Changelog @ 5d6cebe35306 - showing 100 out of 1002 revisions
revisions
Go to tip of repository Branch filter:
branko 5d6cebe35306
9 years ago
MAR-49: Implemented TLS hardening for XMPP server role.
branko 3907a5157ef8
9 years ago
MAR-49: Implemented TLS hardening for the LDAP server role.
branko 9767536963e6
9 years ago
MAR-49: Implemented TLS hardening for web server role.
branko dfb91e411e40
9 years ago
MAR-46: Intorduced additional options to web server, PHP website, and WSGI website roles for controling if HTTPS access is enforced (HTTP redirected to HTTPS) or not. Defaults to enforcing HTTPS now. Updated docs for the new parameters.
branko 680d322cf8cc
9 years ago
MAR-47: Added role dependency description to the role reference documentation. Added database_server role as dependency for the database role.
branko 14bb6b065c0c
9 years ago
MAR-47: Updated role dependencies.
branko e25e0902d95c
9 years ago
MAR-48: Fixed creation of directories (forgot to use the item variable).
branko f1da206cd88e
9 years ago
MAR-52: Renamed the web server parameters for TLS. Updated the docs for the role reference to make it clearer what the key/cert is used for.
branko 0bab7aaa84d6
9 years ago
MAR-48: Fixed creation and handling of web server directories where unix sockets are created for PHP5 FPM and WSGI apps. Improved some permissions while at it.
branko a561d73e3242
9 years ago
MAR-45: Introduced workaround for broken handling of SysV init scripts by systemctl is-enabled command.
branko e6d00cec4195
9 years ago
MAR-44: Allow duplicates for the backup client role.
branko 7742feee3781
9 years ago
MAR-44: Updated the name of backup_client parameter to be more clear (backup_patterns_name to backup_patterns_filename). Removed unused handler from backup clients role.
branko d5252677bcb0
9 years ago
MAR-44: Updated roles depending on backup_client role to use the new design (where only backup patterns are provided to the dependant backup_client role).
branko de825c5e17de
9 years ago
MAR-44: Redisgned how backup client handles backup pattern deployment. Introduce a list parameter for this purpose to the role. Updated docs.
branko aa76fae1cf25
9 years ago
MAR-44: Added usage instructions for the backup roles. Also fixed a couple of errors in existing usage instructions, and included some changes related to addition of a backup server.
branko 79aa82273952
9 years ago
MAR-44: Document pre-backup scripts for backup_client role. Use static prefix for the backup pattern file for databases.
branko 0d7fd6fb319b
9 years ago
MAR-44: Expanding usage to include set-up of backup server. Currently no special role set-up, just the preparation of server.
branko c161524058d5
9 years ago
MAR-44: Updated testsite documentation, mostly small tweaks. Include backup server itself as backup client (backing-up logs and the like).
branko c6f217756635
9 years ago
MAR-44: Redesigned handling of private keys by the backup_client role. Keys are now provided directly, not as key identifiers to be looked-up in the backup keyring.
branko d61d01c00362
9 years ago
MAR-44: Redesigned usage of GnuPG keys used by the backup_client role. Now one must provide encryption key, signing key (both have to be private, and will be transfered to host), and can optionally provide additional public keys to use for encryption. Updated example.
branko 5e15f8ca16fc
9 years ago
MAR-44: Moved away from crontab for database backups to pre-backup commands for better reliability. Fixed command for collecting the encryption keys.
branko 0f817823bed7
9 years ago
MAR-44: Implemented backup support for the common role. Includes back-up of logs and (regular) home directories.
branko b668f8894d52
9 years ago
MAR-44: Implemented backup support for the database role.
branko f05039c7d383
9 years ago
MAR-44: Implemented backup support for the mail server role.
branko dbc3381e1ff3
9 years ago
MAR-44: Implemented backup support for the XMPP server role. Updated test site to include XMPP server as one of the backup clients.
branko 881a85f08e22
9 years ago
MAR-44: Added another global parameter for controlling deployment of backup configs for roles. Implemented backup support for the LDAP server role. Updated testsite configuration, moving the backup configuration to be global.
