# # ChangeLog for main/waeup-ansible # # Generated by Trac 1.2.2 # 26 Dec 2024, 08:17:30 Mon, 22 Aug 2022 07:38:31 GMT Henrik Bettermann [17070] * main/waeup-ansible/letsencrypt.yml (modified) Add domain obi-dient.com.ng. Tue, 05 Jul 2022 21:46:10 GMT Henrik Bettermann [16992] * main/waeup-ansible/letsencrypt.yml (modified) Add lp-nigeria.com.ng Tue, 05 Jul 2022 13:25:33 GMT uli [16987] * main/waeup-ansible/bootstrap.yml (modified) * main/waeup-ansible/roles/openssh/tasks/main.yml (modified) Update SSH config to current infosec state. Wed, 16 Mar 2022 13:25:06 GMT uli [16889] * main/waeup-ansible/letsencrypt.yml (modified) Add h9, update h10 LE domains. Tue, 30 Nov 2021 09:07:23 GMT Henrik Bettermann [16727] * main/waeup-ansible/letsencrypt.yml (modified) Add unidel-trac.waeup.org Thu, 02 Sep 2021 22:02:32 GMT uli [16600] * main/waeup-ansible/letsencrypt.yml (modified) Update domain lists for `letsencrypt` certs. We had some additions ... Sun, 22 Aug 2021 23:51:51 GMT uli [16581] * main/waeup-ansible/letsencrypt.yml (modified) * main/waeup-ansible/roles/letsencrypt/tasks/main.yml (modified) Add d2.waeup.org LE domain and fix LE role. Sun, 22 Aug 2021 22:52:07 GMT uli [16580] * main/waeup-ansible/letsencrypt.yml (modified) Update TLS cert domains for h8, add h10 cert domains. Thu, 15 Apr 2021 08:17:26 GMT uli [16460] * main/waeup-ansible/playbook-daily-upgrade.yml (modified) Also apt autoremove after package changes. Thu, 12 Mar 2020 08:42:58 GMT uli [16036] * main/waeup-ansible/roles/munin_client/tasks/main.yml (modified) Modernize munin-client role. With recent ansible versions lists of ... Thu, 12 Mar 2020 08:28:38 GMT uli [16035] * main/waeup-ansible/hosts (modified) Update list of hosts. Fri, 28 Feb 2020 09:40:27 GMT uli [16019] * main/waeup-ansible/letsencrypt.yml (modified) Hint: first domain should not be changed. Thu, 27 Feb 2020 14:10:35 GMT Henrik Bettermann [16018] * main/waeup-ansible/letsencrypt.yml (modified) Add kofaplus.com and www.kofaplus.com. Thu, 30 Jan 2020 17:40:55 GMT uli [15967] * main/waeup-ansible/host_vars/h10.waeup.org (added) * main/waeup-ansible/host_vars/h8.waeup.org (added) Add host vars for h9 and h10. These include mainly the backup ... Mon, 27 Jan 2020 13:09:08 GMT uli [15962] * main/waeup-ansible/letsencrypt.yml (modified) Update letsencrypt domain list. Fri, 17 Jan 2020 11:29:01 GMT uli [15936] * main/waeup-ansible/playbook-install-borg.yml (modified) * main/waeup-ansible/templates/borg-README.txt.j2 (added) Minor fixes in borg playbook. Fix permissions set and creat README ... Fri, 17 Jan 2020 11:26:13 GMT uli [15935] * main/waeup-ansible/templates/borg-backup.sh.j2 (modified) In backup script also prune old backups. This is neccessary to ... Fri, 17 Jan 2020 11:24:35 GMT uli [15934] * main/waeup-ansible/host_vars/h9.waeup.org (modified) Fix backup vars for host h9. Set the proper list of dirs to backup ... Fri, 17 Jan 2020 11:22:42 GMT uli [15933] * main/waeup-ansible/ansible.cfg (modified) Fix executable settings. Recent ansible versions are more picky ... Wed, 15 Jan 2020 07:33:37 GMT uli [15928] * main/waeup-ansible/playbook-install-borg.yml (modified) * main/waeup-ansible/templates/borg-env.sh.j2 (added) Install scripts to set borg env vars. When installing borg, provide ... Tue, 14 Jan 2020 09:47:50 GMT uli [15926] * main/waeup-ansible/templates (added) * main/waeup-ansible/templates/borg-backup.sh.j2 (added) * main/waeup-ansible/templates/borg-init.sh.j2 (added) * main/waeup-ansible/templates/sb-ftp.sh.j2 (added) Add script templates for borg backup. Wed, 08 Jan 2020 13:01:29 GMT uli [15915] * main/waeup-ansible/README-vhosts.rst (modified) * main/waeup-ansible/README.rst (modified) * main/waeup-ansible/bootstrap.yml (modified) * main/waeup-ansible/hosts (modified) * main/waeup-ansible/hosts-virtual (modified) * main/waeup-ansible/vhost-bootstrap.yml (modified) Rename group [yet-untouched] -> [yet_untouched] as ansible does not ... Wed, 08 Jan 2020 12:50:45 GMT uli [15914] * main/waeup-ansible/hosts (modified) Remove retired servers. Mon, 06 Jan 2020 16:04:25 GMT uli [15909] * main/waeup-ansible/letsencrypt.yml (modified) Extend letsencrypt covered domain list. Mon, 06 Jan 2020 16:03:13 GMT uli [15908] * main/waeup-ansible/hosts (modified) Reflect last server additions/removals. Mon, 06 Jan 2020 16:00:48 GMT uli [15907] * main/waeup-ansible/playbook-prep-reboot.yml (modified) Stop vhost10 before reboot. Mon, 06 Jan 2020 15:57:45 GMT uli [15906] * main/waeup-ansible/playbook-install-borg.yml (modified) Remive unused vars, fix script name. Mon, 06 Jan 2020 15:23:56 GMT Henrik Bettermann [15905] * main/waeup-ansible/playbook-post-reboot.yml (modified) Start vagrant vhost10 after reboot. Mon, 06 Jan 2020 13:32:53 GMT uli [15904] * main/waeup-ansible/host_vars/h9.waeup.org (added) * main/waeup-ansible/playbook-install-borg.yml (added) Add playbooks and config for borg backup. Mon, 06 Jan 2020 13:13:18 GMT uli [15903] * main/waeup-ansible/borg-creds (added) * main/waeup-ansible/borg-creds/.keep (added) Add dir to store generated borg backup credentials. That includes ... Mon, 06 Jan 2020 13:10:03 GMT uli [15902] * main/waeup-ansible/playbook-post-reboot.yml (modified) * main/waeup-ansible/playbook-prep-reboot.yml (modified) Update host specific settings. Especially h5 provides no special ... Mon, 06 Jan 2020 00:11:18 GMT uli [15901] * main/waeup-ansible/setup.yml (modified) Update syntax to get rid of deprecation warnings. Also readability ... Thu, 29 Aug 2019 15:08:10 GMT uli [15573] * main/waeup-ansible/hosts (modified) We ran setup.yml on h8. therefore it is now a `production` machine ... Thu, 29 Aug 2019 14:47:21 GMT uli [15572] * main/waeup-ansible/playbook-daily-upgrade.yml (modified) Go on when something goes wrong. Do not skip further hosts if ... Mon, 26 Aug 2019 13:17:36 GMT uli [15568] * main/waeup-ansible/letsencrypt.yml (modified) * main/waeup-ansible/roles/letsencrypt/tasks/main.yml (modified) Start/stop nginx in main play, add more domains The pre- and ... Fri, 23 Aug 2019 10:49:24 GMT uli [15566] * main/waeup-ansible/letsencrypt.yml (modified) Add iuokada-trac domain. Tue, 20 Aug 2019 08:32:30 GMT uli [15556] * main/waeup-ansible/letsencrypt.yml (modified) Extend list of certified domains. The letsencrypt cert should also ... Mon, 08 Jul 2019 11:27:41 GMT uli [15488] * main/waeup-ansible/letsencrypt.yml (modified) Extend list of domains to cover on h8 Fri, 05 Apr 2019 23:45:25 GMT uli [15390] * main/waeup-ansible/hosts (modified) Remove private hosts. Fri, 05 Apr 2019 23:44:20 GMT uli [15389] * main/waeup-ansible/bootstrap.yml (modified) * main/waeup-ansible/hosts (modified) * main/waeup-ansible/playbook-post-reboot.yml (modified) * main/waeup-ansible/roles/openssh/tasks/main.yml (modified) Start vhost 6 after