turnkey-rails-18.1 (1) turnkey; urgency=low

  * v18.1 rebuild - includes latest Debian & TurnKey packages.

  * Update Ruby: v3.3.5 and Rails: 7.2.1.

  * fix DB corruption on reboot - closes #1983.

  * Adds 'mariadb_admin' DB user - exclusively for use in the Webmin MariaDB
    module. Part of #1945.

  * Configuration console (confconsole) - v2.1.6:
    - Bugfix broken DNS-01 Let's Encrypt challenge - closes #1876 & #1895.
      Fixed in v2.1.5 - already included in some appliances.
    - Let's Encrypt/Dehydrated - bugfix cron failure - closes #1962.
    - General dehydrated-wrapper code cleanup - now passes shellcheck.

  * Reduce log noise by creating ntpsec log dir - closes #1952.

  * Apache mod_evasive config improvements:
    - Bump DOSPageCount from (default) 2 -> 5 - closes #1951.
    - DOSLogDir - use default log dir & fix permissions - closes #1950.
    - Add DOSWhitelist example - commented out.

 -- Jeremy Davis <jeremy@turnkeylinux.org>  Wed, 25 Sep 2024 03:52:56 +0000

turnkey-rails-18.0 (1) turnkey; urgency=low

  * Install Ruby v3.3.0 (via rbenv) & Rails v7.1.3.
    [Zhenya Khvorostian <zhenya@turnkeylinux.org>]

  * Configure bundler to fall back to IPv4 if IPv6 fails.

  * Ensure hashfile includes URL to public key - closes #1864.

  * Include webmin-logviewer module by default - closes #1866.

  * Upgraded base distribution to Debian 12.x/Bookworm.

  * Configuration console (confconsole):
    - Support for DNS-01 Let's Encrypt challenges.
      [ Oleh Dmytrychenko <dmytrychenko.oleh@gmail.com> github: @NitrogenUA ]
    - Support for getting Let's Encrypt cert via IPv6 - closes #1785.
    - Refactor network interface code to ensure that it works as expected and
      supports more possible network config (e.g. hotplug interfaces & wifi).
    - Show error message rather than stacktrace when window resized to
      incompatable resolution - closes  #1609.
      [ Stefan Davis <stefan@turnkeylinux.org> ]
    - Bugfix exception when quitting configuration of mail relay.
      [ Oleh Dmytrychenko <dmytrychenko.oleh@gmail.com> github: @NitrogenUA ]
    - Improve code quality: implement typing, fstrings and make (mostly) PEP8
      compliant.
      [Stefan Davis <stefan@turnkeylinux.org> & Jeremy Davis

  * Firstboot Initialization (inithooks):
    - Refactor start up (now hooks into getty process, rather than having it's
      own service).
      [ Stefan Davis <stefan@turnkeylinux.org> ]
    - Refactor firstboot.d/01ipconfig (and 09hostname) to ensure that hostname
      is included in dhcp info when set via inithooks.
    - Package turnkey-make-ssl-cert script (from common overlay - now packaged
      as turnkey-ssl). Refactor relevant scripts to leverage turnkey-ssl.
    - Refactor run script - use bashisms and general tidying.
    - Show blacklisted password characters more nicely.
    - Misc packaging changes/improvements.
    - Support returning output from MySQL - i.e. support 'SELECT'. (Only
      applies to apps that include MySQL/MariaDB).

  * Web management console (webmin):
    - Upgraded webmin to v2.105.
    - Removed stunnel reverse proxy (Webmin hosted directly now).
    - Ensure that Webmin uses HTTPS with default cert
      (/etc/ssl/private/cert.pem).
    - Disabled Webmin Let's Encrypt (for now).

  * Web shell (shellinabox):
    - Completely removed in v18.0 (Webmin now has a proper interactive shell).

  * Backup (tklbam):
    - Ported dependencies to Debian Bookworm; otherwise unchanged.

  * Security hardening & improvements:
    - Generate and use new TurnKey Bookworm keys.
    - Automate (and require) default pinning for packages from Debian
      backports. Also support non-free backports.

  * IPv6 support:
    - Adminer (only on LAMP based apps) listen on IPv6.
    - Nginx/NodeJS (NodeJS based apps only) listen on IPv6.

