majic-ansible-roles Changelog

Public journal
Gists
- Create New Gist
- All Public Gists
Search
My Pull Requests
Not Logged In

Login to Your Account
Username: Password:
Forgot password?

git majic-ansible-roles

Summary
Changelog
Files
Pull Requests
Options
- Compare
- Search

Changelog @ 28d44a25c785 - showing 100 out of 697 revisions

revisions Clear selection

Go to tip of repository Branch filter:

		branko	28d44a25c785	7 years ago		MAR-102: Fixed pip_check_requirements_upgrades.sh to sort both new and current requirements to avoid reporting false positives due to difference in ordering from pip-compile and sort -u. Used --upgrade option when running pip-compile to make sure upgrades are actually checked. Updated wsgihello2 to be more useful in testing the script.
		branko	dba4af01d257	7 years ago		MAR-101: Creating maintenance branch for release 1.5.0.
		branko	4cc257818365	7 years ago		MAR-101: Bumping version to 1.5-dev (switching back to development).
		branko	ef58882c1827	7 years ago		MAR-101: Preparing for release 1.5.0. 1.5.0
		branko	7d197a9ca71e	7 years ago		Noticket: Use %no-protection for batch generation of GnuPG keys in test site.
		branko	dad072caad55	7 years ago		MAR-97: Some wording fixes in release procedures. Added steps for removing the local issue branch. Updated template for release notes (include version).
		branko	c97004e25e56	7 years ago		MAR-97: Added release procedures to the documentation.
		branko	8c80240aa6d2	7 years ago		MAR-98: Fixed wrong mode set for pip_check_requirements_upgrade sub-directory in the wsgi_website role. Fixed wrong destination when deploying the requiremnts in/txt for wsgi_website role (Gunicorn + futures).
		branko	7082b10731b7	7 years ago		MAR-98: Fixed deployment of requirements files in the wsgihello2 role from testsite.
		branko	66da094b2fca	7 years ago		MAR-96: Moved setting of facts for gpg/gpg2 binary detection in backup_client role into separate yml file. Assigned the handlers tag to it to make sure the facts are available when only handlers get executed.
		branko	2b3af82bc50e	7 years ago		MAR-98: Updated testsite to include another WSGI hello world role that utilises wsgi_requirements in wsgi_website role, as well as pip-tools. Purposefully installs some outdated packages for testing the upgrade checks.
		branko	8ccec95cdfa5	7 years ago		MAR-98: Updated role reference documentation for wsgi_website role to include information about new parameter and mode of deployment. Updated usage instructions to mention pip requirements upgrade checks.
		branko	d9ba7498c212	7 years ago		MAR-98: Updated Gunicorn/futures version in wsgi_website role. Update wsgi_website role to make it possible to deploy WSGI server via requirements files (which will also deploy files for doing upgrade checks).
		branko	7ec508fb5108	7 years ago		MAR-98: Deploy cronjob task for pip requirements upgrade checks directly in order to be able to specify mail recipient.
		branko	76588ecee3af	7 years ago		MAR-98: Added support to common role for checking upgrades in pip requirements files via pip-tools. This is done through a custom script, with interested roles needing to deploy the files under a specific location. A crontab will run during midnight performing the check.
		branko	ae30483e6fc2	7 years ago		MAR-98: Updated role reference documentation for common role to mention apticron. Updated usage instructions with a new section covering upgrade check mechanisms.
		branko	bb5be981d963	7 years ago		MAR-98: Updated common role to deploy apticron for sending out notifications on availabe upgrades.
		branko	b3b2b6d5e9e2	7 years ago		MAR-99: Added documentation for the certificate verification functionality to both role reference and usage instructions.
		branko	aa2802e42d9d	7 years ago		MAR-99: Implemented script for checking local certificates (currently only expiration is supported). Updated common role to deploy the script, and set-up configuration directory for it. Updated roles that deploy certificates to also deploy configuration file for checking the certificate expiration dates.
