Merge pull request #111 from cisagov/feature/disable-trace-and-enable…

…-hsts

Disable trace functionality and enable HSTS headers in Apache

src/freeipa.yml

@@ -6,16 +6,23 @@
   tasks:
     - name: Install FreeIPA server
       ansible.builtin.include_role:
-        name: freeipa_server
+        name: freeipa
+      vars:
+        freeipa_disable_trace: true
+        freeipa_enable_hsts: true
+
     # boto3 will be needed to pull certificates from S3, and dig is
     # needed to perform some DNS lookups.  Both are used in cloud-init
     # scripts.
-    #
+    - name: Install dependencies for cloud-init scripts
+      ansible.builtin.package:
+        name:
+          - bind-utils
+          - python3-boto3
+
     # expect is used in the FreeIPA cluster update script that
     # @bra1ncramp created in cisagov/cool-users#421.
-    - name: Install boto3 and dig
+    - name: Install dependencies for FreeIPA cluster update script
       ansible.builtin.package:
         name:
-          - bind-utils
           - expect
-          - python3-boto3

src/requirements.yml

@@ -20,7 +20,7 @@ roles:
     src: https://github.com/cisagov/ansible-role-cloudwatch-agent
   - name: crowdstrike
     src: https://github.com/cisagov/ansible-role-crowdstrike
-  - name: freeipa_server
+  - name: freeipa
     src: https://github.com/cisagov/ansible-role-freeipa-server
   - name: harden
     src: https://github.com/cisagov/ansible-role-hardening

src/version.txt

@@ -1 +1 @@
-__version__ = "0.7.3"
+__version__ = "0.7.4"