Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-10-31 | add support for property tor.key | elijah | |
2014-10-29 | added webapp.forbidden_usernames property to allow configuration of ↵ | elijah | |
usernames to block. | |||
2014-10-29 | Merge "upgrade unattended-upgrades on deploy (#6245)" into develop | micah anderson | |
2014-10-28 | upgrade unattended-upgrades on deploy (#6245) | Micah Anderson | |
unattended-upgrades is not able to upgrade itself in certain situations, such as when the conffile prompt is generated due to the config being changed. We want to set this package as latest in the platform so that it is upgraded on every deploy (we deploy the config anyway). Change-Id: I8c99bfb1b001079f0e1a4ffbf048e0e867633335 | |||
2014-10-27 | Change stunnel default sslversion to be TLSv1, instead of the default | Micah Anderson | |
SSLv3 (#6261) Change-Id: I7ab5a6455e434f8359169d31febed8b92f84bbcc | |||
2014-10-22 | Merge "modify the leap repository contents so they pick the correct ↵ | Varac | |
repository, based on the hiera value 'major_version' (#6251)" into develop | |||
2014-10-22 | Merge "implement custom puppet support (#6201, #6226)" into develop | Varac | |
2014-10-21 | modify the leap repository contents so they pick the correct repository, | Micah Anderson | |
based on the hiera value 'major_version' (#6251) Change-Id: I10532ef83e3aa2d35d9c0be241952a35e366bba4 | |||
2014-10-21 | update platform to take advantage of new platform.rb. requires leap_cli 1.6 | elijah | |
2014-10-21 | implement custom puppet support (#6201, #6226) | Micah Anderson | |
change puppet command to include in the --modulepath /srv/leap/files/puppet/modules If a provider places puppet code under files/puppet it will be sync'd over to all the nodes, once leap cli #6225 is merged. The custom puppet entry point is in class 'custom' which can be put into files/puppet/modules/custom/manifests/init.pp Change-Id: I74879c6ee056b03cd4691aa81a7668b60383bdad | |||
2014-10-20 | bumped default server certificate bit size to 4096 | elijah | |
2014-10-15 | Disable SSLv3, and RC4 ciphers | Micah Anderson | |
Change-Id: I7214aa4334e3d817dd1b6d8dce43523e3d955b5d | |||
2014-10-08 | Merge branch '5216_nagios_hostgroups' into develop | varac | |
2014-10-08 | include different nagios::defaults classes manually (#5216) | varac | |
nagios::defaults will include nagios::defaults::hostgroups which add "all" and "centos_servers" hostgroups which we don't want. Change-Id: If42faa11c167fb7305ebbb21dc358a8813afaa25 | |||
2014-10-08 | every environment is defined as nagios hostsgroup (#5216) | varac | |
Change-Id: I6508ce0d06b37a1c5601a0e981a59f7fda47f76a | |||
2014-10-05 | Merge remote-tracking branch 'cz8s/fix_iptables_proxy_forbidden' into develop | Micah Anderson | |
2014-09-25 | Merge branch 'develop' of ssh://review.leap.se:29418/Platform into develop | varac | |
2014-09-25 | Merge branch 'irregulator/develop' into develop | varac | |
2014-09-25 | allow all outgoing traffic | Christoph Kluenter | |
as discussed on #leap | |||
2014-09-25 | Use member function instead of regexp to check services array | irregulator | |
2014-09-25 | Merge branch '6138_fix_rsyslog-gnutls_install' into develop | varac | |
2014-09-25 | remove /etc/apt/preferences.d/fixed_rsyslog_anon_package (#6138) | varac | |
This was a leftover from earlier versions, where we installed rsyslog from the leap debian package repo. Change-Id: I88a852f08b5aff3bd7b591b6220ac354463a9786 | |||
2014-09-25 | stop logging user-agent in apache, fixes #6129 | Micah Anderson | |
Change-Id: I66384ae4a723be063790362f70e57228a0f1539b | |||
2014-09-23 | couch: for neighbors, use 'couch.mode' instead of 'couch.master' (which ↵ | elijah | |
might be false even for multimaster). closes #6064 | |||
2014-09-22 | stop logging user-agent in apache, fixes #6129 | Micah Anderson | |
Change-Id: I66384ae4a723be063790362f70e57228a0f1539b | |||
