This is a changelog.
This project attempts to follow semantic versioning.
- Terminal Color
- Not working on OSX - macs don't read from /etc/profile.d/
- Stops showing color if you
sudo su
- Add a new role for configuring a monit-based resque server
- Auto-detect mitogen for speed
- Add ability to set the timezone for servers instead of forcing to Central Time
- Update puma configuration to support puma 5 with puma-daemon
- Update letsencrypt to add certbot-nginx support for newer ubuntu
- Fix sending security stats
- Make sure apt package acl is installed in common role so ansible can become a non-privileged user
- Remove duplicate nginx role from playbook templates
- Don't send stats if there have been no upgrades
- certbox => certbot
- Add a friendly error message if ansible is not installed
- Add new role to support New Relic One's infrastructure agent
- Always specify the letsencrypt cert_name so they are consistent
- Fix os upgrades stat collection for ubuntu 20
- Get actual os version number along with kernal name
- Update MOTD version automatically!
- Get and upload unattended security updates
- Update deprecated syntax for ansible
- Fix postgresql-client for python 3
- Allow extra nginx options via extra_nginx_config eg:
extra_nginx_config: | proxy_http_version 1.1; chunked_transfer_encoding off; proxy_buffering off; proxy_cache off;
- Add keepalive_timeout for nginx
Lots of modifications for ubuntu 20.04, which has python3 as a default
- Change letsencrypt to pull from apt instead of build from source (backwards compatible)
- Change postgres to a cleaner install and deprecate the old zenoamaro role
- postgresql_version is now a required variable and no longer defaults to 9.4
- Better detection of web servers
- Tweak the way that different roles are detected to be more reliable
- Update papertrail to latest version of remote_syslog2 and add support for nginx logs
- Sidekiq concurrency actually works
- Grab linux kernel to send as stats
- Grab psql version to send as stats
- Add PATH to crontab for letsencrypt auto renewal
- log letsencrypt crontab to /var/log/cron.log
- fix setting hostname with systemd
- Use state: "present" instead of "installed"
- Update URL for letsencrypt tls raw file
- Add maintenance_mode command
- Add ppa:ondrej/nginx repo in common role for TLS 1.3 and nginx support
- bug fixes
- PostgreSQL database server works for version > 10
- New LetsEncrypt/NGINX servers get the correct file from the certbot repo
- bug fixes
- Fix error when not setting send_stats
- ignore errors when uninstalling bundler - can fail when trying to uninstall the version provided by ruby
- Add config option for default_server directive in nginx.
- Fixed bug in SSL redirect from 2.0.1
- Adds ability to gather Ruby, Rails, and apt details from servers and send to a stats collector
- Add maintain command
- Add letsencrypt_dns role for doing DNS validation vs HTTP validation
- Fix bundler / gem version installation on new/vanilla servers
- Adds FFMPEG to Rails role so ActiveStorage can generate video previews
- Option to not redirect to SSL on nginx
- Group delayed jobs by queue in collectd config
-
breaking changes
- Add bundler_version to install specific bundler version. Is required.
-
enhancements
- Updates rubygems in ruby-common task
- Logs apt updates to /opt/subspace/updates.log
-
enhancements
- Add support for
-i
insubpsace ssh
command.
- Add support for
-
bug fixes
- Check for all monit jobs stopping before changing config.
- Ensure /etc/profile.d/ exists
-
enhancements
- Add a terminal environment prompt background color to the
common
role, so you know what environment you'ressh
'd into.
- Add a terminal environment prompt background color to the
-
bug fixes
- Stop all monit jobs before changing the monit config.
- bug fixes
- Fix setting the timezone
-
bug fixes
- Fix bug with task that modifies imagemagick policy to enable reading PDFs which was causing it to insert the same line multiple times.
-
enhancements
- Unpin monit since they fixed it, and the version we have pinned isn't available in Ubuntu 18.04.
- enhancements
- Add way to specify private key when running the bootstrap command.
- Add way to specify only certain hosts to run the playbook on when running the provision command.
- The common role now runs
apt-get autoremove
after doing the update and upgrade.
-
bug fixes
- Update ImageMagick policy file to enable reading from PDFs which was disabled due to now-fixed ghostscript bugs.
-
enhancements
- Make it possible to specify private key file when running provision command.
- bug fixes
- Pin monit to the version that isn't broken. Since it was a security update, monit would re-update if not pinned.
- bug fixes
- Update alienvault role to handle Ubuntu and Amazon ansible_distributions.
No breaking changes from 0.6.17 to 1.0.0, but decided it's time for version 1.0.0 to be out.
-
enhancements
- Tag tasks in the alienvault and monit roles such that all tasks are tagged with the role name.
- Make tags 'upgrade' for doing apt-get update and upgrade and 'authorized_keys' for setting deploy user's authorized_keys in the common role.
- Make tag 'appyml' for the task to upload application.yml in the rails role.
-
features
- Add ability to pass certain options through
subspace provision
toansible-playbook
. These are: tags, start-at-task
- Add ability to pass certain options through
- bug fixes
- Pin monit version to 1:5.16-2 due to a bug
- bug fixes
- Remove /cable location entry for nginx-rails config file
-
features
- The nginx collectd configuration now reports number of errors (500-503), timeouts (504) and successes (200, 302, 304)
- Add alienvault role that can configure ubuntu to send syslog to a sensor.
- nginx-rails role: Add ability to set nginx's
proxy_read_timeout
.
-
bug fixes
- Don't have rails role install yarn -- it's not needed by default, and if the project does need it, it should explicitly use the yarn role.
- bug fixes
- Update rails and logrotate modules to work with Python 3
-
bug fixes
- Fix Postgres role's backup script to include AWS ACL header that fixes bucket object permissions.
-
features
- Add yarn and nodejs roles.
-
breaking changes
- enhancement A
- enhancement B
-
deprecations
- deprecation A
- deprecation B
-
bug fixes
- bug fix A
- bug fix B
-
enhancements
- enhancement A
- enhancement B
-
features
- feature A
- feature B