Changelog - showing 100 out of 1126 revisions
revisions
Open New Pull Request from Branch filter:
branko 152b18777513
9 years ago
MAR-62: Removed TLS hardening from xmpp_server role in order to avoid incompatibilities during s2s communication.
branko c75a8ee52cb8
9 years ago
MAR-61: Bumping version to 1.0-dev (switching back to development).
branko 71a306678e09
9 years ago
MAR-61: Preparing for release 1.0.0.
1.0.0
branko afc2e98bcd39
9 years ago
MAR-60: Removed an outdated warning from usage instructions. Use real command for running handlers in the usage instructions (one that would work with usage site).
branko 987fea84e131
9 years ago
MAR-60: Revert to using Ansible 1.9.x due to bugs present in Ansible 2.0.x and 2.1.x. Only documentation needed changes, the implementation is otherwise backwards-compatible with 1.9.x.
branko e0c1f4e07f07
9 years ago
Noticket: Fix ownership for some files deployed by the phpinfo and wsgihello roles.
branko 96b84032cb00
9 years ago
Noticket: No need to add the website admin to user group, this is the admin's main group anyway. Do not define admin variable for testsite wsgihello role."
branko 32f61f233098
9 years ago
Noticket: Fixed documentation and examples for CA certificate deployment in common role. Fixed usage instructions, mainly some syntax changes and more explicit listing of parameters and such. Fixed path to truststore file for mail_forwarder role. Fixed testsite configurtion for CA certificates.
branko 3af07319e2f3
9 years ago
MAR-59: Removed ability to specify admin user for php_website and wsgi_website roles. Updated testsite and usage instructions. Updated role reference.
branko 05bbc00281d8
9 years ago
MAR-58: Fixed another spot where old version of Ansible was mentioned in docs.
branko f9416ce2b72f
9 years ago
MAR-58: Updated Ansible versioning information in documentation. Updated deprecated syntax in usage instructions.
branko 922cda0a1834
9 years ago
MAR-58: Updated roles, LDAP modules, and test site to be compatible with Ansible 2.0.x and 2.1.x. Switched from using sudo/sudo_user to become/become_user. Fixed referencing of variables within roles, mainly for with_items/with_dicts calls. Improved handling of options in ldap_entry module to avoid deprecation of passing dict-like arguments to ldap_entry module. Minor fix to ldap_permissions module.
branko f4e9cd36dad4
9 years ago
MAR-57: Implemented customisation of bash shell prompt as part of the common role.
branko cd445c47c4bf
9 years ago
MAR-56: Fixing an issue with invalid option for ClamAV Milter (seems like it got removed in the Debian package for some reason).
branko b2cbf5050e57
9 years ago
MAR-56: Separated backup pattern assembly into a separate role in order to reduce number of tasks that run during each run, and to make the whole thing more consistent/modular. Updated usage and reference documentation.
branko 97be416e882e
9 years ago
MAR-56: Set-up slapd to listen on legacy TLS port. Fixed ClamAV tasks used for waiting for ClamAV database to be donwloaded. Fixed some handling of rewrite rules for the PHP websites.
branko 5a15eda01800
9 years ago
MAR-56: Wait for freshclam to download the initial ClamAV database in mail_server role. Make it possible to specify Gunicorn version in the wsgi_website role (and also install the required futures package now). Clarify the parameter for wsgi_application in wsgi_website role should be relative to code sub-directory. Simplify how roles are specified as deps in order to avoid reruns of shared roles in Ansible 1.9.x (for the non-parametrised/singleton roles, that is). Set correct prompt for virtual environments created in wsgi_website.
branko 1b05bae8e440
9 years ago
MAR-56: Added LDIF templates to docs for relevant roles. Added warning about freshclam/clamav service restart during initial install (need to be restarted). Switched some TLS truststore vars to use concerete values. Introduced option for specifying additional Nginx config options. Added docs for some params. Assmeble Duplicity include pattern when needed. Don't set passwords for existing system users. Fix permissions for database users to be more restrictive. Fixed a couple of default param definitions (mainly tls cert/key stuff). Updated URL for downloading Prosody LDAP plugin. Updated testsite configs.
branko 7387caca37f3
9 years ago
MAR-51: Introduced ability to only run the handlers for each role. May help with inconsitencies due to failed runs.
branko 18cd76ec050d
9 years ago
MAR-51: Replaced referencing of local files for TLS keys and certificates with actual values. Documentation has been updated throughout to reflect this in both role reference and usage instructions.
