xsrv v1.1.0 Release Notes

Release Date: 2021-03-14 // about 3 years ago
  • โž• Added:

    • โฌ†๏ธ xsrv: add self-upgrade command
    • monitoring: add netdata-debsecan module
    • common: ensure NTP service is started
    • ๐Ÿ”ง common: make timezone configurable (default to not touching the timezone)
    • ๐Ÿ“š openldap: add Self Service Password password reset tool (fixes #401)
      • requires manual configuration of self_service_password_fqdn and vault_self_service_password_keyphrase
      • auto-configure apache and selfsigned or letsencrypt certificates + php-fpm.
      • by default only allow access from LAN/private addresses in self_service_password_allowed_hosts
      • when samba role is enabled, use the LDAP admin DN to access the directory (required to be able to change sambaNtPassword attribute)
      • make various settings configurable, add correctness checks for all variables
    • ๐Ÿ”ง openldap: make log level configurable
    • homepage: add jellyfin/self-service-password links (when relevant roles/variables are enabled)
    • ๐Ÿ“š jellyfin: add LDAP authentication documentation
    • ๐Ÿ”ง jellyfin: add fail2ban configuration/bruteforce prevention on jellyfin login attempts
    • jellyfin/backup: add automatic backups (only backup db/metadata/configuration by default, allow enabling media directory backups with jellyfin_enable_media_backups)
    • 0๏ธโƒฃ jellyfin: create subdirectories for each library type under the default media directory/jellyfin samba share
    • samba/backup: allow disabling automatic backups of samba shares (samba_enable_backups)
    • ๐ŸŒฒ shaarli/monitoring: aggregate data/log.txt to syslog using the imfile module

    ๐Ÿ”„ Changed:

    ๐Ÿ›  Fixed:

    • 0๏ธโƒฃ xsrv: fix show-defaults command (by default display all role defaults for the default playbook)
    • homepage: fix mumble and ldap-account-manager links
    • samba: fix duplicate execution of the openldap role when samba uses LDAP passdb backend
    • rocketchat: fix variable checks not being run before applying the role
    • rocketchat: fix permissions/ownership of mongodb/rocketchat data directories
    • tt_rss: fix error 'Please set SELF_URL_PATH to the correct value detected for your server'
    • samba/jellyfin: fix automatic jellyfin samba share creation, fix permissions on jellyfin samba share
    • monitoring: fix ansible --check mode when netdata is not installed yet
    • ๐Ÿ”Š shaarli: set apache directoryindex to index.php, prevent error messages in logs at every page access

    ๐Ÿšง Tools/maintenance:

    • ๐Ÿ–จ Makefile: add a make changelog target (print commits since last tag)
    • ๐Ÿš€ Makefile: automate release procedure make release
    • tt-rss: cleanup/grouping
    • 0๏ธโƒฃ roles/*/defaults/main.yml: add header for all defaults files
    • โฌ†๏ธ upgrade ansible to 2.10.7 - https://pypi.org/project/ansible/#history
    • ๐Ÿšš move TODOs to issues

    Full changes since v1.0.0