- Ubuntu 24.04 support #1519
- Update MariaDB to 10.11 #1520
- Update WP-CLI to v2.11.0 #1533
- Update dependency ntp to v2.5.0 #1541
- Update dependency swapfile to v2.0.38 #1540
- Update dependency composer to v1.9.2 #1539
- Conditionally add HTTPS inbound allow firewall rule #1530
- Use
http2
andhttp3
nginx directives #1529 - Fix tags for common variable validations #1544
- Allow overriding 'pm' in PHP-FPM's pool config #1542
- Prevent warnings running composer as root #1527
- Fix undefined method
exists?
error #1524
- Fix Nginx apt-key is deprecated failure #1518
- Fix MariaDB apt-key is deprecated failure #1515
- Default to PHP 8.2, add PHP 8.3 support #1514
- Add PHP JIT and enable it by default #1505
- Update wp_cli_version to 2.9.0 #1508
- Add
cron
to defaultapt
packages #1506 - Enable PHP OPCache overwrites for
max_wasted_percentage
&huge_code_pages
#1503 - Add MariaDB server config for optimizatons #1497
- Add PHP-FPM conf and tuning settings #1496
- CLI config updates #1486
- Update Bitbucket Cloud SSH Host Keys #1492
- Add Libvirt to the Vagrant config file #1490
Full Changelog: https://github.com/roots/trellis/compare/v1.21.0...v1.22.0
- Add optional PHP 8.2 support #1485
- Default to PHP 8.1 #1484
- Use appropriate mount_option for 'parallels' provider #1481
Full Changelog: https://github.com/roots/trellis/compare/v1.20.1...v1.21.0
- Fix invalid arg error in ferm task #1480
- Fix
ansible_user
references for local provisioning #1479 - Fix HSTS header by trimming whitespace #1478
- Replace MailHog with Mailpit #1474
Full Changelog: https://github.com/roots/trellis/compare/v1.20.0...v1.20.1
- Set development web_user to ansible_user #1464
- Update boxes to Ubuntu 22.04 #1461
- Composer Authentications: Fix
loop_var
already in use issue #1469 - Install wp as the default user #1470
- Allow non-default upload_path #1471
- Vagrant: disable NFS udp by default #1472
- Run SSH key generate task for local provision only #1473
- Disable xmlrpc by default #1467
Full Changelog: https://github.com/roots/trellis/compare/v1.19.0...v1.20.0
- Composer Authentication: Add support for
bearer
,gitlab-oauth
,gitlab-token
,github-oauth
andbitbucket-oauth
principles #1413 - Prevent ansible-core 2.13.6 #1448
- Enable PHP opcache in development #1447
- Remove deprecated warn usage #1450
- Composer Authentication: Add support for
bearer
,gitlab-oauth
,gitlab-token
,github-oauth
andbitbucket-oauth
principles #1413 - Update
wp_cli_version
to 2.7.1 #1451 - Disable chown site directory task by default #1452
- Update oefenweb.swapfile role #1455
- Allow remote and local databases for a site #1457
- Fix standard output for multisite cron job #1458
- Fix sshd config - set AcceptEnv conditionally #1453
- Fix xdebug role by including PHP vars (#1429)
- Automate ARM64 Vagrant box support for Apple Silicon (#1431)
- Support ARM64 arch in Mailhog role (#1432)
- Only allow Nginx caching for GET and HEAD requests (#1435)
- [BREAKING] Disable HSTS
includeSubdomains
by default (#1409) - Don't use sudo for composer authentications in dev (#1427)
- Sage 10 deploy: Fail if entrypoints are missing (#1426)
- Nginx: add "text/javascript" to gzip_types (#1424)
- Disable Landrush DNS Resolver in Parallels (#1421)
- Remove dynamic SSH key host checks (#1419)
- Update Vagrant required version (#1420)
- Remove custom output callback plugin (#1418)
- Migrage
with_X
looping usage toloop
(#1416) - Fix backwards compat for ssl.no-default conf (#1415)
- Simplify Nginx no-default sites for HTTPS (#1414)
- Improve composer authentications password default (#1412)
- Run composer check-platform-reqs during deploy (#1411)
- Fix #905, #831 - Update hb5p Nginx configs (#1406)
- Fix Ansible 6 support - remove broken and unused
cli
import (#1404) - Fix #1400 - update shared path permission (#1403)
- Update requirements.yml to new format (#1402)
