Changelog @ b7a248e3c287 - showing 100 out of 548 revisions
revisions
Go to tip of repository Branch filter:
branko b7a248e3c287
10 years ago
MAR-35: Fixed documentation for tls_private_key_dir and tls_certificate_dir options. Fixed default definition for common packages that should be deployed on servers.
branko 121c6165add4
10 years ago
MAR-35: Fixed the user of Ansible facts (fixed wrong variable name).
branko 5272f991ac65
10 years ago
MAR-20: Added information about compatible/tested versions of Ansible.
branko 611b125071e0
10 years ago
MAR-19: Small update for scanning SSH keys so we wouldn't end-up with thousands of SSH keys.
branko 55dd00900508
10 years ago
MAR-19: Tweaked the default permissions for LDAP a bit, to allow users to read all entries in LDAP tree (except passwords, of course).
branko 955d4a31a0b0
10 years ago
MAR-19: Make the ansible_key var for bootstrap role optional.
branko e1f36d36827b
10 years ago
MAR-19: Fixed missing parameter for using TLS for LDAP connections in Prosody configuraiton template. Fixed LDAP client configurations, moving most of them out of the individual yml files into all.yml (so only the ldap server gets different config).
branko ed37f9854bfb
10 years ago
MAR-19: Simplified the WSGI website role by making a number of parameters optional.
branko 76e05de03837
10 years ago
MAR-19: Fixed documentation for optional TLS key/certificate parameters. Simplified php website role, making some parameters optional. Fixed the optional parameters for TLS for web server role.
branko 5b175621f79a
10 years ago
MAR-19: Fixed some docs. Made a bunch of parameters optional for web server role.
branko 226b5faf3e5a
10 years ago
MAR-19: Simplified the mail forwarder role by making some of the parameters optional.
branko e838bcb94a9e
10 years ago
MAR-19: Simplified the mail server parameters by making a bunch of them optional.
branko fb163acf23e7
10 years ago
MAR-19: Fixed handling off TLS private keys and certificates. Added some common parameters for defining where the TLS private keys and certificates reside.
branko e61d502b9d00
10 years ago
MAR-19: Simplified a couple of parameters in the xmpp_server role.
branko 63d26c0b3d86
10 years ago
MAR-19: Simplified LDAP permissions specification for the LDAP server. Auto-calculate on which db the permissions need to be changed (instead of having user provide it). Also switched to a single tree where it can be configured. Updated the example in role reference.
branko 99edcba90842
10 years ago
MAR-19: Simplified the parameters for LDAP server role. Most of the parameters have become optional, with some smart defaults.
branko b325005c1a8f
10 years ago
MAR-19: Flattened the ldap server configurtion parameter provisioning (i.e. no more placeholder dictionary, instead use distinct variable names for each option).
branko 4c5f1593c786
10 years ago
MAR-19: Make the ldap client configuration optional.
branko fe6cdb2443c7
10 years ago
MAR-19: Simplified the parameters for common role, making a lot of them optional with some sane defaults. Switched to using an actual list for additional groups.
branko a25135cc9e78
10 years ago
MAR-19: Updated documentation for the preseed role to match parameter redesign. Removed some testing file that was added to playbooks by mistake earlier.
branko 644df4147123
10 years ago
MAR-19: Updated the preseed role. Redesigned how the parameters can be provided (role defaults + user-defined global defaults + per server overrides now). Made the ansible_key optional. Made the preseed_directory optional. All servers except localhost are now processed for preseed generation. Docs not updated yet.
branko b4ac65219ef1
10 years ago
MAR-34: Small usability improvements, not related to original issue. Improved the ssh-keyscan command a bit to include IP addresses in output as well. Store Ansible retry files locally in the retry directory (relative to testsite).
branko 1b76d272e529
10 years ago
MAR-34: Renamed the role prosody to xmpp_server. Updated all parameters for the role to be prefixed with xmpp_ instead of prosody_. Updated documentation.
branko 9b1a9fdc99e5
10 years ago
MAR-17: Added feature description for the project. Bumped the copyright year while at it.
branko c56a03a698ee
10 years ago
MAR-9: Updated documentation to describe how to change the domain in test site. Updated instructions for generating the TLS keys and certificates (via playbook) in test site.
