Changelog @ 373cdfe71c66 - showing 100 out of 697 revisions
revisions
Go to tip of repository Branch filter:
branko 373cdfe71c66
9 years ago
MAR-5: Implemented the initial web server role that deploys a basic Nginx to the server. Updated test site to include the new role (for server web.example.com).
branko 06bf1c3c9611
9 years ago
MAR-5: Added server to test site for testing the web server roles. Updated mail server configuration to relay mails for the web server in test site.
branko 61ddc6eab566
9 years ago
MAR-13: Updated documentation for the preseed role (added missin parameter description for ansible_key). Remove the ansible key from list of authorised keys for root user at end of bootstrap process. Updated testsite documentation to be more explicit for bootstrap process.
branko 8b88132d2576
9 years ago
MAR-13: Update docs for testsite. No need to run bootstrap.yml with -k option (we use public key at this point). Optimimsed the bootstrap process a bit to be faster/easier.
branko a6633bcc83d1
9 years ago
MAR-13: Added a hack to restart the slapd server once the group for OpenLDAP has been changed (otherwise the user can't read the TLS key, and error happens). Fixed some service resources to be explicitly enabled.
branko b0e7faa211ae
9 years ago
MAR-13: Fixed configuration of memberof overlay for the LDAP server. Switched to using jessie repository for the Prosody role. Install missing dep for Prosody server (for TLS).
branko b453b7fcb189
9 years ago
MAR-13: Don't use Wheezy backports repository for deploying mail server. Updated package name for Emacs.
branko d90dce790417
9 years ago
MAR-13: Fixed the instructions for bootstrapping servers in testsite.
branko e705dde5e6c7
9 years ago
MAR-13: Updated the template for preesed files for Jessie. Moved the ansible_key configuration option out of testsite's bootstrap playbook in order to use it inside of preseed files as well.
branko eb9a1b525c77
9 years ago
MAR-12: Added documentation related to firewall for the common role. Added deployment of firewall rules for roles mail_server, prosody, and ldap_server.
branko 941f4f372672
9 years ago
MAR-12: Updated the common role to deploy ferm, and set-up a basic firewall for allowing incoming SSH and ICMP echo requsts (ping).
branko 2285dcdda345
9 years ago
MAR-11: Force use of TLS when forwarding mails to mail relay, including proper server certificate verification. Updated testsite and docs as well.
branko 284ed92d40bb
9 years ago
MAR-10: Fixed truststore filename in docs for test site. Install the ssl-cert package explicitly, and allow server processes to access their keys by adding them to group ssl-cert instead.
branko 0ad9410c243a
9 years ago
MAR-10: Deploy CA certificates to /etc/ssl/certs/ only, otherwise some weird issues can happen in case update-ca-certificates does not run. Plus is it more straightforward. Deploy TLS private key/cert a bit later for all roles in order to have the necessary groups available. Fixed a wrong notify.
branko 96e9f230a669
9 years ago
MAR-10: Updated server roles to deploy private key and certificate. Updated documentation and test site configuration as well.
branko 76ed37089b33
9 years ago
MAR-10: Added support for deploying CA certificates to role 'common'. Make sure symlink truststore is deployed as file in Postfix chroot (for role mail_server). Small fix in handlers for role common (ls command is not necessary). Updated testsite configuration and documentation to refer to correct CA certificate file (for trust chain).
branko c9b8c60fbd5e
9 years ago
MAR-4: Deploy the SWAKS utility on servers that forward their mails via relay. Useful for testing.
branko 57667a2c528b
9 years ago
MAR-4: Updated instructions for setting-up the TLS stuff on mail server (keys, certs).
branko 9a5d1122146f
9 years ago
MAR-4: Added documentation for the mail forwarder role. Removed allowed networks for the mail forwarder role (the server is not supposed to relay mail).
branko c0df2fc4a827
9 years ago
MAR-4: Fixed the mydestination setting for mail server role to use inventory's hostname/FQDN.
branko 7ab6518de03b
9 years ago
MAR-4: Implemented mail forwarder role, to be used for sending out mails via relay from the local system. Updated testsite to use mail forwarder role for the LDAP and XMPP servers.
branko 08e3c2b79063
9 years ago
MAR-4: Updated mail server role, removing some redundant settings for TLS key/cert and moving some TLS settings a bit.
branko 298c0dbe1698
9 years ago
MAR-4: Updated documentation for the mail server role, adding information about rsync installation, set-up of chroot for Postfix, and the smtp_allow_relay_from option. Updated mail_server role implementation, fixing rsync command for deploying the truststore to preserve truststore permissions and adding support for specifying networks from which unauthenticated relaying should be allowed.
