2.3.10

Commits

• Allow purge from localhost (jgoutin)
• Add reboot wait delay on OS upgrade (jgoutin)
• Update dovecot config to 2.4 (jgoutin)
• Add information about Fedora 43 upgrade (jgoutin)
• e5b8878: php-fpm: Fix remi repo module upgrade. (jgoutin)
• Upgrade to PHP 8.4 (jgoutin)

2.3.9

Commits

• Set Talk app High-performance backend error as simple info (Not implemented yet). (jgoutin)
• Add "maintenance:repair --include-expensive" as maintenance task (To fix admin page warnings) (jgoutin)
• Add Incus guest agent and Allow to uninstall Qemu guest agent (jgoutin)
• Add Netdata ephemeral node option (jgoutin)
• 6c167c1: Fix Ansible formatting issues (jgoutin)
• Kernel, remove no more required "page_poison=1" & "slub_debug=P". (jgoutin)
• Fix kernel options with rpm-ostree. (jgoutin)
• Add netdata-plugin-systemd-units package (jgoutin)
• Improve squid_dnf_mirrors to avoid conflicts between similar mirrors. (jgoutin)

2.3.8

Commits

• Update Ansible metadata with new Fedora version. (jgoutin)

2.3.7

Commits

• Set DNF to "nodocs" by default (jgoutin)
• Use "rpm --restore" to ensure proper permission and ownership of packages modified files. (jgoutin)
• f021f72: php-fpm: Empty default site files instead of removing them to avoid restoration on package update (jgoutin)

2.3.6

Commits

• Add more ostree file extensions (jgoutin)
• Reorder tasks to start service at end. (jgoutin)
• Add transparent fallback on the previous Fedora version repository if no repository is available for the current version. (jgoutin)
• Configure store_id_children to handle concurrency. (jgoutin)
• fips-mode-setup no more present on Fedora 42 (jgoutin)
• Add auto-upgrade for Fedora version. (jgoutin)
• Shows installed versions (jgoutin)
• Fix Python formating. (jgoutin)
• Does not recurse all directories. (jgoutin)

2.3.5

Commits

• Update squid_dnf_mirrors script to use "libdnf5". (jgoutin)
• Fix dnf-automatic-on-shutdown for DNF5. (jgoutin)

2.3.4

This version is intended to be used with Fedora 41 and upper because of breaking changes in this Fedora version (DNF is replaced by DNF5, Redis is replaced by Valkey).

Commits

• Add Netdata agent (Monitoring tool). (jgoutin)
• Ensure /home/nextcloud/.cache is reachable from services (jgoutin)
• Add sensors to Netdata (jgoutin)
• remove a useless Nginx configuration section based on Nginx warning (jgoutin)
• Enable HTTP/3 (jgoutin)
• Fix SELinux issues (jgoutin)
• Add netdata collectors. (jgoutin)
• ba9ee06: php-fpm: Add netdata collectors. (jgoutin)
• Add Netdata collector. (jgoutin)
• Fix idempotency (jgoutin)
• Add netdata collector (jgoutin)
• Deny traffic to local network, localhost, link local by default (jgoutin)
• Always end with "http_access deny all" (jgoutin)
• Drop "X-Forwarded-For" & "Via" headers. (jgoutin)
• Ensure logrotate is installed and enabled (jgoutin)
• Add Netdata collectors (jgoutin)
• Remove manager from access log (jgoutin)
• Remove CONNECT from access log (jgoutin)
• Handle "repodata/repomd.xml.asc" case (jgoutin)
• Add redis_log_level parameter and reduce default verbosity. (jgoutin)
• 41b0dd9: php-fpm: Add php_fpm_log_level parameter and reduce default verbosity. (jgoutin)
• Add nextcloud_log_level parameter and reduce default verbosity. (jgoutin)
• 3fd28f2: php-fpm: Enable PHP 8 Jit. (jgoutin)
• Move cache and updater directories out of data directory. (jgoutin)
• Ensure logrotate is configured. (jgoutin)
• Restrict access to status pages. (jgoutin)
• Add host domain to /etc/hosts (jgoutin)
• Add timeout to cron service. (jgoutin)
• add common_grub_save_default (jgoutin)
• Use GRUB_TIMEOUT_STYLE=hidden when common_grub_auto_hide=true (jgoutin)
• Add FS-Cache. (jgoutin)
• Fix Fedora 41 DNF5 support. (jgoutin)
• 566841d: php-fpm: Fix Fedora 41 DNF5 support. (jgoutin)
• 1a8cb35: redis/nexctloud: Migrate to Valkey (jgoutin)
• a200307: Update Fedora/Ansible compatible versions (jgoutin)
• Fix "squid_dnf_mirrors" DNS error. (jgoutin)
• Ensure "python3-libdnf" is installed ("squid_dnf_mirrors" requirement until migrated to "libdnf5"). (jgoutin)

