Changelog - showing 100 out of 1126 revisions
revisions
Open New Pull Request from Branch filter:
branko 1b76d272e529
10 years ago
MAR-34: Renamed the role prosody to xmpp_server. Updated all parameters for the role to be prefixed with xmpp_ instead of prosody_. Updated documentation.
branko 9b1a9fdc99e5
10 years ago
MAR-17: Added feature description for the project. Bumped the copyright year while at it.
branko c56a03a698ee
10 years ago
MAR-9: Updated documentation to describe how to change the domain in test site. Updated instructions for generating the TLS keys and certificates (via playbook) in test site.
branko 62fc50dc3f75
10 years ago
MAR-9: Removing the unused defaults file for wsgi hello world website example.
branko 70733167cdf8
10 years ago
MAR-9: Created small utility playbook in testsite for generating the necessary TLS keys and certificates. Updated testsite configuration to be slightly different (no need for separate chain file I think).
branko 0f17841d0aad
10 years ago
MAR-9: Updated the testsite to use domain parameter defined within all.yml. Some regex replacements are done in same file to calculate the remaining necessary values. Fixed a small code error in ldap_permissions module.
branko babda105c9cf
10 years ago
MAR-16: Added option to common role for setting-up caching proxy for apt.
branko 424710fc61e1
10 years ago
MAR-14: Moved the support and license sections out of index page, and onto the about page.
branko 40689344a8f3
10 years ago
MAR-15: Implemented role for deploying a MariaDB database.
branko 09625826d96f
10 years ago
MAR-15: Added implementation for the database server role. Performs very simpled deployment and set-up of MariaDB database server.
branko 1e2d2a723cca
10 years ago
MAR-5: Updated test documentation instructions for generating private keys/certs. Sleep for 1 second (dirty hack) to have the certs have distinct serial numbers (since they're equal to epoch time).
branko 884beb9a0e1d
10 years ago
MAR-5: Fixed a typo in docs for test site (wrong filename path for certificate). Added encryption_key option to certtool templates in test site in order to have key encipherment key usage in resulting certificates (otherwise Thunderbird, for example, won't be able to connect to SMTP server).
branko 052eefc4fab0
10 years ago
MAR-5: Ignore certificate and key files in TLS sub-directory (include GnuTLS templates). Updated test site docs to describe all playbooks. Updated test site set-up instructions to include sample commands for generating the keys/certs. Added two roles to test site for deploying simple PHP/WSGI websites.
branko d26fe0368a4b
10 years ago
MAR-5: Updated php and wsgi website roles to include set-up website-specific TLS configuration for Nginx (including separate TLS key/certificate if necessary).
branko 9fa438ee34c0
10 years ago
MAR-5: Added another example to role reference for running PHP websites. Allow duplicates of roles php_website and wsgi_website. Use parameter in handler for restarting WSGI website (to have them website-specific). Updated test site to force handler execution in order to avoid being in undefined state.
branko bd13e65e0e94
10 years ago
MAR-5: Updated the wsgi website to make the nginx configirations look a bit better.
branko 7f8ef577fa2c
10 years ago
MAR-5: Fixed syntax error. Updated formatting a bit to produce nicer-looking files.
branko a3d735d2655f
10 years ago
MAR-5: Enable default website when doing the web server role.
branko 222008c85003
10 years ago
MAR-5: Make sure we don't end-up in recursion when making location.
branko 40473a82c752
10 years ago
MAR-5: Updated the PHP website role to be a bit more flexible when configuring the nginx.
branko 37de8a97187c
10 years ago
MAR-5: Updated WSGI webserver role to have the website service running with correct umask.
branko 981584549895
10 years ago
MAR-5: Adding the initial implementation of the WSGI website role.
branko 467a66f3ec65
10 years ago
MAR-5: Added handler for reloading systemd configuration to common role. Dropped installation of supervisor as part of web server role. Updted web server role to create directory for storing WSGI application sockets. Updated web server role to use correct directory for storing PHP website sockets.
