This file contains al notable changes to the bertvv.httpd Ansible role.
This file adheres to the guidelines of http://keepachangelog.com/. Versioning follows Semantic Versioning.
- Add some rules to search for distribution-specific variable files so AlmaLinux (and probably also Rocky Linux) are also recognized and supported.
This release has several breaking changes (see below), so check your playbooks/variable files before upgrading from an earlier version!
- Support for Certificate Status Request extension of the Online Certificate Status Protocol (OCSP) (SSLUseStapling)
- Copy custom server certificate/key file to the server. This is a breaking change! In previous versions, the complete path of the certificate files had to be specified, and the user had to put the files in place before applying this role. Now, only the file names should be given. The role will copy the specified files from the
files/
subdirectory (relative to the playbook location) to the appropriate directory on the server.
- Updated TLS/SSL settings as recommended by Mozilla SSL Configuration Generator
- Replace CamelCase in role variable names with underscore/lowercase naming. This is consistent with naming conventions in other Ansible roles. This is a breaking change!
- Ensures the default self-signed certificate files are created on platforms where they are missing after installing
mod_ssl
. See Fedora issue #1585533.
- Installation of packages enabling support for scripting languages. Only PHP was supported, and there were no plans (nor requests) to add other languages. Furthermore, this is actually not a concern of this role. A role installing a web application on this server should take care of all dependencies, including the appropriate scripting language support. This is a breaking change!
- (GH-5) Support for
mod_status
(credit: Lander Van den Bulcke)
- Removed test code from master branch and added Vagrant and Docker test branches. Tests can now be performed on Travis CI
- tests for supported platforms
- Installing scripting support is better generalized.
- Moved platform specific values to
vars/RedHat.yml
.
- Fedora support (credit Richard Marko)
- more SSL configuration options (credit Richard Marko
httpd_ServerTokens
variable (credit Richard Marko
- Optional support for PHP
First release!
- Install
httpd
andmod_ssl
packages - Configure Apache with template for
httpd.conf
- Configure
mode_ssl
with template forssl.conf
- Basic settings like port number, log file locations, and certificates can be customized