|
branko
|
0c330b88956a
|
2 months ago
|
|
MAR-218: Switch to using task imports instead of includes:
- Should result in somewhat faster run, except the includes happen during planning phase. None of the changed includes will have problem with this. - Solves the issue of (included) imported tasks not being tagged properly, particularly in relation to the mechanism for explicitly running all handlers.
|
|
branko
|
c10934519e18
|
2 months ago
|
|
MAR-218: Switch to using fully-qualified collection names for all tasks:
- Ensures there is no ambiguity when invoking a module.
|
|
branko
|
7cabc17c71c3
|
2 months ago
|
|
MAR-218: Quote all octal values in YAML files:
- Fixes linting errors, and ensures there is no ambiguity in case of YAML specification changes.
|
|
branko
|
a3d247bb2e09
|
2 months ago
|
|
MAR-218: Update noqa directives for ansible-lint to use text tags:
- Numeric tagging is deprecated.
|
|
branko
|
3802c52995e5
|
2 months ago
|
|
MAR-218: Fix include invocations:
- The old include keyword/task has been deprecated in favour of more explicit include_tasks one.
|
|
branko
|
28de9251c7aa
|
2 months ago
|
|
|
|
branko
|
fec5f67faec1
|
8 months ago
|
|
|
|
branko
|
814be5def61d
|
11 months ago
|
|
MAR-189: Added support for Debian 11 Bullseye to xmpp_server role:
- Roll-out LDAP client configuration since Bullseye does not come with a stock one at /etc/ldap/ldap.conf that sets the trust anchor correctly for validating LDAP server certificates. - Drop the backports pinning in case of Bullseye (for now let's try to keep the Buster and Bullseye at same versions for simplicity). - Drop installation of Python apt bindings (no longer used). - Tests for Buster and Bullseye need to be split-up a bit due to some differences around backports etc.
|
|
branko
|
3d7effd414c9
|
11 months ago
|
|
MAR-189: Dropped deprecation-related tasks and tests for xmpp_server role:
- Migration from Prosody project repositories should have been done already as part of the 7.0.1 release. - Simplifies the code a bit. - Drop leftover deprecated library plugin path.
|
|
branko
|
14e9fb107a9a
|
11 months ago
|
|
MAR-186: Reorder the deprecation tasks for xmpp_server role to make the runs reliable:
- Deprecated apt repository really needs to be removed first in case it has an unresolvable URL (so the backports repository cache update would trigger correctly). - Use the file removal for Prosody repository as well to make sure the file is dropped.
|
|
branko
|
08bb61e26c68
|
11 months ago
|
|
|
|
branko
|
065740010e44
|
11 months ago
|
|
|
|
branko
|
2d7abfa9286a
|
11 months ago
|
|
MAR-181: Deploy Prosody modules (in order to use the LDAP authentcation):
- Replaces the rolled-out-by-hand authentication module, making it less dependent on upstream repository.
|
|
branko
|
31a7f7c61740
|
11 months ago
|
|
MAR-181: Install Prosody from Debian backports repository:
- This way we should be able to get way more features available, and reduce chances of breaking upgrades from upstream project towards Debian-provided packages due to eventual bigger differences between the nightly builds and official releases.
|
|
branko
|
543e23c7bd32
|
11 months ago
|
|
|
|
branko
|
fb34333e4b48
|
11 months ago
|
|
MAR-181: Use Debian-provided Prosody package instead of project repository:
- Upstream repository has a tendency to drop support for older Debian releases, and to completely wipe old version repositories. - It should be way less hassle to simply start using the Debian-provided packages instead. - Introduces deprecation tests to check if the role will also clean-up the non-Debian packages.
|
|
branko
|
a1b9e125a179
|
14 months ago
|
|
|
|
branko
|
4f29bd1aa05b
|
14 months ago
|
|
MAR-181: Drop support for Debian 9 Stretch from the xmpp_server role:
- Switch to using IPs from VirtualBox default allowed host-only network subnets. - Drop Stretch-specific workarounds, code, and tests.
|
|
branko
|
217709791c03
|
14 months ago
|
|
MAR-181: Rename the private signing key for Prosody repository:
- New names make a bit more sense, and avoids Emacs trying to decrypt the file.
|
|
branko
|
aa7b596ef595
|
4 years ago
|
|
MAR-151: Drop rcconf workaround:
- The workaround was needed on Debian Jessie because the systemctl is-enabled command did not behave correctly for SysV init scripts. - Drop the installation of the rcconf package. - Use the "enabled" parameter in service module instead.
|
|
branko
|
bc60f4771dd4
|
4 years ago
|
|
|
|
branko
|
605cdbaf9717
|
4 years ago
|
|
MAR-163: Attach noqa directives to task names (if skipping is applicable on task level) for better uniformity:
- This way the indentation of comment describing the directive can always be on the same level everywhere (irrespective of how the rest of task arguments are listed).
