leap_platform.git/puppet/modules/site_config/templates, branch master

testing: adds mx delivery tests

2016-04-05T16:52:01+00:00

allow all outgoing traffic

2014-09-25T14:01:37+00:00

as discussed on #leap

allow outgoing port 3142 for apt-cacher proxy

2014-09-17T15:30:38+00:00

clean up how /etc/hosts is generated so it doesn't require custom behavior depending on the services.

2014-06-04T21:19:55+00:00

Change the initial firewall to subscribe to the rule file to be able to

2014-05-06T20:37:01+00:00

trigger changes, make the default ipv6 firewall subscribe to shorewall6,
if it exists, and finally reject all outgoing IPv6 packets.

All of this will complete the platform-side of route IPv6 through
OpenVPN gateway, and block it. (Feature #4163)

Change-Id: Icf6d582063ed01d304658b740a565057ee4e6810

initial firewall: allow port 22 by default. This is the most common port

2014-04-24T18:59:33+00:00

that sshd will be listening to in a default setup. This needs to be
allowed so that you can have a different port configured in the
hiera and not get locked out during deployment (#5119)

Change-Id: Ie101eaaf440415ddb276621c369da7f67f409c2b

include "127.0.1.1 @domain_public @api['domain']" in /etc/hosts for nagios webapp log check

2014-02-27T17:28:54+00:00

fix initial firewall to allow outgoing lo traffic and outgoing port 443 (#3736)

2013-09-05T02:46:56+00:00

this allows nameserver queries to the local resolver to work and clones to the
leap https repository to work

Change-Id: I575d08405a0c28e12c8d201a8dbc79585a5a9a48

install a preliminary firewall that blocks everything, except ssh for the cases when shorewall doesn't properly come up, ensuring that it fails safe (#3339)

2013-08-22T13:43:20+00:00

Change-Id: Id4f0bf6cf25f420aa2ad67635b37ae95f54e3d38

ensure that /etc/hosts is output deterministically, so that content does not change each time you deploy.

2013-07-11T04:45:51+00:00