reboots. Mon, 18 Mar 2019 09:56:43 GMT uli [15358] * main/waeup-ansible/setup.yml (modified) Update package list for basic installs. We do not need ... Mon, 18 Mar 2019 09:35:31 GMT uli [15357] * main/waeup-ansible/playbook-autoremove.yml (added) Add a cleanup script. Mon, 18 Mar 2019 09:28:56 GMT uli [15356] * main/waeup-ansible/playbook-post-reboot.yml (modified) * main/waeup-ansible/playbook-prep-reboot.yml (modified) Move handling of v1. As v1 moved from h7 to h8, we have to reflect ... Mon, 18 Mar 2019 09:26:28 GMT uli [15355] * main/waeup-ansible/playbook-reboot.yml (modified) Import playbooks rather than include them. Importing playbooks is ... Mon, 18 Mar 2019 09:10:36 GMT uli [15353] * main/waeup-ansible/letsencrypt.yml (modified) Add missing letsencrypt domain. We manage letsencrypt on h8 by ... Thu, 06 Dec 2018 11:42:16 GMT uli [15262] * main/waeup-ansible/README-vhosts.rst (modified) Tell about users in vagrant envs. Fri, 11 May 2018 11:25:54 GMT uli [15003] * main/waeup-ansible/playbook-daily-upgrade.yml (modified) Put timestamp into log. Wed, 11 Apr 2018 08:45:44 GMT uli [14985] * main/waeup-ansible/playbook-daily-upgrade.yml (modified) Log daily upgrade changes to file. The daily-upgrade playbook ... Thu, 05 Apr 2018 06:34:14 GMT uli [14982] * main/waeup-ansible/playbook-daily-upgrade.yml (added) Add a playbook for daily upgrades. Wed, 20 Dec 2017 07:38:29 GMT uli [14930] * main/waeup-ansible/roles/munin_client (added) * main/waeup-ansible/roles/munin_client/handlers (added) * main/waeup-ansible/roles/munin_client/tasks (added) * main/waeup-ansible/roles/munin_client/tasks/main.yml (added) Add role for munin clients. Wed, 20 Dec 2017 07:37:33 GMT uli [14929] * main/waeup-ansible/letsencrypt.yml (modified) Add missing domains. Fri, 08 Dec 2017 10:01:53 GMT uli [14923] * main/waeup-ansible/vhost-bootstrap.yml (added) Add a bootstrapper for vhosts. Fri, 08 Dec 2017 09:54:18 GMT uli [14922] * main/waeup-ansible/Vagrantfile-multibox (moved) Provide different Vagrantfiles for different purposes. Mon, 27 Nov 2017 14:10:54 GMT uli [14912] * main/waeup-ansible/odoo.yml (modified) * main/waeup-ansible/roles/odoo/handlers/main.yml (modified) * main/waeup-ansible/roles/odoo/tasks/main.yml (modified) Run odoo in proxy-mode. Sat, 25 Nov 2017 00:44:43 GMT uli [14911] * main/waeup-ansible/letsencrypt.yml (modified) Append missing domains in letsencrypt playbook. Adding domains in ... Fri, 24 Nov 2017 15:28:13 GMT uli [14909] * main/waeup-ansible/README-vhosts.rst (added) Add docs for provisioning vhosts. Fri, 24 Nov 2017 15:26:44 GMT uli [14908] * main/waeup-ansible/odoo.yml (added) Provide a oneliner to equip hosts with odoo. Fri, 24 Nov 2017 15:24:56 GMT uli [14907] * main/waeup-ansible/roles/odoo (added) * main/waeup-ansible/roles/odoo/handlers (added) * main/waeup-ansible/roles/odoo/handlers/main.yml (added) * main/waeup-ansible/roles/odoo/tasks (added) * main/waeup-ansible/roles/odoo/tasks/main.yml (added) Add an odoo role. Fri, 24 Nov 2017 15:22:32 GMT uli [14906] * main/waeup-ansible/playbook-post-reboot.yml (modified) * main/waeup-ansible/playbook-prep-reboot.yml (modified) Care for new host during reboot. Fri, 24 Nov 2017 15:21:03 GMT uli [14905] * main/waeup-ansible/hosts (modified) Add new vhost v5. Fri, 04 Aug 2017 22:54:59 GMT uli [14773] * main/waeup-ansible/host_vars/README.txt (modified) Tell about `ansible-vault` in README. Just