majic-ansible-roles Changelog

Public journal
Gists
- Create New Gist
- All Public Gists
Search
My Pull Requests
Not Logged In

Login to Your Account
Username: Password:
Forgot password?

git majic-ansible-roles

Summary
Changelog
Files
Pull Requests
Options
- Compare
- Search

Changelog @ a717a6ccd782 - showing 100 out of 231 revisions

revisions Clear selection

Go to tip of repository Branch filter:

		branko	a717a6ccd782	7 years ago		MAR-65: Disable Emacs electric-indent-mode by default via common role (if Emacs is installed via common_packages).
		branko	3d6af3c95aea	8 years ago		Noticket: Bumping version to 1.0-maint (switching back to maintenance). 1.0
		branko	7a3255feb491	8 years ago		MAR-63: Preparing for release 1.0.1. 1.0.1
		branko	32c666acf83a	8 years ago		MAR-64: Removed TLS hardening from xmpp_server role in order to avoid incompatibilities during s2s communication.
		branko	849657875bb0	8 years ago		Noticket: Bumping version to 1.0-maint (switching to maintenance).
		branko	152b18777513	8 years ago		MAR-62: Removed TLS hardening from xmpp_server role in order to avoid incompatibilities during s2s communication.
		branko	c75a8ee52cb8	8 years ago		MAR-61: Bumping version to 1.0-dev (switching back to development).
		branko	71a306678e09	8 years ago		MAR-61: Preparing for release 1.0.0. 1.0.0
		branko	afc2e98bcd39	8 years ago		MAR-60: Removed an outdated warning from usage instructions. Use real command for running handlers in the usage instructions (one that would work with usage site).
		branko	987fea84e131	8 years ago		MAR-60: Revert to using Ansible 1.9.x due to bugs present in Ansible 2.0.x and 2.1.x. Only documentation needed changes, the implementation is otherwise backwards-compatible with 1.9.x.
		branko	e0c1f4e07f07	8 years ago		Noticket: Fix ownership for some files deployed by the phpinfo and wsgihello roles.
		branko	96b84032cb00	8 years ago		Noticket: No need to add the website admin to user group, this is the admin's main group anyway. Do not define admin variable for testsite wsgihello role."
		branko	32f61f233098	8 years ago		Noticket: Fixed documentation and examples for CA certificate deployment in common role. Fixed usage instructions, mainly some syntax changes and more explicit listing of parameters and such. Fixed path to truststore file for mail_forwarder role. Fixed testsite configurtion for CA certificates.
		branko	3af07319e2f3	8 years ago		MAR-59: Removed ability to specify admin user for php_website and wsgi_website roles. Updated testsite and usage instructions. Updated role reference.
		branko	05bbc00281d8	8 years ago		MAR-58: Fixed another spot where old version of Ansible was mentioned in docs.
		branko	f9416ce2b72f	8 years ago		MAR-58: Updated Ansible versioning information in documentation. Updated deprecated syntax in usage instructions.
		branko	922cda0a1834	8 years ago		MAR-58: Updated roles, LDAP modules, and test site to be compatible with Ansible 2.0.x and 2.1.x. Switched from using sudo/sudo_user to become/become_user. Fixed referencing of variables within roles, mainly for with_items/with_dicts calls. Improved handling of options in ldap_entry module to avoid deprecation of passing dict-like arguments to ldap_entry module. Minor fix to ldap_permissions module.
		branko	f4e9cd36dad4	8 years ago		MAR-57: Implemented customisation of bash shell prompt as part of the common role.
		branko	cd445c47c4bf	8 years ago		MAR-56: Fixing an issue with invalid option for ClamAV Milter (seems like it got removed in the Debian package for some reason).
		branko	b2cbf5050e57	8 years ago		MAR-56: Separated backup pattern assembly into a separate role in order to reduce number of tasks that run during each run, and to make the whole thing more consistent/modular. Updated usage and reference documentation.
		branko	97be416e882e	8 years ago		MAR-56: Set-up slapd to listen on legacy TLS port. Fixed ClamAV tasks used for waiting for ClamAV database to be donwloaded. Fixed some handling of rewrite rules for the PHP websites.
		branko	5a15eda01800	8 years ago		MAR-56: Wait for freshclam to download the initial ClamAV database in mail_server role. Make it possible to specify Gunicorn version in the wsgi_website role (and also install the required futures package now). Clarify the parameter for wsgi_application in wsgi_website role should be relative to code sub-directory. Simplify how roles are specified as deps in order to avoid reruns of shared roles in Ansible 1.9.x (for the non-parametrised/singleton roles, that is). Set correct prompt for virtual environments created in wsgi_website.
