Attention : support for WAPT 1.8.2 ended on June the 30th 2022.

There are known vulnerabilities in WAPT dependencies in WAPT 1.8.2 branch. Please upgrade to the latest supported version. CVE listing (non exhaustive) :

* python engine : python 2.7 (CVE-2020-10735, CVE-2015-20107, CVE-2022-0391, CVE-2021-23336, CVE-2021-3177, CVE-2020-27619, CVE-2020-26116, CVE-2019-20907, CVE-2020-8492, etc.)
* cryptography : openssl : CVE-2022-2068, CVE-2022-1292, CVE-2022-0778, CVE-2021-4160, CVE-2021-3712, CVE-2021-23841, CVE-2021-23840, CVE-2021-23839, CVE-2020-1971, CVE-2020-1968, CVE-2019-1551
* python dependencies : cryptography (CVE-2020-36242, CVE-2020-25659), eventlet (CVE-2021-21419), jinja2 (CVE-2020-28493), psutil (CVE-2019-18874), waitress (CVE-2022-31015), lxml (CVE-2021-4381, CVE-2021-28957, CVE-2020-27783, CVE-2018-19787), ujson (CVE-2022-31117, CVE-2022-31116, CVE-2021-45958), python-ldap (CVE-2021-46823)

Installing WAPT Server with Ansible¶

To avoid mistakes and automate your WAPT Server deployment, we provide Ansible roles for WAPT Server installation.

You can explore the role source code by visiting Tranquil IT repository on Github.

Requirements¶

Debian Linux or CentOS hosts;
a sudoers user on these hosts;
Ansible 2.8;

Installing the Ansible role¶

install tranquilit.waptserver Ansible role;

ansible-galaxy install tranquilit.waptserver

to install the role elsewhere, use the -p subcommand like this;

ansible-galaxy install tranquilit.waptserver -p /path/to/role/directory/

Using the Ansible role¶

ensure you have a working ssh key deployed on your hosts, if not you can generate and copy one like below;

ssh-keygen -t ed25519
ssh-copy-id -i id_ed25519.pub user@srvwapt.mydomain.lan
ssh user@srvwapt.mydomain.lan -i id_ed25519.pub

edit Ansible hosts inventory ( ./hosts ) and add the Linux hosts;
```
[srvwapt]
srvwapt.mydomain.lan ansible_host=192.168.1.40
```

create a playbook with the following content in ./playbooks/wapt.yml;

- hosts: srvwapt
  roles:
    - { role: tranquilit.waptserver }

run your playbook with the following command;

ansible-playbook -i ./hosts ./playbooks/wapt.yml -u user --become --become-method=sudo -K

Congratulations, you have installed your WAPT server on your Linux server!

Role variables¶

Available variables are listed below, along with default values (see defaults/main.yml):

version of WAPT that will be installed from WAPT Deb/RPM repository;
```
wapt_version: "1.8"
```
version of PostgreSQL that will be installed from WAPT Deb/RPM repository;
```
pgsql_version: "9.6"
```
version of CentOS used for RPM repository address;
```
centos_version: "centos7"
```
launch_postconf defaults to True, it launches WAPT Server postconfiguration script silently;
```
launch_postconf: True
```

Example Ansible playbook¶

Here is an example of an Ansible playbook.

- hosts: srvwapt
  vars_files:
    - vars/main.yml
  roles:
    - tranquilit.waptserver