Tags

Role: core
--------------
- Adding GPG to the default system packages list

Role: core
--------------
- Adding `cron` to core_packages (Debian 12 does not have this out of the box)
- Adding `wget` to core_packages (Debian 12 does not have this out of the box)
- Adding `python3-pip` to core_packages (Debian 12 does not have this out of the box)
- Adding `python3-requests` to core_packages (Debian 12 does not have this out of the box)

Role: fw_ufw
--------------
- Migrating role "ufw" from techvacy.ubuntu to "fw_ufw" in techvacy.linux verbatim

Role: ALL
--------------
- Adding discreet "become: true" to steps that specifically require it. Meaning roles should be run as non root by default
- Adding support for running on Debian v12 minimum

Role: HAProxy
--------------
- Fixing the role, wrong indentation

Role: Core
--------------
- Changes some core role functionality which is breaking. 
      - ssh_port_set variable name changed to ssh__set_port.
      - ssh_port__skip_sanity_check changed to ssh__skip_port_sanity_check


Role: ALL
--------------
- Did an initial cleanup of the galaxy collection meta on all roles

Role: Docker
--------------
- Added facility to set up a customisable docker prune cronjob to keep system clean of dangling resources(enabled by default)

Role: Core
--------------
- Added feature to enable/disable unattended upgrades(auto upgrades) to an Ubuntu system. Default is ENABLED

Role: Core
--------------
- Added SSH hardening steps to role. Following the Mozilla InfoSec guidelines: https://infosec.mozilla.org/guidelines/openssh.html

Role: Docker
--------------
- Added daemon.json templating task. By default is enabled and by default configures log rotation.

- Removed fail2ban from the "core" role (BREAKING)
- Created a new fail2ban role with accompanying documentation

adding idempotent way to change SSH port

- Changing NFS client role name to nfs_client
- Changing parameter values to match new role name

adding parameter "qemu_agent__start_on_boot" to customise start on boot behaviour
adding parameter "qemu_agent__state" to be able to control the state of the agent
updating documentation
disabling the immediate "start" of qemu-guest-agent (starting immediately conflicts with bgp/proxmox terraform provider)

refactoring to get rid of ansible warnings
updating documentation

Migrating roles from techvacy.ubuntu:
- migrating 'core' role
- migrating 'docker' role
- migrating 'podman' role
- migrating 'nfs' role and renaming to 'nfs-client'

- adding support for sudo config on users in 'core' role
- adding support for passwords on the users config in 'core' role

initial version