- Set journald max log file size (#1399)
- Stop old php-fpm services before starting new one (#1395)
- Fix ansible incompatibility in git connection error (#1397)
- Update Ansible version requirement (#1396)
- Add variables for web and uploads paths (#1378)
- Fix WP is-installed check during deploys for multisite installs (#1388)
- Set
mjs
asapplication/javascript
in Nginx confs (#1383) - Change MariaDB PPA repo (#1384)
- Allow newer Vagrant versions on Linux (#1382)
- Remove redundant
ansible_connection=local
and comments (#1380) - Update
build-after
deploy hook example for Sage 10 (#1377) - Update
geerlingguy.ntp
role to2.3.1
(#1376) - Add built-in fail2ban filters (#1375)
- Support Ansible >= 2.10 (tested up to 5.4.0) (#1373)
- Remove Python 2 support (#1361)
- Fix #1026 - Preserve nested path for copied folders between deploys (#1364)
- Fix #1354 - Ensure correct PHP version is set (#1365)
- Create mysql my.cnf credentials file earlier (#1360)
- Remove bin scripts (trellis-cli should be used instead) (#1352)
- Update
wp_cli_version
to2.6.0
(#1358) - Deploy hook build example: update Sage build command (#1356)
- Fix #1354 - Prevent apt from installing recommended packages for php (#1355)
- Update default ssh key paths (include ed25519 keys) (#1348)
- Use trellis-cli for Vagrant galaxy install when available (#1349)
- Fix #970 - Improve git clone failure error (#1351)
- Improve support for adding public SSH keys (#1344)
- Update default Vagrant IP to 192.168.56.5 (#1341)
- Remove old WP customizer frame options hack (#1338)
- Fix #1319 - Improve how ssh_args are loaded (#1337)
- Fix #1331 - Improve passlib instructions(#1336)
- Bump minimum ansible version to
2.10.0
and addansible-base
to requirements (#1334) - Fix Ansible
2.10.16
- set default foransible_ssh_extra_args
(#1333) - Set max supported Vagrant version to
< 2.2.19
(#1332) - Bump
vagrant_ansible_version
to2.10.7
(#1329) - Remove Nginx
ssl_dhparam
directive and Diffie-Hellman params group (#1326) - Add PHP 8.1 support (#1325)
- Default to PHP 8.0 (#1322)
- Add GitHub SSH ed25519 key to known hosts (#1324)
- Enable pipelining for local Ansible connections (#1323)
- Update MariaDB mirror source (#1320)
- Remove explicit arch deb options for MariaDB (improves ARM support) (#1318)
- Bump max tested Ansible version to
2.10.7
(#1317) - Fix display color output in logs (#1316)
- Define
composer_authentications
default (#1315) - Fix #1311 - Remove explicit permission for site directory (#1314)
- Fix #1277 - Disable PHP CLI memory limit (#1278)
- Fix #1285 - Improve handling of WP-CLI failed verification (#1295)
- Fix #1284 - Update logrotate postrotate Nginx command (#1293)
- Replace php-gd with php-imagick (#1292)
- Improve handling of PHP versions and support PHP 8.0 (default is still 7.4) (#1284)
- Set permissions on all file related tasks (#1270)
- Use Python 3 for
ansible_local
Vagrant provisioner (#1269) - Bump
vagrant_ansible_version
to2.9.10
(#1268) - Migrate to Xdebug 3 (#1260)
- Improved repo connection failure message on deploys (#1265)
- Fix #1263 - Remove deprecated PHP option
track_errors
(#1264) - Validate that
letsencrypt_contact_emails
is a list (#1250) - Add config for PHP CLI (#1261)
- Fix security issue with empty password (#1256)
- Officially support Ubuntu 20.04 (and default Vagrant to it) (#1197)
- Remove prestissimo for Composer 2.0 support (#1247)
- Allow WP cron intervals to be configurable (#1222)
- Remove default Vagrant SMB credentials (#1215)
- Fix usage of
ANSIBLE_CONFIG
env var (#1217) - Update MariaDB package to 10.5 (#1212)
- Switch to official Nginx Ubuntu package (#1208)
- Improve Nginx reloading for failed Let's Encrypt certificates (#1207)
- Add support for Lets Encrypt contact emails (#1206)
- Support branch variable for deploys (#1204)
- Removes ID from Lets Encrypt bundled certificate and make filename stable (#834)
