All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog and this project adheres to Semantic Versioning.
- Certbot-companion instead of Acme-companion to enable DNS-01 challenge
- Fix old config removal
- Allow to have a private/internal /prometheus endpoint for some containers (QE-709)
- Security updates for docker-gen
- Vhost specific
app-server
orapp_location
should be deleted if non-existant in current dca
- nohttps should just comment out the https section instead of delete it
- Use FDN DNS to prevent any surprise
- nginx versions between docker-gen and nginx container should be the same
- Detect error on system service reload and restart it instead
- fix old docker compose python command. One can use
docker compose
ordocker-compose
.
- Allow the reload command and deploy a bit faster (Added)
- Example app as DCA
- Instructions on how to local test this
- Fix hook chaining failed if one hook fails
- Also don’t resolve symbolic links, so hooks can rely on them (backup hook)
- Per-environment configuration resource (QE-589)
- New compose-systemd version to
1.5.0
, allows to delay app start when node reboot
docker-gen
update
- Openssl PEM keys should be specified directly with header/footer/new lines
- Allow to directly use openssl public keys for privileged deployement
- Fix
max_proc
not being taken into account in the installer
- Security updates and docker-gen build and patch from source
- Check for
vhost
validity before deploying. - Check nginx config generated by
docker-gen
before sumbit - Allow to specify
logging
key for a service.
- Updated
le-gen
image versions for security reason (version2.1.3
is issue-free).
- Fix
rmdir
that was too soon in the installer - Updated image versions (
le-gen
still need an still-unreleased upgraded version).
- Updated image versions.
compose-dirs
updated to version1.4.0
.
capp
can be tested in docker.- More verbose tasks on
deploy
/undeploy
.
- Fix
undeploy
command on non-existant app/env. - Fix parsing metadata version on
undeploy
.
- Do not use cache when using
build
command.
build
command to force build and pull application services.- better
exec
command, with multiple arguments supported and you can inject environment variables, change the working directory or the current user.
- Let’s encrypt companion update
- Security updates (docker images)
- Support for multiple (ssh) keys per user (
listkey
,addkey
,delkey
) - Support for
exec
action to enter an application service
- Rights and user management
- Generate
authorized_keys
on login attempt - Updated docker versions
- Pull images on deploy
/etc/capp/le_blacklist.txt
file to list host that should NOT be processed by Let's Encrypt
- Fix Hooks invocation (as-root, string-only parameters)
- Usage of
verify_dca.py
incapp
. - Hash check on deploy is now a bit quicker and use less memory
- Hooks on deploy/undeploy action
- DCA format version 2