- Require Ansible 2.2.0.0 or greater (#726)
- [BREAKING] Use more secure sshd defaults (#744)
- Add basic git repo host keys to
known_hosts
(#751) - Accommodate template inheritance for nginx confs (#740)
- Add
apt_packages_custom
to customize Apt packages (#735) - Enable Let's Encrypt to detect updated
site_hosts
(#630) - Add
SKIP_GALAXY
env var to skip galaxy install in Vagrant (#734) - Avoid
loop.first
variable in conditional jinja loops (#729) - Use dynamic
local_path
to accommodate Ansible running on VM (#725) - [BREAKING] Fix #727 - HSTS: default preload to off (#728)
Vagrantfile
: add automatic support for landrush (#724)- Suppress extra output in SSL certificates (#723)
- Fix #718 - improve method of updating theme paths (#720)
- Create
/home/vagrant/trellis
bindfs mount with proper permissions (#705)
- Create
project_shared_children
files if they do not exist (#706) - Diffie-Hellman params now conditional on SSL status (#709)
- Update PHP to 7.1 (#695)
- Update WP-CLI to 1.0.0 (#708)
- Ansible-Local for Vagrant boxes on Windows (#690)
- Install MariaDB via Ubuntu's official distro packages (#693)
- Fix 404s by moving skip_cache conditions to server block (#692)
- Nginx includes: Move templates dir, fix 'No such file' error (#687)
- [BREAKING] Move shell scripts to bin/ directory (#680)
- Add myhostname to nsswitch.conf to ensure resolvable hostname (#686)
- Add
bin/xdebug-tunnel.sh
to manage Xdebug and SSH tunnels on remote hosts (#678) - Move Xdebug installation/configuration into its own role (#678)
- Disable wp-cron emails (#685)
- Make
raw_vars
compatible with play vars and Ansible 2.1 (#684) - Ensure there is always at least one PHP-FPM pool defined (#682)
- Update galaxy roles for Ansible 2.2 compatibility (#681)
- Update to WP-CLI 0.25.0 for WP 4.7 compat (#673)
- Enable per-site setup for permalink structure (#661)
- WP 4.6 Compat: set WP_HOME/SITEURL directly (#647)
- Create WordPress php-fpm conf after web_root exists (#642)
- Fix #637 - Fix condition for permalink structure task (#643)
- Fix #639 - WP 4.6 compatibility: update WP-CLI to 0.24.1 (#640)
- Ansible 2.1 compatibility fixes (#631)
- [BREAKING] Upgrade Ubuntu from 14.04 Trusty to 16.04 Xenial (#626)
- [BREAKING] Add
vault_users
for easier password management (#614) - Fix #581 - Use WP-CLI to run WP cron (#583)
- [BREAKING] Require explicit redirects and drop
www_redirect
(#622) - Fix #612 - Bump nginx_fastcgi_buffer_size to
8k
(#620) - Setup permalink structure for multisite installs too (#617)
- Fix
wp_home
option in Multisite after install in development (#616) - Add
current_path
var and default to enable custom current release path (#607) - Add Vagrant post up message (#602)
- Fix #468 - Use curl to install wp-cli tab completions (#593)
- Require Ansible 2.0.2 and remove deploy_helper (#579)
- Add connection-related cli options to ping command (#578)
- Wrap my.cnf password in quotes (#577)
- Update to WP-CLI v0.23.1 (#576)
- Fix #563 - Improve remote databases (#573)
- Fix #569 - Only skip subdomains for non-www domains (#570)
- Enable Let's Encrypt to transition http sites to https (#565)
- Fix #550 - Properly skip permalink setup for MU (#551)
- Escape salts and keys to avoid templating errors (#548)
- Add plugin to pretty print Ansible msg output (#544)
- Fix #482 - Multisite is-installed deploy check (#543)
- Skip setting permalink for multisite installs (#546)
- Fix #489 - Add $realpath_root to fastcgi_cache_key (#542)
- Move modules and plugins to
lib/trellis
directory (#538) - Automatically set
wp_home
andwp_siteurl
variables (#533) - Switch to Let's Encrypt X3 intermediate certificate and fix chain issues (#534)
- Supply better defaults for
db_name
anddb_user
(#529) - Fix deploy env template to use valid ansible vars (#530)
- Simplify and improve
wordpress_sites
with better defaults (#528) - Allow option for WinNFSD sync folder provider on Windows (#527)
- Improve Let's Encrypt challenge pre-flight tests (#526)
reverse_www