  * Misc bugfixes & feature implementations:
    - Remove rsyslog package (systemd journal now all that's needed).
    - Include zstd compression support.
    - Enable new non-free-firmware apt repo by default.
    - Improve turnkey-artisan so that it works reliably in cron jobs (only
      Laravel based LAMP apps).

  * Set mod_evasive log location - makes debugging easier.
    [ Jeremy Davis <jeremy@turnkeylinux.org> ]

  * Include and enable mod_evasive and mod_security2 by default in Apache.
    [ Stefan Davis <Stefan@turnkeylinux.org> ]

  * Use MariaDB (MySQL replacement) v10.11.3 (from debian repos).

 -- Jeremy Davis <jeremy@turnkeylinux.org>  Tue, 23 Jan 2024 05:11:13 +0000

turnkey-rails-17.1 (1) turnkey; urgency=low

  * Updated all Debian packages to latest.
    [ autopatched by buildtasks ]

  * Patched bugfix release. Closes #1734.
    [ autopatched by buildtasks ]

 -- Jeremy Davis <jeremy@turnkeylinux.org>  Mon, 27 Mar 2023 01:16:58 +0000

turnkey-rails-17.0 (1) turnkey; urgency=low

  * Update for Rails 7.

  * Install NodeJS (now necessary for Rails).

  * Replace obsolete webpacker gem with shakapacker.

  * Note: Please refer to turnkey-core's 17.0 changelog for changes common to all
    appliances. Here we only describe changes specific to this appliance.

 -- Anton Pyrogovskyi <anton@turnkeylinux.org>  Tue, 14 Mar 2023 18:53:51 +0000

turnkey-rails-16.1 (1) turnkey; urgency=low

  * Rebuild on latest Debian Buster.

  * Note: Please refer to turnkey-core's 16.1 changelog for changes common to all
    appliances. Here we only describe changes specific to this appliance.

 -- Stefan Davis <stefan@turnkeylinux.org>  Wed, 28 Apr 2021 00:26:45 +1000

turnkey-rails-16.0 (1) turnkey; urgency=low

  * Update to latest stable Ruby on Rails - v6.0.3.3.

  * Update other relevant dependencies/tools:

    - ruby:     v2.6.6
    - rbenv:    v1.1.2
    - yarn:     v1.22.5

  * Explcitly disable TLS<1.2 (i.e. SSLv3, TLSv1, TLSv1.1). (v15.x
    TurnKey releases supported TLS 1.2, but could fallback as low as TLSv1).

  * Update SSL/TLS cyphers to provide "Intermediate" browser/client support
    (suitable for "General-purpose servers with a variety of clients,
    recommended for almost all systems"). As provided by Mozilla via
    https://ssl-config.mozilla.org/.

  * Updated version of mysqltuner script - now installed as per upstream
    recommendation.

  * Note: Please refer to turnkey-core's changelog for changes common to all
    appliances. Here we only describe changes specific to this appliance.

 -- Zhenya Hvorostian <zhenya@turnkeylinux.org>  Wed, 08 Sep 2020 11:47:06 +0300

turnkey-rails-15.1 (1) turnkey; urgency=low

  * Rebuild to resolve inadvertent removal of mariadb during sec-updates
    - part of #1246.

 -- Jeremy Davis <jeremy@turnkeylinux.org>  Thu, 22 Nov 2018 14:39:30 +1100

turnkey-rails-15.0 (1) turnkey; urgency=low

  * Update ruby to 2.3.6.
  
  * Latest upstream version of Rails and gems.

  * Note: Please refer to turnkey-core's changelog for changes common to all
    appliances. Here we only describe changes specific to this appliance.

 -- Zhenya Hvorostian <zhenya@turnkeylinux.org>  Thu, 15 Feb 2017 03:12:00 +0300

turnkey-rails-14.2 (1) turnkey; urgency=low

  * Install rbenv and ruby 2.3.3 from upstream source.
  
  * Latest upstream version of Rails and gems.

  * Note: Please refer to turnkey-core's changelog for changes common to all
    appliances. Here we only describe changes specific to this appliance.

