Files
@ 7df70ebc439c
Branch filter:
Location: majic-ansible-roles/docs/releasenotes.rst
7df70ebc439c
5.5 KiB
text/prs.fallenstein.rst
MAR-85: Updated all role firewall deployment rules to cover IPv6 in addition to IPv4. Update instructions to make it clear that an additional Python package is required.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 | Release notes
=============
1.2.0
-----
Minor fixes and features.
New features:
* ``wsgi_website`` role
* Added support for providing custom proxy headers to pass on to Gunicorn
server.
Bug-fixes:
* ``php_website`` role
* Make sure the environment indicator is always shown on top by increasing its
``z-index`` value.
* ``wsgi_website`` role
* Make sure the environment indicator is always shown on top by increasing its
``z-index`` value.
1.1.0
-----
Minor bug fixes, enchancements, and features.
New features/improvements:
* ``common`` role
* Added support for having user-defined ``/etc/profile.d`` style scripts (in
``~/.profile.d/``.
* Disables Emacs ``electric-indent-mode`` globally if Emacs is installed.
* Deploys symbolic link for ``mysql_config`` if package
``libmariadb-client-lgpl-dev-compat`` is installed (workaround for
`Debian Bug 766996
<https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=766996>`_)
* Updates CA cache immediatelly so that roles depending on cache being
up-to-date do not throw validation errors.
* ``mail_server`` role
* Added support for specifying local aliases.
* Undeliverable bounces are now delivered to postmaster.
* ``php_website`` role
* Added support for specifying custom ``php-fpm`` pool configuration options.
* Added support for having ribon/strip at bottom to identify website
environment. Useful for testing/staging environments.
* Deploys symbolic link for ``mysql_config`` if package
``libmariadb-client-lgpl-dev-compat`` is installed (workaround for
`Debian Bug 766996
<https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=766996>`_)
* Forwards mails delivered to application or application administrator users
to local ``root`` account (can be configured to deliver mails elsewhere).
* Sets ``HSTS`` policy if TLS is enforced.
* *Umask* for the operating system which runs the website is set to ``0007``.
* When administrator user is created for the first time, its home directory is
populated from ``/etc/skel``. This makes prompts etc look more uniform
across the system.
* ``wsgi_website`` role
* Added support for having ribon/strip at bottom to identify website
environment. Useful for testing/staging environments.
* Added support for specifying environment variables that should be set when
running the service, or when administering the installation (using
application administrator operating system user).
* Deploys symbolic link for ``mysql_config`` if package
``libmariadb-client-lgpl-dev-compat`` is installed (workaround for
`Debian Bug 766996
<https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=766996>`_)
* Forwards mails delivered to application or application administrator users
to local ``root`` account (can be configured to deliver mails elsewhere).
* Sets ``HSTS`` policy if TLS is enforced.
* *Umask* for the operating system which runs the website is set to ``0007``.
* When administrator user is created for the first time, its home directory is
populated from ``/etc/skel``. This makes prompts etc look more uniform
across the system.
Bug-fixes:
* ``database_server`` role
* Applies UTF-8 configuration immediatelly. This should fix issues during
inital server set-up for roles that need to create database using UTF-8
character set.
* ``wsgi_website`` role
* Fixed virtualenv wrapper shell script to use proper escaping around
arguments.
* Website service is now restarted in case of package changes (system or
virtual environment).
* ``mail_forwarder`` role
* Allows incoming SMTP connections from the SMTP relay server (if
configured). This way the SMTP relay can deliver bounces.
1.0.1
-----
Minimal bugfix update to improve interoperability.
Changes:
* ``xmpp_server`` role no longer restricts TLS to version 1.2 and ciphers to PFS
ciphers. Should solve ``s2s`` communication issues with old XMPP servers.
1.0.0
-----
Initial release of Majic Ansible Roles.
New roles:
* ``backup``, reusable role for specifying files to back-up.
* ``backup_client``, base role for setting-up backup client on a server
(Duplicity).
* ``backup_server``, sets-up a backup server.
* ``bootstrap``, sets-up server for Ansible management (bootstrapping it for
subsequent Ansible runs).
* ``common``, basic set-up of server, some hardening, creation of admin accounts
etc.
* ``database``, reusable role for creating MariaDB database and user for
accessing the database.
* ``database_server``, sets-up database server (MariaDB).
* ``ldap_client``, sets-up LDAP client tools and configuration (OpenLDAP).
* ``ldap_server``, sets-up and manages basic entries in an LDAP server
(OpenLDAP).
* ``mail_forwarder``, sets-up local SMTP server that forwards mail to the main
mail server (Postfix).
* ``mail_server``, sets-up a mail server with SMTP and IMAP services (Postfix,
Dovecot).
* ``php_website``, reusable role for creating PHP-based websites. Provides basic
building block for PHP applications (Nginx).
* ``preseed``, small role for generating Debian preseed files for automated OS
installation.
* ``web_server``, sets-up web server with basic welcome page (Nginx).
* ``wsgi_website``, reusable role for creating WSGI-based websites. Provides
basic building block for WSGI applications (Nginx).
* ``xmpp_server``, sets-up an XMPP server for instant messaging services
(Prosody).
New features:
* Usage (tutorial-like) instructions.
* Test site, serving as an example and used for basic regression testing.
* Role reference documentation.
|