summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2014-11-20Make sure openvpn is restarted when cert/key change (#6405)Micah Anderson
2014-11-20Make sure that stunnel restarts when cert/key change (#6181)Micah Anderson
2014-11-20specify the destination IP for DNAT rules for gateway addresses on port 443 (...Micah Anderson
2014-11-20minor lintingMicah Anderson
2014-11-19test if soledad daemon is runningelijah
2014-11-15don't enable Tor DirPort if openvpn is running on port 80 (Bug #6377)Micah Anderson
2014-11-15Merge remote-tracking branch 'gerrit/develop' into developMicah Anderson
2014-11-16Merge "add local 50unattended-upgrades to fix unattended-upgrades not upgradi...micah anderson
2014-11-15Merge branch 'feature/4425' into developMicah Anderson
2014-11-13Merge remote-tracking branch 'elijah/bugfix/mtu' into developMicah Anderson
2014-11-11Merge remote-tracking branch 'elijah/newtests' into developMicah Anderson
2014-11-10change default openvpn fragment size back to 1500 so we don't break backward ...elijah
2014-11-10openvpn - support customizing --fragment, and set default to 1400elijah
2014-11-10tests - added test that creates user, authenticates, deletes userelijah
2014-11-08minor linting, arrow lining upMicah Anderson
2014-11-08Only enable the tor DirPort options on an exit if the node isn't also aMicah Anderson
2014-11-08Don't configure the tor DirPort options if the node is not an exit (#6335)Micah Anderson
2014-11-07Merge remote-tracking branch 'gerrit/develop' into developMicah Anderson
2014-11-07Better check for tor hidden service on a webapp node.guido
2014-11-04revert 5787c97b6f73dacae7f01adeff203287007c381d:Micah Anderson
2014-11-04Merge remote-tracking branch 'gerrit/develop' into developMicah Anderson
2014-11-04Adds support for Tor hidden service on webapp (Feature #6273)guido
2014-11-04tor - to activate hidden service, now set tor.hidden_service.active = trueelijah
2014-11-04tor - to activate hidden service, now set tor.hidden_service.active = trueelijah
2014-11-04add local 50unattended-upgrades to fix unattended-upgrades not upgradingMicah Anderson
2014-11-04change ordering hints to use refresh_stunnel exec instead of service (#6287)Micah Anderson
2014-11-02add missing TLSv1 sslversion parameter to site_stunnel::serviersMicah Anderson
2014-11-01stop using bad nist curve for ssh host key (#6294)Micah Anderson
2014-10-31Merge branch 'develop' of ssh://review.leap.se:29418/Platform into developvarac
2014-10-31Fix deprecated dynamic lookups of variables in site_couchdb (#6286)Micah Anderson
2014-10-31add support for property tor.keyelijah
2014-10-29added webapp.forbidden_usernames property to allow configuration of usernames...elijah
2014-10-29Merge "upgrade unattended-upgrades on deploy (#6245)" into developmicah anderson
2014-10-28upgrade unattended-upgrades on deploy (#6245)Micah Anderson
2014-10-27Change stunnel default sslversion to be TLSv1, instead of the defaultMicah Anderson
2014-10-22Merge "modify the leap repository contents so they pick the correct repositor...Varac
2014-10-22Merge "implement custom puppet support (#6201, #6226)" into developVarac
2014-10-21modify the leap repository contents so they pick the correct repository,Micah Anderson
2014-10-21update platform to take advantage of new platform.rb. requires leap_cli 1.6elijah
2014-10-21implement custom puppet support (#6201, #6226)Micah Anderson
2014-10-20bumped default server certificate bit size to 4096elijah
2014-10-15Disable SSLv3, and RC4 ciphersMicah Anderson
2014-10-08Merge branch '5216_nagios_hostgroups' into developvarac
2014-10-08include different nagios::defaults classes manually (#5216)varac
2014-10-08every environment is defined as nagios hostsgroup (#5216)varac
2014-10-05Merge remote-tracking branch 'cz8s/fix_iptables_proxy_forbidden' into developMicah Anderson
2014-09-25Merge branch 'develop' of ssh://review.leap.se:29418/Platform into developvarac
2014-09-25Merge branch 'irregulator/develop' into developvarac
2014-09-25allow all outgoing trafficChristoph Kluenter
2014-09-25Use member function instead of regexp to check services arrayirregulator