branko be92dd65fc60
10 years ago
MAR-5: Updated web server and php website roles, adding ability to validate the nginx configuration file prior to deployment (via special bash script).
branko 3f2756d25f85
10 years ago
MAR-5: Updated task names for PHP website role.
branko 7727c37bce67
10 years ago
MAR-5: Fixed some typos in role reference for web server. Added initial implementation of a role for deploying PHP websites (some common functionality).
branko 21122b16bd6b
10 years ago
MAR-5: Updated test site, reducing the UID/GID number for some sample groups, and adding unzip to list of common packages.
branko d71d401dbd28
10 years ago
MAR-5: Updated web server role. Fixed the permissions of default vhost configuration file. Create directory for storing PHP FPM log files. Run php5-fpm with umask 0007.
branko 0079746d9a8b
10 years ago
MAR-5: Updated the web server role to include deployment of some base packages for PHP and Python web apps.
branko 373cdfe71c66
10 years ago
MAR-5: Implemented the initial web server role that deploys a basic Nginx to the server. Updated test site to include the new role (for server web.example.com).
branko 06bf1c3c9611
10 years ago
MAR-5: Added server to test site for testing the web server roles. Updated mail server configuration to relay mails for the web server in test site.
branko 61ddc6eab566
10 years ago
MAR-13: Updated documentation for the preseed role (added missin parameter description for ansible_key). Remove the ansible key from list of authorised keys for root user at end of bootstrap process. Updated testsite documentation to be more explicit for bootstrap process.
branko 8b88132d2576
10 years ago
MAR-13: Update docs for testsite. No need to run bootstrap.yml with -k option (we use public key at this point). Optimimsed the bootstrap process a bit to be faster/easier.
branko a6633bcc83d1
10 years ago
MAR-13: Added a hack to restart the slapd server once the group for OpenLDAP has been changed (otherwise the user can't read the TLS key, and error happens). Fixed some service resources to be explicitly enabled.
branko b0e7faa211ae
10 years ago
MAR-13: Fixed configuration of memberof overlay for the LDAP server. Switched to using jessie repository for the Prosody role. Install missing dep for Prosody server (for TLS).
branko b453b7fcb189
10 years ago
MAR-13: Don't use Wheezy backports repository for deploying mail server. Updated package name for Emacs.
branko d90dce790417
10 years ago
MAR-13: Fixed the instructions for bootstrapping servers in testsite.
branko e705dde5e6c7
10 years ago
MAR-13: Updated the template for preesed files for Jessie. Moved the ansible_key configuration option out of testsite's bootstrap playbook in order to use it inside of preseed files as well.
branko eb9a1b525c77
10 years ago
MAR-12: Added documentation related to firewall for the common role. Added deployment of firewall rules for roles mail_server, prosody, and ldap_server.
branko 941f4f372672
10 years ago
MAR-12: Updated the common role to deploy ferm, and set-up a basic firewall for allowing incoming SSH and ICMP echo requsts (ping).
branko 2285dcdda345
10 years ago
MAR-11: Force use of TLS when forwarding mails to mail relay, including proper server certificate verification. Updated testsite and docs as well.
branko 284ed92d40bb
10 years ago
MAR-10: Fixed truststore filename in docs for test site. Install the ssl-cert package explicitly, and allow server processes to access their keys by adding them to group ssl-cert instead.
branko 0ad9410c243a
10 years ago
MAR-10: Deploy CA certificates to /etc/ssl/certs/ only, otherwise some weird issues can happen in case update-ca-certificates does not run. Plus is it more straightforward. Deploy TLS private key/cert a bit later for all roles in order to have the necessary groups available. Fixed a wrong notify.
branko 96e9f230a669
10 years ago
MAR-10: Updated server roles to deploy private key and certificate. Updated documentation and test site configuration as well.
branko 76ed37089b33
10 years ago
MAR-10: Added support for deploying CA certificates to role 'common'. Make sure symlink truststore is deployed as file in Postfix chroot (for role mail_server). Small fix in handlers for role common (ls command is not necessary). Updated testsite configuration and documentation to refer to correct CA certificate file (for trust chain).
