Changelog @ 41d138d49d52 - showing 100 out of 557 revisions
revisions
Go to tip of repository Branch filter:
branko 41d138d49d52
8 years ago
MAR-41: Small documentation fixes for default values for the PHP and WSGI website roles.
branko 79a84d2b8e01
8 years ago
Noticket: Fixing extra brackets for default value for https_tls_certificate.
branko 011f651f90ce
8 years ago
MAR-40: Updated the XMPP role to be more in the line of other roles (like mail server) by having more implicit settings/expected LDAP directory structure.Removed a number of options that are now hard-coded. Updated testsite appropriately to accomodate for this change.
branko b9ad784771b4
8 years ago
MAR-39: Updated description for the LDAP server role.
branko 9f804c9501da
8 years ago
MAR-39: Added support for specifying consumers of LDAP structure to the LDAP server role. Added support to the LDAP server role for specifying groups to create. Modified the ldap_entry implementation, replacing the addattributes/replaceattributes with append/replace states. The new states allow for creation of entry if it does not exist, making them more versatille. The existing classes and configurations have been updated accordingly.
branko d077bd1afabb
9 years ago
MAR-38: Added deploment of LDAP misc schema to LDAP server role. Updated the test site to accomodate this change (removing the LDAP entries that took care of it manually before).
branko 4313878669b1
9 years ago
MAR-37: Fixed documentation for the mail server LDAP base DN parameter, and renamed the parameter to make a bit more sense (to reduce confusion).
branko e29b656fbf7a
9 years ago
MAR-36: Added new option to ldap_server role for defining the LDAP administrator's password.
branko ddfeb485fb84
9 years ago
MAR-35: Fixed handling of Ansible-provided facts, making it _much_ simpler along the way as well.
branko b7a248e3c287
9 years ago
MAR-35: Fixed documentation for tls_private_key_dir and tls_certificate_dir options. Fixed default definition for common packages that should be deployed on servers.
branko 121c6165add4
9 years ago
MAR-35: Fixed the user of Ansible facts (fixed wrong variable name).
branko 5272f991ac65
9 years ago
MAR-20: Added information about compatible/tested versions of Ansible.
branko 611b125071e0
9 years ago
MAR-19: Small update for scanning SSH keys so we wouldn't end-up with thousands of SSH keys.
branko 55dd00900508
9 years ago
MAR-19: Tweaked the default permissions for LDAP a bit, to allow users to read all entries in LDAP tree (except passwords, of course).
branko 955d4a31a0b0
9 years ago
MAR-19: Make the ansible_key var for bootstrap role optional.
branko e1f36d36827b
9 years ago
MAR-19: Fixed missing parameter for using TLS for LDAP connections in Prosody configuraiton template. Fixed LDAP client configurations, moving most of them out of the individual yml files into all.yml (so only the ldap server gets different config).
branko ed37f9854bfb
9 years ago
MAR-19: Simplified the WSGI website role by making a number of parameters optional.
branko 76e05de03837
9 years ago
MAR-19: Fixed documentation for optional TLS key/certificate parameters. Simplified php website role, making some parameters optional. Fixed the optional parameters for TLS for web server role.
branko 5b175621f79a
9 years ago
MAR-19: Fixed some docs. Made a bunch of parameters optional for web server role.
branko 226b5faf3e5a
9 years ago
MAR-19: Simplified the mail forwarder role by making some of the parameters optional.
branko e838bcb94a9e
9 years ago
MAR-19: Simplified the mail server parameters by making a bunch of them optional.
branko fb163acf23e7
9 years ago
MAR-19: Fixed handling off TLS private keys and certificates. Added some common parameters for defining where the TLS private keys and certificates reside.
branko e61d502b9d00
9 years ago
MAR-19: Simplified a couple of parameters in the xmpp_server role.
branko 63d26c0b3d86
9 years ago
MAR-19: Simplified LDAP permissions specification for the LDAP server. Auto-calculate on which db the permissions need to be changed (instead of having user provide it). Also switched to a single tree where it can be configured. Updated the example in role reference.
branko 99edcba90842
9 years ago
MAR-19: Simplified the parameters for LDAP server role. Most of the parameters have become optional, with some smart defaults.
