Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-06-23 | create netrc files for all users with new puppet_couchdb | Azul | |
This only works with the latest patch to puppet_couchdb | |||
2014-06-23 | hand replication credentials to tapicero | Azul | |
2014-06-23 | minor: fix typo in replication user roles | Azul | |
2014-06-21 | haproxy: support read only couchdb mirrors | elijah | |
2014-06-21 | fix stunnel entries in mx.json and webapp.json | elijah | |
2014-06-20 | moved json macros to provider_base/lib/macros. requires new unreleased leap_cli | elijah | |
2014-06-20 | stunnel: make site_mx and site_webapp use new site_stunnel | elijah | |
2014-06-20 | Merge pull request #3 from azul/feature/couch | Elijah Sparrow | |
add replication user | |||
2014-06-20 | add replication user | Azul | |
2014-06-20 | site_couchdb: support auto-stunnel setup, split master, bigcouch, and mirror ↵ | elijah | |
out into separate files. | |||
2014-06-20 | tmp comment out error if no master nodes defined | elijah | |
2014-06-20 | new generic system for stunnel: just `include site_stunnel` and stunnel + ↵ | elijah | |
needed shorewall will be automatically set up. requires new leap_cli | |||
2014-06-19 | Merge branch 'feature/couch' of github.com:elijh/leap_platform into ↵ | elijah | |
feature/couch | |||
2014-06-19 | fix typo in _couchdb_multimaster.json | elijah | |
2014-06-19 | Merge pull request #2 from azul/feature/couch | Elijah Sparrow | |
split out bigcouch and only apply if needed, initial code for replication | |||
2014-06-19 | first steps towards mirroring couch | Azul | |
2014-06-19 | set mirror option if we are on a couch mirror | Azul | |
2014-06-19 | separate bigcouch specifics from init.pp | Azul | |
2014-06-19 | split bigcouch stunnel from plain couch stunnel | Azul | |
2014-06-19 | couchdb: generate hiera files suitable for plain couchdb + read-only mirrors | elijah | |
2014-06-04 | clean up how /etc/hosts is generated so it doesn't require custom behavior ↵0.5.2 | elijah | |
depending on the services. | |||
2014-06-04 | bugfix: actually apply modules based on $services | elijah | |
2014-06-03 | move hiera from site.pp to site_config::setup | Christoph | |
the problem was following: if a host has the webapp service, the template for /etc/hosts adds some stuff. But setup.pp did not ask hiera about the services so "/srv/leap/bin/puppet_command set_hostname" always resets the hostname. Since that gets triggered every time you run "leap deploy" the hostname changes, some services restart, then the hostname changes back and the services restart again. The solution is to get the hiera data before every run. | |||
2014-06-02 | static site: gracefully handle static sites that are not configured. | elijah | |
2014-06-02 | static site: better message for wrong location type. | elijah | |
2014-06-02 | remove superfluous RackBaseURI directive | elijah | |
2014-06-02 | work around hiera's inability to escape '%' by using ':percent:' | elijah | |
2014-06-02 | static site: added rack support, added custom apache config | elijah | |
2014-06-02 | added templatewlv function (allows passing local variables to templates) | elijah | |
2014-06-02 | added support for /provider.json served from static site. | elijah | |
2014-06-02 | fix unbound: configs in /etc/unbound/unbound.conf.d contained a syntax error ↵ | elijah | |
and were missing .conf suffix | |||
2014-05-27 | Add missing scope to top-level sshd class, passing necessary parameters | Micah Anderson | |
for configuration (#3108) Change-Id: I4f94a47d47a40bfc6835359e7781707f96e91db0 | |||
2014-05-27 | Update sshd submodule to get necessary fixes to enable us to change sshd port | Micah Anderson | |
Change-Id: I3b6a87c9d6a2c349392e5bc98a68b800645fde92 | |||
2014-05-27 | Switch away from site_config::sshd and instead just include site_sshd | Micah Anderson | |
The existing site_config::sshd had a non-functioning 'include sshd' line in it that was not doing what was expected (this was supposed to include the sshd module, but due to scoping was including itself). It seemed better to eliminate some of the unused pieces and consolidate into one config location. Change-Id: I79dd904e696ca646180a09abbb03b5361dfc8ab9 | |||
2014-05-27 | clarify comments in site_sshd::authorized_keys | Micah Anderson | |
Change-Id: I679dfe8dff90b7c86ab0ffff43e13958f1ec2c99 | |||
2014-05-24 | Merge remote-tracking branch 'cz8s/feature/allow_webapp_and_mx_on_one_host' ↵ | Micah Anderson | |
into develop | |||
2014-05-24 | move haproxy-template to modules/site_haproxy | Christoph | |
2014-05-24 | remove unused variable local_ports | Christoph | |
2014-05-22 | Implement #2328: unbound.conf: content changed on every puppetrun | Micah Anderson | |
This is done by using the include glob capability that is in the wheezy-backports and newer unbound to include the /etc/unbound/unbound.conf.d/* config files. To do this, we need to transition from our /etc/unbound/conf.d directory structure to use the one that the debian package uses. This allows us to clean up the rather ugly way we were configuring the resolver before. Change-Id: I68347922f265bbd0ddf11d59d8574a612a7bd82c | |||
2014-05-22 | lint cleanup of site_config::caching_resolver | Micah Anderson | |
Change-Id: I3f6a4db26e064a520a08822cf23fc3288b31af62 | |||
2014-05-22 | Install wheezy-backports version of unbound, this is necessary to solve #2328 | Micah Anderson | |
Change-Id: Ie28de8d3f7a8c8cf52ce30365379a476d48dc88b | |||
2014-05-22 | Move rsyslog preferences snippet to site_apt::preferences::rsyslog, to | Micah Anderson | |
group it with the other preferences snippets Change-Id: I83928c6b82cd6218a80c95475729cb57f146ff85 | |||
2014-05-22 | remove old classes | Christoph | |
site_mx::haproxy and site_webapp::haproxy only included site_haproxy. They didn't do anything else. So just include site_haproxy in manifests/init.pp and remove the unused classes | |||
2014-05-22 | fix haproxy config if webapp and mx run on the same host | Christoph | |
the problem was, that both site_mx::haproxy and site_webapp::haproxy declared the same resource. I fixed it by moving that resource to site_haproxy. Since that gets included by both classes, everything works like a charm | |||
2014-05-21 | fix resolv.conf on virtualbox | Christoph | |
virtualbox sends the domain with the dhcp-answer. If the wrong domain ends up in /etc/resolv.conf bigcouch fails. | |||
2014-05-20 | added support for environmentally scoped services and tags, when using ↵ | elijah | |
latest leap_cli. | |||
2014-05-20 | add support for webapp on subdomain | elijah | |
2014-05-20 | changed the default service levels to be more minimal, because it is ↵ | elijah | |
currently impossible to entirely overwrite the service.levels hash. | |||
2014-05-17 | fix bug with empty tor families | elijah | |
2014-05-17 | static: pin amber version to 0.3.0 | elijah | |