Ajout d'un fichier goss pour s-agence

goss/s-agence.yaml

@@ -0,0 +1,39 @@
+command:
+  ip r:
+    exit-status: 0
+    stdout:
+    - default via 172.16.128.254 dev enp0s8
+    - 172.16.128.0/24
+    - 192.168.99.0/24
+    stderr: []
+    timeout: 10000
+  ping -c 2 172.16.0.1:
+    exit-status: 0
+    stdout:
+    - 0% packet loss
+    stderr: []
+    timeout: 10000
+  ping -c 2 172.16.128.254:
+    exit-status: 0
+    stdout:
+    - 0% packet loss
+    stderr: []
+    timeout: 10000
+  ping -c 2 192.168.1.1:
+    exit-status: 0
+    stdout:
+    - 0% packet loss
+    stderr: []
+    timeout: 10000
+  ping -c 2 192.168.1.2:
+    exit-status: 0
+    stdout:
+    - 0% packet loss
+    stderr: []
+    timeout: 10000
+  ping -c 2 192.168.200.254:
+    exit-status: 0
+    stdout:
+    - 0% packet loss
+    stderr: []
+    timeout: 10000

roles/docker-nextcloud/files/docker-compose.yml

@@ -21,11 +21,11 @@ services:
     image: nextcloud
     restart: always
     ports:
-      - 5678:80
+      - 8080:80
     links:
       - db
     volumes:
-      - ./nextcloud:/var/www/html
+      - nextcloud:/var/www/html
     environment:
       - MYSQL_PASSWORD=root
       - MYSQL_DATABASE=nextcloud

roles/docker-nextcloud/files/proxy

@@ -1,100 +0,0 @@
-##
-# You should look at the following URL's in order to grasp a solid understanding
-# of Nginx configuration files in order to fully unleash the power of Nginx.
-# https://www.nginx.com/resources/wiki/start/
-# https://www.nginx.com/resources/wiki/start/topics/tutorials/config_pitfalls/
-# https://wiki.debian.org/Nginx/DirectoryStructure
-#
-# In most cases, administrators will remove this file from sites-enabled/ and
-# leave it as reference inside of sites-available where it will continue to be
-# updated by the nginx packaging team.
-#
-# This file will automatically load configuration files provided by other
-# applications, such as Drupal or Wordpress. These applications will be made
-# available underneath a path with that package name, such as /drupal8.
-#
-# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples.
-##
-
-# Default server configuration
-#
-server {
-	listen 8080 default_server;
-	listen [::]:8080 default_server;
-
-	location / {
-		proxy_set_header Host $host;
-                proxy_set_header X-Real-IP $remote_addr;
-		proxy_pass http://localhost:5678;
-		proxy_connect_timeout 900;
-		proxy_send_timeout 900;
-		proxy_read_timeout 900;
-	}
-
-	# SSL configuration
-	#
-	# listen 443 ssl default_server;
-	# listen [::]:443 ssl default_server;
-	#
-	# Note: You should disable gzip for SSL traffic.
-	# See: https://bugs.debian.org/773332
-	#
-	# Read up on ssl_ciphers to ensure a secure configuration.
-	# See: https://bugs.debian.org/765782
-	#
-	# Self signed certs generated by the ssl-cert package
-	# Don't use them in a production server!
-	#
-	# include snippets/snakeoil.conf;
-
-#	root /var/www/html;
-
-	# Add index.php to the list if you are using PHP
-#	index index.html index.htm index.nginx-debian.html;
-
-#	server_name _;
-
-#	location / {
-		# First attempt to serve request as file, then
-		# as directory, then fall back to displaying a 404.
-#		try_files $uri $uri/ =404;
-#	}
-
-	# pass PHP scripts to FastCGI server
-	#
-	#location ~ \.php$ {
-	#	include snippets/fastcgi-php.conf;
-	#
-	#	# With php-fpm (or other unix sockets):
-	#	fastcgi_pass unix:/run/php/php7.3-fpm.sock;
-	#	# With php-cgi (or other tcp sockets):
-	#	fastcgi_pass 127.0.0.1:9000;
-	#}
-
-	# deny access to .htaccess files, if Apache's document root
-	# concurs with nginx's one
-	#
-	#location ~ /\.ht {
-	#	deny all;
-	#}
-}
-
-
-# Virtual Host configuration for example.com
-#
-# You can move that to a different file under sites-available/ and symlink that
-# to sites-enabled/ to enable it.
-#
-#server {
-#	listen 80;
-#	listen [::]:80;
-#
-#	server_name example.com;
-#
-#	root /var/www/example.com;
-#	index index.html;
-#
-#	location / {
-#		try_files $uri $uri/ =404;
-#	}
-#}