- Make Fail2ban settings extensible (#1177)
- Improve ip_whitelist in development (#1183)
- Support Ansible 2.9 (#1169)
- [BREAKING] Remove
nginx_includes_deprecated
feature (#1173) - Bump Ansible version_tested_max to 2.8.10 (#1167)
- Bump Ansible requirement to 2.8.0 (#1147)
- Update CircleCI Config (#1184)
- Update PHP to 7.4 (#1164)
- Update
wp_cli_version
to 2.4.0 (#1131) - Fix
subjectAltName
for self-signed certificates (#1128) composer install
without--no-scripts
during deploy (#1133)- Allow
composer install
with--classmap-authoritative
during deploy (#1132) - Use modern SSL config for Nginx (#1127)
- Fix
DEPLOY_UNFINISHED
not being copied over torelease
folder (#1145) - Deploy: Remove untracked files from project folder (#1146)
- Nginx: Block
composer/installed.json
(#1150) - Run
git clean
after checkinggit clone
is successful (#1151) - Lint: Fix:
[206] Variables should have spaces before and after: {{ var_name }}
(#1152) - Lint: Fix: `[306] Shells that use pipes should set the pipefail option (#1153)
- Lint: Fix `[301] Commands should not change things if nothing needs doing (#1139)
- Void rolled back releases (#1148)
- Add
WP_DEBUG_LOG
to.env
on deploy (#1160)
- Add
git_sha
andrelease_version
to.env
on deploy (#1124) - Lower self-signed certificate expiry time for macOS Cataline support (#1120)
- Block dependency manager files in Nginx (#1116)
- Lets Encrypt ACME v2 support (#1114)
- Fix self-signed certificates in Ansible 2.8 (#1110)
- Update WP CLI to v2.3.0 (#1109)
- Ansible 2.8.x support (#1103)
- Bump galaxy dependency versions (#1105)
- Fix issues with Vagrant ansible_local provisioner (#1104)
- Bump ansible requirement to 2.7.12(#1102)
- Update swapfile role to v2.0.22 (#1101)
- Add pip
requirements.txt
and renamerequirements.yml
togalaxy.yml
(#1100) - Update apt packages before checking essentials task (#1086)
- Setup composer HTTP basic authentication for multiple repositories (#1091)
- Prevent direct access for
.blade.php
files (#1075) - Show custom error message if external IP resolution fails (#1078)
- Use all canonical site hosts for Landrush TLD (#1077)
- Improve handling of vars with
AnsibleUnsafe
(#1071) - Update name of Nginx PPA (
development
tomainline
) (#1068) - [REVERT] Don't force install Ansible Galaxy in dev (#1064)
- Add Python 2 explicitly (#1061)
- Hyper-V and SMB folder sync compatibility (#1035)
- Use Ruby script for ssh-config trigger (#1053)
- Update to PHP 7.3 (#1052)
- Enable per-user
update_password
behavior (#767) - Fix Vagrant trigger path (#1051)
- Fix:
vault_wordpress_env_defaults
not populated during deploy (#1049) - Add
vault_wordpress_env_defaults
(#1048) - Allow overriding rollback variables (#1047)
- Require Vagrant >= 2.1.0 (#1046)
- Bump Ansible
version_tested_max
to 2.7.5 (#1045) - Add Vagrant
ssh-config
to~/.ssh/config
onvagrant up
(#1042) - [BREAKING] Add Ubuntu 18.04 support and default to it (#992)
- Python 3 support (#1031)
- Allow customizing Nginx
worker_connections
(#1021) - Update wp-cli to 2.0.1 (#1019)
- [BREAKING] Update wp-cli to 2.0.0 and verify its PGP signature (#1014)
- Deploy: Remove obsoleted
git
remote checking (#999) - Update xdebug tunnel configuration (#1007)
- Verify
wp-cli.phar
checksum (#996) - Enable
fastcgi_cache_background_update
by default (#962) - Bump Ansible
version_tested_max
to 2.5.3 (#981) - deploy.sh: Return non-zero exit code when misuse (#990)
- Add CSP
frame-ancestors
, makeX-Frame-Options
conditional (#977) - Common: Install
git
instead ofgit-core
(#989) - Add
xdebug.remote_autostart
to simplify xdebug sessions (#985) - Enable nginx to start on boot (#980)
- Update geerlingguy.ntp 1.5.2->1.6.0 (#984)
- Update geerlingguy.composer 1.6.1->1.7.0 (#983)
- Update wp-cli to 1.5.1 (#982)
- Support git url format
ssh://user@host/path/to/repo