2014-09-18 | Merge branch 'bugfix/fqdn' into develop | varac | |
added fact override for domain too | |||
2014-09-17 | override facter fact for fqdn | elijah | |
2014-09-17 | allow outgoing port 3142 for apt-cacher proxy | Christoph | |
2014-09-17 | update rsyslog module to fix #6019 | Micah Anderson | |
Change-Id: I8c64a0c530d44e55963060d52d31a0da1a88615c | |||
2014-09-17 | Increase wait-for-couch timeout (Bug #3735) | varac | |
Site_couchdb::Bigcouch::Settle_cluster/Exec[wait_for_couch_nodes] waits 60s for all nodes to be member of the cluster. Because we deploy to multiple nodes in parallel, not all nodes are ready at the same time, so we increased the timeout from 60s to 120s. | |||
2014-09-17 | disable ACL enforcement, because it's a known issue with bigcouch | varac | |
otherwise it will only confuse the user see https://leap.se/code/issues/6030 for more details | |||
2014-09-15 | Merge branch 'make_shorewall_optional' into develop | Micah Anderson | |
2014-09-15 | Merge branch 'add_ignore' into develop | Micah Anderson | |
2014-09-15 | tests: make shorewall optional | Micah Anderson | |
Change-Id: I1703ff7b3dafe5d0562a7c34c1851ebfedc569a8 | |||
2014-09-15 | tests: add 'ignore' command to tests | Micah Anderson | |
Change-Id: I8ac3b6edd6a0cf7eae5486d61d1680765a8fad13 | |||
2014-09-15 | tests: make warnings not produce a non-zero exit code | Micah Anderson | |
Change-Id: I60d51728128b95c77d52ab4e8c61966cfa59ff2f | |||
2014-09-03 | Merge branch 'master' into develop | varac | |
Conflicts: platform.rb puppet/modules/site_config/manifests/hosts.pp | |||
2014-09-02 | tests: make warnings not produce a non-zero exit code, add 'ignore' command ↵ | elijah | |
to tests, make shorewall optional. | |||
2014-08-28 | Merge tag '0.5.4.1' | Micah Anderson | |
Tag 0.5.4.1 hotfix release | |||
2014-08-28 | update version number for 0.5.4.1 hotfix release0.5.4.1 | Micah Anderson | |
Change-Id: I0d629c56b86cd4de5a6560d58715de7ec93dd4e3 | |||
2014-08-28 | syslog logs everything but webapp FIX #6020 | guido | |
2014-08-26 | default to multimaster if no nodes are defined as master | elijah | |
2014-08-26 | update version number for 0.5.4 hotfix release0.5.4 | Micah Anderson | |
Change-Id: Ia34388c5095301d3a72070737fdb9df758610581 | |||
2014-08-26 | Fix Tapicero not starting after first deploy (#6004) | varac | |
Added a dependency on the couchdb "tapicero" user to get created before starting the tapicero daemon. | |||
2014-08-22 | FQDN should come first in /etc/hosts | varac | |
fixes /etc/hosts: wrong order (Bug #5835) (now for real) before, /etc/hosts contained i.e. 127.0.1.1 plain1 plain1.bitmask.net plain1.bitmask.i which resulted in no fqdn reported both by "hostname -f" and "facter fqdn" this fix produces this order which is needed to report a fqdn: 127.0.1.1 plain1.bitmask.net plain1 plain1.bitmask.i | |||
2014-08-21 | Merge tag '0.5.3' | Micah Anderson | |
Tagging 0.5.3 release | |||
2014-08-21 | Fix starting tapicero when it is not running (#6004)0.5.3 | Micah Anderson | |
Due to how tapicero's initscript is made, it is not possible to check for a valid exit code for the status (it returns a zero when it is not running). So we disable the puppet 'hasstatus' parameter and instead puppet will look in the process table for 'tapicero' Change-Id: I9b017ea8055c0207e43876dd4e3bbc2619c0fd35 | |||
2014-08-21 | Merge remote-tracking branch 'varac/5998_fix_nagios_nodename' into 0.5.3 | Micah Anderson | |
2014-08-21 | Fix "Nagios ssh check is automatically added by the ssh module and cantains ↵ | varac | |
a wrong hostname on single node setup (Bug #5998)" before, the ssh module added this check, resulting in a wrong hostname and the port was always '22'. manage_nagios parameter is boolean, so we use false instead of 'no' manually add check_ssh to nagios (#5998) | |||
2014-08-20 | set the maximum leap cli version for this version of the platform | Micah Anderson | |
Change-Id: I6be37c3c65c47e650c0e67bd43df8e2b1ac40dd6 |