branko 3686169e9565
9 years ago
MAR-44: Set-up crontab to run backups at 02:00 every day in backup client role. Updated role reference documentation for backup client role. Updated test site set-up instructions. Updated testsite configuration for backup client/server to use domain parameters. Enabled backup client role for the web server.
branko c4113608aa36
9 years ago
MAR-44: Added role reference documentation for the backup_client role. Added role reference examples for the backup_server role.
branko 3498d77cad32
9 years ago
MAR-44: Use a number of convenient default values for certain parameters for backup_client role. Make sure signing key is not configured/deployed if not defined. Make the target for backup storage a bit more flexible/configurable. Extract the 8-character hex key ID for configuing the duplicity signing key in backup client role. Updated handling of key deployment/import to make it a bit more robust.
branko a45dcc06530a
9 years ago
MAR-44: Updated gitignore to exclude the backup GnuPG keyring from the testsite. Added initial backup client implementation. Updated the testsite configuration for backup server to use realistic IP addresses for clients.
branko 500658358454
9 years ago
MAR-44: Added backup server implementation. Updated testsite to include deployment of dedicated backup server. Documented the backup server implementation (except for usage instructions).
branko a77fff9fcd91
9 years ago
MAR-43: Deploy information about project home directory in the Python virtual environment. This makes things more convenient when using virtualenv wrapper.
branko 819d02d81946
9 years ago
MAR-42: make sure the protocol used (http/https) is passed-on to the WSGI application. This is important in order to generate proper redirects and URLs from within the WSGI application.
branko d73446661f9c
9 years ago
MAR-18: Minor corrections to usage instructions, rephrasing, and small enhancements.
branko f661345e5b93
9 years ago
MAR-18: Added small section on where to go next at the bottom of usage instructions.
branko 2935e65f230e
9 years ago
MAR-18: Added more information on how the PHP apps are executed to the usage instructions (and where the files are served from). Added usage instructions for deploying a WSGI appliction (Django Wiki in this case).
branko 5b1624335e63
9 years ago
MAR-18: Updated the usage instructions to include a full example for deploying a PHP application (including database). Picked The Bug Genie for this purpose. Fixed some http links.
branko 80c77d68b540
9 years ago
MAR-18: Added usage instructions for the database server role.
branko 7a01af815f91
9 years ago
MAR-18: Added usage instructions for the web server role.
branko cd11d6826378
9 years ago
MAR-18: Added usage instructions for the XMPP server role.
branko e2c7276ecff7
9 years ago
MAR-18: Added usage instructions for the mail forwarder role. Fixed some indentation.
branko dbd4c92f4e4f
9 years ago
MAR-18: Added small table of contents for the usage page. Use truststore.pem instead of ca.pem (since some roles use that value by default as well). Added instructions for the mail server role.
branko 0969ee81219a
9 years ago
MAR-18: Added usage instructions for the LDAP server/client roles.
branko 4acb74ace813
9 years ago
MAR-18: Adding usage instructions for bootstrap and common server configuration.
branko c482961647bf
9 years ago
MAR-18: Added initial usage instructions that cover some basic set-up of Ansible server and preseed role.
branko 41d138d49d52
9 years ago
MAR-41: Small documentation fixes for default values for the PHP and WSGI website roles.
branko 79a84d2b8e01
9 years ago
Noticket: Fixing extra brackets for default value for https_tls_certificate.
branko 011f651f90ce
9 years ago
MAR-40: Updated the XMPP role to be more in the line of other roles (like mail server) by having more implicit settings/expected LDAP directory structure.Removed a number of options that are now hard-coded. Updated testsite appropriately to accomodate for this change.
branko b9ad784771b4
9 years ago
MAR-39: Updated description for the LDAP server role.
branko 9f804c9501da
9 years ago
MAR-39: Added support for specifying consumers of LDAP structure to the LDAP server role. Added support to the LDAP server role for specifying groups to create. Modified the ldap_entry implementation, replacing the addattributes/replaceattributes with append/replace states. The new states allow for creation of entry if it does not exist, making them more versatille. The existing classes and configurations have been updated accordingly.