branko 62fc50dc3f75
10 years ago
MAR-9: Removing the unused defaults file for wsgi hello world website example.
branko 70733167cdf8
10 years ago
MAR-9: Created small utility playbook in testsite for generating the necessary TLS keys and certificates. Updated testsite configuration to be slightly different (no need for separate chain file I think).
branko 0f17841d0aad
10 years ago
MAR-9: Updated the testsite to use domain parameter defined within all.yml. Some regex replacements are done in same file to calculate the remaining necessary values. Fixed a small code error in ldap_permissions module.
branko babda105c9cf
10 years ago
MAR-16: Added option to common role for setting-up caching proxy for apt.
branko 424710fc61e1
10 years ago
MAR-14: Moved the support and license sections out of index page, and onto the about page.
branko 40689344a8f3
10 years ago
MAR-15: Implemented role for deploying a MariaDB database.
branko 09625826d96f
10 years ago
MAR-15: Added implementation for the database server role. Performs very simpled deployment and set-up of MariaDB database server.
branko 1e2d2a723cca
10 years ago
MAR-5: Updated test documentation instructions for generating private keys/certs. Sleep for 1 second (dirty hack) to have the certs have distinct serial numbers (since they're equal to epoch time).
branko 884beb9a0e1d
10 years ago
MAR-5: Fixed a typo in docs for test site (wrong filename path for certificate). Added encryption_key option to certtool templates in test site in order to have key encipherment key usage in resulting certificates (otherwise Thunderbird, for example, won't be able to connect to SMTP server).
branko 052eefc4fab0
10 years ago
MAR-5: Ignore certificate and key files in TLS sub-directory (include GnuTLS templates). Updated test site docs to describe all playbooks. Updated test site set-up instructions to include sample commands for generating the keys/certs. Added two roles to test site for deploying simple PHP/WSGI websites.
branko d26fe0368a4b
10 years ago
MAR-5: Updated php and wsgi website roles to include set-up website-specific TLS configuration for Nginx (including separate TLS key/certificate if necessary).
branko 9fa438ee34c0
10 years ago
MAR-5: Added another example to role reference for running PHP websites. Allow duplicates of roles php_website and wsgi_website. Use parameter in handler for restarting WSGI website (to have them website-specific). Updated test site to force handler execution in order to avoid being in undefined state.
branko bd13e65e0e94
11 years ago
MAR-5: Updated the wsgi website to make the nginx configirations look a bit better.
branko 7f8ef577fa2c
11 years ago
MAR-5: Fixed syntax error. Updated formatting a bit to produce nicer-looking files.
branko a3d735d2655f
11 years ago
MAR-5: Enable default website when doing the web server role.
branko 222008c85003
11 years ago
MAR-5: Make sure we don't end-up in recursion when making location.
branko 40473a82c752
11 years ago
MAR-5: Updated the PHP website role to be a bit more flexible when configuring the nginx.
branko 37de8a97187c
11 years ago
MAR-5: Updated WSGI webserver role to have the website service running with correct umask.
branko 981584549895
11 years ago
MAR-5: Adding the initial implementation of the WSGI website role.
branko 467a66f3ec65
11 years ago
MAR-5: Added handler for reloading systemd configuration to common role. Dropped installation of supervisor as part of web server role. Updted web server role to create directory for storing WSGI application sockets. Updated web server role to use correct directory for storing PHP website sockets.
branko be92dd65fc60
11 years ago
MAR-5: Updated web server and php website roles, adding ability to validate the nginx configuration file prior to deployment (via special bash script).
branko 3f2756d25f85
11 years ago
MAR-5: Updated task names for PHP website role.
branko 7727c37bce67
11 years ago
MAR-5: Fixed some typos in role reference for web server. Added initial implementation of a role for deploying PHP websites (some common functionality).
branko 21122b16bd6b
11 years ago
MAR-5: Updated test site, reducing the UID/GID number for some sample groups, and adding unzip to list of common packages.
branko d71d401dbd28
11 years ago
MAR-5: Updated web server role. Fixed the permissions of default vhost configuration file. Create directory for storing PHP FPM log files. Run php5-fpm with umask 0007.
