evolix
/
ansible-roles
22
2
Fork 2
Code Issues 61 Pull Requests 18 Releases 32 Wiki Activity

Prepare CHANGELOG for 22.01 release
continuous-integration/drone/push Build was killed Details

This commit is contained in:
Jérémy Lecour 2022-01-25 14:53:19 +01:00 committed by Jérémy Lecour
parent 0fce412cf5
commit 1f4ee2de79
1 changed files with 35 additions and 38 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

73
CHANGELOG.md
View File

@ -12,60 +12,43 @@ The **patch** part changes is incremented if multiple releases happen the same m
### Added
* evolinux-base: add script backup-server-state
* munin: systemd override to unprotect home directory
* mysql: add evomariabackup 21.11
* nagios-nrpe: new check influxdb
* openvpn: new openvpn role
### Changed
* evocheck: upstream release 21.10.4
* evolinux-users + nagios-nrpe: Add support for php-fpm80 in lxc
* filebeat/metricbeat: version 7.x y default
* listupgrade: old-kernel-removal version 21.10
* mongodb: Deny the install on Debian 11 « Bullseye » when the version is unsupported
* mongodb: Support version 5.0 (for buster)
* mongodb: Allow to specify a mongodb version for buster & bullseye
* nodejs: default to version 16 LTS
### Fixed
* evolinux-base: fix alert5.service dependency syntax
* mysql : Create a default ~root/.my.cnf for compatibility reasons
* nginx : fix variable name and debug to actually use nginx-light
* packweb-apache : Support php 8.0
* nagios-nrpe: Fix check\_nfsserver for buster and bullseye
* lxc-php: fix config for opensmtpd on bullseye containers
### Removed
* evocheck: package install is not supported anymore
### Security
## [21.09] 2021-09-29
## [22.01] 2022-01-25
### Added
* Support for Debian 11 « Bullseye » (with possible remaining blind spots)
* apache: new variable for mpm mode (+ updated default config accordingly)
* apache: new variable for MPM mode (+ updated default config accordingly)
* apache: prevent accessing Git or "env" related files
* certbot: add script for manual deploy hooks execution
* docker-host: install additional dependencies
* etc-git: manage commits with an optimized shell script instead of many slow Ansible tasks
* dovecot: switch to TLS 1.2+ and external DH params
* etc-git: centralize cron jobs in dedicated crontab
* etc-git: manage commits with an optimized shell script instead of many slow Ansible tasks
* evolinux-base: add script backup-server-state
* evolinux-base: install molly-guard by default
* generate-ldif: detect hardware raid card
* generate-ldif: detect RAID controller
* generate-ldif: detect mdadm
* listupgrade: crontab is configurable
* logstash: logging to syslog is configurable (default: True)
* mongodb: create munin plugins directory if missing
* munin: systemd override to unprotect home directory
* mysql: add evomariabackup 21.11
* mysql: improve Bullseye compatibility
* mysql: script "mysql_connections" to display a compact list of connections
* mysql: script "mysql-queries-killer.sh" to kill MySQL queries
* nagios-nrpe + evolinux-users: new check for ipmi
* nagios-nrpe + evolinux-users: new check for RAID (soft + hard)
* nagios-nrpe + evolinux-users: new checks for bkctld
* nagios-nrpe + evolinux-users: new check raid (soft + hard)
* nagios-nrpe + evolinux-users: new check ipmi
* nagios-nrpe: new check influxdb
* openvpn: new role (beta)
* redis: instance service for Debian 11
* squid: add *.o.lencr.org to default whitelist
@ -77,21 +60,28 @@ The **patch** part changes is incremented if multiple releases happen the same m
* apt: remove workaround for Evolix public repositories with Debian 11
* apt: use the new security repository for Bullseye
* certbot: silence letsencrypt deprecation warnings
* elasticsearch: 7.x by default
* elasticsearch: elastic_stack_version = 7.x
* evoacme: exclude renewal-hooks directory from cron
* evoadmin-web: simpler PHP packages lists
* evomaintenance: extract a config.yyml tasks file
* evocheck: upstream release 21.10
* evocheck: upstream release 21.10.4
* evolinux-base: alert5 comes after the network
* evolinux-base: force Debian version to buster for Evolix repository (temporary)
* evolinux-base: split dpkg logrotate configuration
* evolinux-base: install freeipmi by default on dedicated hw
* evolinux-base: logs are rotated with dateext by default
* kibana: 7.x by default
* evolinux-base: split dpkg logrotate configuration
* evolinux-users + nagios-nrpe: Add support for php-fpm80 in lxc
* evomaintenance: extract a config.yml tasks file
* evomaintenance: upstream release 22.01
* filebeat/metricbeat: elastic_stack_version = 7.x
* kibana: elastic_stack_version = 7.x
* listupgrade: old-kernel-removal version 21.10
* listupgrade: upstream release 21.06.3
* logstash: elastic_stack_version = 7.x
* mysql: mariadb-client-10.5 on Debian 11
* mysql: use python3 with Debian 11 and later
* mongodb: Allow to specify a mongodb version for buster & bullseye
* mongodb: Deny the install on Debian 11 « Bullseye » when the version is unsupported
* mongodb: Support version 5.0 (for buster)
* mysql: use python3 and mariadb-client-10.5 with Debian 11 and later
* nodejs: default to version 16 LTS
* php: enforce Debian version with assert instead of fail
* squid: improve default whitelist (more specific patterns)
* squid: must be started in foreground mode for systemd
@ -99,12 +89,19 @@ The **patch** part changes is incremented if multiple releases happen the same m
### Fixed
* evolinux-base: fix alert5.service dependency syntax
* certbot: sync_remote excludes itself
* lxc-php: fix config for opensmtpd on bullseye containers
* mysql : Create a default ~root/.my.cnf for compatibility reasons
* nginx : fix variable name and debug to actually use nginx-light
* packweb-apache : Support php 8.0
* nagios-nrpe: Fix check_nfsserver for buster and bullseye
### Removed
* php: remove php-gettext for 7.4
* evocheck: package install is not supported anymore
* logstash: no more dependency on Java
* php: remove php-gettext for 7.4
## [10.6.0] 2021-06-28