branko 61e6cfb81789
9 years ago
MAR-51: Fixed documentation for ansible_key parameter in preseed role. Updated ca_certificates parameter in common role to accept key-value pairs of filenames and certificates to put on remote host (so lookups/inventory can be utilised in more flexible manner). Updated backup_client role to fail if it is not possible to extract encryption key IDs from deployed keys. Moved purging of Exim4 configuration files from handlers to tasks (more robust, and still idempotent). All documentation has been updated as well.
branko a9e97d3e2306
9 years ago
MAR-54: Separated SMTP ports for server-to-server comms and user mail submission, allowing authentication only on port 587 (port 25 purely for server-to-server communication). Hardened TLS configuration on port 587.
branko 6ac610bd3314
9 years ago
MAR-55: Accept incoming connections to port 636 on LDAP server.
branko 1a2f50dfce57
9 years ago
MAR-49: Reworded role reference info about TLS hardening a bit. Implemented TLS hardening for the mail server role (Dovecot only, Postfix would require some additional work for service separation).
branko 5d6cebe35306
9 years ago
MAR-49: Implemented TLS hardening for XMPP server role.
branko 3907a5157ef8
9 years ago
MAR-49: Implemented TLS hardening for the LDAP server role.
branko 9767536963e6
9 years ago
MAR-49: Implemented TLS hardening for web server role.
branko dfb91e411e40
9 years ago
MAR-46: Intorduced additional options to web server, PHP website, and WSGI website roles for controling if HTTPS access is enforced (HTTP redirected to HTTPS) or not. Defaults to enforcing HTTPS now. Updated docs for the new parameters.
branko 680d322cf8cc
9 years ago
MAR-47: Added role dependency description to the role reference documentation. Added database_server role as dependency for the database role.
branko 14bb6b065c0c
9 years ago
MAR-47: Updated role dependencies.
branko e25e0902d95c
9 years ago
MAR-48: Fixed creation of directories (forgot to use the item variable).
branko f1da206cd88e
9 years ago
MAR-52: Renamed the web server parameters for TLS. Updated the docs for the role reference to make it clearer what the key/cert is used for.
branko 0bab7aaa84d6
9 years ago
MAR-48: Fixed creation and handling of web server directories where unix sockets are created for PHP5 FPM and WSGI apps. Improved some permissions while at it.
branko a561d73e3242
9 years ago
MAR-45: Introduced workaround for broken handling of SysV init scripts by systemctl is-enabled command.
branko e6d00cec4195
9 years ago
MAR-44: Allow duplicates for the backup client role.
branko 7742feee3781
9 years ago
MAR-44: Updated the name of backup_client parameter to be more clear (backup_patterns_name to backup_patterns_filename). Removed unused handler from backup clients role.
branko d5252677bcb0
9 years ago
MAR-44: Updated roles depending on backup_client role to use the new design (where only backup patterns are provided to the dependant backup_client role).
branko de825c5e17de
9 years ago
MAR-44: Redisgned how backup client handles backup pattern deployment. Introduce a list parameter for this purpose to the role. Updated docs.
branko aa76fae1cf25
9 years ago
MAR-44: Added usage instructions for the backup roles. Also fixed a couple of errors in existing usage instructions, and included some changes related to addition of a backup server.
branko 79aa82273952
9 years ago
MAR-44: Document pre-backup scripts for backup_client role. Use static prefix for the backup pattern file for databases.
branko 0d7fd6fb319b
9 years ago
MAR-44: Expanding usage to include set-up of backup server. Currently no special role set-up, just the preparation of server.
branko c161524058d5
9 years ago
MAR-44: Updated testsite documentation, mostly small tweaks. Include backup server itself as backup client (backing-up logs and the like).
branko c6f217756635
9 years ago
MAR-44: Redesigned handling of private keys by the backup_client role. Keys are now provided directly, not as key identifiers to be looked-up in the backup keyring.
branko d61d01c00362
9 years ago
MAR-44: Redesigned usage of GnuPG keys used by the backup_client role. Now one must provide encryption key, signing key (both have to be private, and will be transfered to host), and can optionally provide additional public keys to use for encryption. Updated example.
branko 5e15f8ca16fc
9 years ago
MAR-44: Moved away from crontab for database backups to pre-backup commands for better reliability. Fixed command for collecting the encryption keys.
branko 0f817823bed7
9 years ago
MAR-44: Implemented backup support for the common role. Includes back-up of logs and (regular) home directories.
