Age | Commit message (Collapse) | Author |
|
|
|
|
|
|
|
site_shorewall
|
|
https://leap.se/code/issues/1163
|
|
shorewall is installed first (#1741)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
otherwise the generated files will be owned by root and the bundle will be inside roots /home/max
|
|
|
|
|
|
|
|
|
|
production or local).
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
site_shorewall::defaults can be used on every host, it configures
a basic firewall, which blocks everything from outside except
ping + ssh, and allows outgoing traffic for http, git, dns.
|
|
|
|
|
|
Exec[bundler_update] can take a really long time, increasing
timeout from 300s (default) to 600s
fixes Increase command timeout for Exec[bundler_update] (Feature #1643)
|
|
Because in site.pp it didn't get the tag "leap_base"
and would not be declared with leap cli's default puppet
tags.
Fixes: parent directory /var/lib/puppet/concat
does not exist (Feature#1625)
|
|
|
|
|
|
|
|
enhancement
put the leap-webapp user in the 'ssl-cert' group
pass group => 'leap-webapp' to the leap_client_ca.key so the application can access it
|
|
if the node is a monitor node
|
|
|
|
|
|
|
|
|