leap_platform.git, branch 0.6.0rc1 [leap_platform] Merge "Fix Check_mk notifications (Bug #6403)" into develop 2014-11-20T22:09:35+00:00 Varac varac@leap.se 2014-11-20T22:09:35+00:00 885c32447fa4a244f8a996aa8b622d29f130fd87 






Fix Check_mk notifications (Bug #6403)
2014-11-20T22:00:50+00:00

varac
varacanero@zeromail.org

2014-11-20T22:00:50+00:00

6ebd8cee202c81260c151e7903ff2f16518ffa41

Let check_mk put all hosts into the same "admin" contactgroup,
which is defined as default contactgroup by nagios.

Change-Id: I13b434925711ef2037de0cf6e919ce39a8255a94





Let check_mk put all hosts into the same "admin" contactgroup,
which is defined as default contactgroup by nagios.

Change-Id: I13b434925711ef2037de0cf6e919ce39a8255a94







ship a modified runit config for bigcouch that raises the open file
2014-11-20T21:32:00+00:00

Micah Anderson
micah@leap.se

2014-11-20T21:27:35+00:00

503a316e67da2b4e0dbae7db28bbd0574fa3739f

descriptor limits to account for bigcouch sync spikes (#4935)

Change-Id: I242fba31f961b6139ec641e1708b170f5c0d009b





descriptor limits to account for bigcouch sync spikes (#4935)

Change-Id: I242fba31f961b6139ec641e1708b170f5c0d009b







Make sure openvpn is restarted when cert/key change (#6405)
2014-11-20T20:31:27+00:00

Micah Anderson
micah@leap.se

2014-11-20T20:31:27+00:00

dff949811324215278ab7e4c2db5de63d8a6218b

I reformatted the section below for consistency.

Change-Id: I18f5e23850e0c1ab4b1f2ee467d5af54ae9ff303





I reformatted the section below for consistency.

Change-Id: I18f5e23850e0c1ab4b1f2ee467d5af54ae9ff303







Make sure that stunnel restarts when cert/key change (#6181)
2014-11-20T20:22:09+00:00

Micah Anderson
micah@leap.se

2014-11-20T20:22:09+00:00

896dd69710fa24a0235fc70081a71f35adbf9af1

Change-Id: I5085247a87018e18e73833119ac73225afbfea1e





Change-Id: I5085247a87018e18e73833119ac73225afbfea1e







specify the destination IP for DNAT rules for gateway addresses on port 443 (#6388)
2014-11-20T18:13:55+00:00

Micah Anderson
micah@leap.se

2014-11-20T18:13:55+00:00

e334f10447303209ac3802436437670f45511603

Previously the DNAT rule would redirect the incoming port 443 requests
to openvpn, which was the wrong thing to do on the primary IP (but the
right thing to do on the openvpn gateway IPs). This manifested in the
webapp not being available when it was also configured as a service on
the node.

Change-Id: Ic8c6b6c0389859fab168a7df687351e11263277a





Previously the DNAT rule would redirect the incoming port 443 requests
to openvpn, which was the wrong thing to do on the primary IP (but the
right thing to do on the openvpn gateway IPs). This manifested in the
webapp not being available when it was also configured as a service on
the node.

Change-Id: Ic8c6b6c0389859fab168a7df687351e11263277a







minor linting
2014-11-20T18:13:33+00:00

Micah Anderson
micah@leap.se

2014-11-20T18:13:33+00:00

be18ba31fadd2e587672adc44175dd106187ceba

Change-Id: I6d04cc7e028e86ee0012d96d7ef075fdd7ecef19





Change-Id: I6d04cc7e028e86ee0012d96d7ef075fdd7ecef19







don't enable Tor DirPort if openvpn is running on port 80 (Bug #6377)
2014-11-15T18:36:51+00:00

Micah Anderson
micah@leap.se

2014-11-15T18:36:51+00:00

7521958cc6c210d65009aa87c6c7297fd9be3dd2

We need to check the openvpn hiera value, which may or may not be set.
If it is not set, then we need to not lookup the $openvpn['ports]'
values or we will get an error because it wont be the correct type.

If we do have it, then $openvpn_ports gets set with the hash, otherwise
it gets set to an empty hash (otherwise puppet will complain when we try
to query the member() later with "member(): Requires array to work
with").

Finally, if it is set to port 80, we don't include the
tor::daemon::directory

Change-Id: Ic366c72e966cae9d611e8fe5aa7ea7943be51241





We need to check the openvpn hiera value, which may or may not be set.
If it is not set, then we need to not lookup the $openvpn['ports]'
values or we will get an error because it wont be the correct type.

If we do have it, then $openvpn_ports gets set with the hash, otherwise
it gets set to an empty hash (otherwise puppet will complain when we try
to query the member() later with "member(): Requires array to work
with").

Finally, if it is set to port 80, we don't include the
tor::daemon::directory

Change-Id: Ic366c72e966cae9d611e8fe5aa7ea7943be51241







Merge remote-tracking branch 'gerrit/develop' into develop
2014-11-15T17:58:34+00:00

Micah Anderson
micah@leap.se

2014-11-15T17:58:34+00:00

9d0bd5610a286cf582af0f3b67ddc7647bc757dc












Merge "add local 50unattended-upgrades to fix unattended-upgrades not upgrading leap packages (#4425)" into develop
2014-11-15T17:57:16+00:00

micah anderson
micah@riseup.net

2014-11-15T17:57:16+00:00

266a72ab88a18d9525cc2ad763b639205c411b0c