branko c9b8c60fbd5e
10 years ago
MAR-4: Deploy the SWAKS utility on servers that forward their mails via relay. Useful for testing.
branko 57667a2c528b
10 years ago
MAR-4: Updated instructions for setting-up the TLS stuff on mail server (keys, certs).
branko 9a5d1122146f
10 years ago
MAR-4: Added documentation for the mail forwarder role. Removed allowed networks for the mail forwarder role (the server is not supposed to relay mail).
branko c0df2fc4a827
10 years ago
MAR-4: Fixed the mydestination setting for mail server role to use inventory's hostname/FQDN.
branko 7ab6518de03b
10 years ago
MAR-4: Implemented mail forwarder role, to be used for sending out mails via relay from the local system. Updated testsite to use mail forwarder role for the LDAP and XMPP servers.
branko 08e3c2b79063
10 years ago
MAR-4: Updated mail server role, removing some redundant settings for TLS key/cert and moving some TLS settings a bit.
branko 298c0dbe1698
10 years ago
MAR-4: Updated documentation for the mail server role, adding information about rsync installation, set-up of chroot for Postfix, and the smtp_allow_relay_from option. Updated mail_server role implementation, fixing rsync command for deploying the truststore to preserve truststore permissions and adding support for specifying networks from which unauthenticated relaying should be allowed.
branko 07956dae35fc
10 years ago
MAR-4: Deploy the truststore PEM file for connecting to the LDAP server via rsync. Explicitly create directories for ClamAV in the Postfix chroot.
branko 81d6b5ac9240
10 years ago
MAR-4: Added example configuration for the mail server role. Updated name for the TLS key files. Added steps that need to be done after mail server has been set-up (for TLS keys mainly).
branko 52f75c39ab69
10 years ago
MAR-4: Added documentation for the mail server role.
branko 1b50bc1cc817
10 years ago
MAR-4: Simplified role parameters (make them all one-dimensional, don't use dictionaries).
branko 1bdb64307968
10 years ago
MAR-4: Added configuration options for mail postmaster (Dovecot setting).
branko 2f0d3abc3c49
10 years ago
MAR-4: Use static file configuration for ClamAV Milter. This is more reliable since there is no decent way to signal debconf to redeploy configuration files.
branko 12abf97ac229
10 years ago
MAR-4: Implemented scanning of mails via ClamAV. Added a couple of comments to Postfix configuration file.
branko 67d9190a521a
10 years ago
MAR-4: Added RBL support for Postifx SMTP checks.
branko cf897f8c1941
10 years ago
MAR-4: Updated formatting for Postfix main.cf.
branko 8367eb84cdcd
10 years ago
MAR-4: Fixed configuration syntax error for Postfix.
branko d9dae92d436c
10 years ago
MAR-4: Added SMTP authentication configuration to Postifx. Added TLS configuration to Postfix. Updated testsite. Removed unused file.
branko 98d0bcf75e46
10 years ago
MAR-4: Fixed configuration of separator for the inbox namespace in Dovecot.
branko d2f91c66acd3
10 years ago
MAR-4: Added configuration option for specifying Dovecot separator.
branko 85d2a408fd21
10 years ago
MAR-4: Updated testsite to include Dovecot LDAP password and IMAP TLS configuration.
branko 107417b217e0
10 years ago
MAR-4: Added some missing service restarts for Postfix. Added deployment of Dovecot configuration.
branko ce1b1a242584
10 years ago
MAR-4: Added creation of dedicated user/group for stored mail.
branko 74ed4756d5a6
10 years ago
MAR-4: Updated the main.cf Postfix configuration file. Updated available aliases in LDAP directory.
branko 5ef84494bbb1
10 years ago
MAR-4: Updated configuration for testsite mail server.
branko f7579be2c24b
10 years ago
MAR-4: Added stock main.cf Postfix configuration file. Added deployment of Postifx LDAP configuration files.