(#975) - Fix path to h5bp/mime.types (#974)
- Vendor h5bp Nginx configs (#973)
- Add support for sSMTP revaliases configuration (#956)
- Add support for includes.d on all sites (#966)
- Fix
--subdomains
flag in the Install WP task (#968) - Ensure Diffie-Hellman group is generated for Let's Encrypt (#964)
- Fix
raw_vars
feature to properly handle int values (#959) - [BREAKING] Update Ansible default plugin paths in config files (#958)
- Add Nginx
ssl.no-default.conf
to drop requests for unknown hosts (#888) - [BREAKING] Disable memcached UDP support by default (#955)
- Git: Ignore
vagrant.local.yml
(#953) - Update to PHP 7.2 (#929)
- Fix
failed_when
intemplate_root
check with wp-cli 1.5.0 (#948) - Bump Ansible
version_tested_max
to 2.4.3.0 (#945) - Update wp-cli to 1.5.0 (#944)
- Update
vagrant_box_version
to>= 201801.02.0
(#939) - Bump Ansible
version_tested_max
to 2.4.2.0 (#932) - Add MariaDB 10.2 PPA (#926)
- Switch from
.dev
to.test
(#923)
- Update wp-cli to 1.4.1 (#918)
- Disallow duplicate site keys within a host's
wordpress_sites
(#910) - Fix
raw_vars
functionality for Ansible 2.4.1 (#915) - Enable Virtualbox ioapic option (#913)
- Dynamically increase
ansible_group_priority
for selected env (#909) - Bump Ansible
version_tested_max
to 2.4.1.0 (#911) - Update wp-cli to 1.4.0 (#906)
- [BREAKING] Normalize
apt
tasks (#881) - Ansible 2.4 compatibility (#895)
- Default h5bp expires and cache busting to false (#894)
- Deploys: Update WP theme paths for multisite subsites (#854)
- Vagrant: Support DHCP (#892)
- Extract Trellis::Config (#890)
- Redirect directly to https canonical domain (#889)
- WordPress Setup: Add Nginx
ssl_client_certificate
(#869) - Update h5bp/server-configs-nginx (#876)
- Update ansible galaxy roles (#872)
- Update wp-cli to 1.3.0 (#871)
- Add ansible_local support for non-Windows (#824)
- Load
modules-enabled
config files in Nginx (#859) - Only include *.conf files in Nginx
sites-enabled/
(#862) - Add
fastcgi_read_timeout
to Nginx config (#860) - Allow customization of the Nginx package name and PPA (#858)
- Nginx microcaching: skip caching WP API requests (#855)
- Allow overriding more php-fpm params (#856)
- Accommodate child themes: Update WP
stylesheet_root
separately (#850) - Deploys:
--skip-themes
when updating WPtemplate_root
(#849) - Option to install WP-CLI packages (#837)
- Update WP-CLI to 1.2.1 (#838)
- Auto-install Vagrant plugins (#829)
- Add Vagrant config (#828)
- Ansible 2.3 compatibility (#813)
- Remove potentially dangerous
db_import
option (#825)
- Add vault_wordpress_sites validation (#823)
- Use dynamic HostKeyAlgorithms SSH option for unknown hosts (#798)
- Accommodate deploy hook vars formatted as lists of includes (#815)
- Check Ansible version before Ansible validates task attributes (#797)
- Add additional Nginx sites configurations support (#793)
- Change
remote-user
role toconnection
role: tests host key, user (#745) - Allow customization of PHP extensions (#787)
- Allow for per-project packagist.com authentication (#762)
- Set multisite constants false while checking
wp core is-installed
(#766) - Forward extra bin/deploy.sh parameters to ansible-playbook (#748)
- Update WP-CLI to 1.1.0 (#759)
- Add DOMAIN_CURRENT_SITE to default env variables (#760)
- Fix formatting of
set_fact
foransible_become_pass
(#758) - Require Ansible 2.2.0.0 or greater (#726)
- [BREAKING] Use more secure sshd defaults (#744)
- Add basic git repo host keys to
known_hosts
(#751) - Accommodate template inheritance for nginx confs (#740)
- Add
apt_packages_custom
to customize Apt packages (#735) - Enable Let's Encrypt to detect updated
site_hosts
(#630) - Add
SKIP_GALAXY
env var to skip galaxy install in Vagrant (#734) - Avoid
loop.first
variable in conditional jinja loops (#729) - Use dynamic
local_path
to accommodate Ansible running on VM (#725) - [BREAKING] Fix #727 - HSTS: default preload to off (#728)
