summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2014-05-13Revert "update cipher configuration for openvpn to use the IANA name"Micah Anderson
2014-05-13openvpn server config: script-security should be "1", since we don't need "2"...elijah
2014-05-13added simple shorewall whitebox test (close #5649)elijah
2014-05-08add known issues, making this the canonical place, which we will bringMicah Anderson
2014-05-07openvpn package resource needs to be ensure => latest to accommodate upgradesMicah Anderson
2014-05-06update cipher configuration for openvpn to use the IANA name, due toMicah Anderson
2014-05-06add the tun-ipv6 configuration to the eip-service (#4163)Micah Anderson
2014-05-06Change the initial firewall to subscribe to the rule file to be able toMicah Anderson
2014-05-06set the ipv6 configuration options on the serverMicah Anderson
2014-05-06install openvpn from wheezy-backports, this will bring in openvpn 2.3,Micah Anderson
2014-05-02fix incorrect shorewall parameter name 'protocol', should be 'proto'Micah Anderson
2014-04-29fix missing semicolon, causing syntax errorMicah Anderson
2014-04-29block DNS traffic at the OpenVPN gateway (#4164)Micah Anderson
2014-04-29nagios: make the check_procs tests for leap_mx and soledad be much moreMicah Anderson
2014-04-29require json so we can use it to dumpt the service levelsAzul
2014-04-24bring service_levels into webapp config - #5527Azul
2014-04-24initial firewall: allow port 22 by default. This is the most common portMicah Anderson
2014-04-24create a /var/run/tapicero directory, owned by tapicero:tacpiero to holdMicah Anderson
2014-04-24tor: provide a default 'nickname' (something likeMicah Anderson
2014-04-24change stunnel::service to 'subscribe' instead of 'require' the X509Micah Anderson
2014-04-24make sure concat fragments are put together before the openvpn serviceMicah Anderson
2014-04-24update indentation to be standardMicah Anderson
2014-04-23update platform version number for 0.5.1Micah Anderson
2014-04-22Merge branch 'develop' (0.5.0)Micah Anderson
2014-04-17update couchdb submodule to get fix for timing issue that caused 409 Conflict...0.5.0Micah Anderson
2014-04-17change class instantiating to be includes and organizing things in theMicah Anderson
2014-04-17Change couchdb ordering hints (#5269, #4590, #3712):Micah Anderson
2014-04-17add exec resources to run the couchdb tests to wait for nodes andMicah Anderson
2014-04-17fix --retry argument, the help listed it correctly, but the code was using --...Micah Anderson
2014-04-16run_tests: added options --retry and --wait (to keep retrying tests if there ...elijah
2014-04-16exit codes for run_tests: 0 = success, 1 = warning, 2 = failure, 3 = error.elijah
2014-04-15Merge branch '5269_deploy_couch_docs_on_first_deploy' into developvarac
2014-04-15configure couchdb after starting shorewall (#53)varac
2014-04-15Merge branch 'develop' of ssh://code.leap.se/leap_platform into developvarac
2014-04-15fix concat::setup (#5503)varac
2014-04-12make the soledad service subscribe to package changes, cert and key changes (...Micah Anderson
2014-04-10#5315 update soledad design docsAzul
2014-04-10Merge branch '0.6' into developvarac
2014-04-10Merge branch '5272_check_mk_resource_ordering' into developvarac
2014-04-10fix check_mk resource dependency deploy errors (Bug #5272)varac
2014-04-08minor: allow manual override of 'services' in provider.jsonelijah
2014-04-06better system for optionally uninstalling build-essential package closes http...kwadronaut
2014-04-05revert openvpn tls-cipher: closes https://leap.se/code/issues/5429elijah
2014-04-05openvpn: allow for configurable keepalive (aka ping & ping-restart) closes ht...elijah
2014-04-05better system for optionally uninstalling build-essential package. closes htt...elijah
2014-04-05update site_static to work with new amber and have better tls cipherselijah
2014-04-04Merge branch '0.5' into developMicah Anderson
2014-04-04Merge branch '2993_setup_subclass' into 0.6varac
2014-04-02revert openvpn tls-cipher: closes https://leap.se/code/issues/5429elijah
2014-04-02Force satellite hosts that only speak to relayhost to have aMicah Anderson