ikiwiki hosting internals/ news
version 0.20170622

ikiwiki-hosting 0.20170622 released with [[!toggle text="these changes"]] [[!toggleable text=""" * [ Joey Hess ] * remove, letsnotencrypt: Remove Lets Encrypt renewal file, to avoid the cron job trying to renew deleted sites. * Fix deletion of sites that use https over the web interface. * HTTP Strict Transport Security (HSTS) is enabled for all sites that have `redirect_to_https` set in their configuration. Thanks, Antoine Beaupré. * Improve `ikisite backup` to lock the wiki for a much shorter period of time. * Remove `.ikiwiki/sessions.db` from the ikisite backup, as the file can be rather large, and losing it only means users have to log back in sooner than would otherwise be the case. * ikisite-wrapper: Allow `ikisite enable` to be run via the wrapper. The CGI uses this to update the site config of an already enabled site when enabling eg `redirect_to_https` or adding a DNS alias. * [ Simon McVittie ] * debian/copyright: Use preferred https URL for Format * debian/control: Declare compliance with Debian Policy 4.0.0 * debian: Update to debhelper compat level 10"""]]

version 0.20180610

ikiwiki-hosting 0.20180610 released with [[!toggle text="these changes"]] [[!toggleable text=""" * [ Joey Hess ] * Renamed IkiWiki::Hosting::syslog to IkiWiki::Hosting::logger to avoid conflict with Sys::Syslog::syslog. * Prevent ikisite letsencrypt from unncessarily reloading apache when there is no configuration change. ikisite maintaincerts runs it once per site, and the resulting many reloads of apache close together tended to cause apache to fall over, due to bug #873115. * ikiwiki-hosting.conf: Removed wildcard_ssl_cert, wildcard_ssl_key, wildcard_ssl_chain, and in its place added wildcard_ssl_cert_dir. * ikidns: Added letsencrypt command, which generates wildcard certificates for the domains listed in ikiwiki-hosting.conf, using DNS verification. This needs the python3-certbot-dns-rfc2136 package to be installed, and ikidns to have already been used to configure the dns server. * ikisite letsencrypt: Avoid getting a per-domain cert when a usable wildcard cert exists. * ikisite letsencrypt: When a per-domain cert was already obtained, and a wildcard cert now exists, the per-domain cert will be deleted, and the wildcard cert used. * [ Simon McVittie ] * build: Use `set -e` to trap failure in shell loops * build: Add a `dist` target to the Makefile * Move d/changelog to ./CHANGELOG * Separate upstream releases from Debian packaging * debian/control: Don't use autopkgtest-pkg-perl. Since 0.20160811 the autogenerated test list is not used. * ikiwiki-hosting-web: Depend on real package apache2-suexec-pristine in preference to virtual apache2-suexec * ikiwiki-hosting-web: Add missing dependency on lsb-base * debian/control: Declare compliance with Debian Policy 4.1.4"""]]

version 0.20180719

ikiwiki-hosting 0.20180719 released with [[!toggle text="these changes"]] [[!toggleable text=""" * [ Joey Hess ] * ikisite: Deleting per-domain letsencrypt cert when a wildcard cert exists was too dangerous and buggy, including sometimes deleting the letsencrypt wildcard cert. Removed that behavior; any per-domain cert will be used in preference to the wildcard cert. * Further fix to IkiWiki::Hosting for syslog name change. (Fixes ikidns) * ikidns: Fix typo in letsencrypt command. * [ Simon McVittie ] * debian: Pass dpkg-buildflags CFLAGS to make * debian: Override dh_missing to detect any files that are installed by dh_auto_install but not packaged"""]]

version 0.20220715

ikiwiki-hosting 0.20220715 released with [[!toggle text="these changes"]] [[!toggleable text=""" * Avoid directly running init scripts, instead use the service command. * Avoid running apache2ctl graceful which may start an apache process outside of systemd control (see bug #927302). (But note that certbot still uses apache2ctl graceful.) * As ssh RSA keys are being deprecated in an upcoming ssh release, the gitpush plugin will generate a Ed25519 key for the site if one does not yet exist. * The gitpush plugin, when listing the site's ssh keys, will list all available public keys, rather than just one. * Fix anonymous git push to branchable sites, which has been broken since 2018 by a git behavior change. * Fix ACL setting in ikisite enable to come after chmod, which otherwise would mess up the ACLs and break anonymous git push. * Added hostname_stopwords config that can be used to prevent use of particular words in names of sites. * ikisite enable, ikisite letsencrypt: When a fullchain file is available, use it for apache's SSLCertificateFile, and do not use the chain file. This avoids a problem with leteencrypt and apache where apache serves up 2 copies of the certificate, one from the cert file, and one from the fullchain file, which confuses some SSL clients."""]]

version 0.20220716

ikiwiki-hosting 0.20220716 released with [[!toggle text="these changes"]] [[!toggleable text=""" * Fix the test suite to work when ikiwiki-hosting is not installed."""]]