		branko	1b05bae8e440	8 years ago		MAR-56: Added LDIF templates to docs for relevant roles. Added warning about freshclam/clamav service restart during initial install (need to be restarted). Switched some TLS truststore vars to use concerete values. Introduced option for specifying additional Nginx config options. Added docs for some params. Assmeble Duplicity include pattern when needed. Don't set passwords for existing system users. Fix permissions for database users to be more restrictive. Fixed a couple of default param definitions (mainly tls cert/key stuff). Updated URL for downloading Prosody LDAP plugin. Updated testsite configs.
		branko	7387caca37f3	8 years ago		MAR-51: Introduced ability to only run the handlers for each role. May help with inconsitencies due to failed runs.
		branko	18cd76ec050d	8 years ago		MAR-51: Replaced referencing of local files for TLS keys and certificates with actual values. Documentation has been updated throughout to reflect this in both role reference and usage instructions.
		branko	61e6cfb81789	8 years ago		MAR-51: Fixed documentation for ansible_key parameter in preseed role. Updated ca_certificates parameter in common role to accept key-value pairs of filenames and certificates to put on remote host (so lookups/inventory can be utilised in more flexible manner). Updated backup_client role to fail if it is not possible to extract encryption key IDs from deployed keys. Moved purging of Exim4 configuration files from handlers to tasks (more robust, and still idempotent). All documentation has been updated as well.
		branko	a9e97d3e2306	8 years ago		MAR-54: Separated SMTP ports for server-to-server comms and user mail submission, allowing authentication only on port 587 (port 25 purely for server-to-server communication). Hardened TLS configuration on port 587.
		branko	6ac610bd3314	8 years ago		MAR-55: Accept incoming connections to port 636 on LDAP server.
		branko	1a2f50dfce57	8 years ago		MAR-49: Reworded role reference info about TLS hardening a bit. Implemented TLS hardening for the mail server role (Dovecot only, Postfix would require some additional work for service separation).
		branko	5d6cebe35306	8 years ago		MAR-49: Implemented TLS hardening for XMPP server role.
		branko	3907a5157ef8	8 years ago		MAR-49: Implemented TLS hardening for the LDAP server role.
		branko	9767536963e6	8 years ago		MAR-49: Implemented TLS hardening for web server role.
		branko	dfb91e411e40	8 years ago		MAR-46: Intorduced additional options to web server, PHP website, and WSGI website roles for controling if HTTPS access is enforced (HTTP redirected to HTTPS) or not. Defaults to enforcing HTTPS now. Updated docs for the new parameters.
		branko	680d322cf8cc	8 years ago		MAR-47: Added role dependency description to the role reference documentation. Added database_server role as dependency for the database role.
		branko	14bb6b065c0c	8 years ago		MAR-47: Updated role dependencies.
		branko	e25e0902d95c	8 years ago		MAR-48: Fixed creation of directories (forgot to use the item variable).
		branko	f1da206cd88e	8 years ago		MAR-52: Renamed the web server parameters for TLS. Updated the docs for the role reference to make it clearer what the key/cert is used for.
		branko	0bab7aaa84d6	8 years ago		MAR-48: Fixed creation and handling of web server directories where unix sockets are created for PHP5 FPM and WSGI apps. Improved some permissions while at it.
		branko	a561d73e3242	8 years ago		MAR-45: Introduced workaround for broken handling of SysV init scripts by systemctl is-enabled command.
		branko	e6d00cec4195	8 years ago		MAR-44: Allow duplicates for the backup client role.
		branko	7742feee3781	8 years ago		MAR-44: Updated the name of backup_client parameter to be more clear (backup_patterns_name to backup_patterns_filename). Removed unused handler from backup clients role.
		branko	d5252677bcb0	8 years ago		MAR-44: Updated roles depending on backup_client role to use the new design (where only backup patterns are provided to the dependant backup_client role).
		branko	de825c5e17de	8 years ago		MAR-44: Redisgned how backup client handles backup pattern deployment. Introduce a list parameter for this purpose to the role. Updated docs.
		branko	aa76fae1cf25	8 years ago		MAR-44: Added usage instructions for the backup roles. Also fixed a couple of errors in existing usage instructions, and included some changes related to addition of a backup server.
		branko	79aa82273952	8 years ago		MAR-44: Document pre-backup scripts for backup_client role. Use static prefix for the backup pattern file for databases.
		branko	0d7fd6fb319b	8 years ago		MAR-44: Expanding usage to include set-up of backup server. Currently no special role set-up, just the preparation of server.
		branko	c161524058d5	8 years ago		MAR-44: Updated testsite documentation, mostly small tweaks. Include backup server itself as backup client (backing-up logs and the like).
