EvoBSD is a set of Ansible playbooks and roles providing a customisation of the OpenBSD operating system used by Evolix.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

110 lines
3.3 KiB

3 months ago
3 months ago
3 months ago
  1. # Changelog
  2. All notable changes to this project will be documented in this file.
  3. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
  4. and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
  5. ## [Unreleased]
  6. ## [6.9.0] - 2021-05-06
  7. ### Changed
  8. - Remove the variable VERBOSESTATUS in daily.local configuration file since it is no longer valid.
  9. ## [6.8.3] - 2021-02-15
  10. ### Added
  11. - Add a customization of the logsentry configuration
  12. - Add a check_openvpn_certificates in NRPE and OpenVPN role to check expiration date of server CA and certificates files
  13. ### Fixed
  14. - Fix the check_mem command in the NRPE role, precising the percentage sign for it not to check the memory in MB.
  15. - Fix the check_mem script in the NRPE role, adding cached RAM as free RAM
  16. - Fix motd-carp-state.sh by updating the OpenBSD release in our customized motd after an upgrade
  17. ### Changed
  18. - The PF role now use a variable for trusted IPs
  19. ## [6.8.2] - 2020-10-30
  20. ### Added
  21. - Add a Logsentry role
  22. ## [6.8.1] - 2020-10-26
  23. ### Fixed
  24. - Fix a task using a register where simple quotes prevented the register to be properly filled, breaking the following task
  25. ## [6.8.0] - 2020-10-23
  26. ### Added
  27. - Add a PF tag to be able to skip that part when rerunning EvoBSD
  28. - Add a doas authorization for NRPE check_ipsecctl_critiques
  29. ### Changed
  30. - The task mail.yml replace the former boot/reboot message only if it is untouched
  31. - Replace the variable used to set the email address in etc-git role - now using inventory_hostname
  32. - Not checking syspatch when OpenBSD <= 6.1
  33. - Amend fstab file adding noatime option to each entrie
  34. - Import evocheck v.6.7.7
  35. - Comment NRPE checks that cannot be used as is
  36. ### Fixed
  37. - Add the creation of the NRPE plugins directory in nagios-nrpe role
  38. - Add collectd doas rights in the base role to avoid broking anything if EvoBSD is rerun without the collectd role included
  39. - Do not add the motd cron if the same line is already there but uncommented
  40. - Amend fstab entries only when the filesystem is ffs
  41. ## [6.7.2] - 2020-10-13
  42. ### Added
  43. - Now handling deletion of evobackup crontab (replaced by daily.local cron)
  44. - Customize fstab with noexec and softdep
  45. - Collectd role
  46. ### Changed
  47. - Improve rc.local file configuration
  48. - Update evocheck to version 6.7.5
  49. - Hide default daily output mail content (VERBOSESTATUS=0)
  50. - Add deletion of old log files in the OSPF role
  51. ### Fixed
  52. - Fix duplicate evobackup cron if the entry is uncommented in daily.local
  53. ## [6.7.1] - 2020-09-10
  54. ### Added
  55. - Add completions functions in root's profile dotfile
  56. - Add check_connections_state.sh NRPE plugin
  57. - Add an evocheck role
  58. - Add stricter ssh and doas access
  59. - Add an openvpn role
  60. - Add an OpenBGPd NRPE plugin
  61. - Add ospf and bgp roles
  62. - Add an unbound NRPE check since it is part of the base system
  63. - Add a motd-carp-state.sh script that checks the carp state and generates the /etc/motd file
  64. ### Changed
  65. - Disable sndiod since it is not required on serveurs
  66. - Replace sudo with doas for script executions
  67. - Update evomaintenance version to 0.6.3
  68. - Disable mouse function in vim configuration
  69. - Drop openup since syspatch can apply stable patches now
  70. - Update evobackup script
  71. - Rewrite newsyslog configuration
  72. - Drop postgresql-client package since evomaintenance use an API now