		branko	24c957d877de	7 years ago		MAR-96: Fixed indentation for code listing in testsite documentation for generating the SSH keys. Added an extra "workstation" machine to test site meant to be used for testing Debian 9 Stretch compatibility. Moved testing of "extra_backup_patterns" into the new workstation machine.
		branko	6b87dd13b24c	7 years ago		MAR-96: Synchronised introduction in index.rst and about.rst. Added information about distribution compatibility, along with mention in introductory text.Switched to classic theme for documentation to get rid of documentation build warnings. Updated backup_client role so it can work with both Debian 8 and Debian 9. Changes between distro versions include: calling correct GnuPG binary, using correct GnuPG key ID format, installation additional dependencies, using correct Duply settings. Fixed _major_ bug related to additional backup keys (essentially, this never worked correctly due to wrong registered value being used when populating the Duply keyring).
		branko	4b964a31bd96	7 years ago		MAR-95: Separated configuration for backing-up the /root and /home directories in the common role. This should allow user to have better fine-grained control over what gets backed-up in the home directory. Updated role reference documentation. Updated the testsite variable configuration so the new setting can be tested.
		branko	bf96a77e88ab	7 years ago		MAR-100: Configure mail server name for mails coming from the local server via /etc/mailname. Make sure the configured name is equivalent to the full hostname specified in ansible inventory.
		branko	7b4f6e83237b	7 years ago		MAR-94: Fixed regular expression for configuring TLS ciphers used in Nginx.
		branko	c673de4db444	7 years ago		Noticket: Bumping version to 1.4-dev (switching back to development).
		branko	9b97210fd352	7 years ago		MAR-93: Preparing for release 1.4.0. 1.4.0 1.4
		branko	8548876c068b	7 years ago		MAR-90: Updated testsite to include the two new configuration options (to make sure they are applied correctly).
		branko	0426b42179d3	7 years ago		MAR-90: Fixed syntax for specifying TLS protocol in Nginx configuration file.
		branko	f79cc0281c7c	7 years ago		MAR-90: Fixed syntax for specifying TLS protocol in Dovecot configuration file.
		branko	6bc64e4e9c35	7 years ago		MAR-90: Added configuration options for the web_server role for specyfing TLS versions and ciphers to support on the server.
		branko	f344ed6181a9	7 years ago		MAR-90: Fixed small typo in documentation for ldap_server role. Added configuration parameters for the mail_server role for specifying TLS protocols and ciphers.
		branko	430eb250e244	7 years ago		MAR-90: Added option to ldap_server role for specifying TLS version/ciphers. Updated role reference documentation. Update usage instructions to mention the TLS ciphers/versions are configurable.
		branko	111e954e826d	7 years ago		MAR-89: Implemented mail_server role parameter for specifying maximum number of IMAP connections a single user can have from single IP address.
		branko	ced76d02b757	7 years ago		Noticket: Bumping version to 1.3-dev (switching back to development).
		branko	c96db74be6f8	7 years ago		MAR-87: Preparing for release 1.3.0. 1.3.0 1.3
		branko	f454072704fa	7 years ago		MAR-88: Include /etc/shadow, /var/mail, and /var/spool/cron/ in back-ups of common role.
		branko	2284f8fa383a	7 years ago		MAR-86: Once explicitly configured static locations have been exhausted, direct any further requests to WSGI application. I.e. do not serve files from document root unless explicitly configured.
		branko	7977a2033d9a	7 years ago		Noticket: Fixed ldap_permissions module - if no olcAccess rules are defined, assume empty list (otherwise we get key lookup exception).
		branko	3a9692d96170	7 years ago		Noticket: Fixed myhostname setting in Postfix configuration for mail_server and mail_forwarder roles.
		branko	7df70ebc439c	7 years ago		MAR-85: Updated all role firewall deployment rules to cover IPv6 in addition to IPv4. Update instructions to make it clear that an additional Python package is required.
