leap_platform.git/puppet/modules/site_config, branch 0.5.1

Implement #2328: unbound.conf: content changed on every puppetrun

2014-05-22T19:50:02+00:00

This is done by using the include glob capability that is in the
wheezy-backports and newer unbound to include the
/etc/unbound/unbound.conf.d/* config files.

To do this, we need to transition from our /etc/unbound/conf.d directory
structure to use the one that the debian package uses.

This allows us to clean up the rather ugly way we were configuring the
resolver before.

Change-Id: I68347922f265bbd0ddf11d59d8574a612a7bd82c

lint cleanup of site_config::caching_resolver

2014-05-22T17:11:54+00:00

Change-Id: I3f6a4db26e064a520a08822cf23fc3288b31af62

Install wheezy-backports version of unbound, this is necessary to solve #2328

2014-05-22T16:19:04+00:00

Change-Id: Ie28de8d3f7a8c8cf52ce30365379a476d48dc88b

Move rsyslog preferences snippet to site_apt::preferences::rsyslog, to

2014-05-22T16:14:28+00:00

group it with the other preferences snippets

Change-Id: I83928c6b82cd6218a80c95475729cb57f146ff85

fix resolv.conf on virtualbox

2014-05-21T07:14:39+00:00

virtualbox sends the domain with the dhcp-answer.
If the wrong domain ends up in /etc/resolv.conf bigcouch fails.

change rsyslog pin from leaps debian repo to backports (fixes #5533)

2014-05-17T07:05:37+00:00

Change the initial firewall to subscribe to the rule file to be able to

2014-05-06T20:37:01+00:00

trigger changes, make the default ipv6 firewall subscribe to shorewall6,
if it exists, and finally reject all outgoing IPv6 packets.

All of this will complete the platform-side of route IPv6 through
OpenVPN gateway, and block it. (Feature #4163)

Change-Id: Icf6d582063ed01d304658b740a565057ee4e6810

initial firewall: allow port 22 by default. This is the most common port

2014-04-24T18:59:33+00:00

that sshd will be listening to in a default setup. This needs to be
allowed so that you can have a different port configured in the
hiera and not get locked out during deployment (#5119)

Change-Id: Ie101eaaf440415ddb276621c369da7f67f409c2b

fix concat::setup (#5503)

2014-04-15T14:54:57+00:00

Merge branch '0.6' into develop

2014-04-10T15:30:35+00:00