leap_platform.git/puppet/modules/site_nickserver, branch master [leap_platform] Nickserver direct access to couchdb on same node 2017-05-10T19:38:25+00:00 varac varacanero@zeromail.org 2017-05-10T18:29:17+00:00 746601becc47fcee9fc85700f175a5b33b310979 Depending whether couchdb is running on the same node as nickserver, couchdb is available on localhost: - When couchdb is running on a different node: Via stunnel, which is bound to 4000. - When couchdb is running on the same node: On port 5984 Resolves: #8793 
Depending whether couchdb is running on the same node as
nickserver, couchdb is available on localhost:
  - When couchdb is running on a different node: Via stunnel, which is
bound to 4000.
  - When couchdb is running on the same node: On port 5984

Resolves: #8793
[8144] Remove Haproxy 2017-03-15T18:22:50+00:00 varac varacanero@zeromail.org 2017-02-23T10:42:47+00:00 cce9af1fce42c29bf062cccfc46ef356d83a6328 We used haproxy because we had multiple bigcouch nodes but now with a single couchdb node this is not needed anymore. - Resolves: #8144 
We used haproxy because we had multiple bigcouch nodes but now
with a single couchdb node this is not needed anymore.

- Resolves: #8144
Cleanup modified Gemfile.lock before pulling nickserver vcsrepo 2017-02-23T17:52:59+00:00 varac varacanero@zeromail.org 2017-02-21T20:17:46+00:00 15d2a330d3382306b80e3bd773604f0a6f0c79d5 Resolves: #8492 
Resolves: #8492
Use systemd unit file for nickserver [#8578] 2017-01-18T17:43:15+00:00 varac varacanero@zeromail.org 2017-01-16T14:41:44+00:00 7e51872c854f48eaf372a6025f4550ca801cb447 






Notify Exec[shorewall_check] not Service[shorew..]
2016-07-13T08:46:05+00:00

varac
varacanero@zeromail.org

2016-06-13T18:11:23+00:00

f3f78ebaf5f3fd3233bc35596fefb51f6e5ed9d9

Latest shorewall module does `shorewall check` (executed
by `Exec[shorewall_check]`) so every related resource change
must notify this Exec instead of `Service[shorewall]` as before.





Latest shorewall module does `shorewall check` (executed
by `Exec[shorewall_check]`) so every related resource change
must notify this Exec instead of `Service[shorewall]` as before.







migrate from obsolete SSLCertificateChainFile apache option (#8055)
2016-05-03T19:02:18+00:00

kwadronaut
kwadronaut@leap.se

2016-05-03T19:02:18+00:00

8b5541290fc985acd7364d48aaf357457c7622f7












[bug] refactor build-essential package installation
2016-01-22T16:08:32+00:00

varac
varacanero@zeromail.org

2016-01-22T16:05:26+00:00

69d2549a8b3b670b10d0efe079bcbc4ba066907d

In certain node setups, the webapp gems cannot get built
because `build-essential` and dependent packages were not
present.
I refactored the `site_config::packages::build_essential` class,
which now inherits `site_config::packages`. The latter class removes
all unneccessary (development) packages, but when the
`site_config::packages::build_essential` class is included, some
dev packages are overridden to be installed.

- Tested: [local]
- Resolves: #7834





In certain node setups, the webapp gems cannot get built
because `build-essential` and dependent packages were not
present.
I refactored the `site_config::packages::build_essential` class,
which now inherits `site_config::packages`. The latter class removes
all unneccessary (development) packages, but when the
`site_config::packages::build_essential` class is included, some
dev packages are overridden to be installed.

- Tested: [local]
- Resolves: #7834







fix nickserver dependency for wheezy
2015-12-02T00:02:55+00:00

varac
varacanero@zeromail.org

2015-12-02T00:02:55+00:00

e2444e41f42cc21796bcc45d0363105893d8a348












[bug] [jessie] register nickserver at systemd
2015-11-28T20:31:18+00:00

varac
varacanero@zeromail.org

2015-11-28T13:06:13+00:00

7db6ced463338796771d05cdac54c24731ae936f

- resolves #7614





- resolves #7614







Implement weakdh recommendations for cipher suites (#7024)
2015-05-27T02:23:22+00:00

Micah Anderson
micah@leap.se

2015-05-27T02:23:22+00:00

b77e3f7e87bc64ffaaa608e5b6a6ef385b8054d3

This is a first step mitigation until we can have a newer apache that
will allow us to specify dh parameters other than the default.

Change-Id: Ibfcee53b331e8919466027dde1a93117b5210d9d





This is a first step mitigation until we can have a newer apache that
will allow us to specify dh parameters other than the default.

Change-Id: Ibfcee53b331e8919466027dde1a93117b5210d9d