roles/icinga/files/cfg/hostgroups_icinga.cfg

@@ -15,13 +15,13 @@ define hostgroup {
 define hostgroup { 
 	hostgroup_name debian-servers 
 	alias		Serveurs distant
-	members        s-infra, s-proxy, r-int, r-ext, s-adm, s-itil, s-mess
+	members        s-infra, s-proxy, r-int, r-ext, s-adm, s-itil
 } 
 
 define hostgroup { 
 	hostgroup_name ssh-servers 
 	alias 		acces SSH 
-	members		s-adm, s-infra, s-proxy, r-int, r-ext, localhost, gwsio2, s-itil, s-mess, s-lb
+	members		s-adm, s-infra, s-proxy, r-int, r-ext, localhost, gwsio2, s-itil	 
 }
 
 define hostgroup { 
@@ -39,7 +39,7 @@ define hostgroup {
 define hostgroup {
         hostgroup_name  http-servers
 		alias           serveurs-web
-		members         localhost, s-itil, s-adm
+		members         localhost, s-itil 
         }
 
 #define hostgroup {
@@ -69,7 +69,6 @@ define hostgroup{
 define hostgroup{
 	hostgroup_name	uptimegrp
 	alias		uptimegrp
-	members		s-infra, s-proxy, r-int, r-ext, s-adm, s-itil, s-mess, s-lb
+	members		s-infra, s-proxy, r-int, r-ext, s-adm, s-itil
 }
 
-

roles/icinga/files/cfg/s-lb.cfg

@@ -1,14 +0,0 @@
-# A simple configuration file for monitoring the local host
-# This can serve as an example for configuring other servers;
-# Custom services specific to this host are added here, but services
-# defined in nagios2-common_services.cfg may also apply.
-# 
-
-define host{
-        use                     generic-host            ; Name of host template$
-        host_name               s-lb
-        alias                   debian-servers
-        address                 192.168.100.10
-        parents                 r-int
-        }
-

roles/icinga/files/cfg/s-mess.cfg

@@ -1,14 +0,0 @@
-# A simple configuration file for monitoring the local host
-# This can serve as an example for configuring other servers;
-# Custom services specific to this host are added here, but services
-# defined in nagios2-common_services.cfg may also apply.
-# 
-
-define host{
-        use                     generic-host            ; Name of host template$
-        host_name               s-mess
-        alias                   nextcloud
-        address                 172.16.0.7
-        parents                 r-int
-        }
-

roles/post/files/interfaces.r-vp1

@@ -21,9 +21,9 @@ allow-hotplug enp0s9
 iface enp0s9 inet static
 	address 192.168.1.2
 	netmask 255.255.255.0
-	post-up /usr/sbin/ip route add 172.16.128.0/24 via 192.168.1.2
+	post-up ip route add 172.16.128.0/24 via 192.168.1.2
-	post-up /usr/sbin/ip route add 172.16.0.0/24 via 192.168.1.1
+	post-up ip route add 172.16.0.0/24 via 192.168.1.1
-	post-up /usr/sbin/ip route add 192.168.200.0/24 via 192.168.1.1
+	post-up ip route add 192.168.200.0/24 via 192.168.1.1
 
 #	up route add -net 172.16.128.0/24 gw 192.168.0.52
 #	up route add default gw 192.168.1.1

roles/post/files/interfaces.r-vp2

@@ -21,8 +21,8 @@ allow-hotplug enp0s9
 iface enp0s9 inet static
 	address 192.168.0.52
 	netmask 255.255.255.0
-	post-up /usr/sbin/ip route add 192.168.1.0/24 via 172.16.128.254/24
+	post-up ip route add 192.168.1.0/24 via 172.16.128.254/24
-	post-up /usr/sbin/ip route add 172.16.0.0/24 via 172.16.128.254/24
+	post-up ip route add 172.16.0.0/24 via 172.16.128.254/24
 
 #	up route add -net 192.168.1.0/24 gw 192.168.0.52
 #	post-up /bin/bash /root/iptables-vpn

roles/post/files/interfaces.s-agence

@@ -9,6 +9,3 @@ iface lo inet loopback
 allow-hotplug enp0s3
 iface enp0s3 inet dhcp
 
-allow-hotplug enp0s8
-iface enp0s8 inet dhcp
-

roles/s-lb-ab/files/haproxy.cfg

@@ -44,7 +44,7 @@ backend fermeweb
 	#option httpchk HEAD / HTTP/1.0
 	server s-lb-web1 192.168.101.1:80 check
 	server s-lb-web2 192.168.101.2:80 check
-#	server s-lb-web3 192.168.101.3:80 check
+
 
 listen stats
 	bind	*:8080

s-agence.yml

@@ -7,3 +7,4 @@
     - ssh-cli
     - syslog-cli
     - post
+    - goss