		branko	c6f217756635	8 years ago		MAR-44: Redesigned handling of private keys by the backup_client role. Keys are now provided directly, not as key identifiers to be looked-up in the backup keyring.
		branko	d61d01c00362	8 years ago		MAR-44: Redesigned usage of GnuPG keys used by the backup_client role. Now one must provide encryption key, signing key (both have to be private, and will be transfered to host), and can optionally provide additional public keys to use for encryption. Updated example.
		branko	5e15f8ca16fc	8 years ago		MAR-44: Moved away from crontab for database backups to pre-backup commands for better reliability. Fixed command for collecting the encryption keys.
		branko	0f817823bed7	8 years ago		MAR-44: Implemented backup support for the common role. Includes back-up of logs and (regular) home directories.
		branko	b668f8894d52	8 years ago		MAR-44: Implemented backup support for the database role.
		branko	f05039c7d383	8 years ago		MAR-44: Implemented backup support for the mail server role.
		branko	dbc3381e1ff3	8 years ago		MAR-44: Implemented backup support for the XMPP server role. Updated test site to include XMPP server as one of the backup clients.
		branko	881a85f08e22	8 years ago		MAR-44: Added another global parameter for controlling deployment of backup configs for roles. Implemented backup support for the LDAP server role. Updated testsite configuration, moving the backup configuration to be global.
		branko	3686169e9565	8 years ago		MAR-44: Set-up crontab to run backups at 02:00 every day in backup client role. Updated role reference documentation for backup client role. Updated test site set-up instructions. Updated testsite configuration for backup client/server to use domain parameters. Enabled backup client role for the web server.
		branko	c4113608aa36	8 years ago		MAR-44: Added role reference documentation for the backup_client role. Added role reference examples for the backup_server role.
		branko	3498d77cad32	8 years ago		MAR-44: Use a number of convenient default values for certain parameters for backup_client role. Make sure signing key is not configured/deployed if not defined. Make the target for backup storage a bit more flexible/configurable. Extract the 8-character hex key ID for configuing the duplicity signing key in backup client role. Updated handling of key deployment/import to make it a bit more robust.
		branko	a45dcc06530a	8 years ago		MAR-44: Updated gitignore to exclude the backup GnuPG keyring from the testsite. Added initial backup client implementation. Updated the testsite configuration for backup server to use realistic IP addresses for clients.
		branko	500658358454	8 years ago		MAR-44: Added backup server implementation. Updated testsite to include deployment of dedicated backup server. Documented the backup server implementation (except for usage instructions).
		branko	a77fff9fcd91	8 years ago		MAR-43: Deploy information about project home directory in the Python virtual environment. This makes things more convenient when using virtualenv wrapper.
		branko	819d02d81946	8 years ago		MAR-42: make sure the protocol used (http/https) is passed-on to the WSGI application. This is important in order to generate proper redirects and URLs from within the WSGI application.
		branko	d73446661f9c	8 years ago		MAR-18: Minor corrections to usage instructions, rephrasing, and small enhancements.
		branko	f661345e5b93	8 years ago		MAR-18: Added small section on where to go next at the bottom of usage instructions.
		branko	2935e65f230e	8 years ago		MAR-18: Added more information on how the PHP apps are executed to the usage instructions (and where the files are served from). Added usage instructions for deploying a WSGI appliction (Django Wiki in this case).
		branko	5b1624335e63	8 years ago		MAR-18: Updated the usage instructions to include a full example for deploying a PHP application (including database). Picked The Bug Genie for this purpose. Fixed some http links.
		branko	80c77d68b540	8 years ago		MAR-18: Added usage instructions for the database server role.
		branko	7a01af815f91	8 years ago		MAR-18: Added usage instructions for the web server role.
		branko	cd11d6826378	8 years ago		MAR-18: Added usage instructions for the XMPP server role.
		branko	e2c7276ecff7	8 years ago		MAR-18: Added usage instructions for the mail forwarder role. Fixed some indentation.
		branko	dbd4c92f4e4f	8 years ago		MAR-18: Added small table of contents for the usage page. Use truststore.pem instead of ca.pem (since some roles use that value by default as well). Added instructions for the mail server role.
		branko	0969ee81219a	8 years ago		MAR-18: Added usage instructions for the LDAP server/client roles.
		branko	4acb74ace813	8 years ago		MAR-18: Adding usage instructions for bootstrap and common server configuration.
