majic-ansible-roles Changelog /testsite/group

Changelog - /testsite/group_vars/all.yml @ 49af212543b0 - showing 23 out of 23 revisions

branko	49af212543b0	8 months ago	MAR-192: Switch to using NTP pools instead of servers: MAR-192: Switch to using NTP pools instead of servers: - This is the recommended configuration by NTPsec, and also default on Debian. Previuosly suggested values for servers have been pool addresses in any case.
branko	05ac3136a397	10 months ago	MAR-189: Updated instructions and configuration for test site for Debian 11 Buster: MAR-189: Updated instructions and configuration for test site for Debian 11 Buster: - Use a more generic Emacs package name.
branko	14a02b37b9ef	4 years ago	MAR-156: Updated the test site configuration to exclude DSA keys.
branko	b56ccd5a92ee	6 years ago	MAR-129: Fixed linting errors in the test site files.
branko	91b1e458dd17	7 years ago	MAR-127: Updated documentation and testsite configuration for NTP: MAR-127: Updated documentation and testsite configuration for NTP: - Updated role reference documentation for common role to list the new functionality and documented the new parameter. - Updated usage instructions to mention NTP time synchronisation configuration. - Updated testsite configuration to set-up the NTP time synchronisation.
branko	32f61f233098	8 years ago	Noticket: Fixed documentation and examples for CA certificate deployment in common role. Fixed usage instructions, mainly some syntax changes and more explicit listing of parameters and such. Fixed path to truststore file for mail_forwarder role. Fixed testsite configurtion for CA certificates.
branko	f4e9cd36dad4	8 years ago	MAR-57: Implemented customisation of bash shell prompt as part of the common role.
branko	61e6cfb81789	8 years ago	MAR-51: Fixed documentation for ansible_key parameter in preseed role. Updated ca_certificates parameter in common role to accept key-value pairs of filenames and certificates to put on remote host (so lookups/inventory can be utilised in more flexible manner). Updated backup_client role to fail if it is not possible to extract encryption key IDs from deployed keys. Moved purging of Exim4 configuration files from handlers to tasks (more robust, and still idempotent). All documentation has been updated as well.
branko	c6f217756635	9 years ago	MAR-44: Redesigned handling of private keys by the backup_client role. Keys are now provided directly, not as key identifiers to be looked-up in the backup keyring.
branko	d61d01c00362	9 years ago	MAR-44: Redesigned usage of GnuPG keys used by the backup_client role. Now one must provide encryption key, signing key (both have to be private, and will be transfered to host), and can optionally provide additional public keys to use for encryption. Updated example.
branko	881a85f08e22	9 years ago	MAR-44: Added another global parameter for controlling deployment of backup configs for roles. Implemented backup support for the LDAP server role. Updated testsite configuration, moving the backup configuration to be global.
branko	e1f36d36827b	9 years ago	MAR-19: Fixed missing parameter for using TLS for LDAP connections in Prosody configuraiton template. Fixed LDAP client configurations, moving most of them out of the individual yml files into all.yml (so only the ldap server gets different config).
branko	fe6cdb2443c7	9 years ago	MAR-19: Simplified the parameters for common role, making a lot of them optional with some sane defaults. Switched to using an actual list for additional groups.
branko	70733167cdf8	9 years ago	MAR-9: Created small utility playbook in testsite for generating the necessary TLS keys and certificates. Updated testsite configuration to be slightly different (no need for separate chain file I think).
branko	0f17841d0aad	9 years ago	MAR-9: Updated the testsite to use domain parameter defined within all.yml. Some regex replacements are done in same file to calculate the remaining necessary values. Fixed a small code error in ldap_permissions module.
branko	21122b16bd6b	9 years ago	MAR-5: Updated test site, reducing the UID/GID number for some sample groups, and adding unzip to list of common packages.
branko	0079746d9a8b	9 years ago	MAR-5: Updated the web server role to include deployment of some base packages for PHP and Python web apps.
branko	b453b7fcb189	9 years ago	MAR-13: Don't use Wheezy backports repository for deploying mail server. Updated package name for Emacs.
branko	e705dde5e6c7	9 years ago	MAR-13: Updated the template for preesed files for Jessie. Moved the ansible_key configuration option out of testsite's bootstrap playbook in order to use it inside of preseed files as well.
branko	941f4f372672	9 years ago	MAR-12: Updated the common role to deploy ferm, and set-up a basic firewall for allowing incoming SSH and ICMP echo requsts (ping).
branko	96e9f230a669	9 years ago	MAR-10: Updated server roles to deploy private key and certificate. Updated documentation and test site configuration as well.
branko	76ed37089b33	10 years ago	MAR-10: Added support for deploying CA certificates to role 'common'. Make sure symlink truststore is deployed as file in Postfix chroot (for role mail_server). Small fix in handlers for role common (ls command is not necessary). Updated testsite configuration and documentation to refer to correct CA certificate file (for trust chain).
branko	0c81b8598748	10 years ago	MAR-7: Added server ldap.example.com. Updated site and group variables accordingly.