Releases: openwisp/ansible-openwisp2
24.11.0 [2024-11-26]
Features
- Added support for Django CORS
- Allowed deploying WPA Enterprise 2 EAP-TTLS-PAP
- Added a task to add
inventory_hostname
to/etc/hosts
- Added websocket routes for network topology
- Added
openwisp2_websocket_extra_routes
variable to configure websocket routes - Added
openwisp2_daphne_install
variable to allow disabling Daphne - Added
freeradius_openwisp_site_listen_ipaddr
variable to configure FreeRADIUS listen address - Added
openwisp2_monitoring_default_retention_policy
variable to configure the default retention policy for monitoring metrics - Added
openwisp2_uwsgi_extra_conf
variable to configure extra uWSGI parameters - Added
openwisp2_email_timeout
variable to set the default email timeout - Added variables
openwisp2_users_user_password_expiration
andopenwisp2_users_staff_user_password_expiration
to configure password expiration settings - Added the
openwisp2_celerybeat
variable to allow disabling the CeleryBeat worker - Introduced a consent mechanism for the collection of usage metrics
Changes
- Upgraded to OpenWISP Users 1.1.x (see change log)
- Upgraded to OpenWISP Controller 1.1.x (see change log)
- Upgraded to OpenWISP Monitoring 1.1.x (see change log)
- Upgraded to OpenWISP Network Topology 1.1.x (see change log)
- Upgraded to OpenWISP Firmware Upgrader 1.1.x (see change log)
- Upgraded to FreeRADIUS 3.2
- Backward incompatible change:
openwisp2_radius_delete_old_radiusbatch_users
variable now expects days instead of months - Increased the prefetch multiplier for
network
andmonitoring
Celery workers to10
- Updated URLs to support cloud backends for private storage
- Removed the SQL module from the default FreeRADIUS site
- Changed the default value of the
openwisp2_radius_cleanup_stale_radacct
variable to1
- Added support for Debian 12
- Added support for Ubuntu 24.04
- Dropped support for Debian 10
- Dropped support for Ubuntu 18.04
- Dropped support for Python 3.7
Bugfixes
- Implemented efficient reloading of supervisor services
- Included
allowed_hostnames
in the NGINX Content-Security-Policy.
22.05.3 [2023-02-21]
- Updated source for Stouts.postfix role dependency
- Fix: updated openssl command syntax
22.05.2 [2022-10-18]
- Removed sql module from default freeradius site which was generating errors
- Fixed
openwisp2_should_install_python_37
false test - Fixed installation of Python 3.7 on old systems
- Fixed installation of freeradius on Ubuntu 22.04.1
22.05.1 [2022-05-30]
- Fixed redis installation issue on some Ubuntu versions
22.05 [2022-05-12]
Changes
- Upgraded to OpenWISP Users 1.0.x (see change log)
- Upgraded to OpenWISP Controller 1.0.x (see change log)
- Upgraded to OpenWISP Network Topology 1.0.x (see change log)
- Upgraded to OpenWISP Firmware Upgrader 1.0.x (see change log)
- Backward incompatible change: simplified installation of
custom modules, the variables with_pip
suffix have been abandoned
in favour of supplying the full version in the variables having
_version
suffix, for more information please see [change!] Simplify installation of custom modules #193 openwisp2_firmware_upgrader_max_file_size
now sets
OPENWISP_FIRMWARE_UPGRADER_MAX_FILE_SIZE
insettings.py
and
updatesclient_max_body_size
in nginx config.- Added variable to configure daphne websocket timeout;
this timeout value is also used for configuring the "group_expiry"
ofCHANNEL_LAYERS
. - Updated nginx SSL configuration:
- Dropped TLSv1.0 and TLSv1.1 protocol
- Updated cipher list
- Updated NGINX security headers
- Disabled nginx
server_tokens
- Added django-celery-email as default email backend
- Added
django.contrib.humanize
toINSTALLED_APPS
- Moved geocoding check from django-loci to explicit task
Features
- Added support for OpenWISP Monitoring
- Added optional support for OpenWISP RADIUS
- Added support for Ubuntu 22.04
- Added support for internationalization
- Added option to deploy custom static files
- Added support for subnet division rule feature
- Added the OpenWISP Users authentication backend (enabled by default)
- Added sesame default configuration
- Allow specifying Django version
- Added uWSGI listen option
Bugfixes
- Added handler for removing celerybeat-schedule.db whenever
there's a change to the python code - Updated celery supervisor config to support Celery 5
- Fixed support for Ubuntu 18.04
- the role will install Python 3.7 if Python version < 3.7 is found
- pinned setuptools~=59.6.0
- Fixed uWSGI OSError
20.12.5 (0.15.0) [2021-09-29]
Features
- Added support for Debian 11 (Bullseye).
20.12.4 (0.14.0) [2021-09-24]
Changes
-
Configured Nginx to use UNIX sockets instead of TCP to communicate with uWSGI and Daphne #281.
-
Added dedicated celery queue and worker for openwisp-firmware-upgrader #293.
By default the dedicated celery queue and worker are used if the openwisp-firmware-upgrader is installed, but it can be turned off by the user. -
Potentially backwards-incompatible:
⚠️ - The default number of processes for uWSGI and Daphne is reduced to 1 #274.
- The default concurrency of celery workers for each celery queue is reduced to 1 #274.
- Auto-scaling for celery workers is turned off by default #274.
These changes were made to provide more conservative defaults which can work on smaller VMs. Users are advised to configure the above values according to the resources of their machine and the number of devices managed by their system.
Bugfixes
- Fixed log rotation for Nginx logs #277.
Dependencies
- Requires community.general:>=3.6.0 #291.
If using earlier versions ofcommunity.general
, thedjango-admin collectstatic
command may fail.
Version 20.12.3 (0.13.2) [2021-06-29]
Bugfixes
Fixed alias traversing issue in nginx configuration.
This is a security fix, all users are advised to upgrade.
20.12.2 (0.13.1) [2021-03-24]
Changes
- Disabled leaflet reset view button because it is not useful in our use case
Bugfixes
- Fixed bug affecting the installation of additional python packages on Ubuntu 18.04 because of PEP517
20.12.1 (0.13.0) [2021-03-16]
This is a bugfix version, no major features were added but several changes were made to the ansible role logic, that's why the version increase from 0.12.0 to 0.13.0.
Changes
-
Reconfigured celery queues #242
Potentially backward incompatible change!
If you were customizing or doing any low lever operations
with the celery queues this may affect you negatively, so pelase
double check and back up your systems before upgrading -
Removed public read permission #243
Features
- Added API URLs by default #234
- Added possibility to configure external redis server
- Added
openwisp2_postfix_install
variable to disable installing postfix - Added
openwisp2_redis_install
variable to disable installing redis - Added
openwisp2_controller_urls
variable
Bugfixes
- Fixed bug affecting installation of custom packages