encrypted all sensitive ... Fri, 04 Aug 2017 22:43:14 GMT uli [14772] * main/waeup-ansible/playbook-prep-reboot.yml (modified) Stop v3, v4 before rebooting hosts. Fri, 04 Aug 2017 22:39:10 GMT uli [14771] * main/waeup-ansible/playbook-post-reboot.yml (modified) Add v3 and v4 in reboot playbooks. Thu, 03 Aug 2017 23:33:27 GMT uli [14763] * main/waeup-ansible/playbook-reboot.yml (modified) Fix reboot playbook. There were two problems with the former ... Thu, 03 Aug 2017 23:27:41 GMT uli [14762] * main/waeup-ansible/hosts (modified) Create more host groups. We treat hosts differently depending on ... Wed, 02 Aug 2017 11:53:48 GMT uli [14752] * main/waeup-ansible/host_vars (added) * main/waeup-ansible/host_vars/README.txt (added) Allow per-host settings in separate config files. We want to set ... Tue, 27 Jun 2017 15:24:06 GMT uli [14706] * main/waeup-ansible/letsencrypt.yml (added) * main/waeup-ansible/roles/letsencrypt (added) * main/waeup-ansible/roles/letsencrypt/handlers (added) * main/waeup-ansible/roles/letsencrypt/handlers/main.yml (added) * main/waeup-ansible/roles/letsencrypt/tasks (added) * main/waeup-ansible/roles/letsencrypt/tasks/main.yml (added) Add `ansible` role for installing letsencrypt (LE) The ... Wed, 14 Jun 2017 14:31:06 GMT uli [14694] * main/waeup-ansible/setup.yml (modified) More packages to install during host setup. Wed, 14 Jun 2017 14:29:20 GMT uli [14693] * main/waeup-ansible/README.rst (modified) In README, describe host setup after bootstrapping. Give hints how ... Wed, 14 Jun 2017 14:17:33 GMT uli [14692] * main/waeup-ansible/playbook-post-reboot.yml (modified) * main/waeup-ansible/playbook-prep-reboot.yml (modified) Consider vhosts in pre-/post-reboot playbooks. When rebooting hosts ... Sun, 23 Apr 2017 22:13:47 GMT uli [14678] * main/waeup-ansible/playbook-reboot.yml (modified) Give time to sleep before reboot. Sat, 21 Jan 2017 23:23:40 GMT uli [14434] * main/waeup-ansible/playbook-reboot.yml (modified) Fix filename in sample call. Fri, 16 Dec 2016 11:52:07 GMT uli [14352] * main/waeup-ansible/setup.yml (modified) Start installing basic packages. Fri, 16 Dec 2016 11:27:10 GMT uli [14349] * main/waeup-ansible/setup.yml (added) Add a playbook for setup of already bootstrapped hosts. After ... Fri, 09 Dec 2016 09:58:46 GMT Henrik Bettermann [14330] * main/waeup-ansible/playbook-post-reboot.yml (modified) * main/waeup-ansible/playbook-prep-reboot.yml (modified) Add Ikoba AAUE instance to playbooks. Thu, 08 Dec 2016 03:10:08 GMT uli [14325] * main/waeup-ansible/bootstrap.yml (modified) Make bootstrap.yml really work. This version of `bootstrap.yml` was ... Thu, 08 Dec 2016 03:07:22 GMT uli [14324] * main/waeup-ansible/README.rst (modified) Remove empty line. Thu, 08 Dec 2016 02:59:36 GMT uli [14323] * main/waeup-ansible/README.rst (modified) Update README. Reflect changes to bootstrap.yml. Tue, 27 Sep 2016 08:53:45 GMT Henrik Bettermann [14192] * main/waeup-ansible/README.rst (modified) * main/waeup-ansible/playbook-post-reboot.yml (modified) * main/waeup-ansible/playbook-prep-reboot.yml (modified) Add Ikoba Demo and Ikoba Uniben instances. Sat, 24 Sep 2016 21:53:26 GMT uli [14187] * main/waeup-ansible/playbook-reboot.yml (modified) Set port when waiting for server reboot. When we reboot a host and ... Sat, 24 Sep 2016 09:45:55 GMT uli [14186] * main/waeup-ansible/playbook-reboot.yml (modified) Hm, this is much