Vagrantfile
: add automatic support for landrush (#724)- Suppress extra output in SSL certificates (#723)
- Fix #718 - improve method of updating theme paths (#720)
- Create
/home/vagrant/trellis
bindfs mount with proper permissions (#705)
- Create
project_shared_children
files if they do not exist (#706) - Diffie-Hellman params now conditional on SSL status (#709)
- Update PHP to 7.1 (#695)
- Update WP-CLI to 1.0.0 (#708)
- Ansible-Local for Vagrant boxes on Windows (#690)
- Install MariaDB via Ubuntu's official distro packages (#693)
- Fix 404s by moving skip_cache conditions to server block (#692)
- Nginx includes: Move templates dir, fix 'No such file' error (#687)
- [BREAKING] Move shell scripts to bin/ directory (#680)
- Add myhostname to nsswitch.conf to ensure resolvable hostname (#686)
- Add
bin/xdebug-tunnel.sh
to manage Xdebug and SSH tunnels on remote hosts (#678) - Move Xdebug installation/configuration into its own role (#678)
- Disable wp-cron emails (#685)
- Make
raw_vars
compatible with play vars and Ansible 2.1 (#684) - Ensure there is always at least one PHP-FPM pool defined (#682)
- Update galaxy roles for Ansible 2.2 compatibility (#681)
- Update to WP-CLI 0.25.0 for WP 4.7 compat (#673)
- Enable per-site setup for permalink structure (#661)
- WP 4.6 Compat: set WP_HOME/SITEURL directly (#647)
- Create WordPress php-fpm conf after web_root exists (#642)
- Fix #637 - Fix condition for permalink structure task (#643)
- Fix #639 - WP 4.6 compatibility: update WP-CLI to 0.24.1 (#640)
- Ansible 2.1 compatibility fixes (#631)
- [BREAKING] Upgrade Ubuntu from 14.04 Trusty to 16.04 Xenial (#626)
- [BREAKING] Add
vault_users
for easier password management (#614) - Fix #581 - Use WP-CLI to run WP cron (#583)
- [BREAKING] Require explicit redirects and drop
www_redirect
(#622) - Fix #612 - Bump nginx_fastcgi_buffer_size to
8k
(#620) - Setup permalink structure for multisite installs too (#617)
- Fix
wp_home
option in Multisite after install in development (#616) - Add
current_path
var and default to enable custom current release path (#607) - Add Vagrant post up message (#602)
- Fix #468 - Use curl to install wp-cli tab completions (#593)
- Require Ansible 2.0.2 and remove deploy_helper (#579)
- Add connection-related cli options to ping command (#578)
- Wrap my.cnf password in quotes (#577)
- Update to WP-CLI v0.23.1 (#576)
- Fix #563 - Improve remote databases (#573)
- Fix #569 - Only skip subdomains for non-www domains (#570)
- Enable Let's Encrypt to transition http sites to https (#565)
- Fix #550 - Properly skip permalink setup for MU (#551)
- Escape salts and keys to avoid templating errors (#548)
- Add plugin to pretty print Ansible msg output (#544)
- Fix #482 - Multisite is-installed deploy check (#543)
- Skip setting permalink for multisite installs (#546)
- Fix #489 - Add $realpath_root to fastcgi_cache_key (#542)
- Move modules and plugins to
lib/trellis
directory (#538) - Automatically set
wp_home
andwp_siteurl
variables (#533) - Switch to Let's Encrypt X3 intermediate certificate and fix chain issues (#534)
- Supply better defaults for
db_name
anddb_user
(#529) - Fix deploy env template to use valid ansible vars (#530)
- Simplify and improve
wordpress_sites
with better defaults (#528) - Allow option for WinNFSD sync folder provider on Windows (#527)
- Improve Let's Encrypt challenge pre-flight tests (#526)
reverse_www
filter improvements (ignore subdomains) (#525)- Fix deprecation warnings on deploy, use current stable WP-CLI (#523)
- Fix #520 - Disable MariaDB binary logging by default (#521)
- Let's Encrypt integration (#518)
- Improve Git repo format validation (#516)
- Fix #505 - Git ignore *.retry file
- Fix Ansible deprecations for bare variables (#510)
- Fixes #508 - update php-xdebug config file path (#509)
