Change sshUsers to a list instead of a dict
Add minimal ossec task list
Fix tags
Add portforwarding for vagrant app
Force upgrade of tor if new one is available
Remove obsolete apache directive
Teach vagrant to sync dir with proper ownership
moved all tasks from the appHardening and appInterfaces main.yml to separate files.
taged all include statements in the appHardening and appInterfaces main.yml files.
added all environment tags to the tor role
added a 4th tag called tor so developer could choose to skip it for the development environment to reduce provisioning times

switching from staging to development environments does not currently work
development environment is not functional yet
renamed ossec agent deb package since it will not be securedrop specific
moved securedrop specific agent config to ansible-securedropAppHardening role
removed securedrop specific sections from postinst
since this package was designed to be configured by ansible I removed the debconf question for the monitor ip
removed securedrop specific files from /etc/directory
renamed the doc and lintain overrides with the correct package name
moved the monitorIP variable to the secureDripConf.yml files since it is an instance specific config
and is a value we can also configure in the vagrantfile for the development/staging environments
updated build_deb_pacakge script and directions
made changes due to lintian output.
moved the ossec task to on the last task to that it doesn't go crazy with file integrity alerts for the install
Beacuse @garrettr didn't want the the wsgi config file mixed with his app code file in the github repo....
re-organizing all of the apache config file so ansible will deploy the source.wsgi and document.wsgi files
beacuse in the development environment the /var/www/securedrop is symling to /vagrant/securedrop these files will need to be located /var/www
because @garrettr didn't want the wsgi files mixed with his app code in the github repo
and for the dev environment /var/www/securedrop is just a symlink to /vagrant/securedrop have to move the wsgi files to /var/www/
and reconfigure the rest of the apache configs for that
updated the path for apache to look for the wsgi files
added dev deb dependency of python-pip
use the apache_user variable instead of the www-data for wsgi app file ownership
added handler for restart apache after placing enabling the source and document site
changes from trial and error beacuse of @garrettr request
turned the apache ports.conf source.conf and document.conf into templates so we can remove the localhost and symlink protections for the development and staging environments
added a apache2 handler to restart the service if the sites change.
renamed secureDropConf.yml.example to secureDropConf.yml.production so it make more sense
need to test in production