branko b325005c1a8f
9 years ago
MAR-19: Flattened the ldap server configurtion parameter provisioning (i.e. no more placeholder dictionary, instead use distinct variable names for each option).
branko 4c5f1593c786
9 years ago
MAR-19: Make the ldap client configuration optional.
branko fe6cdb2443c7
9 years ago
MAR-19: Simplified the parameters for common role, making a lot of them optional with some sane defaults. Switched to using an actual list for additional groups.
branko a25135cc9e78
9 years ago
MAR-19: Updated documentation for the preseed role to match parameter redesign. Removed some testing file that was added to playbooks by mistake earlier.
branko 644df4147123
9 years ago
MAR-19: Updated the preseed role. Redesigned how the parameters can be provided (role defaults + user-defined global defaults + per server overrides now). Made the ansible_key optional. Made the preseed_directory optional. All servers except localhost are now processed for preseed generation. Docs not updated yet.
branko b4ac65219ef1
9 years ago
MAR-34: Small usability improvements, not related to original issue. Improved the ssh-keyscan command a bit to include IP addresses in output as well. Store Ansible retry files locally in the retry directory (relative to testsite).
branko 1b76d272e529
9 years ago
MAR-34: Renamed the role prosody to xmpp_server. Updated all parameters for the role to be prefixed with xmpp_ instead of prosody_. Updated documentation.
branko 9b1a9fdc99e5
9 years ago
MAR-17: Added feature description for the project. Bumped the copyright year while at it.
branko c56a03a698ee
9 years ago
MAR-9: Updated documentation to describe how to change the domain in test site. Updated instructions for generating the TLS keys and certificates (via playbook) in test site.
branko 62fc50dc3f75
9 years ago
MAR-9: Removing the unused defaults file for wsgi hello world website example.
branko 70733167cdf8
9 years ago
MAR-9: Created small utility playbook in testsite for generating the necessary TLS keys and certificates. Updated testsite configuration to be slightly different (no need for separate chain file I think).
branko 0f17841d0aad
9 years ago
MAR-9: Updated the testsite to use domain parameter defined within all.yml. Some regex replacements are done in same file to calculate the remaining necessary values. Fixed a small code error in ldap_permissions module.
branko babda105c9cf
9 years ago
MAR-16: Added option to common role for setting-up caching proxy for apt.
branko 424710fc61e1
9 years ago
MAR-14: Moved the support and license sections out of index page, and onto the about page.
branko 40689344a8f3
9 years ago
MAR-15: Implemented role for deploying a MariaDB database.
branko 09625826d96f
9 years ago
MAR-15: Added implementation for the database server role. Performs very simpled deployment and set-up of MariaDB database server.
branko 1e2d2a723cca
9 years ago
MAR-5: Updated test documentation instructions for generating private keys/certs. Sleep for 1 second (dirty hack) to have the certs have distinct serial numbers (since they're equal to epoch time).
branko 884beb9a0e1d
9 years ago
MAR-5: Fixed a typo in docs for test site (wrong filename path for certificate). Added encryption_key option to certtool templates in test site in order to have key encipherment key usage in resulting certificates (otherwise Thunderbird, for example, won't be able to connect to SMTP server).
branko 052eefc4fab0
9 years ago
MAR-5: Ignore certificate and key files in TLS sub-directory (include GnuTLS templates). Updated test site docs to describe all playbooks. Updated test site set-up instructions to include sample commands for generating the keys/certs. Added two roles to test site for deploying simple PHP/WSGI websites.
branko d26fe0368a4b
9 years ago
MAR-5: Updated php and wsgi website roles to include set-up website-specific TLS configuration for Nginx (including separate TLS key/certificate if necessary).
branko 9fa438ee34c0
9 years ago
MAR-5: Added another example to role reference for running PHP websites. Allow duplicates of roles php_website and wsgi_website. Use parameter in handler for restarting WSGI website (to have them website-specific). Updated test site to force handler execution in order to avoid being in undefined state.
branko bd13e65e0e94
9 years ago
MAR-5: Updated the wsgi website to make the nginx configirations look a bit better.
branko 7f8ef577fa2c
9 years ago
MAR-5: Fixed syntax error. Updated formatting a bit to produce nicer-looking files.
branko a3d735d2655f
9 years ago
MAR-5: Enable default website when doing the web server role.
