continuous-integration/drone/push Build is failing
2021-02-17 17:42:24 +01:00
otthorn
3eb9536c7b Merge pull request 'Update the documention for the docker image used for ansible-lint' (#23) from fix_docker_lint_doc into master
All checks were successful
continuous-integration/drone/push Build is passing
Reviewed-on: Aurore/ansible#23
2021-02-16 19:01:09 +01:00
c45d12cd6a 📝 use the full command
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2021-02-16 19:00:25 +01:00
83fd1b03e7 🚚 correctly name Dockerfile
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-16 18:44:18 +01:00
4dd75d1180 📝 Update the docker image doc for ansible-lint
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-16 18:40:48 +01:00
06d0bd56ae 📝 Update the docker image doc for ansible-lint 2021-02-16 18:34:57 +01:00
otthorn
bb026921e1 Merge pull request 'Fix linter issues and add CI badge' (#22) from fix_linter_issues into master
All checks were successful
continuous-integration/drone/push Build is passing
Reviewed-on: Aurore/ansible#22
2021-02-16 18:23:29 +01:00
f39ade227a 📝 add CI badge
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is passing
2021-02-16 18:22:19 +01:00
d5b77f83d3 Merge branch 'fix_linter_issues' of ssh://gitea.auro.re:2222/Aurore/ansible into fix_linter_issues
All checks were successful
continuous-integration/drone/push Build is passing
2021-02-16 18:19:17 +01:00
54aec3638f 🚨 fix var-spacing 2021-02-16 18:18:50 +01:00
902d219de3 🚨 fix risky-file-permission 2021-02-16 18:18:50 +01:00
1fe440aabe 🚨 fix empty-string-compare 2021-02-16 18:18:50 +01:00
008fb803d9 🚨 fix risky-file-permission 2021-02-16 18:18:50 +01:00
def64380e6 👷 do not ansible-lint the vault and fix useless rules 2021-02-16 18:18:50 +01:00
otthorn
5e784ff569 Merge pull request '🐛 Final fix, should stop sending ill-formed mail from now on' (#21) from fix_postfix_non_mail_host_again into master
Some checks failed
continuous-integration/drone/push Build is failing
Reviewed-on: Aurore/ansible#21
2021-02-16 18:11:00 +01:00
5b2580056d 🐛 Final fix, should stop sending ill-formed mail from now on
Some checks failed
continuous-integration/drone/push Build is failing
continuous-integration/drone/pr Build is failing
2021-02-16 18:10:39 +01:00