branko 233d1e763810
10 years ago
MAR-4: Added the misc schema to test site LDAP server.
branko 375f54472644
10 years ago
MAR-4: Added LDAP sub-tree for storing mail server information (domains and aliases) in test site.
branko be262063970c
10 years ago
MAR-4: Added LDAP users for Postfix/Dovecot to test site. Added an extra group for authorisation purposes for mail server. Deploy LDAP client role to mail server.
branko 82951ff4f9f9
10 years ago
MAR-4: Added initial implementation for mail server role. Includes deployment of packages and purging of Exim4 configuration. Dovecot packages installed from backports.
branko 19258e57da15
10 years ago
MAR-4: Adding new host as a dedicated mail server.
branko 66b36215b603
10 years ago
MAR-3: Added instructions for setting-up TLS keys and certs on the XMPP server in test site. Added LDAP client role to the XMPP server in test site. Updated path to TLS key/cert for XMPP server in test site.
branko 8b0cbc64f6e9
10 years ago
MAR-3: Added legacyauth module, including support for deprecated TLS/SSL on port 5223.
branko 713f25145801
10 years ago
MAR-3: Added example for Prosody role.
branko 8001cba3f698
10 years ago
MAR-3: Added role documentation.
branko c8875611c9ef
10 years ago
MAR-3: Swtiched to INFO logging. Define conference and proxy components per-domain. Removed two redundant options.
branko df7ad64eec5c
10 years ago
MAR-3: Replace tabs with spaces in Prosody configuration file.
branko e0bb5f34d1a5
10 years ago
MAR-3: Parameter should be passed in as a string, not list.
branko 7a863b26d8b8
10 years ago
MAR-3: Fixed the filter and LDAP password in testsite.
branko 758a28f87384
10 years ago
MAR-3: Fixing the LDAP bind credentials in test site.
branko 90417b999b1e
10 years ago
MAR-3: Adding the XMPP server to test site. Updated LDAP entry creation in test site to include the XMPP-related entries (service entry and group).
branko 2e1ff733350e
10 years ago
MAR-3: Adding Prosody repository apt key. Adding initial implementation of Prosody role, with support for LDAP.
branko d8e69dac1c5a
10 years ago
MAR-3: Adding dedicated XMPP server to test site.
branko 5524a4ad9904
10 years ago
MAR-1: Set the truststore for LDAP client. Create one more LDAP entry for people. Add sn, user password, and mail to existing LDAP people entries.
branko f7fe8adec8d3
10 years ago
MAR-1: Updated documentation about memberof overlay. Updated configuration of the memberof overlay.
branko 308745f2c2a8
10 years ago
MAR-1: Load the memberof module, and enable the memberof overlay on top of default database.
branko 6b57aabf9556
10 years ago
MAR-1: Fixed the handling of state addattributes in ldap_entry module to be more optimal (which also fixes some issues with cn=config additions related to inability to remove some attribute values).
branko de1d9aa13410
10 years ago
MAR-7: Moved sentence to a more logical location.
branko 778ff940ac19
10 years ago
MAR-7: Added some clarifications on where the commands should be run from. Added some general information about operating system user admin, and about manual steps that might need to be taken.
branko 16cf9817562c
10 years ago
MAR-7: Fixing a typo.
branko 237acd00f6a1
10 years ago
MAR-7: Added initial documentation about the test site.
branko 083df81ac1a4
10 years ago
MAR-7: Use socket for connecting to LDAP.
branko d0a6d20f081c
10 years ago
MAR-7: Authorise the LDAP admin to manage directory as well.
branko 0c81b8598748
10 years ago
MAR-7: Added server ldap.example.com. Updated site and group variables accordingly.
branko 720736b8b462
10 years ago
MAR-7: Added the bootstrap playbook, and added ldap.example.com server to hosts.
This site is powered by Kallithea 0.7.99, which is © 2010–2024 by various authors & licensed under GPLv3.