Compare commits
No commits in common. "main" and "v3.2" have entirely different histories.
2
sio2/AP4/Vagrantfile
vendored
2
sio2/AP4/Vagrantfile
vendored
@ -15,7 +15,7 @@ Vagrant.configure("2") do |config|
|
|||||||
glpi.vm.hostname = "glpi" # Nom de la machine
|
glpi.vm.hostname = "glpi" # Nom de la machine
|
||||||
glpi.vm.network "public_network" #, ip: "192.168.0.111"# Set static IP
|
glpi.vm.network "public_network" #, ip: "192.168.0.111"# Set static IP
|
||||||
glpi.vm.provision "ansible" do |ansible|
|
glpi.vm.provision "ansible" do |ansible|
|
||||||
ansible.playbook = "provision/glpi.yml" # Lance le playbook glpi.yml
|
ansible.playbook = "glpi.yml" # Lance le playbook glpi.yml
|
||||||
end
|
end
|
||||||
end
|
end
|
||||||
end
|
end
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
- hosts: all
|
- hosts: all
|
||||||
become: true
|
|
||||||
roles:
|
roles:
|
||||||
- web
|
- web
|
||||||
- bdd
|
- bdd
|
||||||
- glpi
|
- install
|
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
- name: 1. Telechargement de l'archive de glpi 10.0.10
|
- name: 1. Telechargement de l'archive de glpi 10.0.10
|
||||||
get_url:
|
get_url:
|
||||||
url: http://depl.sio.lan/store/glpi-10.0.10.tgz
|
url: https://github.com/glpi-project/glpi/releases/download/10.0.10/glpi-10.0.10.tgz
|
||||||
dest: /tmp
|
dest: /tmp
|
||||||
|
|
||||||
- name: 2. Extraire glpi 10.0.10.tgz vers /tmp/
|
- name: 2. Extraire glpi 10.0.10.tgz vers /tmp/
|
@ -1,19 +0,0 @@
|
|||||||
# This file is part of systemd.
|
|
||||||
#
|
|
||||||
# systemd is free software; you can redistribute it and/or modify it under the
|
|
||||||
# terms of the GNU Lesser General Public License as published by the Free
|
|
||||||
# Software Foundation; either version 2.1 of the License, or (at your option)
|
|
||||||
# any later version.
|
|
||||||
#
|
|
||||||
# Entries in this file show the compile time defaults. Local configuration
|
|
||||||
# should be created by either modifying this file, or by creating "drop-ins" in
|
|
||||||
# the journal-upload.conf.d/ subdirectory. The latter is generally recommended.
|
|
||||||
# Defaults can be restored by simply deleting this file and all drop-ins.
|
|
||||||
#
|
|
||||||
# See journal-upload.conf(5) for details.
|
|
||||||
|
|
||||||
[Upload]
|
|
||||||
URL=http://192.168.1.42:19532
|
|
||||||
# ServerKeyFile=/etc/ssl/private/journal-upload.pem
|
|
||||||
# ServerCertificateFile=/etc/ssl/certs/journal-upload.pem
|
|
||||||
# TrustedCertificateFile=/etc/ssl/ca/trusted.pem
|
|
@ -1,10 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
sudo timedatectl set-timezone Europe/Paris
|
|
||||||
sudo apt-get update
|
|
||||||
sudo apt-get install -y systemd-journal-remote
|
|
||||||
sudo systemctl enable --now systemd-journal-remote.socket
|
|
||||||
sudo cp /lib/systemd/system/systemd-journal-remote.service /etc/systemd/system
|
|
||||||
sudo sed -i 's/--listen-https=-3/--listen-http=-3/' /etc/systemd/system/systemd-journal-remote.service
|
|
||||||
[[ -d /var/log/journal/remote ]] || sudo mkdir /var/log/journal/remote
|
|
||||||
sudo chown systemd-journal-remote /var/log/journal/remote
|
|
||||||
sudo systemctl daemon-reload
|
|
@ -1,9 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
# usage : ./journald-snd.sh 192.168.1.100
|
|
||||||
sudo timedatectl set-timezone Europe/Paris
|
|
||||||
sudo apt-get update
|
|
||||||
sudo apt-get install -y systemd-journal-remote
|
|
||||||
rpl="s/^# URL=/URL=http:\/\/${1}:19532/" # $1 represente l'adresse du recepteur
|
|
||||||
sudo sed -i "$rpl" /etc/systemd/journal-upload.conf
|
|
||||||
sudo systemctl enable --now systemd-journal-upload.service
|
|
||||||
sudo systemctl restart systemd-journal-upload.service
|
|
@ -1,46 +0,0 @@
|
|||||||
# SPDX-License-Identifier: LGPL-2.1-or-later
|
|
||||||
#
|
|
||||||
# This file is part of systemd.
|
|
||||||
#
|
|
||||||
# systemd is free software; you can redistribute it and/or modify it
|
|
||||||
# under the terms of the GNU Lesser General Public License as published by
|
|
||||||
# the Free Software Foundation; either version 2.1 of the License, or
|
|
||||||
# (at your option) any later version.
|
|
||||||
|
|
||||||
[Unit]
|
|
||||||
Description=Journal Remote Sink Service
|
|
||||||
Documentation=man:systemd-journal-remote(8) man:journal-remote.conf(5)
|
|
||||||
Requires=systemd-journal-remote.socket
|
|
||||||
|
|
||||||
[Service]
|
|
||||||
ExecStart=/lib/systemd/systemd-journal-remote --listen-http=-3 --output=/var/log/journal/remote/
|
|
||||||
LockPersonality=yes
|
|
||||||
LogsDirectory=journal/remote
|
|
||||||
MemoryDenyWriteExecute=yes
|
|
||||||
NoNewPrivileges=yes
|
|
||||||
PrivateDevices=yes
|
|
||||||
PrivateNetwork=yes
|
|
||||||
PrivateTmp=yes
|
|
||||||
ProtectProc=invisible
|
|
||||||
ProtectClock=yes
|
|
||||||
ProtectControlGroups=yes
|
|
||||||
ProtectHome=yes
|
|
||||||
ProtectHostname=yes
|
|
||||||
ProtectKernelLogs=yes
|
|
||||||
ProtectKernelModules=yes
|
|
||||||
ProtectKernelTunables=yes
|
|
||||||
ProtectSystem=strict
|
|
||||||
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
|
|
||||||
RestrictNamespaces=yes
|
|
||||||
RestrictRealtime=yes
|
|
||||||
RestrictSUIDSGID=yes
|
|
||||||
SystemCallArchitectures=native
|
|
||||||
User=systemd-journal-remote
|
|
||||||
WatchdogSec=3min
|
|
||||||
|
|
||||||
# If there are many split up journal files we need a lot of fds to access them
|
|
||||||
# all in parallel.
|
|
||||||
LimitNOFILE=524288
|
|
||||||
|
|
||||||
[Install]
|
|
||||||
Also=systemd-journal-remote.socket
|
|
Loading…
x
Reference in New Issue
Block a user