- Add php-mbstring extension (#504)
- Add more necessary PHP extensions (#503)
- Update to latest ansible-role-mailhog version (#497)
- Add
reverse_www
filter to fixwww_redirect
(#486) - Add IP address variable, move some variables to top of Vagrantfile (#494)
- Keep Composer updated (#493)
- Use prestissimo Composer plugin (#492)
- Use ansible-role-composer (#491)
- Fix bad
curl
output (#490) - Fixes #410 - Default to 1 CPU in Vagrant (#487)
- Fix Nginx includes for Ansible 2.0 (#473)
- Use
ondrej/php
PPA sinceondrej/php-7.0
is deprecated (#479) - Fix Ansible 2.x deploys and require version 2.x (#478)
- Update to PHP 7.0 and remove HHVM (#432)
- Windows: Sync
hosts
dir with proper permissions (#460) - Fix
inventory_file
variable in connection tests (#470) - Fix conditional logic for permalink setup task (#467)
- Fix permalink setup during WordPress Install (#466)
- Fix deploy pre-flight check for verifying repo (#463)
- Ansible 2.0 compatibility (#461)
- Add pre-flight checks for common deploy problems (#459)
- Prevent duplicate hosts entries made by
vagrant-hostsupdater
(#458) - Fix README's
ansible-playbook
command for server.yml (#456) - Fix development hosts file (#455)
- Add tags to select includes and tasks (#453)
- Improve Git deploy implementation via
git archive
(#451) - Replace strip_www with optional redirect to www/non-www (#452)
- Accommodate file encryption via ansible vault (#317)
- Fixes #353 - Allow insecure curl reqs for cron (#450)
- Fixes #374 - Remove composer vendor/bin from $PATH (#449)
- Refactor hosts files (#313)
- Fixes #436 - Let WP handle 404s for PHP files (#448)
- Fixes #297 - Use
php_flag
vsphp_admin_flag
(#447) - Fixes #316 - Set WP permalink structure during install (#316)
- Switch to https://api.ipify.org for IP lookup (#444)
- Replace
vagrant-hostsupdater
withvagrant-hostmanager
(#442) - Switch to mainline Nginx, replaces SPDY with HTTP2 (#389)
- Add
wp core update-db
to deploy finalize hook (#411) - Use WP-CLI 0.21.1 (#392)
- Add variable for whitelisted IPs (#435)
- Nginx role improvements: use more h5bp configs (#428)
- Add global
deploy_before
anddeploy_after
hooks (#427) - Fix HSTS headers (#424)
- Notify Windows users about SSH forwarding (#423)
- Use append_privs for WP DB privileges (#422)
- Stop WP cron job emails (#421)
- Add WP-CLI bash completion script (#407)
- Add Composer config
github-oauth
variable (#402) - Fix copy project local files in example hook (#404)
- Update cron variable to match Bedrock (#394)
- Add deploy_build_before example hook for theme assets (#397)
- Use curl instead of dig for IP lookups (#390)
- Update SSL cipher suite (#386)
- Support for other Vagrant providers (VirtualBox, VMWare, Parallels) (#340)
- Specify versions for Ansible Galaxy requirements (#385)
- Adds ability to configure HSTS headers with site variables. (#388)
- Add dev's IP to ferm whitelist (#381)
- Add nonempty option to config.bindfs.bind_folder (#382)
- Add proper hooks for task files during deploys (#378)
- Fix logrotate's Nginx postrotate script (#377)
- Add static HTML files as fallbacks for Nginx's
index
directive (#376) - Use Windows environment variable to determine number of CPUs (#366)
- Check for galaxy roles before
vagrant up
(#365) - Install Xdebug by default in development environment (#363)
- Ensure admin_user can connect before disabling root (#345)
- Prevent PHP execution in uploads directory (#356)
- Update h5bp Nginx configs (#355)
- Convert sshd role variables to booleans (#344)
- Add check to validate
subtree_path
during deploy (#334) - Rename WP site variable
subtree
tosubtree_path
(#329) - Add extra HTTP security headers (#322)
- HHVM restart cron job fix (#327)
- Improve SSH remote user detection (#321)
- Add variable + better default for Nginx fastcgi buffers (#302)
- WP Multisite install fixes (#319)
- Re-organize
group_vars