branko b668f8894d52
9 years ago
MAR-44: Implemented backup support for the database role.
branko f05039c7d383
9 years ago
MAR-44: Implemented backup support for the mail server role.
branko dbc3381e1ff3
9 years ago
MAR-44: Implemented backup support for the XMPP server role. Updated test site to include XMPP server as one of the backup clients.
branko 881a85f08e22
9 years ago
MAR-44: Added another global parameter for controlling deployment of backup configs for roles. Implemented backup support for the LDAP server role. Updated testsite configuration, moving the backup configuration to be global.
branko 3686169e9565
9 years ago
MAR-44: Set-up crontab to run backups at 02:00 every day in backup client role. Updated role reference documentation for backup client role. Updated test site set-up instructions. Updated testsite configuration for backup client/server to use domain parameters. Enabled backup client role for the web server.
branko c4113608aa36
9 years ago
MAR-44: Added role reference documentation for the backup_client role. Added role reference examples for the backup_server role.
branko 3498d77cad32
9 years ago
MAR-44: Use a number of convenient default values for certain parameters for backup_client role. Make sure signing key is not configured/deployed if not defined. Make the target for backup storage a bit more flexible/configurable. Extract the 8-character hex key ID for configuing the duplicity signing key in backup client role. Updated handling of key deployment/import to make it a bit more robust.
branko a45dcc06530a
9 years ago
MAR-44: Updated gitignore to exclude the backup GnuPG keyring from the testsite. Added initial backup client implementation. Updated the testsite configuration for backup server to use realistic IP addresses for clients.
branko 500658358454
9 years ago
MAR-44: Added backup server implementation. Updated testsite to include deployment of dedicated backup server. Documented the backup server implementation (except for usage instructions).
branko a77fff9fcd91
9 years ago
MAR-43: Deploy information about project home directory in the Python virtual environment. This makes things more convenient when using virtualenv wrapper.
branko 819d02d81946
9 years ago
MAR-42: make sure the protocol used (http/https) is passed-on to the WSGI application. This is important in order to generate proper redirects and URLs from within the WSGI application.
branko d73446661f9c
9 years ago
MAR-18: Minor corrections to usage instructions, rephrasing, and small enhancements.
branko f661345e5b93
9 years ago
MAR-18: Added small section on where to go next at the bottom of usage instructions.
branko 2935e65f230e
9 years ago
MAR-18: Added more information on how the PHP apps are executed to the usage instructions (and where the files are served from). Added usage instructions for deploying a WSGI appliction (Django Wiki in this case).
branko 5b1624335e63
9 years ago
MAR-18: Updated the usage instructions to include a full example for deploying a PHP application (including database). Picked The Bug Genie for this purpose. Fixed some http links.
branko 80c77d68b540
9 years ago
MAR-18: Added usage instructions for the database server role.
branko 7a01af815f91
9 years ago
MAR-18: Added usage instructions for the web server role.
branko cd11d6826378
9 years ago
MAR-18: Added usage instructions for the XMPP server role.
branko e2c7276ecff7
9 years ago
MAR-18: Added usage instructions for the mail forwarder role. Fixed some indentation.
branko dbd4c92f4e4f
9 years ago
MAR-18: Added small table of contents for the usage page. Use truststore.pem instead of ca.pem (since some roles use that value by default as well). Added instructions for the mail server role.
branko 0969ee81219a
9 years ago
MAR-18: Added usage instructions for the LDAP server/client roles.
branko 4acb74ace813
9 years ago
MAR-18: Adding usage instructions for bootstrap and common server configuration.
branko c482961647bf
9 years ago
MAR-18: Added initial usage instructions that cover some basic set-up of Ansible server and preseed role.
branko 41d138d49d52
9 years ago
MAR-41: Small documentation fixes for default values for the PHP and WSGI website roles.
branko 79a84d2b8e01
9 years ago
Noticket: Fixing extra brackets for default value for https_tls_certificate.
branko 011f651f90ce
9 years ago
MAR-40: Updated the XMPP role to be more in the line of other roles (like mail server) by having more implicit settings/expected LDAP directory structure.Removed a number of options that are now hard-coded. Updated testsite appropriately to accomodate for this change.
branko b9ad784771b4
9 years ago
MAR-39: Updated description for the LDAP server role.
branko 9f804c9501da
9 years ago
MAR-39: Added support for specifying consumers of LDAP structure to the LDAP server role. Added support to the LDAP server role for specifying groups to create. Modified the ldap_entry implementation, replacing the addattributes/replaceattributes with append/replace states. The new states allow for creation of entry if it does not exist, making them more versatille. The existing classes and configurations have been updated accordingly.