		branko	c482961647bf	8 years ago		MAR-18: Added initial usage instructions that cover some basic set-up of Ansible server and preseed role.
		branko	41d138d49d52	8 years ago		MAR-41: Small documentation fixes for default values for the PHP and WSGI website roles.
		branko	79a84d2b8e01	8 years ago		Noticket: Fixing extra brackets for default value for https_tls_certificate.
		branko	011f651f90ce	8 years ago		MAR-40: Updated the XMPP role to be more in the line of other roles (like mail server) by having more implicit settings/expected LDAP directory structure.Removed a number of options that are now hard-coded. Updated testsite appropriately to accomodate for this change.
		branko	b9ad784771b4	8 years ago		MAR-39: Updated description for the LDAP server role.
		branko	9f804c9501da	8 years ago		MAR-39: Added support for specifying consumers of LDAP structure to the LDAP server role. Added support to the LDAP server role for specifying groups to create. Modified the ldap_entry implementation, replacing the addattributes/replaceattributes with append/replace states. The new states allow for creation of entry if it does not exist, making them more versatille. The existing classes and configurations have been updated accordingly.
		branko	d077bd1afabb	9 years ago		MAR-38: Added deploment of LDAP misc schema to LDAP server role. Updated the test site to accomodate this change (removing the LDAP entries that took care of it manually before).
		branko	4313878669b1	9 years ago		MAR-37: Fixed documentation for the mail server LDAP base DN parameter, and renamed the parameter to make a bit more sense (to reduce confusion).
		branko	e29b656fbf7a	9 years ago		MAR-36: Added new option to ldap_server role for defining the LDAP administrator's password.
		branko	ddfeb485fb84	9 years ago		MAR-35: Fixed handling of Ansible-provided facts, making it _much_ simpler along the way as well.
		branko	b7a248e3c287	9 years ago		MAR-35: Fixed documentation for tls_private_key_dir and tls_certificate_dir options. Fixed default definition for common packages that should be deployed on servers.
		branko	121c6165add4	9 years ago		MAR-35: Fixed the user of Ansible facts (fixed wrong variable name).
		branko	5272f991ac65	9 years ago		MAR-20: Added information about compatible/tested versions of Ansible.
		branko	611b125071e0	9 years ago		MAR-19: Small update for scanning SSH keys so we wouldn't end-up with thousands of SSH keys.
		branko	55dd00900508	9 years ago		MAR-19: Tweaked the default permissions for LDAP a bit, to allow users to read all entries in LDAP tree (except passwords, of course).
		branko	955d4a31a0b0	9 years ago		MAR-19: Make the ansible_key var for bootstrap role optional.
		branko	e1f36d36827b	9 years ago		MAR-19: Fixed missing parameter for using TLS for LDAP connections in Prosody configuraiton template. Fixed LDAP client configurations, moving most of them out of the individual yml files into all.yml (so only the ldap server gets different config).
		branko	ed37f9854bfb	9 years ago		MAR-19: Simplified the WSGI website role by making a number of parameters optional.
		branko	76e05de03837	9 years ago		MAR-19: Fixed documentation for optional TLS key/certificate parameters. Simplified php website role, making some parameters optional. Fixed the optional parameters for TLS for web server role.
		branko	5b175621f79a	9 years ago		MAR-19: Fixed some docs. Made a bunch of parameters optional for web server role.
		branko	226b5faf3e5a	9 years ago		MAR-19: Simplified the mail forwarder role by making some of the parameters optional.
		branko	e838bcb94a9e	9 years ago		MAR-19: Simplified the mail server parameters by making a bunch of them optional.
		branko	fb163acf23e7	9 years ago		MAR-19: Fixed handling off TLS private keys and certificates. Added some common parameters for defining where the TLS private keys and certificates reside.
		branko	e61d502b9d00	9 years ago		MAR-19: Simplified a couple of parameters in the xmpp_server role.
		branko	63d26c0b3d86	9 years ago		MAR-19: Simplified LDAP permissions specification for the LDAP server. Auto-calculate on which db the permissions need to be changed (instead of having user provide it). Also switched to a single tree where it can be configured. Updated the example in role reference.
		branko	99edcba90842	9 years ago		MAR-19: Simplified the parameters for LDAP server role. Most of the parameters have become optional, with some smart defaults.
		branko	b325005c1a8f	9 years ago		MAR-19: Flattened the ldap server configurtion parameter provisioning (i.e. no more placeholder dictionary, instead use distinct variable names for each option).

1
2
3
>

This site is powered by Kallithea 0.7.0, which is © 2010–2023 by various authors & licensed under GPLv3.