branko d077bd1afabb
9 years ago
MAR-38: Added deploment of LDAP misc schema to LDAP server role. Updated the test site to accomodate this change (removing the LDAP entries that took care of it manually before).
branko 4313878669b1
9 years ago
MAR-37: Fixed documentation for the mail server LDAP base DN parameter, and renamed the parameter to make a bit more sense (to reduce confusion).
branko e29b656fbf7a
9 years ago
MAR-36: Added new option to ldap_server role for defining the LDAP administrator's password.
branko ddfeb485fb84
9 years ago
MAR-35: Fixed handling of Ansible-provided facts, making it _much_ simpler along the way as well.
branko b7a248e3c287
9 years ago
MAR-35: Fixed documentation for tls_private_key_dir and tls_certificate_dir options. Fixed default definition for common packages that should be deployed on servers.
branko 121c6165add4
9 years ago
MAR-35: Fixed the user of Ansible facts (fixed wrong variable name).
branko 5272f991ac65
9 years ago
MAR-20: Added information about compatible/tested versions of Ansible.
branko 611b125071e0
9 years ago
MAR-19: Small update for scanning SSH keys so we wouldn't end-up with thousands of SSH keys.
branko 55dd00900508
9 years ago
MAR-19: Tweaked the default permissions for LDAP a bit, to allow users to read all entries in LDAP tree (except passwords, of course).
branko 955d4a31a0b0
9 years ago
MAR-19: Make the ansible_key var for bootstrap role optional.
branko e1f36d36827b
9 years ago
MAR-19: Fixed missing parameter for using TLS for LDAP connections in Prosody configuraiton template. Fixed LDAP client configurations, moving most of them out of the individual yml files into all.yml (so only the ldap server gets different config).
branko ed37f9854bfb
9 years ago
MAR-19: Simplified the WSGI website role by making a number of parameters optional.
branko 76e05de03837
9 years ago
MAR-19: Fixed documentation for optional TLS key/certificate parameters. Simplified php website role, making some parameters optional. Fixed the optional parameters for TLS for web server role.
branko 5b175621f79a
9 years ago
MAR-19: Fixed some docs. Made a bunch of parameters optional for web server role.
branko 226b5faf3e5a
9 years ago
MAR-19: Simplified the mail forwarder role by making some of the parameters optional.
branko e838bcb94a9e
9 years ago
MAR-19: Simplified the mail server parameters by making a bunch of them optional.
branko fb163acf23e7
9 years ago
MAR-19: Fixed handling off TLS private keys and certificates. Added some common parameters for defining where the TLS private keys and certificates reside.
branko e61d502b9d00
9 years ago
MAR-19: Simplified a couple of parameters in the xmpp_server role.
branko 63d26c0b3d86
9 years ago
MAR-19: Simplified LDAP permissions specification for the LDAP server. Auto-calculate on which db the permissions need to be changed (instead of having user provide it). Also switched to a single tree where it can be configured. Updated the example in role reference.
branko 99edcba90842
9 years ago
MAR-19: Simplified the parameters for LDAP server role. Most of the parameters have become optional, with some smart defaults.
branko b325005c1a8f
9 years ago
MAR-19: Flattened the ldap server configurtion parameter provisioning (i.e. no more placeholder dictionary, instead use distinct variable names for each option).
branko 4c5f1593c786
9 years ago
MAR-19: Make the ldap client configuration optional.
branko fe6cdb2443c7
9 years ago
MAR-19: Simplified the parameters for common role, making a lot of them optional with some sane defaults. Switched to using an actual list for additional groups.
branko a25135cc9e78
9 years ago
MAR-19: Updated documentation for the preseed role to match parameter redesign. Removed some testing file that was added to playbooks by mistake earlier.
branko 644df4147123
9 years ago
MAR-19: Updated the preseed role. Redesigned how the parameters can be provided (role defaults + user-defined global defaults + per server overrides now). Made the ansible_key optional. Made the preseed_directory optional. All servers except localhost are now processed for preseed generation. Docs not updated yet.
branko b4ac65219ef1
9 years ago
MAR-34: Small usability improvements, not related to original issue. Improved the ssh-keyscan command a bit to include IP addresses in output as well. Store Ansible retry files locally in the retry directory (relative to testsite).