branko 0079746d9a8b
11 years ago
MAR-5: Updated the web server role to include deployment of some base packages for PHP and Python web apps.
branko 373cdfe71c66
11 years ago
MAR-5: Implemented the initial web server role that deploys a basic Nginx to the server. Updated test site to include the new role (for server web.example.com).
branko 06bf1c3c9611
11 years ago
MAR-5: Added server to test site for testing the web server roles. Updated mail server configuration to relay mails for the web server in test site.
branko 61ddc6eab566
11 years ago
MAR-13: Updated documentation for the preseed role (added missin parameter description for ansible_key). Remove the ansible key from list of authorised keys for root user at end of bootstrap process. Updated testsite documentation to be more explicit for bootstrap process.
branko 8b88132d2576
11 years ago
MAR-13: Update docs for testsite. No need to run bootstrap.yml with -k option (we use public key at this point). Optimimsed the bootstrap process a bit to be faster/easier.
branko a6633bcc83d1
11 years ago
MAR-13: Added a hack to restart the slapd server once the group for OpenLDAP has been changed (otherwise the user can't read the TLS key, and error happens). Fixed some service resources to be explicitly enabled.
branko b0e7faa211ae
11 years ago
MAR-13: Fixed configuration of memberof overlay for the LDAP server. Switched to using jessie repository for the Prosody role. Install missing dep for Prosody server (for TLS).
branko b453b7fcb189
11 years ago
MAR-13: Don't use Wheezy backports repository for deploying mail server. Updated package name for Emacs.
branko d90dce790417
11 years ago
MAR-13: Fixed the instructions for bootstrapping servers in testsite.
branko e705dde5e6c7
11 years ago
MAR-13: Updated the template for preesed files for Jessie. Moved the ansible_key configuration option out of testsite's bootstrap playbook in order to use it inside of preseed files as well.
branko eb9a1b525c77
11 years ago
MAR-12: Added documentation related to firewall for the common role. Added deployment of firewall rules for roles mail_server, prosody, and ldap_server.
branko 941f4f372672
11 years ago
MAR-12: Updated the common role to deploy ferm, and set-up a basic firewall for allowing incoming SSH and ICMP echo requsts (ping).
branko 2285dcdda345
11 years ago
MAR-11: Force use of TLS when forwarding mails to mail relay, including proper server certificate verification. Updated testsite and docs as well.
branko 284ed92d40bb
11 years ago
MAR-10: Fixed truststore filename in docs for test site. Install the ssl-cert package explicitly, and allow server processes to access their keys by adding them to group ssl-cert instead.
branko 0ad9410c243a
11 years ago
MAR-10: Deploy CA certificates to /etc/ssl/certs/ only, otherwise some weird issues can happen in case update-ca-certificates does not run. Plus is it more straightforward. Deploy TLS private key/cert a bit later for all roles in order to have the necessary groups available. Fixed a wrong notify.
branko 96e9f230a669
11 years ago
MAR-10: Updated server roles to deploy private key and certificate. Updated documentation and test site configuration as well.
branko 76ed37089b33
11 years ago
MAR-10: Added support for deploying CA certificates to role 'common'. Make sure symlink truststore is deployed as file in Postfix chroot (for role mail_server). Small fix in handlers for role common (ls command is not necessary). Updated testsite configuration and documentation to refer to correct CA certificate file (for trust chain).
branko c9b8c60fbd5e
11 years ago
MAR-4: Deploy the SWAKS utility on servers that forward their mails via relay. Useful for testing.
branko 57667a2c528b
11 years ago
MAR-4: Updated instructions for setting-up the TLS stuff on mail server (keys, certs).
branko 9a5d1122146f
11 years ago
MAR-4: Added documentation for the mail forwarder role. Removed allowed networks for the mail forwarder role (the server is not supposed to relay mail).
branko c0df2fc4a827
11 years ago
MAR-4: Fixed the mydestination setting for mail server role to use inventory's hostname/FQDN.
branko 7ab6518de03b
11 years ago
MAR-4: Implemented mail forwarder role, to be used for sending out mails via relay from the local system. Updated testsite to use mail forwarder role for the LDAP and XMPP servers.