files into subdirectories and separate files (#308)
- Capture development mail with MailHog (#304)
- Update git remote URL before cloning on deploys (#299)
- Allow user to set the timezone (#301)
- Improvements to custom Nginx includes (#242)
- Fix comment in Vagrantfile: use absolute path for ANSIBLE_PATH (#292)
- Fix remote user handling for AWS (#290)
- Allow auto-generation of self signed SSL certificate
- Merge secure-root.yml into server.yml
- Bump Ansible requirement to >= 1.9.2
- Validate that at least the minimum required version of Ansible is used
- Fix PHP error handling
- Flush wp db theme roots on deploy
- Stop recursive copying of vendor
- Update the bin/windows.sh script with absolute path
- Conditionally copy .env into web root
- Add subtree commented out
- Add Composer binary path to the default path
- Change base box to stock Ubuntu 14.04
- Rename bedrock-ansible to Trellis
- Restore strip_www functionality
- Protect against Logjam attack by generating a strong and unique Diffie-Hellman group
- Move SSH key handling to users role
- Fix multisite conditional in wordpress-site.conf
- Allow use of FastCGI caching
- Wrap octal mode in quotes
- Fix project_shared_children mode defaults
- Allow for custom permissions for shared sources
- Provide a mechanism for custom Nginx includes
- Add trailing slash to WP core rewrite, preventing possible redirect loop
- Insert full path to service command, add hhvm restart minute
- Disable exposing PHP version to the world
- wordpress-install improvements
- Nginx h5bp config improvements
- Make composer self-update idempotent
- Fix project_subtree conditional
- Remove redundant site_name when naming log files
- Fix project_subtree check
- Fix conditional check for multi-site deploys
- Fix .env generation for wordpress-install
- Mirror
server_name
in SSL and non-SSL blocks - Windows compatibility
- Add swapfile role
- Nginx: better worker_processes setting
- Use inventory_hostname instead of ansible_hostname
- Update Ansible version requirements
- Add information on how to deploy with the git strategy
- Define provider as virtualbox to avoid failure
- Don't set HSTS header over HTTP
- Add note about generating keys from the WordPress API
- Use site instead of example.com
- Be consistent with roots-example-project repo
- Add vagrant-hostsupdater to requirements
- SSL support
- Vagrant: resolve site paths relative to Ansible
- Subtree should be defined on a site
- Remove static IP from site_hosts
- Deploy improvements
- WP subdomain multisite support
- Add xdebug role
- Add logrotate role
- Add ntpd role
- Ansible deploys
- HHVM implementation
- Add SMTP role
- Install php5-memcached
- Update to PHP 5.6
- Simplify Vagrantfile
- Add better SSH defaults
- Add fail2ban, ferm for added security
- Remove naming restriction on Bedrock path
- Add vagrant-bindfs for custom NFS permissions
- Limit
sendfile off
directive to development env - Add better upload size and execution time defaults
- Use H5BP server configs
- Hardcode Vagrant VM memory to 1GB
- Replace dots in cron file names
- Use NFS for shared folders and better performance
- Tagged playbook roles
- Complete memcached implementation
- Better PHP production configs: errors and opcache
- Always set fastcgi param
SCRIPT_FILENAME
in Nginx for better version compatibility
- Ansible 1.6.8 compatibility (bug fix)
- Fix for slow network connections
- Nginx reload after DB import
- Integrate vagrant-hostsupdater
- Improve organization and file/folder structure
- MySQL password support
- Memcached role
- Improved hosts file and group_vars for separate environments
- Add roots/bedrock Vagrant box
- Add
run_composer
option towordpress_sites
so Composer can be run on the VM removing the requirement for it on the host - Remove upgrade role since we can't control package versions with it
- Initial release