 -- Zhenya Hvorostian <zhenya@turnkeylinux.org>  Mon, 26 Jun 2017 09:15:42 +0030

turnkey-rails-14.1 (1) turnkey; urgency=low

  * Improved regen-rails-secrets inithook [#591].

  * Fixed broken example app by pre-compiling webcp assests [#593].

  * Installed security updates.

  * Installed updated packages from TurnKey repo
      - includes relevant Webmin packages (v1.780)

  * Note: Please refer to turnkey-core's changelog for changes common to all
    appliances. Here we only describe changes specific to this appliance.

 -- Jeremy Davis <jeremy@turnkeylinux.org>  Tue, 01 Mar 2016 04:11:33 +0000

turnkey-rails-14.0 (1) turnkey; urgency=low

  * Latest upstream version of Rails and gems.

  * Bugfix for log permissions issue [#235].

  * Note: Please refer to turnkey-core's changelog for changes common to all
    appliances. Here we only describe changes specific to this appliance.

 -- Anton Pyrogovskyi <anton@turnkeylinux.org>  Fri, 28 Aug 2015 11:51:43 +0300

turnkey-rails-13.0 (2) turnkey; urgency=low

  * Regenerate Rails 4 hardwired secret in /var/www/railsapp

 -- Liraz Siri <alon@turnkeylinux.org>  Fri, 20 Jun 2014 11:22:43 +0300

turnkey-rails-13.0 (1) turnkey; urgency=low

  * Rails:

    - Latest upstream version of Rails and gems.
    - Replaced ruby-enterprise with stock ruby from Debian [#102].
    - Bugfix: mysql needs to be running when generating controller.
    - Bugfixes for package transitions [#58, #59].

  * Note: Please refer to turnkey-core's changelog for changes common to all
    appliances. Here we only describe changes specific to this appliance.

 -- Alon Swartz <alon@turnkeylinux.org>  Fri, 11 Oct 2013 10:59:44 +0300

turnkey-rails-12.1 (1) turnkey; urgency=low

  * Rails:

    - Latest version of Rails and gems will be installed at build time.
    - Added execjs and therubyracer gems (LP#1084235).

  * Upstream source component versions:

    rubyenterprise      1.8.7-2012.02_i386_ubuntu10.04
                        1.8.7-2012.02_amd64_debian6

  * Note: Please refer to turnkey-core's changelog for changes common to all
    appliances. Here we only describe changes specific to this appliance.

 -- Alon Swartz <alon@turnkeylinux.org>  Sun, 07 Apr 2013 08:00:00 +0200

turnkey-rails-12.0 (1) turnkey; urgency=low

  * Rails

    - Upgraded to latest upstream rails archive.
    - Upgraded to latest upstream ruby-enterprise and passenger.
    - Added libv8 and other useful gems.
    - Rewrite of example control-panel (cp) app for Rails 3 (new features, layout).

  * Major component versions

    rails               3.2.3
    ruby-enterprise     1.8.7-2012.02
    apache2             2.2.16-6+squeeze7
    mysql-server        5.1.63-0+squeeze1
    build-essential     11.5

  * Note: Please refer to turnkey-core's changelog for changes common to all
    appliances. Here we only describe changes specific to this appliance.

 -- Alon Swartz <alon@turnkeylinux.org>  Wed, 01 Aug 2012 08:00:00 +0200

turnkey-rails-11.3 (1) turnkey; urgency=low

  * Installed security updates.
  * Enabled etckeeper garbage collection by default.
  * Upgraded to latest inithooks version (adhoc re-initialization via turnkey-init)

 -- Alon Swartz <alon@turnkeylinux.org>  Mon, 05 Dec 2011 10:48:44 +0000

turnkey-rails-11.2 (1) turnkey; urgency=low

  * Installed security updates.
  * Added HubDNS package and firstboot configuration.

 -- Alon Swartz <alon@turnkeylinux.org>  Fri, 15 Jul 2011 07:47:08 +0000

turnkey-rails-11.1 (1) turnkey; urgency=low

  * Replaced Ruby with Ruby Enterprise (performance).

  * Set MySQL root password on firstboot (convenience, security).

  * Force MySQL to use Unicode/UTF8.

  * Set postfix MTA myhostname to localhost (bugfix).

