majic-ansible-roles Changelog /roles/common/defaults/main.yml

Changelog - /roles/common/defaults/main.yml @ 49af212543b0 - showing 24 out of 24 revisions

branko	49af212543b0	2 months ago	MAR-192: Switch to using NTP pools instead of servers: MAR-192: Switch to using NTP pools instead of servers: - This is the recommended configuration by NTPsec, and also default on Debian. Previuosly suggested values for servers have been pool addresses in any case.
branko	736e06e7ffd6	3 months ago	MAR-194: Use IP addresses instead names for maintenance allowed connections: MAR-194: Use IP addresses instead names for maintenance allowed connections: - Less ambigious. Solves problems around names being resolvable to different IPs depending on what DNS server is used. - Parameter renamed to better represent what is specified. - Updated requirements to allow execution of ipv4/ipv6 filters. - Pin the rich requirement to a lower version for compatibility reasons. - Implement tests for IPv6 connectivity tests. - Improve rendering of base rules (indentation).
branko	5f9f8aef3473	3 months ago	MAR-154: Drop support for Python 2.7 from the common role: MAR-154: Drop support for Python 2.7 from the common role: - This primarily concerns removal of pip requirements upgrade checks for Python 2.7. - The old Python 3-specific paths are getting deprecated, and the Python 2 paths will be used instead. - Set permissions on pipreqcheck directory explicitly (because of deprecation testing).
branko	c097de5ccc8a	6 months ago	MAR-184: Update package versions for pip upgrade checks virtual environments: MAR-184: Update package versions for pip upgrade checks virtual environments: - Should provide better test coverage compared to previously since newer versions of pip-tools have slightly different ways of resolving packages, as well as output formats.
branko	d0c6f26ece9f	6 months ago	MAR-182: Added ability to specify input requirements for running pip package upgrade checks against helper virtual environments: MAR-182: Added ability to specify input requirements for running pip package upgrade checks against helper virtual environments: - These environments are used for running the package upgrade checks themselves.
branko	64e43cff4f29	3 years ago	MAR-160: Fix linting errors.
branko	7b004fce5c8b	3 years ago	MAR-160: Added maintenance and maintenance_allowed_hosts parameters to common role: MAR-160: Added maintenance and maintenance_allowed_hosts parameters to common role: - Lets the user specify list of hosts for which the incoming connections should be allowed. - Defaults are not to limit connectivity. - Implemented the necessary tests. - Set-up the base ferm/firewall rules if maintenance mode is enabled.
branko	e3b83798eaba	3 years ago	MAR-167: Update default requirements for pipreqcheck and fix the deprecation warning for pip-compile.
branko	acf20df0b628	4 years ago	MAR-152: Update default values for pip_check_requirements and pip_check_requirements_py3 parameters in common role.
branko	180d7b99f777	5 years ago	MAR-146: Added separate parameter for Pyhton 3 virtual environment used for upgrade checks: MAR-146: Added separate parameter for Pyhton 3 virtual environment used for upgrade checks: - Release notes updated to mention the breaking change. - Updated role reference documentation to cover the new parameter. - Updated default values for the dedicated Python virtual environments. - Update role common to deploy separate requirements for the two environments. - Include wheel package in the requirements.
branko	380556b776cd	5 years ago	MAR-141: Fix handling of pipreqcheck virtualenv package installation: MAR-141: Fix handling of pipreqcheck virtualenv package installation: - Deploy all requirements through requirements file, even if using pip. Improves reproducability of installed packages and solves some double-versioning issues for packages like pip etc. - Updated test for validating installed packages.
branko	5454c4f7e05d	6 years ago	MAR-131: Updated pip-tools for pipreqcheck to latest version.
branko	6b8b1d4c9061	6 years ago	MAR-129: Updated backup_server role linting and test configuration: MAR-129: Updated backup_server role linting and test configuration: - Fixed linting issues. - Use global linting configuration file. - Moved test variables into group_vars.
branko	f255991156a0	6 years ago	MAR-128: Updated requirements for pipreqcheck virtual environment to solve an idempotency error during testing on Debian Stretch.
branko	5bc6b7fb4cb5	6 years ago	MAR-127: Implemented time synchronisation set-up in common role: MAR-127: Implemented time synchronisation set-up in common role: - Added new parameter ntp_servers for defining list of servers to use. - Deploy ntp and ntpdate packages and relevant configuration files. - Updated tests, fixing expected restriction lines in ntp configuration, and adding an additional test to make sure the ntp daemon has reread its configuration.
branko	76588ecee3af	7 years ago	MAR-98: Added support to common role for checking upgrades in pip requirements files via pip-tools. This is done through a custom script, with interested roles needing to deploy the files under a specific location. A crontab will run during midnight performing the check.
branko	4b964a31bd96	7 years ago	MAR-95: Separated configuration for backing-up the /root and /home directories in the common role. This should allow user to have better fine-grained control over what gets backed-up in the home directory. Updated role reference documentation. Updated the testsite variable configuration so the new setting can be tested.
branko	f4e9cd36dad4	8 years ago	MAR-57: Implemented customisation of bash shell prompt as part of the common role.
branko	61e6cfb81789	8 years ago	MAR-51: Fixed documentation for ansible_key parameter in preseed role. Updated ca_certificates parameter in common role to accept key-value pairs of filenames and certificates to put on remote host (so lookups/inventory can be utilised in more flexible manner). Updated backup_client role to fail if it is not possible to extract encryption key IDs from deployed keys. Moved purging of Exim4 configuration files from handlers to tasks (more robust, and still idempotent). All documentation has been updated as well.
branko	0f817823bed7	8 years ago	MAR-44: Implemented backup support for the common role. Includes back-up of logs and (regular) home directories.
branko	b7a248e3c287	9 years ago	MAR-35: Fixed documentation for tls_private_key_dir and tls_certificate_dir options. Fixed default definition for common packages that should be deployed on servers.
branko	fe6cdb2443c7	9 years ago	MAR-19: Simplified the parameters for common role, making a lot of them optional with some sane defaults. Switched to using an actual list for additional groups.
branko	76ed37089b33	9 years ago	MAR-10: Added support for deploying CA certificates to role 'common'. Make sure symlink truststore is deployed as file in Postfix chroot (for role mail_server). Small fix in handlers for role common (ls command is not necessary). Updated testsite configuration and documentation to refer to correct CA certificate file (for trust chain).
branko	626eadba53b7	9 years ago	MAR-2: Added the 'common' role for some basic server set-up.