summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2015-06-17Merge pull request #72 from cschmittiey/patch-1micah
add tags:production to single node email tutorial
2015-06-17added support for `leap compile provider.json` (platform version now 0.7.1)elijah
2015-06-17bugfix: site_static module was not including ssl_common.incelijah
2015-06-16add tags:production to single node email tutorialCaleb Smith
2015-06-11use couch.pwhash_alg hiera variable for hashing couchdb admin pwvarac
use this to run a single, plain couchdb node, using couchdb 1.6 from the leap repo: "couch": { "master": true, "pwhash_alg": "pbkdf2" } Change-Id: Ie4f34c2c5cb9feca7a10450bcf0bc260c8aa9d33
2015-06-11updated submodule couchdbvarac
Change-Id: Id5bc16d8466c3407e9f7c4015c1e3a96129daf0a
2015-06-11updated submodule couchdb (Couchdb >=1.3 uses pbkdf2 as pw hashing ↵varac
algorhythm, #7120) Change-Id: I97560f4134a700579d1523ddd8ba173bfb1f0659
2015-06-11Merge tag '0.7.0' into developMicah Anderson
Releasing 0.7.0
2015-06-11update CHANGES.md for the latest set of information0.7.0Micah Anderson
Change-Id: I8485fbe83ecada7300f22748a3ee479eef17097f
2015-06-11update /doc dir with latest from leap docs/platformMicah Anderson
Change-Id: If4bcf7e2139b672c3e38f55e54d1f121a5601860
2015-06-09Merge branch '0.7.0' into developvarac
2015-06-07deploy check_openvpn_server.pl after nagios-plugins-standard package is ↵0.7.0rc2varac
installed Change-Id: I272b30fd79e89ddf968c0a6e453d53a1f0540397
2015-06-06Configure apt preferences before installing any packagesvarac
Change-Id: Iac4dc8428ff5e663870ed4dd6a2b840e0904e5be
2015-06-05Merge branch '0.7.0' into '0.7.0'varac
0.7.0 See merge request !50
2015-06-04add preferences snippet for leap repository (#7090)Micah Anderson
Change-Id: Ia7a35c8613350ad75ff1ebbdda0a09efa0960ba6
2015-06-02Merge pull request #71 from cz8s/ensure_dhcp_enterhook_presentvarac
ensure the enterhooks directory is present
2015-06-02ensure the enterhooks directory is presentChristoph Kluenter
2015-05-28Merge remote-tracking branch 'gitlab/0.7.0' into 0.7.0Micah Anderson
Change-Id: I2556ae99d01cbc53cd25d190d796067ce1a69175
2015-05-28Merge branch '0.7.0' into '0.7.0'Micah
Implement weakdh recommendations for cipher suites (#7024) This is a first step mitigation until we can have a newer apache that will allow us to specify dh parameters other than the default. Change-Id: Ibfcee53b331e8919466027dde1a93117b5210d9d See merge request !48
2015-05-28Merge branch '0.7.0' into developvarac
2015-05-27Merge remote-tracking branch 'gitlab/0.7.0' into 0.7.0Micah Anderson
2015-05-27Merge branch '6987_leap_couch_stats_handle_rotated_dbs' into '0.7.0'Micah
leap_couch_stats.sh handles rotated dbs (#6987) Change-Id: I115ebdefd7365bf15a30c4a3ce7a4543ad757cec See merge request !49
2015-05-27leap_couch_stats.sh handles rotated dbs (#6987)varac
Change-Id: I115ebdefd7365bf15a30c4a3ce7a4543ad757cec
2015-05-26Implement weakdh recommendations for cipher suites (#7024)Micah Anderson
This is a first step mitigation until we can have a newer apache that will allow us to specify dh parameters other than the default. Change-Id: Ibfcee53b331e8919466027dde1a93117b5210d9d
2015-05-26Merge branch '6964_use_exec_to_remove_matching_fileline' into 0.7.0varac
2015-05-26updated couchdb submodule fix random couch_doc_update errors (#6850)varac
Change-Id: I0d824e3f65ecfc9b6442b39003dacc35009fe10d
2015-05-26check_mk complains about non-existing logfile (#6964)varac
Change-Id: Ic58f9516854f812d46aa3a574628318951f99a95
2015-05-26Revert "remove old leap_mx logfile location from check_mk logwatch state ↵varac
file #6964" This reverts commit 984684f56f15d9d89ea78ffe6ed67dabf3d63208. Needed because: Augeas fails after upgrading augeas packages during same puppetrun, but only on first deploy - https://leap.se/code/issues/6997
2015-05-14use latest puppet_couchdbelijah
2015-05-14Merge branch '6964_remove_old_leap_mx_logfile_from_check_mk_logwatch' into ↵Micah
'0.7.0' remove old leap_mx logfile location from check_mk logwatch state file #6964 Change-Id: I385c639e5c096deef4f81691a85c1b83cbab9421 See merge request !46
2015-05-14remove old leap_mx logfile location from check_mk logwatch state file #6964varac
Change-Id: I385c639e5c096deef4f81691a85c1b83cbab9421
2015-05-07better user db test.elijah
2015-05-06Merge branch '0.7.0' into developvarac
2015-05-06update postfix submodule to contain fix for non-existing fact ↵varac
operatingsystemmajrelease Change-Id: If29f562cb91354151147092b7ea7acc558f504cb
2015-05-06Merge branch '0.7.0' into developvarac
2015-05-06update postfix submodule to latest shared, necessary to fix module_dir problemMicah Anderson
Change-Id: I95e8eb0f4b2299aca0b70806d7aeac0e8714ab19
2015-05-06update common module to the latestMicah Anderson
Change-Id: I0a52033bfafdb5f492fe21b0b33fe790a94212d5
2015-05-06fix unattended-upgrades now that jessie has been releasedMicah Anderson
Change-Id: I69e6a0f8e676be72bce492af32fef76c9167f5ee
2015-05-06Change http.debian.net to now official name: httpredir.debian.org (#6932)Micah Anderson
Change-Id: I1e411ef3ffa2ef7fdcae90081f530f44023a96b6
2015-05-06pin compatible cli to 1.7.xelijah
2015-05-06Merge branch '0.7.0' into developMicah Anderson
2015-05-06update apt submodule to fix unattended-upgrades and account for jessie releaseMicah Anderson
Change-Id: I69e6a0f8e676be72bce492af32fef76c9167f5ee
2015-05-06Change http.debian.net to now official name: httpredir.debian.org (#6932)Micah Anderson
Change-Id: I1e411ef3ffa2ef7fdcae90081f530f44023a96b6
2015-05-05improved `leap cert csr` error messageelijah
2015-05-05take advantage of improved environment binding in leap_cli (requires v 1.7.1)elijah
2015-05-05much faster secret generation (now they only get generated when needed)elijah
2015-05-05pin compatible cli to 1.7.xelijah
2015-04-30added a bunch more forbidden usernames0.7.0rc1elijah
2015-04-28Merge branch '6829_reject_inbound_mail_to_system_users' into developvarac
2015-04-28Reject inbound mail to local system users that don't appear invarac
/ect/aliases #6829 We began to recieve spam for vmail@DOMAIN. So we want to block inbound mail to local system users. However, users in the /etc/aliases file are still accepted on inbound mail - see https://leap.se/code/issues/6909 for a follow up. Change-Id: I03d3014984c4bd27f90147125fb037b68716624d