Summary

Clone URL:

git Use ID

Description:

Majic Ansible Roles is a collection of Ansible roles that are used on regular basis for deployment and maintenance of Majic infrastructure.

Trending files:

Yaml (yml)	63%, 182 files
Python (py)	25%, 73 files
Bash (sh)	3%
Show more
Rst (rst)	3%
Text (txt)	3%
Php (php)	1%
Ini (cfg)	1%
Ini (ini)	1%
Bash,Bash (bashrc)	0%
Cfengine3 (cf)	0%

Download:

Download as zip

Select changeset

With subrepos

Latest Changes

branko	554a57ceb0c1	2 months ago	MAR-233: Add IPv6 connectivity tests for the mail_forwarder role: MAR-233: Add IPv6 connectivity tests for the mail_forwarder role: - Configure static IPv6 addresses on all test machines. - Parametrise all connectivity tests to cover both IPv4 and IPv6. - Be explicit on receiving servers for all swaks invocations that target localhost. - Make sure that the helper mail server has the necessary iptables forwarding rules for IPv6 as well.
branko	d31ae08379b3	2 months ago	MAR-233: Replace hping3 with nmap in mail_forwarder connectivity tests.
branko	8d67cca58871	2 months ago	MAR-233: Replace hping3 with nmap and add IPv6 connectivity tests in the ldap_server role.
branko	bbbc4c2cb188	2 months ago	MAR-230: Test for correct Diffie-Hellman parameter is not relevant for TLSv1.3: MAR-230: Test for correct Diffie-Hellman parameter is not relevant for TLSv1.3: - The test should be run only against servers where mandatory parameters are tested since those have the TLSv1.2 enabled (by defalt).
branko	5a9a31d16029	2 months ago	MAR-230: Added TLS version/cipher tests to the xmpp_server role for server-to-server communications.
branko	d06cc66f85c8	2 months ago	MAR-230: Update minimum TLS protocol on testsite to supported version.
branko	ce5eca25c9d7	2 months ago	MAR-230: Updated documentation, inline comments, and some tests related to TLS configuration: MAR-230: Updated documentation, inline comments, and some tests related to TLS configuration: - Documentation and comments should be a bit more consistent across the roles now. - Try to follow same rule for inclusion of singular TLSv1.2 cipher across the board in affected tests.
branko	4a0725cb73a6	2 months ago	MAR-230: Drop the leftover workaround for testing role parameters with deprecated TLS versions.
branko	a9700f6fe020	2 months ago	MAR-230: Drop support for older TLS versions from the xmpp_server role: MAR-230: Drop support for older TLS versions from the xmpp_server role: - Update documentation. - Include TLSv1.3 ciphers in default configuration for documentation purposes - although ciphers are not configurable. - Update the tests. Drop the workarounds for enabling the older versions via OpenSSL policies.
branko	004a2ec1b5a9	2 months ago	MAR-230: Add support for TLSv1.3 to the mail_server role: MAR-230: Add support for TLSv1.3 to the mail_server role: - Tests/support for older versions have already been dropped previously. - Document the specifics of TLSv1.3 cipher configuration. - Update tests. The DH param test is now applicable only for the mandatory parameter test servers.

README.rst

Majic Ansible Roles

Majic Ansible Roles is a collection of Ansible roles that are used on regular basis for deployment and maintenance of Majic infrastructure.

The roles are kept as a separate project in hope of making them potentially useful to wider audience, and for reference purposes.

Roles cover different aspects of infrastructure, such as mail servers, web servers, web applications etc. The roles are mainly well-suited for smaller installations.

License

Majic Ansible Roles is released under terms of BSD (3-Clause) License. See the LICENSE file for more details.