filter improvements (ignore subdomains) (#525)- Fix deprecation warnings on deploy, use current stable WP-CLI (#523)
- Fix #520 - Disable MariaDB binary logging by default (#521)
- Let's Encrypt integration (#518)
- Improve Git repo format validation (#516)
- Fix #505 - Git ignore *.retry file
- Fix Ansible deprecations for bare variables (#510)
- Fixes #508 - update php-xdebug config file path (#509)
- Add php-mbstring extension (#504)
- Add more necessary PHP extensions (#503)
- Update to latest ansible-role-mailhog version (#497)
- Add
reverse_www
filter to fixwww_redirect
(#486) - Add IP address variable, move some variables to top of Vagrantfile (#494)
- Keep Composer updated (#493)
- Use prestissimo Composer plugin (#492)
- Use ansible-role-composer (#491)
- Fix bad
curl
output (#490) - Fixes #410 - Default to 1 CPU in Vagrant (#487)
- Fix Nginx includes for Ansible 2.0 (#473)
- Use
ondrej/php
PPA sinceondrej/php-7.0
is deprecated (#479) - Fix Ansible 2.x deploys and require version 2.x (#478)
- Update to PHP 7.0 and remove HHVM (#432)
- Windows: Sync
hosts
dir with proper permissions (#460) - Fix
inventory_file
variable in connection tests (#470) - Fix conditional logic for permalink setup task (#467)
- Fix permalink setup during WordPress Install (#466)
- Fix deploy pre-flight check for verifying repo (#463)
- Ansible 2.0 compatibility (#461)
- Add pre-flight checks for common deploy problems (#459)
- Prevent duplicate hosts entries made by
vagrant-hostsupdater
(#458) - Fix README's
ansible-playbook
command for server.yml (#456) - Fix development hosts file (#455)
- Add tags to select includes and tasks (#453)
- Improve Git deploy implementation via
git archive
(#451) - Replace strip_www with optional redirect to www/non-www (#452)
- Accommodate file encryption via ansible vault (#317)
- Fixes #353 - Allow insecure curl reqs for cron (#450)
- Fixes #374 - Remove composer vendor/bin from $PATH (#449)
- Refactor hosts files (#313)
- Fixes #436 - Let WP handle 404s for PHP files (#448)
- Fixes #297 - Use
php_flag
vsphp_admin_flag
(#447) - Fixes #316 - Set WP permalink structure during install (#316)
- Switch to https://api.ipify.org for IP lookup (#444)
- Replace
vagrant-hostsupdater
withvagrant-hostmanager
(#442) - Switch to mainline Nginx, replaces SPDY with HTTP2 (#389)
- Add
wp core update-db
to deploy finalize hook (#411) - Use WP-CLI 0.21.1 (#392)
- Add variable for whitelisted IPs (#435)
- Nginx role improvements: use more h5bp configs (#428)
- Add global
deploy_before
anddeploy_after
hooks (#427) - Fix HSTS headers (#424)
- Notify Windows users about SSH forwarding (#423)
- Use append_privs for WP DB privileges (#422)
- Stop WP cron job emails (#421)
- Add WP-CLI bash completion script (#407)
- Add Composer config
github-oauth
variable (#402) - Fix copy project local files in example hook (#404)
- Update cron variable to match Bedrock (#394)
- Add deploy_build_before example hook for theme assets (#397)
- Use curl instead of dig for IP lookups (#390)
- Update SSL cipher suite (#386)
- Support for other Vagrant providers (VirtualBox, VMWare, Parallels) (#340)
- Specify versions for Ansible Galaxy requirements (#385)
- Adds ability to configure HSTS headers with site variables. (#388)
- Add dev's IP to ferm whitelist (#381)
- Add nonempty option to config.bindfs.bind_folder (#382)
- Add proper hooks for task files during deploys (#378)
- Fix logrotate's Nginx postrotate script (#377)
- Add static HTML files as fallbacks for Nginx's
index
directive (#376) - Use Windows environment variable to determine number of CPUs (#366)
- Check for galaxy roles before
vagrant up
(#365) - Install Xdebug by default in development environment (#363)
- Ensure admin_user can connect before disabling root (#345)
- Prevent PHP execution in uploads directory (#356)
- Update h5bp Nginx configs (#355)
- Convert sshd role variables to booleans (#344)
- Add check to validate
subtree_path
during deploy (#334) - Rename WP site variable
subtree
tosubtree_path
(#329) - Add extra HTTP security headers (#322)
- HHVM restart cron job fix (#327)