2.3.2

Commits

• 9ed6484: php-fpm: Add pm.max_requests & request_terminate_timeout parameters (jgoutin)
• Update "requires_ansible" (jgoutin)
• ensure /etc/squid/dnf_mirrors exists (jgoutin)
• Add SELinux module (jgoutin)
• Ensure collation version is refreshed (jgoutin)
• remove richdocuments + richdocumentscode because global performance issue (jgoutin)
• Update /var/www/nextcloud globally (jgoutin)
• Fix error encryption already enabled. (jgoutin)
• Set permissions directly on install from archive. (jgoutin)
• Add option to install glibc-langpack for a non-english database. (jgoutin)
• Add option to install Qemu gest agent (jgoutin)
• Add config.php restoration options. (jgoutin)

2.3.1

Commits

• ed50c41: Remove vagrant/macos based Github actions molecules tests (Was not really reliable) (jgoutin)

2.3.0

Commits

• 9219e5e: Create FUNDING.yml (Jérémy Goutin)
• Fix "stime" not valid in auditd configuration for 64 bits OS. (jgoutin)
• Ensure SELinux binaries execution is logged by auditd. (jgoutin)
• Ensure Systemd debug-shell service is disabled. (jgoutin)
• Set Sysctl "kernel.perf_event_paranoid=2", the maximum value for recent kernel versions. (jgoutin)
• b60c58e: Fix badges links. (jgoutin)
• Fix invalid conditions. (jgoutin)
• Fix grub.cfg paths. (jgoutin)
• e832b9f: .gitignore: Add poetry (jgoutin)
• Add rpm-ostree support. (jgoutin)
• Allow enabling Thunderbolt with hardening. (jgoutin)
• Add random MAC address option. (jgoutin)
• Upgrade PHP to 8.3 (jgoutin)
• Fix missing grub countdown (jgoutin)
• Fix error caused by missing log file when logging with journald. (jgoutin)
• 282d6cd: php-fpm,nextcloud: Improve systemd sandboxing of /var. (jgoutin)
• Add option to disable kernel ia32 emulation. (jgoutin)
• Add missing AF_UNIX in RestrictAddressFamilies (jgoutin)
• Update doc to use "yescrypt", the current Fedora password hashing algorithm. (jgoutin)
• Add musicplayer_gtk_theme option (jgoutin)
• Remove Pipewire packages, with opt-out option. (jgoutin)
• Add option to fully disable HDMI sound. (jgoutin)
• Add rpm-ostree "commitmeta" (jgoutin)
• remove no more required "mesa_glthread=false" (jgoutin)
• Deprecate X-XSS-Protection. (jgoutin)
• Keep X-XSS-Protection to avoid warning. (jgoutin)
• Disable "logreader" default app until compatible with syslog. (jgoutin)
• Ensure "admin_audit" log in syslog. (jgoutin)
• Set maintenance_window_start (jgoutin)
• c4a2476: Update Github actions (jgoutin)