		branko	b9979765e3a6	7 years ago		Noticket: Bumping version to 1.2-dev (switching back to development).
		branko	02686b6dcfc0	7 years ago		MAR-84: Preparing for release 1.2.0. Updated years in copyright notices. 1.2.0 1.2
		branko	4f7054d023b6	7 years ago		MAR-82: Make sure environment indicator is always on top of other elements by having ridiculously high z-index value.
		branko	67dd87d59abb	7 years ago		MAR-83: Added support to wsgi_website role for specifying headers that should be passed on to Gunicorn by Nginx. Updated hello.wsgi app to demonstrate the feature.
		branko	ed4b840fdf74	7 years ago		Noticket: Bumping version to 1.1-dev (switching back to development).
		branko	dadb5ff14c84	7 years ago		MAR-81: Preparing for release 1.1.0. 1.1.0 1.1
		branko	4f66faab0b48	7 years ago		MAR-72: Update usage instructions, user does not need to create symbolic link by hand anymore.
		branko	c120dfad296f	7 years ago		MAR-78: Fixed default values for local_mail_aliases in mail_server and mail_forwareder roles (should've been empty dict, not empty list).
		branko	0ec59430e00c	7 years ago		MAR-70: Updated testsite to include environment indicator. Updated the sample WSGI app role to output minimalistic HTML page (instead of text as it used to do until now).
		branko	4ca98a158269	7 years ago		MAR-70: Implemented support for having environment indicator on all HTML pages in wsgi_website and php_website roles.
		branko	4a3c8915f967	7 years ago		MAR-80: Added support to wsgi_website and php_website roles to specify list of e-mails or accounts that should receive mails delivered to role's administrator/application users. Updated application users in both roles to use same home directory as the admin. Added .keep file for docs/_static in order to avoid warnings when building documentation.
		branko	3bd270c9e860	7 years ago		MAR-78: Implement ability to specify local mail aliases in the mail_server role.
		branko	13fd27e4004c	7 years ago		MAR-79: Update mail_forwarder role to allow incoming connections to SMTP port from SMTP relay (if configured). Don't verify SMTP TLS server certificate if delivering mails directly.
		branko	7c58a0eb0e5a	7 years ago		MAR-77: Updated mail_server role to deliver undeliverable bounces to postmaster.
		branko	4dc3b09894e9	7 years ago		MAR-69: Introduced configuration option to php_website for providing additional PHP FPM settings. Updated testsite phpinfo role to use it. Updated usage and role reference documentation.
		branko	b757d690af42	7 years ago		MAR-75: Implemented support for specifying additional environment variables for the wsgi_website role. Environment is set-up for both the systemd service and for application admin user. Updated testsite implementation to use it for sample WSGI website.
		branko	db91799cc8fa	7 years ago		MAR-72: Set-up symbolic link for mysql_config pointing to mariadb_config when installing the libmariadb-client-lgpl-dev-compat package via common, php_website, or wsgi_website roles. Mainly useful when installin MySQL-python in wsgi_website role, but added in all three places for completeness.
		branko	3352797ee517	7 years ago		MAR-68: When enforcing TLS in web_server, wsgi_website, or php_website roles, send connecting clients proper HSTS policy via Strict-Transport-Security header.
		branko	483065c6c24f	7 years ago		MAR-67: Replace the stock root's .bashrc with skeleton one. Don't touch the file if it does not match default file shipped with distro.
		branko	e15b53d59517	7 years ago		MAR-67: Deploy /etc/profile.d/ configuration file that allows reading user-specific profile config files from ~/.profile.d/ directory. Create home directory for web application users in order to get all the fancy colouring etc. Deploy virtual environment activation script inside of wsgi_website role as profile.d script.
		branko	a40cf7a468ea	7 years ago		MAR-66: Create web application users with GECOS field that sets their umask to 0007 (this happens thanks to pam_umask).
		branko	9f9dbcb79909	7 years ago		MAR-74: Restart the WSGI applications when related packages are getting updated (in order to run against latest version of a package).