branko 222008c85003
9 years ago
MAR-5: Make sure we don't end-up in recursion when making location.
branko 40473a82c752
9 years ago
MAR-5: Updated the PHP website role to be a bit more flexible when configuring the nginx.
branko 37de8a97187c
9 years ago
MAR-5: Updated WSGI webserver role to have the website service running with correct umask.
branko 981584549895
9 years ago
MAR-5: Adding the initial implementation of the WSGI website role.
branko 467a66f3ec65
9 years ago
MAR-5: Added handler for reloading systemd configuration to common role. Dropped installation of supervisor as part of web server role. Updted web server role to create directory for storing WSGI application sockets. Updated web server role to use correct directory for storing PHP website sockets.
branko be92dd65fc60
9 years ago
MAR-5: Updated web server and php website roles, adding ability to validate the nginx configuration file prior to deployment (via special bash script).
branko 3f2756d25f85
9 years ago
MAR-5: Updated task names for PHP website role.
branko 7727c37bce67
9 years ago
MAR-5: Fixed some typos in role reference for web server. Added initial implementation of a role for deploying PHP websites (some common functionality).
branko 21122b16bd6b
9 years ago
MAR-5: Updated test site, reducing the UID/GID number for some sample groups, and adding unzip to list of common packages.
branko d71d401dbd28
9 years ago
MAR-5: Updated web server role. Fixed the permissions of default vhost configuration file. Create directory for storing PHP FPM log files. Run php5-fpm with umask 0007.
branko 0079746d9a8b
9 years ago
MAR-5: Updated the web server role to include deployment of some base packages for PHP and Python web apps.
branko 373cdfe71c66
9 years ago
MAR-5: Implemented the initial web server role that deploys a basic Nginx to the server. Updated test site to include the new role (for server web.example.com).
branko 06bf1c3c9611
9 years ago
MAR-5: Added server to test site for testing the web server roles. Updated mail server configuration to relay mails for the web server in test site.
branko 61ddc6eab566
9 years ago
MAR-13: Updated documentation for the preseed role (added missin parameter description for ansible_key). Remove the ansible key from list of authorised keys for root user at end of bootstrap process. Updated testsite documentation to be more explicit for bootstrap process.
branko 8b88132d2576
9 years ago
MAR-13: Update docs for testsite. No need to run bootstrap.yml with -k option (we use public key at this point). Optimimsed the bootstrap process a bit to be faster/easier.
branko a6633bcc83d1
9 years ago
MAR-13: Added a hack to restart the slapd server once the group for OpenLDAP has been changed (otherwise the user can't read the TLS key, and error happens). Fixed some service resources to be explicitly enabled.
branko b0e7faa211ae
9 years ago
MAR-13: Fixed configuration of memberof overlay for the LDAP server. Switched to using jessie repository for the Prosody role. Install missing dep for Prosody server (for TLS).
branko b453b7fcb189
9 years ago
MAR-13: Don't use Wheezy backports repository for deploying mail server. Updated package name for Emacs.
branko d90dce790417
9 years ago
MAR-13: Fixed the instructions for bootstrapping servers in testsite.
branko e705dde5e6c7
9 years ago
MAR-13: Updated the template for preesed files for Jessie. Moved the ansible_key configuration option out of testsite's bootstrap playbook in order to use it inside of preseed files as well.
branko eb9a1b525c77
9 years ago
MAR-12: Added documentation related to firewall for the common role. Added deployment of firewall rules for roles mail_server, prosody, and ldap_server.
branko 941f4f372672
9 years ago
MAR-12: Updated the common role to deploy ferm, and set-up a basic firewall for allowing incoming SSH and ICMP echo requsts (ping).
branko 2285dcdda345
9 years ago
MAR-11: Force use of TLS when forwarding mails to mail relay, including proper server certificate verification. Updated testsite and docs as well.
branko 284ed92d40bb
9 years ago
MAR-10: Fixed truststore filename in docs for test site. Install the ssl-cert package explicitly, and allow server processes to access their keys by adding them to group ssl-cert instead.
branko 0ad9410c243a
9 years ago
MAR-10: Deploy CA certificates to /etc/ssl/certs/ only, otherwise some weird issues can happen in case update-ca-certificates does not run. Plus is it more straightforward. Deploy TLS private key/cert a bit later for all roles in order to have the necessary groups available. Fixed a wrong notify.
