Prepare CHANGELOG for 22.01 release

CHANGELOG.md

@@ -12,60 +12,43 @@ The **patch** part changes is incremented if multiple releases happen the same m
 
 ### Added
 
-* evolinux-base: add script backup-server-state
-* munin: systemd override to unprotect home directory
-* mysql: add evomariabackup 21.11
-* nagios-nrpe: new check influxdb
-* openvpn: new openvpn role
-
 ### Changed
 
-* evocheck: upstream release 21.10.4
-* evolinux-users + nagios-nrpe: Add support for php-fpm80 in lxc
-* filebeat/metricbeat: version 7.x y default
-* listupgrade: old-kernel-removal version 21.10
-* mongodb: Deny the install on Debian 11 « Bullseye » when the version is unsupported
-* mongodb: Support version 5.0 (for buster)
-* mongodb: Allow to specify a mongodb version for buster & bullseye
-* nodejs: default to version 16 LTS
-
 ### Fixed
 
-* evolinux-base: fix alert5.service dependency syntax
-* mysql : Create a default ~root/.my.cnf for compatibility reasons
-* nginx : fix variable name and debug to actually use nginx-light
-* packweb-apache : Support php 8.0 
-* nagios-nrpe: Fix check\_nfsserver for buster and bullseye
-* lxc-php: fix config for opensmtpd on bullseye containers
-
 ### Removed
 
-* evocheck: package install is not supported anymore
-
 ### Security
 
-## [21.09] 2021-09-29
+## [22.01] 2022-01-25
 
 ### Added
 
 * Support for Debian 11 « Bullseye » (with possible remaining blind spots)
-* apache: new variable for mpm mode (+ updated default config accordingly)
+* apache: new variable for MPM mode (+ updated default config accordingly)
+* apache: prevent accessing Git or "env" related files
 * certbot: add script for manual deploy hooks execution
 * docker-host: install additional dependencies
-* etc-git: manage commits with an optimized shell script instead of many slow Ansible tasks
+* dovecot: switch to TLS 1.2+ and external DH params
 * etc-git: centralize cron jobs in dedicated crontab
+* etc-git: manage commits with an optimized shell script instead of many slow Ansible tasks
+* evolinux-base: add script backup-server-state
 * evolinux-base: install molly-guard by default
-* generate-ldif: detect hardware raid card
+* generate-ldif: detect RAID controller
 * generate-ldif: detect mdadm
 * listupgrade: crontab is configurable
 * logstash: logging to syslog is configurable (default: True)
 * mongodb: create munin plugins directory if missing
+* munin: systemd override to unprotect home directory
+* mysql: add evomariabackup 21.11
 * mysql: improve Bullseye compatibility
 * mysql: script "mysql_connections" to display a compact list of connections
 * mysql: script "mysql-queries-killer.sh" to kill MySQL queries
+* nagios-nrpe + evolinux-users: new check for ipmi
+* nagios-nrpe + evolinux-users: new check for RAID (soft + hard)
 * nagios-nrpe + evolinux-users: new checks for bkctld
-* nagios-nrpe + evolinux-users: new check raid (soft + hard)
+* nagios-nrpe: new check influxdb
-* nagios-nrpe + evolinux-users: new check ipmi
+* openvpn: new role (beta)
 * redis: instance service for Debian 11
 * squid: add *.o.lencr.org to default whitelist
 
@@ -77,21 +60,28 @@ The **patch** part changes is incremented if multiple releases happen the same m
 * apt: remove workaround for Evolix public repositories with Debian 11
 * apt: use the new security repository for Bullseye
 * certbot: silence letsencrypt deprecation warnings
-* elasticsearch: 7.x by default
+* elasticsearch: elastic_stack_version = 7.x
 * evoacme: exclude renewal-hooks directory from cron
 * evoadmin-web: simpler PHP packages lists
-* evomaintenance: extract a config.yyml tasks file
+* evocheck: upstream release 21.10.4
-* evocheck: upstream release 21.10
 * evolinux-base: alert5 comes after the network
 * evolinux-base: force Debian version to buster for Evolix repository (temporary)
-* evolinux-base: split dpkg logrotate configuration
 * evolinux-base: install freeipmi by default on dedicated hw
 * evolinux-base: logs are rotated with dateext by default
-* kibana: 7.x by default
+* evolinux-base: split dpkg logrotate configuration
+* evolinux-users + nagios-nrpe: Add support for php-fpm80 in lxc
+* evomaintenance: extract a config.yml tasks file
+* evomaintenance: upstream release 22.01
+* filebeat/metricbeat: elastic_stack_version = 7.x
+* kibana: elastic_stack_version = 7.x
+* listupgrade: old-kernel-removal version 21.10
 * listupgrade: upstream release 21.06.3
 * logstash: elastic_stack_version = 7.x
-* mysql: mariadb-client-10.5 on Debian 11
+* mongodb: Allow to specify a mongodb version for buster & bullseye
-* mysql: use python3 with Debian 11 and later
+* mongodb: Deny the install on Debian 11 « Bullseye » when the version is unsupported
+* mongodb: Support version 5.0 (for buster)
+* mysql: use python3 and mariadb-client-10.5 with Debian 11 and later
+* nodejs: default to version 16 LTS
 * php: enforce Debian version with assert instead of fail
 * squid: improve default whitelist (more specific patterns)
 * squid: must be started in foreground mode for systemd
@@ -99,12 +89,19 @@ The **patch** part changes is incremented if multiple releases happen the same m
 
 ### Fixed
 
+* evolinux-base: fix alert5.service dependency syntax
 * certbot: sync_remote excludes itself
+* lxc-php: fix config for opensmtpd on bullseye containers
+* mysql : Create a default ~root/.my.cnf for compatibility reasons
+* nginx : fix variable name and debug to actually use nginx-light
+* packweb-apache : Support php 8.0
+* nagios-nrpe: Fix check_nfsserver for buster and bullseye
 
 ### Removed
 
-* php: remove php-gettext for 7.4
+* evocheck: package install is not supported anymore
 * logstash: no more dependency on Java
+* php: remove php-gettext for 7.4
 
 ## [10.6.0] 2021-06-28