leap_platform.git/puppet/modules, branch 0.5.0rc1 [leap_platform] Set mynetworks to include any mx server in the provider to allow them to 2013-12-19T21:03:45+00:00 Micah Anderson micah@leap.se 2013-12-19T21:03:45+00:00 5f7f2cd3a61aafb1afc81b74b3ef03afe3a64221 Helo as the domain (#4495) Change-Id: I6c8ac28faceb8b0c6129a606ede04837efd3d261 
Helo as the domain (#4495)

Change-Id: I6c8ac28faceb8b0c6129a606ede04837efd3d261
Fix the location of the smtp/smtpd_tls_session_cache_database (#4813) 2013-12-19T19:23:27+00:00 Micah Anderson micah@leap.se 2013-12-19T19:22:43+00:00 66ad58f2bc3b285bd17d5e61a21afece11d2c293 Change-Id: I959fa40ff508bbeaf7baa0b6ba90c10c9e6b0ef7 
Change-Id: I959fa40ff508bbeaf7baa0b6ba90c10c9e6b0ef7
Deploy /etc/leap/couchdb_scripts_defaults.conf so we can exclude some DBs, i.e. sessions + tokens (#4794) 2013-12-19T11:50:17+00:00 varac varacanero@zeromail.org 2013-12-19T11:50:17+00:00 e0c07465d14d701da16e47b9c2e3938c80088c4d 






Merge branch 'feature/4506' into develop
2013-12-18T18:10:46+00:00

Micah Anderson
micah@leap.se

2013-12-18T18:10:46+00:00

2308bc185d23638a20422dfd98c670fa143b32ff












Fix for openvpn/unbound not starting at boot (#4506)
2013-12-18T18:10:31+00:00

Micah Anderson
micah@leap.se

2013-12-17T20:43:58+00:00

88af29f3aba662aab4ca5ac3122d43139fb97004

This change sets the sysctl net.ipv4.ip_nonlocal_bind to allow
applications to bind to an address, even when the link is down. This is
necessary because applications like unbound and openvpn fail to start on
boot in some situations because interfaces are not fully up (due to a
combination of non-deterministic booting because of the likely potential
setting of allow-hotplug in the interfaces file and the LSB boot
dependency on $network not being sufficient.

The only down-side to setting this is a daemon could bind to an
incorrect ip and we wouldn't get an error, but this would be a
configuration mistake, rather than a fatal condition.

Change-Id: I5c03083e8c20bb25afad85a1230f4555808d341c





This change sets the sysctl net.ipv4.ip_nonlocal_bind to allow
applications to bind to an address, even when the link is down. This is
necessary because applications like unbound and openvpn fail to start on
boot in some situations because interfaces are not fully up (due to a
combination of non-deterministic booting because of the likely potential
setting of allow-hotplug in the interfaces file and the LSB boot
dependency on $network not being sufficient.

The only down-side to setting this is a daemon could bind to an
incorrect ip and we wouldn't get an error, but this would be a
configuration mistake, rather than a fatal condition.

Change-Id: I5c03083e8c20bb25afad85a1230f4555808d341c







add a smtp_tls class and include that on both mx servers and satellites
2013-12-18T18:08:45+00:00

Micah Anderson
micah@leap.se

2013-12-17T17:58:22+00:00

9531b13447ff204a00a138a137818054603fe1c9

Change-Id: I779ea60e6d726d042203fa0756d73b4af079d728





Change-Id: I779ea60e6d726d042203fa0756d73b4af079d728







rename the tls.pp to be smtpd_tls.pp, this allows us to have a separate
2013-12-18T18:08:45+00:00

Micah Anderson
micah@leap.se

2013-12-17T17:57:20+00:00

411b7ebb8bce00a81002d1abb9f7c488571ddb47

class for smtp vs. smtpd tls configurations

Change-Id: Ic1cc560c76924fcbbc15e245bec7b78ac2de83d3





class for smtp vs. smtpd tls configurations

Change-Id: Ic1cc560c76924fcbbc15e245bec7b78ac2de83d3







add a smtp_tls class and include that on both mx servers and satellites
2013-12-17T18:06:14+00:00

Micah Anderson
micah@leap.se

2013-12-17T17:58:22+00:00

86a2d30985cb118fdb158cc605237ae9445b6123

Change-Id: I779ea60e6d726d042203fa0756d73b4af079d728





Change-Id: I779ea60e6d726d042203fa0756d73b4af079d728







rename the tls.pp to be smtpd_tls.pp, this allows us to have a separate
2013-12-17T17:57:20+00:00

Micah Anderson
micah@leap.se

2013-12-17T17:57:20+00:00

51f17512d031e937ebbb8f6568c7cffc287b65d3

class for smtp vs. smtpd tls configurations

Change-Id: Ic1cc560c76924fcbbc15e245bec7b78ac2de83d3





class for smtp vs. smtpd tls configurations

Change-Id: Ic1cc560c76924fcbbc15e245bec7b78ac2de83d3







Merge branch 'develop' of ssh://code.leap.se/leap_platform into develop
2013-12-17T17:05:19+00:00

varac
varacanero@zeromail.org

2013-12-17T17:05:19+00:00

2a699bca00d978f103cd60df842f5cbe4d37d7d2