branko 08e3c2b79063
11 years ago
MAR-4: Updated mail server role, removing some redundant settings for TLS key/cert and moving some TLS settings a bit.
branko 298c0dbe1698
11 years ago
MAR-4: Updated documentation for the mail server role, adding information about rsync installation, set-up of chroot for Postfix, and the smtp_allow_relay_from option. Updated mail_server role implementation, fixing rsync command for deploying the truststore to preserve truststore permissions and adding support for specifying networks from which unauthenticated relaying should be allowed.
branko 07956dae35fc
11 years ago
MAR-4: Deploy the truststore PEM file for connecting to the LDAP server via rsync. Explicitly create directories for ClamAV in the Postfix chroot.
branko 81d6b5ac9240
11 years ago
MAR-4: Added example configuration for the mail server role. Updated name for the TLS key files. Added steps that need to be done after mail server has been set-up (for TLS keys mainly).
branko 52f75c39ab69
11 years ago
MAR-4: Added documentation for the mail server role.
branko 1b50bc1cc817
11 years ago
MAR-4: Simplified role parameters (make them all one-dimensional, don't use dictionaries).
branko 1bdb64307968
11 years ago
MAR-4: Added configuration options for mail postmaster (Dovecot setting).
branko 2f0d3abc3c49
11 years ago
MAR-4: Use static file configuration for ClamAV Milter. This is more reliable since there is no decent way to signal debconf to redeploy configuration files.
branko 12abf97ac229
11 years ago
MAR-4: Implemented scanning of mails via ClamAV. Added a couple of comments to Postfix configuration file.
branko 67d9190a521a
11 years ago
MAR-4: Added RBL support for Postifx SMTP checks.
branko cf897f8c1941
11 years ago
MAR-4: Updated formatting for Postfix main.cf.
branko 8367eb84cdcd
11 years ago
MAR-4: Fixed configuration syntax error for Postfix.
branko d9dae92d436c
11 years ago
MAR-4: Added SMTP authentication configuration to Postifx. Added TLS configuration to Postfix. Updated testsite. Removed unused file.
branko 98d0bcf75e46
11 years ago
MAR-4: Fixed configuration of separator for the inbox namespace in Dovecot.
branko d2f91c66acd3
11 years ago
MAR-4: Added configuration option for specifying Dovecot separator.
branko 85d2a408fd21
11 years ago
MAR-4: Updated testsite to include Dovecot LDAP password and IMAP TLS configuration.
branko 107417b217e0
11 years ago
MAR-4: Added some missing service restarts for Postfix. Added deployment of Dovecot configuration.
branko ce1b1a242584
11 years ago
MAR-4: Added creation of dedicated user/group for stored mail.
branko 74ed4756d5a6
11 years ago
MAR-4: Updated the main.cf Postfix configuration file. Updated available aliases in LDAP directory.
branko 5ef84494bbb1
11 years ago
MAR-4: Updated configuration for testsite mail server.
branko f7579be2c24b
11 years ago
MAR-4: Added stock main.cf Postfix configuration file. Added deployment of Postifx LDAP configuration files.
branko 233d1e763810
11 years ago
MAR-4: Added the misc schema to test site LDAP server.
branko 375f54472644
11 years ago
MAR-4: Added LDAP sub-tree for storing mail server information (domains and aliases) in test site.
branko be262063970c
11 years ago
MAR-4: Added LDAP users for Postfix/Dovecot to test site. Added an extra group for authorisation purposes for mail server. Deploy LDAP client role to mail server.
branko 82951ff4f9f9
11 years ago
MAR-4: Added initial implementation for mail server role. Includes deployment of packages and purging of Exim4 configuration. Dovecot packages installed from backports.
branko 19258e57da15
11 years ago
MAR-4: Adding new host as a dedicated mail server.
branko 66b36215b603
11 years ago
MAR-3: Added instructions for setting-up TLS keys and certs on the XMPP server in test site. Added LDAP client role to the XMPP server in test site. Updated path to TLS key/cert for XMPP server in test site.
branko 8b0cbc64f6e9
11 years ago
MAR-3: Added legacyauth module, including support for deprecated TLS/SSL on port 5223.
This site is powered by Kallithea 0.7.0, which is © 2010–2025 by various authors & licensed under GPLv3.