		branko	6d38fef46832	7 years ago		MAR-71: Add back the handler for updating CA certificate cache. It is still useful thing to run as a handler (when using -t handlers -e handlers=yes).
		branko	19b15357124a	7 years ago		MAR-76: Restart MariaDB immediatelly after defaulting to using UTF-8 character encoding in order to avoid issues with databases and tables being create with wrong encoding. Handler would not help since it runs at the end of current play.
		branko	6c256b0514cf	7 years ago		MAR-71: Update the CA certificate cache in the common role immediatelly instead as a handler. Solves issues where certificate validation is performed during the inital run of different roles (handler would run at the end of playbook). Removed unused handler for updating the CA certificate cache.
		branko	91f1fe045f28	7 years ago		MAR-73: Fixed the virtualenv wrapper script in wsgi_website role to properly escape arguments.
		branko	a717a6ccd782	7 years ago		MAR-65: Disable Emacs electric-indent-mode by default via common role (if Emacs is installed via common_packages).
		branko	3d6af3c95aea	8 years ago		Noticket: Bumping version to 1.0-maint (switching back to maintenance). 1.0
		branko	7a3255feb491	8 years ago		MAR-63: Preparing for release 1.0.1. 1.0.1
		branko	32c666acf83a	8 years ago		MAR-64: Removed TLS hardening from xmpp_server role in order to avoid incompatibilities during s2s communication.
		branko	849657875bb0	8 years ago		Noticket: Bumping version to 1.0-maint (switching to maintenance).
		branko	152b18777513	8 years ago		MAR-62: Removed TLS hardening from xmpp_server role in order to avoid incompatibilities during s2s communication.
		branko	c75a8ee52cb8	8 years ago		MAR-61: Bumping version to 1.0-dev (switching back to development).
		branko	71a306678e09	8 years ago		MAR-61: Preparing for release 1.0.0. 1.0.0
		branko	afc2e98bcd39	8 years ago		MAR-60: Removed an outdated warning from usage instructions. Use real command for running handlers in the usage instructions (one that would work with usage site).
		branko	987fea84e131	8 years ago		MAR-60: Revert to using Ansible 1.9.x due to bugs present in Ansible 2.0.x and 2.1.x. Only documentation needed changes, the implementation is otherwise backwards-compatible with 1.9.x.
		branko	e0c1f4e07f07	8 years ago		Noticket: Fix ownership for some files deployed by the phpinfo and wsgihello roles.
		branko	96b84032cb00	8 years ago		Noticket: No need to add the website admin to user group, this is the admin's main group anyway. Do not define admin variable for testsite wsgihello role."
		branko	32f61f233098	8 years ago		Noticket: Fixed documentation and examples for CA certificate deployment in common role. Fixed usage instructions, mainly some syntax changes and more explicit listing of parameters and such. Fixed path to truststore file for mail_forwarder role. Fixed testsite configurtion for CA certificates.
		branko	3af07319e2f3	8 years ago		MAR-59: Removed ability to specify admin user for php_website and wsgi_website roles. Updated testsite and usage instructions. Updated role reference.
		branko	05bbc00281d8	8 years ago		MAR-58: Fixed another spot where old version of Ansible was mentioned in docs.
		branko	f9416ce2b72f	8 years ago		MAR-58: Updated Ansible versioning information in documentation. Updated deprecated syntax in usage instructions.
		branko	922cda0a1834	8 years ago		MAR-58: Updated roles, LDAP modules, and test site to be compatible with Ansible 2.0.x and 2.1.x. Switched from using sudo/sudo_user to become/become_user. Fixed referencing of variables within roles, mainly for with_items/with_dicts calls. Improved handling of options in ldap_entry module to avoid deprecation of passing dict-like arguments to ldap_entry module. Minor fix to ldap_permissions module.
		branko	f4e9cd36dad4	8 years ago		MAR-57: Implemented customisation of bash shell prompt as part of the common role.
		branko	cd445c47c4bf	8 years ago		MAR-56: Fixing an issue with invalid option for ClamAV Milter (seems like it got removed in the Debian package for some reason).
