summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2013-10-03It turns out postfix's variable for 1024bit DH parameters can actually take a...Micah Anderson
2013-10-02setup smtpd_tls_eecdh_grade to 'ultra' and configure the smtpd_tls_dh1024_par...Micah Anderson
2013-10-02Merge branch 'bug/3869' into developMicah Anderson
2013-10-02Merge branch 'bug/3959' into developMicah Anderson
2013-10-02Merge branch 'feature/3955' into developMicah Anderson
2013-10-02only add vpn_(un)?limited_udp_resolver and vpn_(un)?limited_tcp_resolver line...Micah Anderson
2013-09-26set myhostname in postfix the internet hostname of this mail system. The defa...Micah Anderson
2013-09-26Merge branch 'bug/3868' into developMicah Anderson
2013-09-26create a site_config::packages directory, move site_config::base_packages to ...Micah Anderson
2013-09-26Add client-side TLS configuration (#3868)Micah Anderson
2013-09-26Merge branch 'bug/3868' into developMicah Anderson
2013-09-26properly set the $smtps_recipient_restrictions variable in master.cf (#3935)Micah Anderson
2013-09-25add smtp_tls_received_header to include information about the protocol and ci...Micah Anderson
2013-09-25openvpn is restarted before package is installed (Bug #3904)varac
2013-09-25recent couchdb puppet - requires git submodule updateAzul
2013-09-24Merge branch 'feature/3917_openvpn_is_failing_to_connect' into developvarac
2013-09-24deploy client_ca on webapp nodevarac
2013-09-24webapp leftover for seperate cert and key deployment (Feature #3918)varac
2013-09-24fix client_ca cert+key for mx service (Feature #3921)varac
2013-09-24added site_config::x509::client_ca::cert and site_config::x509::client_ca::ke...varac
2013-09-24Merge branch 'feature/3916_Webapp_doesn_t_serve_commercial_cert' into developvarac
2013-09-24https://bitmask.net/ca.crt gives 403 Forbidden (Bug #3919)varac
2013-09-24Webapp doesn't serve commercial cert (Bug #3916)varac
2013-09-24move commercial x509 deployment to site_x509 (Feature #3889)varac
2013-09-24seperate cert and key deployment (#3918)varac
2013-09-21ensure that contacts.default is an array, and is required (requires latest le...elijah
2013-09-22Merge branch 'api-crt-3384' into develop fixes #3384kwadronaut
2013-09-22adding fqdn as default servername and moving service.domain to ServerAlias (f...kwadronaut
2013-09-20use newer haproxy_servers macro in order to allow couchdb and webapp to be on...elijah
2013-09-20Merge branch 'feature/3782_Discuss_run_stages_on_deploy' into developvarac
2013-09-20move all resources that are applied on every node into site_config::default (...varac
2013-09-20Merge branch 'feature/3832_Unify_x509_certs__keys_and_ca' into developvarac
2013-09-20fix whitespace issues from https://review.leap.se/r/82varac
2013-09-19fix x509 path in webapp config.yml.erb (#3894)varac
2013-09-19tidy soledad x509 definitions (#3841)varac
2013-09-19tidy webapp api x509 definitions (#3840)varac
2013-09-19tidy nickserver x509 definitions (#3842)varac
2013-09-19webapp: Depend services on deployment of default key, cert and ca (Feature #3...varac
2013-09-19Depend services on deployment of default key, cert and ca (Feature #3838)varac
2013-09-19soledad should use default key, cert and ca (Feature #3841)varac
2013-09-19tidy openvpn x509 definitions (#3831)varac
2013-09-19only deploy x509 stuff for nodes if it existes in hiera (Feature #3875)varac
2013-09-19Merge branch 'develop' of ssh://code.leap.se/leap_platform into developvarac
2013-09-19Merge branch 'feature/3832_Unify_x509_certs,_keys_and_ca' into developvarac
2013-09-18Setup a class dependency for every tag 'leap_service' to make sure that shore...Micah Anderson
2013-09-18use x509 for postfix ca and fix names for cert+key (Feature #3833)varac
2013-09-18deploy client_ca (#3833)varac
2013-09-18Include content of client_ca.crt and client_ca.key in hiera (Feature #3874)varac
2013-09-18openvpn should use /usr/local/share/ca-certificates/leap_ca.crt (Feature #3831)varac
2013-09-18include shorewall::interface{eth0} in setup.pp so packages can be installed d...varac