Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-04-27 | Fix shorewall not starting with systemd (#8044) | Micah | |
Shorewall in jessie doesn't come with a proper unit file, and as a result, it doesn't properly start with systemd. To solve this, we provide the systemd unit file that comes with stretch, add a systemd submodule that provides the exec resources needed for when systemd units or configuration files are changed Change-Id: I861fa951835928b4741abfbf969adcee4b8f147b | |||
2016-04-25 | [tests] better error message when identity test cannot contact api. closes #8046 | elijah | |
2016-04-25 | Merge branch 'linting' into develop | varac | |
2016-04-25 | [style] lint further more | varac | |
- ignore puppet lint error about inheriting from different namespace | |||
2016-04-18 | Fix clamd start configuration (#8048) | Micah | |
If clamd is not running, the helpful cronjob tries to start it again, but the way it is being started can only be run as root, and the cronjob is run as the clamav user, so you get an error on each cron run. This fixes that problem Change-Id: I4cdb29dc651bee8a2eef1655ad4748d885afae0f | |||
2016-04-18 | [style] more manual linting for custom manifests | varac | |
2016-04-18 | [style] lint some custom manifests | varac | |
I used `puppet-lint -f FILE` to fix most issues, while finishing with manual intervention. | |||
2016-04-18 | Only lint custom modules, not submodules | varac | |
2016-04-18 | initial Rakefile and Gemfile for tests | varac | |
2016-04-13 | test: ensure that checkmk always gets the same list of tests | elijah | |
2016-04-12 | fix incorrect template name | Micah | |
Change-Id: I23d7fcea3755e9ecab561ecf69d8a6ecb8bdeca4 | |||
2016-04-12 | Put openvpn logs into leap directory (#8021) | Micah | |
Have openvpn logs go to /var/log/leap/openvpn_$protocol, instead of to /var/log/daemon.log. Change-Id: I1fc33de660648ab0dba1ce98de2864649c104719 | |||
2016-04-12 | Log stunnel server logs same as client (#8021) | Micah | |
stunnel server logs were not going to /var/log/stunnel4/*, but to /var/log/syslog instead. This was different from stunnel client logging, now its the same. Change-Id: I2dc2024b77dbb65554fc7865b0e46aedf930c6d8 | |||
2016-04-12 | Remove duplicate mail logging (#8021) | Micah | |
Add a site_rsyslog config that removes duplicate mail logging. Previously mail logs would be copied to /var/log/syslog, mail.log, mail.err, mail.info, maillog and to the console. This removes those and only puts them in /var/log/mail.log. It also removes other superfluous configurations, either because they are commented out already, or because they are uucp or nntp. Change-Id: Ib05036787d2c818bf8802c22a4b8050f945a6e6d | |||
2016-04-12 | Fix postfix connection to opendkim milter (#8020) | Micah | |
In order for postfix to access the opendkim milter socket, we need to remove the chroot option for the cleanup service. See e97a9d3800b173375a630e18e4b1aa0894eb96e1 for opendkim implementation. Change-Id: I2742650965e61273fb804ebe9ce3f9bd38796582 | |||
2016-04-12 | leap_cli: rename 'debug' command to 'info' command, since --debug is already ↵ | elijah | |
a thing. | |||
2016-04-12 | fix node seeding (closes #8026) | elijah | |
2016-04-10 | pin nickserver source to origin/version/0.8 | elijah | |
2016-04-08 | tests: include _api_tester partial for couchdb nodes. | elijah | |
2016-04-08 | partials - add support for leap_cli's inheritable service partials (requires ↵ | elijah | |
latest develop branch leap_cli) | |||
2016-04-08 | minor: remove _api_tester.json from soledad test. | elijah | |
2016-04-08 | Merge branch 'feature/mxtest' into develop | elijah | |
2016-04-06 | leap compile zone: added zone serial number. | elijah | |
2016-04-05 | testing: adds mx delivery tests | elijah | |
2016-04-03 | check_mk: monitor webapp log for response code 500 | Azul | |
2016-03-31 | [bug] Fix couch_stats script | varac | |
It failed to calculate the sessions and tokens db names. - Resolves: #7658 | |||
2016-03-31 | [feat] Dont install recommended packages | varac | |
By default, Puppet installs recommended packages. We turn this off for all apt Package resources. | |||
2016-03-22 | ensure that compile is run first when generating zone, firewall, or hosts ↵ | elijah | |
output. | |||
2016-03-21 | update submodule nagios | varac | |
2016-03-18 | tests: fix mx test, ensure password is redacted. | elijah | |
2016-03-18 | update submodule nagios | varac | |
2016-03-17 | mx test: query identities table for a random record. closes #6406 | elijah | |
2016-03-17 | allow 'node rm' on disabled nodes | elijah | |
2016-03-17 | add whitebox test for opendkim (#7649) | Micah | |
Change-Id: I8c8ec225d703e3caf6c77fc72305da847cea9560 | |||
2016-03-17 | [bug] Fix query for clamav signature files | varac | |
2016-03-17 | [bug] Clamav test depends on multiple files | varac | |
The systemd clamav service depends on these files, see the `/lib/systemd/system/clamav-daemon.service` unit file: ConditionPathExistsGlob=/var/lib/clamav/main.{c[vl]d,inc} ConditionPathExistsGlob=/var/lib/clamav/daily.{c[vl]d,inc} Also, leap test should always check for the freshclam daemon. - Resolves: #7683 | |||
2016-03-17 | update nagios submodule | varac | |
2016-03-15 | Revert "[feat] Use systemd as service provider" | varac | |
This reverts commit 0aebb4c41f96f6ad7a7e8a3b07eaffa1f9075f51. We enabled systemd as puppet service default provider, but this results in these services falsely detected as not running, and restarted on every deploy. We need to indivually configure systemd as service provider only for those services that ship a systed unit file. see #7966 for details | |||
2016-03-15 | tabs are evil. please don't use them. | elijah | |
2016-03-14 | Merge branch '7716_remove_obsolete_backports_pinning' into develop | varac | |
2016-03-13 | static site: don't call site_static::location unless locations are actually ↵ | elijah | |
defined. | |||
2016-03-11 | update tor module to fix deprecated variable references (see ↵ | Micah | |
https://gitlab.com/shared-puppet-modules-group/tor/merge_requests/3) Change-Id: I7905bedc0256bc1c7b9d7316584c9622b92b7670 | |||
2016-03-11 | update backupninja to latest shared version | Micah | |
Change-Id: I886b104b1caf561477361e382dae54d718ea88c2 | |||
2016-03-11 | fix tor-related jessie deprecation problems (#7962) | Micah | |
Change-Id: If493b8a1f06a786df36a28aa1fc592e270eba639 | |||
2016-03-11 | update tor submodule to latest, to adapt to new jessie puppet requirements | Micah | |
Change-Id: I0ed4827bc53da280d9ed62ea71382ca302ce6924 | |||
2016-03-11 | Set MUA required ciphers, tighten up the mandatory protocols (#4232) | Micah | |
Change-Id: I328aa37b393817e1764ea7e635fcefc801adbbf4 | |||
2016-03-10 | [feat] add /etc/nagios3/conf.d/local as confdir | varac | |
- Related: #2327 | |||
2016-03-10 | [jessie] Remove obsolete backports pinning | varac | |
2016-03-10 | [bug] Remove stunnel leftovers from bigcouch | varac | |
- Resolves: #7785 | |||
2016-03-10 | Merge branch 'serviceprovider_systemd' into develop | varac | |