Commit graph

32 commits

Author SHA1 Message Date
phil d8b0c89506 Always restart service 2023-11-24 17:39:29 +01:00
phil a33c13eb04 Fix restart configuration 2023-11-24 17:39:00 +01:00
phil 872179cbcd Add Promehteus Exporter 2023-11-15 12:50:37 +01:00
phil 146716ad9c Set more restart settings 2023-11-15 12:03:35 +01:00
phil d60c4d99b9 Use systemd to "monitor" and restart the service 2023-11-01 08:13:57 +01:00
phil 6c6227919d Do not limit service by default 2023-11-01 08:08:21 +01:00
phil 90de9d5861 Enable configuration via variables 2023-10-16 12:50:11 +02:00
phil 61299bb763 Fix quoting 2023-06-10 23:45:48 +02:00
phil 92ca77f503 Watch apache log for open_basedir messages 2023-06-10 23:34:23 +02:00
phil dd180f3028 Fix socket name 2023-06-10 19:34:28 +02:00
phil a645239fac Fix pid file name 2023-06-10 18:34:23 +02:00
phil 04be772437 Add monit monitoring 2023-06-10 18:30:09 +02:00
phil 955ba86525 Remove some hardening options
To strict options prevent different services from running. It's
better to test these options and include them in specific roles.
2023-02-25 23:26:58 +01:00
phil af84818e91 Remove RuntimeDirectory option
Leading to all services running below the same user
2023-02-25 22:24:33 +01:00
phil 521a5d1bac Add trailing slash 2023-02-25 21:52:11 +01:00
phil 4bb9eb3870 Introduce more variables 2023-02-25 21:29:12 +01:00
phil cfdc088844 Define limits for CPU and MEM resources 2023-02-25 20:33:07 +01:00
phil 4f0d2f55e1 Add more hardening options 2023-02-25 20:32:51 +01:00
phil 04b028cd8e Create system user and systemd service/socket 2023-02-08 09:02:57 +01:00
phil a617d2bc7b Make variables configurable 2023-02-07 17:49:29 +01:00
phil 80ee6255ba Add warning about Ansible management 2023-02-07 17:49:06 +01:00
phil c5f64bd478 Remove unused error_log configuration
Set defaults for some variables
2023-02-07 17:34:46 +01:00
phil bf30370079 Rename files 2023-02-07 17:31:59 +01:00
phil 8a66420b04 Rename file 2023-02-07 17:18:07 +01:00
phil 34ee36fe04 php: Entferne Einschränkung für php cli Tools
War damals notwendig, da die kameradisten einen vollständigen SSH-
Zugang hatten. Seit einer Weile haben sie nur noch einen chroot-SFTP-
Zugang
2023-01-23 15:25:03 +01:00
phil 16c15c2095 php: Umformulierung 2023-01-16 16:31:00 +01:00
phil fc7c14eda5 php: Erstelle allgemeine PHP-FPM-Konfiguration 2022-08-18 08:40:39 +02:00
phil cf112b7cc1 php: Entferne ungenutzte Abschnitte aus php.ini 2022-06-09 15:16:50 +02:00
phil d81fe5f763 Umbenennung wwwusers-ng --> wwwusers 2022-06-08 00:47:11 +02:00
phil d5f39d1166 php: Entferne globales error_log für wwwusers-Gast. Vermeidet permissions-Probleme 2022-06-08 00:30:50 +02:00
phil 700457660c Erstelle php-playbook, Passe Rolle an 2022-01-14 23:32:15 +01:00
phil 51d94d1ca5 Verschiebe php-Kram in extra Rolle 2021-06-12 19:39:41 +02:00