branko 96e9f230a669
9 years ago
MAR-10: Updated server roles to deploy private key and certificate. Updated documentation and test site configuration as well.
branko 76ed37089b33
9 years ago
MAR-10: Added support for deploying CA certificates to role 'common'. Make sure symlink truststore is deployed as file in Postfix chroot (for role mail_server). Small fix in handlers for role common (ls command is not necessary). Updated testsite configuration and documentation to refer to correct CA certificate file (for trust chain).
branko c9b8c60fbd5e
9 years ago
MAR-4: Deploy the SWAKS utility on servers that forward their mails via relay. Useful for testing.
branko 57667a2c528b
9 years ago
MAR-4: Updated instructions for setting-up the TLS stuff on mail server (keys, certs).
branko 9a5d1122146f
9 years ago
MAR-4: Added documentation for the mail forwarder role. Removed allowed networks for the mail forwarder role (the server is not supposed to relay mail).
branko c0df2fc4a827
9 years ago
MAR-4: Fixed the mydestination setting for mail server role to use inventory's hostname/FQDN.
branko 7ab6518de03b
9 years ago
MAR-4: Implemented mail forwarder role, to be used for sending out mails via relay from the local system. Updated testsite to use mail forwarder role for the LDAP and XMPP servers.
branko 08e3c2b79063
9 years ago
MAR-4: Updated mail server role, removing some redundant settings for TLS key/cert and moving some TLS settings a bit.
branko 298c0dbe1698
9 years ago
MAR-4: Updated documentation for the mail server role, adding information about rsync installation, set-up of chroot for Postfix, and the smtp_allow_relay_from option. Updated mail_server role implementation, fixing rsync command for deploying the truststore to preserve truststore permissions and adding support for specifying networks from which unauthenticated relaying should be allowed.
branko 07956dae35fc
9 years ago
MAR-4: Deploy the truststore PEM file for connecting to the LDAP server via rsync. Explicitly create directories for ClamAV in the Postfix chroot.
branko 81d6b5ac9240
9 years ago
MAR-4: Added example configuration for the mail server role. Updated name for the TLS key files. Added steps that need to be done after mail server has been set-up (for TLS keys mainly).
branko 52f75c39ab69
9 years ago
MAR-4: Added documentation for the mail server role.
branko 1b50bc1cc817
9 years ago
MAR-4: Simplified role parameters (make them all one-dimensional, don't use dictionaries).
branko 1bdb64307968
9 years ago
MAR-4: Added configuration options for mail postmaster (Dovecot setting).
branko 2f0d3abc3c49
9 years ago
MAR-4: Use static file configuration for ClamAV Milter. This is more reliable since there is no decent way to signal debconf to redeploy configuration files.
branko 12abf97ac229
9 years ago
MAR-4: Implemented scanning of mails via ClamAV. Added a couple of comments to Postfix configuration file.
branko 67d9190a521a
9 years ago
MAR-4: Added RBL support for Postifx SMTP checks.
branko cf897f8c1941
9 years ago
MAR-4: Updated formatting for Postfix main.cf.
branko 8367eb84cdcd
9 years ago
MAR-4: Fixed configuration syntax error for Postfix.
branko d9dae92d436c
9 years ago
MAR-4: Added SMTP authentication configuration to Postifx. Added TLS configuration to Postfix. Updated testsite. Removed unused file.
branko 98d0bcf75e46
9 years ago
MAR-4: Fixed configuration of separator for the inbox namespace in Dovecot.
branko d2f91c66acd3
9 years ago
MAR-4: Added configuration option for specifying Dovecot separator.
branko 85d2a408fd21
9 years ago
MAR-4: Updated testsite to include Dovecot LDAP password and IMAP TLS configuration.
branko 107417b217e0
9 years ago
MAR-4: Added some missing service restarts for Postfix. Added deployment of Dovecot configuration.
branko ce1b1a242584
9 years ago
MAR-4: Added creation of dedicated user/group for stored mail.
branko 74ed4756d5a6
9 years ago
MAR-4: Updated the main.cf Postfix configuration file. Updated available aliases in LDAP directory.
This site is powered by Kallithea 0.7.0, which is © 2010–2023 by various authors & licensed under GPLv3.