  * Included libreadline-dev so rails console works (bugfix).

  * Major component versions:

    ruby-enterprise 1.8.7-2010.02_i386_ubuntu10.04
    mysql-server    5.1.41-3ubuntu12.8
    apache2         2.2.14-5ubuntu8.4
    build-essential 11.4build1

  * Note: Please refer to turnkey-core's changelog for changes common to all
    appliances. Here we only describe changes specific to this appliance.

 -- Alon Swartz <alon@turnkeylinux.org>  Sun, 19 Dec 2010 15:01:05 +0200

turnkey-rails-2009.10 (2) hardy; urgency=low

  * Installed all security updates (see manifest for package versions).

  * Install security updates on firstboot (except when running live).

  * Trick webmin into not checking for upgrades (managed by apt).

  * Updated di-live mysql mechanism and secret regeneration.

  * Included latest version of inithooks and updated scripts.

  * Included wget as per common request.

 -- Alon Swartz <alon@turnkeylinux.org>  Mon, 29 Mar 2010 09:02:11 +0200

turnkey-rails-2009.10 (1) hardy; urgency=low

  * Switched to Phusion Passenger for Apache (mod_rails) instead of
    mongrel_cluster (simpler to configure and maintain).

  * Including git version control (convenience).

  * Regenerates all secrets during installation / firstboot (security).

  * Added Turnkey web control panel (replaces welcome page). Also provides
    example Rails application using controller, views, etc.

  * Upgraded Ruby on Rails gems:

    - rails             2.3.4
    - actionmailer      2.3.4
    - actionpack        2.3.4
    - activerecord      2.3.4
    - activeresource    2.3.4
    - rake              0.8.7
    - fastthread        1.0.7

  * Major component versions:

    mysql-server    5.0.51a-3ubuntu5.4
    apache2         2.2.8-1ubuntu0.11
    ruby            4.1
    build-essential 11.3ubuntu1
    git-core        1:1.5.4.3-1ubuntu2.1

    rubygems        1.3.5
    rails           2.3.4
    rake            0.8.7
    passenger       2.2.5

  * Note: Please refer to turnkey-core's changelog for changes common to all
    appliances. Here we only describe changes specific to this appliance.

 -- Alon Swartz <alon@turnkeylinux.org>  Tue, 29 Sep 2009 15:39:41 +0200

turnkey-rails-2009.03 (1) hardy; urgency=low

  * upgraded ruby on rails gems

    - rails             2.3.2
    - actionmailer      2.3.2
    - actionpack        2.3.2
    - activerecord      2.3.2
    - activeresource    2.3.2
    - rake              0.8.4
    - fastthread        1.0.5

  * bugfix: apache not proxying requests to the mongrel cluster (LP#348899)

  * improved rails passwords and secrets generation mechanism (security)

    - database password is now randomly generated, and regenerated
      during installation
    - regenerate more secure secret key during installation

  * major component versions

    mysql-server    5.0.51a-3ubuntu5.4
    apache2         2.2.8-1ubuntu0.5
    ruby            4.1
    build-essential 11.3ubuntu1

    rubygems        1.3.1
    rails           2.3.2
    rake            0.8.4
    mongrel         1.1.5
    mongrel_cluster 1.0.5

 -- Alon Swartz <alon@turnkeylinux.org>  Thu, 26 Mar 2009 11:55:02 +0200

turnkey-rails-2009.02 (1) hardy; urgency=low

  * added SSL support

  * regenerate rails secret key during installation (security)

  * support configuring mysql root password during installation
  * added webmin administration modules for apache and mysql (convenience)
  * set empty mysql root password in live/demo mode (for convenience)

  * major component versions

    mysql-server    5.0.51a-3ubuntu5.4
    apache2         2.2.8-1ubuntu0.3
    ruby            4.1
    build-essential 11.3ubuntu1

    rubygems        1.3.1
    rails           2.2.2
    rake            0.8.3
    mongrel         1.1.5
    mongrel_cluster 1.0.5

  * note: please refer to turnkey-core's changelog for changes common to all
    appliances. Here we only describe changes specific to this appliance.

 -- Alon Swartz <alon@turnkeylinux.org>  Thu, 29 Jan 2009 14:31:46 +0200