		branko	b2cbf5050e57	8 years ago		MAR-56: Separated backup pattern assembly into a separate role in order to reduce number of tasks that run during each run, and to make the whole thing more consistent/modular. Updated usage and reference documentation.
		branko	97be416e882e	8 years ago		MAR-56: Set-up slapd to listen on legacy TLS port. Fixed ClamAV tasks used for waiting for ClamAV database to be donwloaded. Fixed some handling of rewrite rules for the PHP websites.
		branko	5a15eda01800	8 years ago		MAR-56: Wait for freshclam to download the initial ClamAV database in mail_server role. Make it possible to specify Gunicorn version in the wsgi_website role (and also install the required futures package now). Clarify the parameter for wsgi_application in wsgi_website role should be relative to code sub-directory. Simplify how roles are specified as deps in order to avoid reruns of shared roles in Ansible 1.9.x (for the non-parametrised/singleton roles, that is). Set correct prompt for virtual environments created in wsgi_website.
		branko	1b05bae8e440	8 years ago		MAR-56: Added LDIF templates to docs for relevant roles. Added warning about freshclam/clamav service restart during initial install (need to be restarted). Switched some TLS truststore vars to use concerete values. Introduced option for specifying additional Nginx config options. Added docs for some params. Assmeble Duplicity include pattern when needed. Don't set passwords for existing system users. Fix permissions for database users to be more restrictive. Fixed a couple of default param definitions (mainly tls cert/key stuff). Updated URL for downloading Prosody LDAP plugin. Updated testsite configs.
		branko	7387caca37f3	8 years ago		MAR-51: Introduced ability to only run the handlers for each role. May help with inconsitencies due to failed runs.
		branko	18cd76ec050d	8 years ago		MAR-51: Replaced referencing of local files for TLS keys and certificates with actual values. Documentation has been updated throughout to reflect this in both role reference and usage instructions.
		branko	61e6cfb81789	8 years ago		MAR-51: Fixed documentation for ansible_key parameter in preseed role. Updated ca_certificates parameter in common role to accept key-value pairs of filenames and certificates to put on remote host (so lookups/inventory can be utilised in more flexible manner). Updated backup_client role to fail if it is not possible to extract encryption key IDs from deployed keys. Moved purging of Exim4 configuration files from handlers to tasks (more robust, and still idempotent). All documentation has been updated as well.
		branko	a9e97d3e2306	8 years ago		MAR-54: Separated SMTP ports for server-to-server comms and user mail submission, allowing authentication only on port 587 (port 25 purely for server-to-server communication). Hardened TLS configuration on port 587.
		branko	6ac610bd3314	8 years ago		MAR-55: Accept incoming connections to port 636 on LDAP server.
		branko	1a2f50dfce57	8 years ago		MAR-49: Reworded role reference info about TLS hardening a bit. Implemented TLS hardening for the mail server role (Dovecot only, Postfix would require some additional work for service separation).
		branko	5d6cebe35306	8 years ago		MAR-49: Implemented TLS hardening for XMPP server role.
		branko	3907a5157ef8	8 years ago		MAR-49: Implemented TLS hardening for the LDAP server role.
		branko	9767536963e6	8 years ago		MAR-49: Implemented TLS hardening for web server role.
		branko	dfb91e411e40	8 years ago		MAR-46: Intorduced additional options to web server, PHP website, and WSGI website roles for controling if HTTPS access is enforced (HTTP redirected to HTTPS) or not. Defaults to enforcing HTTPS now. Updated docs for the new parameters.
		branko	680d322cf8cc	8 years ago		MAR-47: Added role dependency description to the role reference documentation. Added database_server role as dependency for the database role.

<
1
2
3
4
5
6
7
>

This site is powered by Kallithea 0.7.0, which is © 2010–2023 by various authors & licensed under GPLv3.