leap_platform.git - [leap

Age	Commit message (Collapse)	Author
2013-03-09	use site_couchdb::bigcouch	varac

2013-03-07	increase Exec timeout for dist_upgrade	varac

2013-03-07	automatic update of submodule couchdb	varac

2013-03-05	change json comment to '//'	elijah

2013-02-27	openvpn -- added support for optional "free" rate-limited service via ↵	elijah
	special client certificates with the FREE prefix in the common name.
2013-02-27	language in the Readme	kwadronaut

2013-02-26	require that the package unbound be installed before trying to write to its	Micah Anderson
	configuration file, this addresses issue #1853 - [vpn1] err: /Stage[main]/Site_openvpn::Resolver/Line[add_tcp_resolver]/Exec[echo 'server: include: /etc/unbound/conf.d/vpn_tcp_resolver' >> '/etc/unbound/unbound.conf']/returns: change from notrun to 0 failed: echo 'server: include: /etc/unbound/conf.d/vpn_tcp_resolver' >> '/etc/unbound/unbound.conf' returned 2 instead of one of [0] at /srv/leap/puppet/modules/common/manifests/defines/line.pp:45
2013-02-26	missed another require => Package['shorewall'] on the file resources in ↵	Micah Anderson
	site_shorewall
2013-02-23	adding angkat family	kwadronaut

2013-02-21	changed submodule url	Micah Anderson

2013-02-21	linted a bit	varac

2013-02-21	linted	varac

2013-02-21	linted	varac

2013-02-12	make sure that apt-get update is run before any package is installed (#1745)	Micah Anderson

2013-02-12	switch to using stdlib's standard stages	Micah Anderson

2013-02-12	remove the apt-get autoclean from the initial apt-get update, this just ↵	Micah Anderson
	slows things down and I don't see a need for it
2013-02-12	missed one require => Package['shorewall'] on of the file resources in ↵	Micah Anderson
	site_shorewall
2013-02-12	temporarily make the webapp use the admin couchdb user. waiting on ↵	elijah
	https://leap.se/code/issues/1163
2013-02-12	file resources that make changes to shorewall need to make sure that ↵	Micah Anderson
	shorewall is installed first (#1741)
2013-02-12	remove unused commented-out line	Micah Anderson

2013-02-12	update shorewall submodule to get fix for augeas package dependency problem	Micah Anderson

2013-02-12	Merge remote-tracking branch 'origin/develop' into bundle-and-precompile-as-user	Micah Anderson

2013-02-12	fixed shorewall is blocking api port (Bug #1735)	varac

2013-02-11	duplicate shortwall service definitions now inclduded from services/*	varac

2013-02-10	Merge branch 'try' into develop	elijah

2013-02-10	set webapp module to use try::file where appropriate	elijah

2013-02-10	added 'try' module	elijah

2013-02-10	vagrant configuration move to Leapfile	elijah

2013-02-09	run bundler and rake assets:precompile as normal user	Azul
	otherwise the generated files will be owned by root and the bundle will be inside roots /home/max
2013-02-09	site_shorewall::monitor: allow port 80 + 443	varac

2013-02-09	re-enabling futon (see #1121)	varac

2013-02-08	changed contact_email to tor.contacts	elijah

2013-02-08	minor changes to default json: give common a name, add contacts.default	elijah

2013-02-08	make monitor service include the nodes that are of a similar type (e.g. ↵	elijah
	production or local).
2013-02-08	updated README, added LICENSE	varac

2013-02-08	couchdb: disable futon (Feature #1121)	varac

2013-02-07	Merge branch 'feature/tor' into develop	varac

2013-02-07	configure tor relay nickname	varac

2013-02-07	working tor relay	varac

2013-02-07	configure exit policies	varac

2013-02-06	allow outgoing traffic moved to site_shorewall::defaults	varac

2013-02-06	allow port 80 to tor server	varac

2013-02-06	add basic tor service	varac

2013-02-06	tor service defaults	varac

2013-02-06	nagios: don't check openvpn, check cmd doesn't work	varac

2013-02-06	include shorewall config for webapp and couchdb	varac

2013-02-06	site_config::default : include site_shorewall::defaults	varac

2013-02-06	configure shorewall for couchdb, tor, webapp	varac

2013-02-06	allow all outgoing traffic	varac

2013-02-06	Restructuring site_shorewall	varac
	site_shorewall::defaults can be used on every host, it configures a basic firewall, which blocks everything from outside except ping + ssh, and allows outgoing traffic for http, git, dns.