branko 1b76d272e529
9 years ago
MAR-34: Renamed the role prosody to xmpp_server. Updated all parameters for the role to be prefixed with xmpp_ instead of prosody_. Updated documentation.
branko 9b1a9fdc99e5
9 years ago
MAR-17: Added feature description for the project. Bumped the copyright year while at it.
branko c56a03a698ee
9 years ago
MAR-9: Updated documentation to describe how to change the domain in test site. Updated instructions for generating the TLS keys and certificates (via playbook) in test site.
branko 62fc50dc3f75
9 years ago
MAR-9: Removing the unused defaults file for wsgi hello world website example.
branko 70733167cdf8
9 years ago
MAR-9: Created small utility playbook in testsite for generating the necessary TLS keys and certificates. Updated testsite configuration to be slightly different (no need for separate chain file I think).
branko 0f17841d0aad
9 years ago
MAR-9: Updated the testsite to use domain parameter defined within all.yml. Some regex replacements are done in same file to calculate the remaining necessary values. Fixed a small code error in ldap_permissions module.
branko babda105c9cf
9 years ago
MAR-16: Added option to common role for setting-up caching proxy for apt.
branko 424710fc61e1
9 years ago
MAR-14: Moved the support and license sections out of index page, and onto the about page.
branko 40689344a8f3
9 years ago
MAR-15: Implemented role for deploying a MariaDB database.
branko 09625826d96f
9 years ago
MAR-15: Added implementation for the database server role. Performs very simpled deployment and set-up of MariaDB database server.
branko 1e2d2a723cca
9 years ago
MAR-5: Updated test documentation instructions for generating private keys/certs. Sleep for 1 second (dirty hack) to have the certs have distinct serial numbers (since they're equal to epoch time).
branko 884beb9a0e1d
9 years ago
MAR-5: Fixed a typo in docs for test site (wrong filename path for certificate). Added encryption_key option to certtool templates in test site in order to have key encipherment key usage in resulting certificates (otherwise Thunderbird, for example, won't be able to connect to SMTP server).
branko 052eefc4fab0
9 years ago
MAR-5: Ignore certificate and key files in TLS sub-directory (include GnuTLS templates). Updated test site docs to describe all playbooks. Updated test site set-up instructions to include sample commands for generating the keys/certs. Added two roles to test site for deploying simple PHP/WSGI websites.
branko d26fe0368a4b
9 years ago
MAR-5: Updated php and wsgi website roles to include set-up website-specific TLS configuration for Nginx (including separate TLS key/certificate if necessary).
branko 9fa438ee34c0
9 years ago
MAR-5: Added another example to role reference for running PHP websites. Allow duplicates of roles php_website and wsgi_website. Use parameter in handler for restarting WSGI website (to have them website-specific). Updated test site to force handler execution in order to avoid being in undefined state.
branko bd13e65e0e94
9 years ago
MAR-5: Updated the wsgi website to make the nginx configirations look a bit better.
branko 7f8ef577fa2c
9 years ago
MAR-5: Fixed syntax error. Updated formatting a bit to produce nicer-looking files.
branko a3d735d2655f
9 years ago
MAR-5: Enable default website when doing the web server role.
branko 222008c85003
9 years ago
MAR-5: Make sure we don't end-up in recursion when making location.
branko 40473a82c752
9 years ago
MAR-5: Updated the PHP website role to be a bit more flexible when configuring the nginx.
branko 37de8a97187c
9 years ago
MAR-5: Updated WSGI webserver role to have the website service running with correct umask.
branko 981584549895
9 years ago
MAR-5: Adding the initial implementation of the WSGI website role.
branko 467a66f3ec65
9 years ago
MAR-5: Added handler for reloading systemd configuration to common role. Dropped installation of supervisor as part of web server role. Updted web server role to create directory for storing WSGI application sockets. Updated web server role to use correct directory for storing PHP website sockets.
branko be92dd65fc60
9 years ago
MAR-5: Updated web server and php website roles, adding ability to validate the nginx configuration file prior to deployment (via special bash script).
This site is powered by Kallithea 0.7.0, which is © 2010–2024 by various authors & licensed under GPLv3.