-
Notifications
You must be signed in to change notification settings - Fork 9
/
changelog
252 lines (166 loc) · 9.39 KB
/
changelog
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
turnkey-ibexa-18.0 (1) turnkey; urgency=low
* eZ Platform renamed to Ibexa DXP; install latest LTS: v3.3.37.
[Zhenya Hvorostian <[email protected]>]
* Redirect HTTP -> HTTPS.
[Stefan Davis <[email protected]>]
* DEV: Dynamically download latest LTS at build time.
[Jeremy Davis <[email protected]>]
* Ensure hashfile includes URL to public key - closes #1864.
* Include webmin-logviewer module by default - closes #1866.
* Upgraded base distribution to Debian 12.x/Bookworm.
* Configuration console (confconsole):
- Support for DNS-01 Let's Encrypt challenges.
[ Oleh Dmytrychenko <[email protected]> github: @NitrogenUA ]
- Support for getting Let's Encrypt cert via IPv6 - closes #1785.
- Refactor network interface code to ensure that it works as expected and
supports more possible network config (e.g. hotplug interfaces & wifi).
- Show error message rather than stacktrace when window resized to
incompatable resolution - closes #1609.
[ Stefan Davis <[email protected]> ]
- Bugfix exception when quitting configuration of mail relay.
[ Oleh Dmytrychenko <[email protected]> github: @NitrogenUA ]
- Improve code quality: implement typing, fstrings and make (mostly) PEP8
compliant.
[Stefan Davis <[email protected]> & Jeremy Davis
- General dehydrated-wrapper code cleanup - now passes shellcheck.
* Firstboot Initialization (inithooks):
- Refactor start up (now hooks into getty process, rather than having it's
own service).
[ Stefan Davis <[email protected]> ]
- Refactor firstboot.d/01ipconfig (and 09hostname) to ensure that hostname
is included in dhcp info when set via inithooks.
- Package turnkey-make-ssl-cert script (from common overlay - now packaged
as turnkey-ssl). Refactor relevant scripts to leverage turnkey-ssl.
- Refactor run script - use bashisms and general tidying.
- Show blacklisted password characters more nicely.
- Misc packaging changes/improvements.
- Support returning output from MySQL - i.e. support 'SELECT'. (Only
applies to apps that include MySQL/MariaDB).
* Web management console (webmin):
- Upgraded webmin to v2.105.
- Replace webmin-shell with webmin-xterm module by default - closes #1904.
- Removed stunnel reverse proxy (Webmin hosted directly now).
- Ensure that Webmin uses HTTPS with default cert
(/etc/ssl/private/cert.pem).
- Disabled Webmin Let's Encrypt (for now).
* Web shell (shellinabox):
- Completely removed in v18.0 (Webmin now has a proper interactive shell).
- Note: previous v18.0 releases did not include webmin-xterm pkg - see
above webmin note &/or #1904.
* Backup (tklbam):
- Ported dependencies to Debian Bookworm; otherwise unchanged.
* Security hardening & improvements:
- Generate and use new TurnKey Bookworm keys.
- Automate (and require) default pinning for packages from Debian
backports. Also support non-free backports.
* IPv6 support:
- Adminer (only on LAMP based apps) listen on IPv6.
- Nginx/NodeJS (NodeJS based apps only) listen on IPv6.
* Misc bugfixes & feature implementations:
- Remove rsyslog package (systemd journal now all that's needed).
- Include zstd compression support.
- Enable new non-free-firmware apt repo by default.
- Improve turnkey-artisan so that it works reliably in cron jobs (only
Laravel based LAMP apps).
* Include and enable mod_evasive and mod_security2 by default in Apache.
[ Stefan Davis <[email protected]> ]
* Apache mod_evasive config improvements:
- Bump DOSPageCount from (default) 2 -> 5 - closes #1951.
- DOSLogDir - use default log dir & fix permissions - closes #1950.
- Add DOSWhitelist example - commented out.
* Includes new 'tkl-upgrade-php' helper script - to allow easy update/change
of PHP version - closes #1892.
[Marcos Méndez @ POPSOLUTIONS <https://github.com/marcos-mendez>]
* Debian default PHP updated to v8.2.
* DEV: Add support for setting max_execution_time & max_input_vars in
php.ini via appliance Makefile (PHP_MAX_EXECUTION_TIME &
PHP_MAX_INPUT_VARS).
* Use MariaDB (MySQL replacement) v10.11.3 (from debian repos).
* Install composer from Debian repos (previously installed from source)
[ Stefan Davis <[email protected]> ]
-- Jeremy Davis <[email protected]> Fri, 05 Jul 2024 11:35:39 +0000
turnkey-ezplatform-16.0 (1) turnkey; urgency=low
* Update eZ Platform to latest v3.0.x LTS version - v3.0.5.
* Update eZ Platform inithook to python3.
* Explcitly disable TLS<1.2 (i.e. SSLv3, TLSv1, TLSv1.1). (v15.x
TurnKey releases supported TLS 1.2, but could fallback as low as TLSv1).
