v25.10

NEWS:
  - implement Debian release upgrade
  - support multiple Snowflake clients
  - add eu-stack info to gdb info

CHANGES:
  - fix Ansible 12 compatibility issues
  - have metrics up and running before kernel build starts

v25.09

NEWS:
  - support "x86" as an arch
  - support Debian Trixie
  - clean up old self-compiled kernels
  - get gdb output for a minicoredump
  - install sysstat

CHANGES:
  - systemd: infinitely try to restart a failed service
  - default: don't change debian kernel flavour
  - stop cpu-intense node exporter collectors

v25.08

NEWS:
  - create 2 GiB swapfile for Tor systems (for small RAM)

CHANGES:
  - deinstall apport at Ubuntu systems isntead deactivate it
  - downlaod geoip data for Snowflake from GitLab
  - overhaul Git clone/update logic into an own lib
  - force ipv4 for ssh handshake
  - use ssh-keyscan to gather ssh keys
  -

v25.07

NEWS:
  - add error log for Nginx + no access log for
  - artefact task
  - have an optional secet for an nginx site directory
  - bisect.sh
  - snapshot.sh
  - derive OS from name

CHANGES:
  - kernel config values
  - do not mangle Debian repo urls
  - rework git clone logic + generic Git connection throtteling
  - deactivate unattended upgrade for the time of deployment

v25.06

NEWS:
  - add house-keeping for snapshots
  - serve dedicate nginx site directories

CHANGES:
  - use "upgrade: full" instead "upgrade: dist" at setup
  - allow phased updates
  - handle an already running (unattended) apt

v25.05

NEWS:
  - snapshot playbook
  - rebuild a server using its old image id
  - re-add IPv6 DNS entries
  - NGinx listens at IPv6 too
  - role info_setup called after base setup
  - verify torrc
  - site script for CA

CHANGES:
  - set location only for AMD
  - reduce number of hcloud API calls/pings
  - decouple ddos metrcis from prometheus node exporter
  - unconditionally compile ipset modules
  - use ddos firewall unconditionally for tor relays

v25.04

NEWS:
  - start supporting Ubuntu

CHANGES:
  - throttle local writes
  - removed logic of first_kernel_build_in_progress
  - factor out nginx installation into an own task
  - factor out kernel-config into own task
  - use DDoS solution for all Tor relays
  - factor out metrics info into an own role and call it at setup

v25.03

NEWS:
  - net.ipv4.tcp_notsent_lowat: 131072
  - throttle all local writes to value of nproc
  - bin/rebuild-server.sh

CHANGES:
  - more than 1 CA can be handled (name is now variable)
  - metrics are created 4x per minute to avoid hassle with 15sec
    scrape interval of Prometheus
  - do not run kernel builds in parallel

v25.02

CHANGES:
  - if locations are limited then continue with available arches only
  - de-install freeipmi-common if found
  - adjust local job count

v25.01

NEWS:
  - run custom command at each host
  - prune git repo if desired

CHANGES:
  - add ServerAliveInterval=60s
  - move more Tor config options to the inventory