|
|
branko
|
91e4754320e6
|
4 years ago
|
|
MAR-164: Fix Prosody TLS configuration in xmpp_server role:
- Added warning to role reference documentation about what DNS names need to be included in the subject alternative name of issued certificate used for Prosody. - Added crontab with script that validates the certificate on daily basis. - Updated tests to include the proxy.DOMAIN and conference.DOMAIN DNS names in subject alternative name for generated test certificates. - Added and updated tests that cover new functionality. - Fixed the Prosody TLS configuration to have common parameters specified in general section, and any kind of overrides (mainly the ciphers) in more specific sections. - Updated release notes.
|
|
branko
|
114f02e67a4d
|
4 years ago
|
|
MAR-173: Switch to using Prosody 0.11 as default version in the xmpp_server role:
- Updated default value for the Prosody package parameters. - Configure the backports repository on the server, and pin the lua-ldap package to be installed from the backports repository (needed for Lua 5.2 support). - Drop the explicit installation of lua-sec library - it is already installed as pre-requisite for the Prosody package.
|
|
branko
|
af834be42e8e
|
4 years ago
|
|
|
|
branko
|
c92d79571cf9
|
4 years ago
|
|
|
|
branko
|
fcf5abdd3ad5
|
5 years ago
|
|
MAR-148: Fixing linting errors:
- Do not compare against booleans when value is already boolean in "when" conditions. - Use pipefail in conjunction with setting the shell to Bash when extracting the backup encryption key IDs. - Do not compare variables to empty strings in "when" conditions. This change currently works only for complex variables (stuff can break badly in case of simple variables in current default Ansible configuration). - Fix missing space in one of Jinja2 templates.
|
|
branko
|
cc7de990e9e4
|
6 years ago
|
|
MAR-138: Switch to using Prosody stable branch nightlies:
- Introduced additional parameter for specifying name of Prosody package to install. - Updated tests.
|
|
branko
|
9281920d0c23
|
6 years ago
|
|
MAR-135: Switch to using run_handlers instead of handlers as variable:
- Updated all roles to now depend on run_handlers being set to True in order to force execution of handlers.
|
|
branko
|
0162a880995b
|
6 years ago
|
|
|
|
branko
|
2ada86e90026
|
6 years ago
|
|
MAR-129: Updated xmpp_server role for Ansible 2.5.x and new Molecule:
- Include top-level lint configuration in test configuration. - Fixed linting errors. - Moved test playbook variables into group_vars and host_vars. - Fixed deprecation warnings from Ansible. - Updated how hosts are referenced within tests.
|
|
branko
|
e4a0f78340ef
|
7 years ago
|
|
MAR-114: Updated task syntax for bootstrap, preseed and xmpp roles:
- Updated web_server, php_website, and wsgi_website roles. - Added and removed quoting where it makes sense. - Switched to using expanded syntax (instead of one-liners). - Updated ordering of arguments in task definitions.
|
|
branko
|
da031f975c67
|
7 years ago
|
|
MAR-31: Implemented tests and small fixes for xmpp_server role:
- Updated test playbook to deploy simple XMPP non-interactive tool. - Updated test playbook to include an additional administrator for server hosting domain2 and domain3. - Updated test playbook to enable backup on parameters-optional test instance. - Use expanded syntax for deploying TLS key and certificate in order to prevent mangling of tab characters. - Set permissions on deployed Prosody configuration file in order to prevent LDAP password from being world-readable. - Implemented tests for backup functionality. - Implemented tests for client connectivity. - Implemented a number of tests that ensure XMPP server is deployed correctly. - Full functionality cannot be tested (like MUC and file proxy) due to partial lack of CLI-based tools.
|
|
branko
|
701044d4cbba
|
7 years ago
|
|
MAR-31: Added scaffolding for testing xmpp_server role:
- Fixed wrong default for xmpp_domains parameter (should be a list). - Added Molecule configuration file with LDAP server, client, and two XMPP server instances. - Added test playbook that sets-up all servers. - Fixed mode syntax issues (use lead zero). - Added data required for testing. - Added dummy file with tests.
|
|
branko
|
aa2802e42d9d
|
8 years ago
|
|
|
|
branko
|
1b05bae8e440
|
8 years ago
|
|
|
|
branko
|
7387caca37f3
|
8 years ago
|
|
|
|
branko
|
18cd76ec050d
|
8 years ago
|
|
|
|
branko
|
a561d73e3242
|
9 years ago
|
|
|
|
branko
|
d5252677bcb0
|
9 years ago
|
|
|
|
branko
|
dbc3381e1ff3
|
9 years ago
|
|
|
|
branko
|
1b76d272e529
|
9 years ago
|
|
|