branko 07956dae35fc
9 years ago
MAR-4: Deploy the truststore PEM file for connecting to the LDAP server via rsync. Explicitly create directories for ClamAV in the Postfix chroot.
branko 81d6b5ac9240
9 years ago
MAR-4: Added example configuration for the mail server role. Updated name for the TLS key files. Added steps that need to be done after mail server has been set-up (for TLS keys mainly).
branko 52f75c39ab69
9 years ago
MAR-4: Added documentation for the mail server role.
branko 1b50bc1cc817
9 years ago
MAR-4: Simplified role parameters (make them all one-dimensional, don't use dictionaries).
branko 1bdb64307968
9 years ago
MAR-4: Added configuration options for mail postmaster (Dovecot setting).
branko 2f0d3abc3c49
9 years ago
MAR-4: Use static file configuration for ClamAV Milter. This is more reliable since there is no decent way to signal debconf to redeploy configuration files.
branko 12abf97ac229
9 years ago
MAR-4: Implemented scanning of mails via ClamAV. Added a couple of comments to Postfix configuration file.
branko 67d9190a521a
9 years ago
MAR-4: Added RBL support for Postifx SMTP checks.
branko cf897f8c1941
9 years ago
MAR-4: Updated formatting for Postfix main.cf.
branko 8367eb84cdcd
9 years ago
MAR-4: Fixed configuration syntax error for Postfix.
branko d9dae92d436c
9 years ago
MAR-4: Added SMTP authentication configuration to Postifx. Added TLS configuration to Postfix. Updated testsite. Removed unused file.
branko 98d0bcf75e46
9 years ago
MAR-4: Fixed configuration of separator for the inbox namespace in Dovecot.
branko d2f91c66acd3
9 years ago
MAR-4: Added configuration option for specifying Dovecot separator.
branko 85d2a408fd21
9 years ago
MAR-4: Updated testsite to include Dovecot LDAP password and IMAP TLS configuration.
branko 107417b217e0
9 years ago
MAR-4: Added some missing service restarts for Postfix. Added deployment of Dovecot configuration.
branko ce1b1a242584
9 years ago
MAR-4: Added creation of dedicated user/group for stored mail.
branko 74ed4756d5a6
9 years ago
MAR-4: Updated the main.cf Postfix configuration file. Updated available aliases in LDAP directory.
branko 5ef84494bbb1
9 years ago
MAR-4: Updated configuration for testsite mail server.
branko f7579be2c24b
9 years ago
MAR-4: Added stock main.cf Postfix configuration file. Added deployment of Postifx LDAP configuration files.
branko 233d1e763810
9 years ago
MAR-4: Added the misc schema to test site LDAP server.
branko 375f54472644
9 years ago
MAR-4: Added LDAP sub-tree for storing mail server information (domains and aliases) in test site.
branko be262063970c
9 years ago
MAR-4: Added LDAP users for Postfix/Dovecot to test site. Added an extra group for authorisation purposes for mail server. Deploy LDAP client role to mail server.
branko 82951ff4f9f9
9 years ago
MAR-4: Added initial implementation for mail server role. Includes deployment of packages and purging of Exim4 configuration. Dovecot packages installed from backports.
branko 19258e57da15
9 years ago
MAR-4: Adding new host as a dedicated mail server.
branko 66b36215b603
9 years ago
MAR-3: Added instructions for setting-up TLS keys and certs on the XMPP server in test site. Added LDAP client role to the XMPP server in test site. Updated path to TLS key/cert for XMPP server in test site.
branko 8b0cbc64f6e9
9 years ago
MAR-3: Added legacyauth module, including support for deprecated TLS/SSL on port 5223.
branko 713f25145801
9 years ago
MAR-3: Added example for Prosody role.
branko 8001cba3f698
9 years ago
MAR-3: Added role documentation.
branko c8875611c9ef
9 years ago
MAR-3: Swtiched to INFO logging. Define conference and proxy components per-domain. Removed two redundant options.
branko df7ad64eec5c
9 years ago
MAR-3: Replace tabs with spaces in Prosody configuration file.
branko e0bb5f34d1a5
9 years ago
MAR-3: Parameter should be passed in as a string, not list.
branko 7a863b26d8b8
9 years ago
MAR-3: Fixed the filter and LDAP password in testsite.
branko 758a28f87384
9 years ago
MAR-3: Fixing the LDAP bind credentials in test site.
branko 90417b999b1e
9 years ago
MAR-3: Adding the XMPP server to test site. Updated LDAP entry creation in test site to include the XMPP-related entries (service entry and group).
branko 2e1ff733350e
9 years ago
MAR-3: Adding Prosody repository apt key. Adding initial implementation of Prosody role, with support for LDAP.
branko d8e69dac1c5a
9 years ago
MAR-3: Adding dedicated XMPP server to test site.