branko d077bd1afabb
9 years ago
MAR-38: Added deploment of LDAP misc schema to LDAP server role. Updated the test site to accomodate this change (removing the LDAP entries that took care of it manually before).
branko 4313878669b1
9 years ago
MAR-37: Fixed documentation for the mail server LDAP base DN parameter, and renamed the parameter to make a bit more sense (to reduce confusion).
branko e29b656fbf7a
10 years ago
MAR-36: Added new option to ldap_server role for defining the LDAP administrator's password.
branko ddfeb485fb84
10 years ago
MAR-35: Fixed handling of Ansible-provided facts, making it _much_ simpler along the way as well.
branko b7a248e3c287
10 years ago
MAR-35: Fixed documentation for tls_private_key_dir and tls_certificate_dir options. Fixed default definition for common packages that should be deployed on servers.
branko 121c6165add4
10 years ago
MAR-35: Fixed the user of Ansible facts (fixed wrong variable name).
branko 5272f991ac65
10 years ago
MAR-20: Added information about compatible/tested versions of Ansible.
branko 611b125071e0
10 years ago
MAR-19: Small update for scanning SSH keys so we wouldn't end-up with thousands of SSH keys.
branko 55dd00900508
10 years ago
MAR-19: Tweaked the default permissions for LDAP a bit, to allow users to read all entries in LDAP tree (except passwords, of course).
branko 955d4a31a0b0
10 years ago
MAR-19: Make the ansible_key var for bootstrap role optional.
branko e1f36d36827b
10 years ago
MAR-19: Fixed missing parameter for using TLS for LDAP connections in Prosody configuraiton template. Fixed LDAP client configurations, moving most of them out of the individual yml files into all.yml (so only the ldap server gets different config).
branko ed37f9854bfb
10 years ago
MAR-19: Simplified the WSGI website role by making a number of parameters optional.
branko 76e05de03837
10 years ago
MAR-19: Fixed documentation for optional TLS key/certificate parameters. Simplified php website role, making some parameters optional. Fixed the optional parameters for TLS for web server role.
branko 5b175621f79a
10 years ago
MAR-19: Fixed some docs. Made a bunch of parameters optional for web server role.
branko 226b5faf3e5a
10 years ago
MAR-19: Simplified the mail forwarder role by making some of the parameters optional.
branko e838bcb94a9e
10 years ago
MAR-19: Simplified the mail server parameters by making a bunch of them optional.
branko fb163acf23e7
10 years ago
MAR-19: Fixed handling off TLS private keys and certificates. Added some common parameters for defining where the TLS private keys and certificates reside.
branko e61d502b9d00
10 years ago
MAR-19: Simplified a couple of parameters in the xmpp_server role.
branko 63d26c0b3d86
10 years ago
MAR-19: Simplified LDAP permissions specification for the LDAP server. Auto-calculate on which db the permissions need to be changed (instead of having user provide it). Also switched to a single tree where it can be configured. Updated the example in role reference.
branko 99edcba90842
10 years ago
MAR-19: Simplified the parameters for LDAP server role. Most of the parameters have become optional, with some smart defaults.
branko b325005c1a8f
10 years ago
MAR-19: Flattened the ldap server configurtion parameter provisioning (i.e. no more placeholder dictionary, instead use distinct variable names for each option).
branko 4c5f1593c786
10 years ago
MAR-19: Make the ldap client configuration optional.
branko fe6cdb2443c7
10 years ago
MAR-19: Simplified the parameters for common role, making a lot of them optional with some sane defaults. Switched to using an actual list for additional groups.
branko a25135cc9e78
10 years ago
MAR-19: Updated documentation for the preseed role to match parameter redesign. Removed some testing file that was added to playbooks by mistake earlier.
branko 644df4147123
10 years ago
MAR-19: Updated the preseed role. Redesigned how the parameters can be provided (role defaults + user-defined global defaults + per server overrides now). Made the ansible_key optional. Made the preseed_directory optional. All servers except localhost are now processed for preseed generation. Docs not updated yet.
branko b4ac65219ef1
10 years ago
MAR-34: Small usability improvements, not related to original issue. Improved the ssh-keyscan command a bit to include IP addresses in output as well. Store Ansible retry files locally in the retry directory (relative to testsite).
This site is powered by Kallithea 0.7.99, which is © 2010–2024 by various authors & licensed under GPLv3.