xsrv v1.1.0 Release Notes
Release Date: 2021-03-14 // about 3 years ago-
โ Added:
- โฌ๏ธ xsrv: add self-upgrade command
- monitoring: add netdata-debsecan module
- common: ensure NTP service is started
- ๐ง common: make timezone configurable (default to not touching the timezone)
- ๐ openldap: add Self Service Password password reset tool (fixes #401)
- requires manual configuration of
self_service_password_fqdn
andvault_self_service_password_keyphrase
- auto-configure apache and
selfsigned
orletsencrypt
certificates + php-fpm. - by default only allow access from LAN/private addresses in
self_service_password_allowed_hosts
- when samba role is enabled, use the LDAP admin DN to access the directory (required to be able to change
sambaNtPassword
attribute) - make various settings configurable, add correctness checks for all variables
- requires manual configuration of
- ๐ง openldap: make log level configurable
- homepage: add jellyfin/self-service-password links (when relevant roles/variables are enabled)
- ๐ jellyfin: add LDAP authentication documentation
- ๐ง jellyfin: add fail2ban configuration/bruteforce prevention on jellyfin login attempts
- jellyfin/backup: add automatic backups (only backup db/metadata/configuration by default, allow enabling media directory backups with
jellyfin_enable_media_backups
) - 0๏ธโฃ jellyfin: create subdirectories for each library type under the default media directory/jellyfin samba share
- samba/backup: allow disabling automatic backups of samba shares (
samba_enable_backups
) - ๐ฒ shaarli/monitoring: aggregate data/log.txt to syslog using the imfile module
๐ Changed:
- ๐ update documentation (upgrade procedure, example playbook, mirrors, TOC, links, ansible-collection installation, list of all variables, ansible.cfg, sysctl settings...)
- โฌ๏ธ openldap: upgrade ldap-account-manager to v7.4 (https://www.ldap-account-manager.org/lamcms/changelog)
- openldap: prevent LDAP lookups for local user accounts
- ๐ฒ openldap: decrease log verbosity
- ๐ gitea: upgrade to 1.13.3 - https://github.com/go-gitea/gitea/releases
- โฌ๏ธ nextcloud: upgrade to 20.0.8 - https://nextcloud.com/changelog/
๐ Fixed:
- 0๏ธโฃ xsrv: fix show-defaults command (by default display all role defaults for the default playbook)
- homepage: fix mumble and ldap-account-manager links
- samba: fix duplicate execution of the openldap role when samba uses LDAP passdb backend
- rocketchat: fix variable checks not being run before applying the role
- rocketchat: fix permissions/ownership of mongodb/rocketchat data directories
- tt_rss: fix error 'Please set SELF_URL_PATH to the correct value detected for your server'
- samba/jellyfin: fix automatic jellyfin samba share creation, fix permissions on jellyfin samba share
- monitoring: fix ansible --check mode when netdata is not installed yet
- ๐ shaarli: set apache directoryindex to index.php, prevent error messages in logs at every page access
๐ง Tools/maintenance:
- ๐จ Makefile: add a make changelog target (print commits since last tag)
- ๐ Makefile: automate release procedure
make release
- tt-rss: cleanup/grouping
- 0๏ธโฃ roles/*/defaults/main.yml: add header for all defaults files
- โฌ๏ธ upgrade ansible to 2.10.7 - https://pypi.org/project/ansible/#history
- ๐ move TODOs to issues