branko 5524a4ad9904
9 years ago
MAR-1: Set the truststore for LDAP client. Create one more LDAP entry for people. Add sn, user password, and mail to existing LDAP people entries.
branko f7fe8adec8d3
9 years ago
MAR-1: Updated documentation about memberof overlay. Updated configuration of the memberof overlay.
branko 308745f2c2a8
9 years ago
MAR-1: Load the memberof module, and enable the memberof overlay on top of default database.
branko 6b57aabf9556
9 years ago
MAR-1: Fixed the handling of state addattributes in ldap_entry module to be more optimal (which also fixes some issues with cn=config additions related to inability to remove some attribute values).
branko de1d9aa13410
9 years ago
MAR-7: Moved sentence to a more logical location.
branko 778ff940ac19
9 years ago
MAR-7: Added some clarifications on where the commands should be run from. Added some general information about operating system user admin, and about manual steps that might need to be taken.
branko 16cf9817562c
9 years ago
MAR-7: Fixing a typo.
branko 237acd00f6a1
9 years ago
MAR-7: Added initial documentation about the test site.
branko 083df81ac1a4
9 years ago
MAR-7: Use socket for connecting to LDAP.
branko d0a6d20f081c
9 years ago
MAR-7: Authorise the LDAP admin to manage directory as well.
branko 0c81b8598748
9 years ago
MAR-7: Added server ldap.example.com. Updated site and group variables accordingly.
branko 720736b8b462
9 years ago
MAR-7: Added the bootstrap playbook, and added ldap.example.com server to hosts.
branko aaab9c5c3eb1
9 years ago
MAR-7: Added playbook for setting-up preseed files. Added small Ansible configuration file in order to easily locate the roles. Added preseed file configuration for LDAP server.
branko 4782a39c90dd
9 years ago
MAR-1: Adding initial documentation for the LDAP server role.
branko 58e1c3121e77
9 years ago
MAR-1: Added configuration of Strength Security Factor (SSF).
branko 7d6c2d8f03bf
9 years ago
MAR-1: Make sure Python LDAP bindings are installed a bit earlier. Configure TLS if certificate file and private key are available.
branko 9eca957bb9db
9 years ago
MAR-1: Configure private key directory permissions.
branko ea92f99d9c33
9 years ago
MAR-1: Set explicitly the log level for slapd.
branko fa1452af4f5d
9 years ago
MAR-1: Added handling of attribute adding/removal/replacement for an existing LDAP entry.
branko 30c772db9c58
9 years ago
MAR-1: Rotate slapd log files.
branko ec982756013f
9 years ago
MAR-1: Explicitly enable the slapd service. Added configuration of system logger for separating slapd log messages.
branko f6b064773072
9 years ago
MAR-1: Construct error messages in a safer way.
branko 4dbf76708c93
9 years ago
MAR-1: Adding extension for Python files.
branko 3816b71c274c
9 years ago
MAR-1: Added reference documentation for LDAP client role.
branko b1e6de7dd8a7
9 years ago
MAR-1: Updated LDAP server task to include creation of LDAP entries.
branko 6cb6962b03f4
9 years ago
MAR-1: Added module for adding LDAP entries.
branko 7acb00749061
9 years ago
MAR-1: Updated Ansible version introduction for LDAP permissions module.
branko e4a207fa3a07
9 years ago
MAR-1: Added support for specifying LDAP UIR, bind DN, and bind password. Expanded examples for this. Refactored module to be a bit more robust/better encapsulated.
branko dcd5e6e08117
9 years ago
MAR-1: Added role for deploying the LDAP server.
branko d1a4cfa37a3f
9 years ago
MAR-1: Added a small module for managing the LDAP permissions.
branko c7a0c2eb39ce
9 years ago
MAR-1: Added support for deploying the LDAP clients (and configuring them).
branko 0aff90546ac4
9 years ago
MAR-2: Updated docs formatting a bit. Added documentation for the bootstrap role. Updated bootstrap role a bit to have better authorized key referencing.
branko 626eadba53b7
9 years ago
MAR-2: Added the 'common' role for some basic server set-up.
branko cc12c282bb3d
9 years ago
MAR-2: Added a role for generating the preseed files.
branko c377c1d24d7c
9 years ago
MAR-6: Added initial documentation with some basic description of the project, links, and structure.
branko b47e78d031ca
9 years ago
MAR-6: Added license and README file. Ignore documentation builds in git repo.
branko 610ba8743493
9 years ago
MAR-6: Initialised Sphinx-backed documentation.
branko ea6438c4297f
9 years ago
Noticket: Adding a gitignore file.
This site is powered by Kallithea 0.7.0, which is © 2010–2023 by various authors & licensed under GPLv3.