- Improve SSH remote user detection (#321)
- Add variable + better default for Nginx fastcgi buffers (#302)
- WP Multisite install fixes (#319)
- Re-organize
group_vars
files into subdirectories and separate files (#308)
- Capture development mail with MailHog (#304)
- Update git remote URL before cloning on deploys (#299)
- Allow user to set the timezone (#301)
- Improvements to custom Nginx includes (#242)
- Fix comment in Vagrantfile: use absolute path for ANSIBLE_PATH (#292)
- Fix remote user handling for AWS (#290)
- Allow auto-generation of self signed SSL certificate
- Merge secure-root.yml into server.yml
- Bump Ansible requirement to >= 1.9.2
- Validate that at least the minimum required version of Ansible is used
- Fix PHP error handling
- Flush wp db theme roots on deploy
- Stop recursive copying of vendor
- Update the bin/windows.sh script with absolute path
- Conditionally copy .env into web root
- Add subtree commented out
- Add Composer binary path to the default path
- Change base box to stock Ubuntu 14.04
- Rename bedrock-ansible to Trellis
- Restore strip_www functionality
- Protect against Logjam attack by generating a strong and unique Diffie-Hellman group
- Move SSH key handling to users role
- Fix multisite conditional in wordpress-site.conf
- Allow use of FastCGI caching
- Wrap octal mode in quotes
- Fix project_shared_children mode defaults
- Allow for custom permissions for shared sources
- Provide a mechanism for custom Nginx includes
- Add trailing slash to WP core rewrite, preventing possible redirect loop
- Insert full path to service command, add hhvm restart minute
- Disable exposing PHP version to the world
- wordpress-install improvements
- Nginx h5bp config improvements
- Make composer self-update idempotent
- Fix project_subtree conditional
- Remove redundant site_name when naming log files
- Fix project_subtree check
- Fix conditional check for multi-site deploys
- Fix .env generation for wordpress-install
- Mirror
server_name
in SSL and non-SSL blocks - Windows compatibility
- Add swapfile role
- Nginx: better worker_processes setting
- Use inventory_hostname instead of ansible_hostname
- Update Ansible version requirements
- Add information on how to deploy with the git strategy
- Define provider as virtualbox to avoid failure
- Don't set HSTS header over HTTP
- Add note about generating keys from the WordPress API
- Use site instead of example.com
- Be consistent with roots-example-project repo
- Add vagrant-hostsupdater to requirements
- SSL support
- Vagrant: resolve site paths relative to Ansible
- Subtree should be defined on a site
- Remove static IP from site_hosts
- Deploy improvements
- WP subdomain multisite support
- Add xdebug role
- Add logrotate role
- Add ntpd role
- Ansible deploys
- HHVM implementation
- Add SMTP role
- Install php5-memcached
- Update to PHP 5.6
- Simplify Vagrantfile
- Add better SSH defaults
- Add fail2ban, ferm for added security
- Remove naming restriction on Bedrock path
- Add vagrant-bindfs for custom NFS permissions
- Limit
sendfile off
directive to development env - Add better upload size and execution time defaults
- Use H5BP server configs
- Hardcode Vagrant VM memory to 1GB
- Replace dots in cron file names
- Use NFS for shared folders and better performance
- Tagged playbook roles
- Complete memcached implementation
- Better PHP production configs: errors and opcache
- Always set fastcgi param
SCRIPT_FILENAME
in Nginx for better version compatibility
- Ansible 1.6.8 compatibility (bug fix)
- Fix for slow network connections
- Nginx reload after DB import
- Integrate vagrant-hostsupdater
- Improve organization and file/folder structure
- MySQL password support
- Memcached role
- Improved hosts file and group_vars for separate environments
- Add roots/bedrock Vagrant box
- Add
run_composer
option towordpress_sites
so Composer can be run on the VM removing the requirement for it on the host - Remove upgrade role since we can't control package versions with it
- Initial release