* Update SSL/TLS cyphers to provide "Intermediate" browser/client support
(suitable for "General-purpose servers with a variety of clients,
recommended for almost all systems"). As provided by Mozilla via
https://ssl-config.mozilla.org/.
* Note: Please refer to turnkey-core's v16.0 changelog for changes common to
all appliances. Here we only describe changes specific to this appliance.
-- Zhenya Hvorostian <[email protected]> Mon, 29 Jun 2020 21:23:00 +0300
turnkey-ezplatform-15.2 (1) turnkey; urgency=low
* Updated eZ Platform to latest v1.13.x LTS branch - v1.13.4.1+.
-- Jeremy Davis <[email protected]> Mon, 04 Mar 2019 13:22:20 +1100
turnkey-ezplatform-15.1 (1) turnkey; urgency=low
* Rebuild to resolve inadvertant removal of mariadb during sec-updates
- part of #1246.
-- Jeremy Davis <[email protected]> Wed, 21 Nov 2018 17:57:39 +1100
turnkey-ezplatform-15.0 (1) turnkey; urgency=low
* Updated eZ Platform to lastest upstream LTS version (1.13.0)
* Install Adminer directly from stretch/main repo
* Provide "adminer" root-like user for Adminer MySQL access
* Replace MySQL with MariaDB (drop-in MySQL replacement)
* Updated version of mysqltuner script
* Includes PHP7.0 (installed from Debian repos)
* Updated PHP default settings
* Remove phpsh (no longer maintained)
* Note: Please refer to turnkey-core's changelog for changes common to all
appliances. Here we only describe changes specific to this appliance.
-- Vlad Kuzmenko <[email protected]> Thu, 26 Jul 2018 03:23:42 +0200
turnkey-ezplatform-14.2 (1) turnkey; urgency=low
* eZPublish 5 -> eZ Platform
* Note: Please refer to turnkey-core's changelog for changes common to all
appliances. Here we only describe changes specific to this appliance.
-- Zhenya Hvorostian <[email protected]> Fri, 14 Jul 2017 00:25:11 +0300
urnkey-ezpublish-14.1 (1) turnkey; urgency=low
* Installed security updates.
* Installed updated packages from TurnKey repo
- includes relevant Webmin packages (v1.780)
* Note: Please refer to turnkey-core's changelog for changes common to all
appliances. Here we only describe changes specific to this appliance.
-- Jeremy Davis <[email protected]> Tue, 01 Mar 2016 16:28:44 +1100
turnkey-ezpublish-14.0 (1) turnkey; urgency=low
* Updated to upstream-provided eZ Publish Platform v5.3.
* Replaced PHPMyAdmin with Adminer
* Hardened default SSL settings
* Note: Please refer to turnkey-core's changelog for changes common to all
appliances. Here we only describe changes specific to this appliance.
-- Anton Pyrogovskyi <[email protected]> Tue, 16 Jun 2015 20:23:15 +0300
turnkey-ezpublish-13.0 (1) turnkey; urgency=low
* PHPMyAdmin:
- Configured to allow users preferences stored in database.
- Specified blowfish_secret and regeneration on firstboot (security).
* Note: Please refer to turnkey-core's changelog for changes common to all
appliances. Here we only describe changes specific to this appliance.
-- Alon Swartz <[email protected]> Thu, 10 Oct 2013 17:52:24 +0300
turnkey-ezpublish-12.1 (1) turnkey; urgency=low
* Added phpsh (interative shell for PHP) and php5-cli (generically useful).
* Upstream source component versions:
ezpublish 2012.5
* Note: Please refer to turnkey-core's changelog for changes common to all
appliances. Here we only describe changes specific to this appliance.
-- Alon Swartz <[email protected]> Sun, 07 Apr 2013 08:00:00 +0200
turnkey-ezpublish-12.0 (1) turnkey; urgency=low
* Initial public release of TurnKey eZPublish.
* Set eZPublish admin password and email on firstboot (convenience, security).
* Set eZPublish domain to be served on firstboot (convenience).
* Regenerates all secrets during installation / firstboot (security).
* MySQL related:
- Set MySQL root password on firstboot (convenience, security).
- Force MySQL to use Unicode/UTF8.
- Includes PhpMyAdmin (listening on port 12322 - uses SSL).
* SSL support out of the box.
* Includes php-xcache PHP opcode cacher / optimizer (performance).
* Includes postfix MTA (bound to localhost) for sending of email (e.g.
password recovery). Also includes webmin postfix module for convenience.
* Major component versions
ezpublish 2012.5 (upstream archive)
apache2 2.2.16-6+squeeze7
mysql-server 5.1.63-0+squeeze1
phpmyadmin 4:3.3.7-7
* Note: Please refer to turnkey-core's changelog for changes common to all
appliances. Here we only describe changes specific to this appliance.
-- Alon Swartz <[email protected]> Wed, 01 Aug 2012 08:00:00 +0200