shorter. Just learned how to include other ... Sat, 24 Sep 2016 09:36:00 GMT uli [14185] * main/waeup-ansible/playbook-reboot.yml (added) Add a playbook that reboots hosts. It does of course also all the ... Sun, 17 Jul 2016 07:55:52 GMT uli [14033] * main/waeup-ansible/UPGRADE_HOSTS.sh (modified) New versions of ansible upgrade. Fri, 15 Jul 2016 22:02:46 GMT uli [14032] * main/waeup-ansible/playbook-post-reboot.yml (added) Add ansible playbook for starting services. Yet we have a ... Fri, 15 Jul 2016 22:00:43 GMT uli [14031] * main/waeup-ansible/playbook-prep-reboot.yml (modified) This playbook works okay for all servers. Tue, 28 Jun 2016 09:04:11 GMT uli [13995] * main/waeup-ansible/files/swap_accounting.cfg (added) * main/waeup-ansible/roles/core/handlers (added) * main/waeup-ansible/roles/core/handlers/main.yml (added) * main/waeup-ansible/roles/core/tasks/grub.yml (added) * main/waeup-ansible/roles/core/tasks/main.yml (modified) Add roles to enable swap-accounting. Swap accounting is at least ... Mon, 27 Jun 2016 11:42:12 GMT uli [13994] * main/waeup-ansible/bootstrap.yml (modified) * main/waeup-ansible/roles (added) * main/waeup-ansible/roles/core (added) * main/waeup-ansible/roles/core/tasks (added) * main/waeup-ansible/roles/core/tasks/main.yml (added) * main/waeup-ansible/roles/openssh (added) * main/waeup-ansible/roles/openssh/handlers (added) * main/waeup-ansible/roles/openssh/handlers/main.yml (added) * main/waeup-ansible/roles/openssh/tasks (added) * main/waeup-ansible/roles/openssh/tasks/main.yml (added) Turn (some) tasks from playbook into roles. Mon, 27 Jun 2016 07:39:05 GMT uli [13993] * main/waeup-ansible/UPGRADE_HOSTS.sh (modified) Use a more robust approach when updating remote hosts. Sun, 19 Jun 2016 11:48:16 GMT uli [13957] * main/waeup-ansible/playbook-prep-reboot.yml (added) Add playbook that prepares hosts for reboot. Sun, 19 Jun 2016 11:47:45 GMT uli [13956] * main/waeup-ansible/UPGRADE_HOSTS.sh (added) Simple shell script for running aptitude safe-upgrade on all hosts. Sun, 19 Jun 2016 11:46:44 GMT uli [13955] * main/waeup-ansible/hosts (added) Add a hosts inventory with real hosts. We should merge both set of ... Sun, 19 Jun 2016 11:44:42 GMT uli [13954] * main/waeup-ansible/ansible.cfg (added) Add a minimal ansible.cfg. Not sure, whether this is really needed. Mon, 25 Apr 2016 21:44:31 GMT uli [13851] * main/waeup-ansible/bootstrap.yml (modified) Merge two host-key tasks into one. Mon, 25 Apr 2016 21:25:32 GMT uli [13850] * main/waeup-ansible/bootstrap.yml (modified) Add missing sshd_config pieces. We set required SSH ... Sun, 24 Apr 2016 15:05:32 GMT uli [13849] * main/waeup-ansible/bootstrap.yml (modified) Use sshd restart as a handler. This way sshd is only restarted if ... Sun, 24 Apr 2016 14:11:26 GMT uli [13848] * main/waeup-ansible/bootstrap.yml (modified) Basic moduli fixer for ssh. Thu, 21 Apr 2016 21:11:43 GMT uli [13847] * main/waeup-ansible/bootstrap.yml (modified) Fix task for modifying sudoers file. As colon followed by space (': ... Thu, 21 Apr 2016 12:35:27 GMT uli [13845] * main/waeup-ansible/bootstrap.yml (modified) Add tasks for securing sshd config. Wed, 20 Apr 2016 16:10:57 GMT uli [13844] * main/waeup-ansible/bootstrap.yml (modified) Enable passwordless sudo for deploy user. Wed, 20 Apr 2016 14:13:07 GMT uli [13843] * main/waeup-ansible/README.rst (modified) Tell about what we learned.