summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2015-07-07Ignore openvpn logwatch warnings (#6867)varac
These are warnings that might have different origins, each of them we don't want to alarm the admin: - A bitmask client bug (user will poke the client devs if things break, and they will go after it) - A simple network failure, packets might get cut of - Malicious user tries to temper with TLS handshakes - this gets more interesting, but still (like ssh bruteforce attacs) an admin would not want to get annoyed by this by default, but they still have the option to use log analysers of their choice if they want to investigate this. Change-Id: I23ca3b700e41f22f34ad3346ed4e647b86000bb2
2015-07-07moved removal of leap_couch_stats.sh TMPFILE to end of script (#7217)varac
Change-Id: If844b95c44e697f480df8ee2ae6607709b9942f7
2015-07-07remove leap_couch_stats.sh TMPFILE so /tmp/ won't fill with tmp files (#7217)varac
Change-Id: I7b778e1e1af2784bd79840f20453ca8718927e25
2015-07-06Don't monitor disabled nodes (#7235)varac
Change-Id: I51ce8a9e8773d267c270a1725a497f9a43f2e9ff Sidenote: $nagios_hosts was never used
2015-07-02use hashicorp atlas for Vagrantbox downloadvarac
Change-Id: Ie7263c9442eb9bf8572d301f88bd38dbcce16846
2015-07-01Don't remove acpid and acpi-support-base packagesvarac
Those packages are needed by libvirt to reboot/shutdown a VM by the virsh command. Change-Id: I3eb7b113d11e3034f41d09d51c203b93275ae3c9
2015-06-30more verbose stunnel test errorselijah
2015-06-30pin leap_web to 0.7.1elijah
2015-06-29added 'root' to the list of platform-reserved usernames.elijah
2015-06-29updated submodule couchdb to remove debugging leftover notice()varac
Change-Id: I9c901a21c2ae3cd0164ca9bd3b4aab63d6a239c7
2015-06-24remove static site circular dependency (closes #7145)elijah
2015-06-23cleanup no longer used unbound conf.d pieces (#7187)Micah Anderson
Change-Id: Ie0b1f22c49462bd5c4ee3290f100e5d3e14ccb03
2015-06-23update unbound module to change hasstatus parameter to true (#6885)Micah Anderson
Change-Id: I532263ffe6679ff6c2249926086098dc8b4877f5
2015-06-23Remove old clean-up, this is no longer necessaryMicah Anderson
Change-Id: I4e8fe3355a2d55193ebf745de1f932a6dcd6121c
2015-06-22Merge branch '6067_plain_couchdb' into developvarac
2015-06-22Merge branch 'use_pbkdf2_for_newer_couchdb_versions' into developvarac
2015-06-21Support plain couchdb (#6067)varac
The bigcouch specific class ordering from site_couchdb::create_dbs needed to move to site_couchdb::bigcouch, otherwise a plain couchdb setup would try to include bigcouch classes and fail. Change-Id: I06742d4a12c5b40c9c9faa90441734e6926d422d
2015-06-21linted create_dbs.ppvarac
Change-Id: I9e46286c402adc06f3f815f8a1eea11fe82c7c39
2015-06-17Merge pull request #72 from cschmittiey/patch-1micah
add tags:production to single node email tutorial
2015-06-17added support for `leap compile provider.json` (platform version now 0.7.1)elijah
2015-06-17bugfix: site_static module was not including ssl_common.incelijah
2015-06-16add tags:production to single node email tutorialCaleb Smith
2015-06-11use couch.pwhash_alg hiera variable for hashing couchdb admin pwvarac
use this to run a single, plain couchdb node, using couchdb 1.6 from the leap repo: "couch": { "master": true, "pwhash_alg": "pbkdf2" } Change-Id: Ie4f34c2c5cb9feca7a10450bcf0bc260c8aa9d33
2015-06-11updated submodule couchdbvarac
Change-Id: Id5bc16d8466c3407e9f7c4015c1e3a96129daf0a
2015-06-11updated submodule couchdb (Couchdb >=1.3 uses pbkdf2 as pw hashing ↵varac
algorhythm, #7120) Change-Id: I97560f4134a700579d1523ddd8ba173bfb1f0659
2015-06-11Merge tag '0.7.0' into developMicah Anderson
Releasing 0.7.0
2015-06-11update CHANGES.md for the latest set of information0.7.0Micah Anderson
Change-Id: I8485fbe83ecada7300f22748a3ee479eef17097f
2015-06-11update /doc dir with latest from leap docs/platformMicah Anderson
Change-Id: If4bcf7e2139b672c3e38f55e54d1f121a5601860
2015-06-09Merge branch '0.7.0' into developvarac
2015-06-07deploy check_openvpn_server.pl after nagios-plugins-standard package is ↵0.7.0rc2varac
installed Change-Id: I272b30fd79e89ddf968c0a6e453d53a1f0540397
2015-06-06Configure apt preferences before installing any packagesvarac
Change-Id: Iac4dc8428ff5e663870ed4dd6a2b840e0904e5be
2015-06-05Merge branch '0.7.0' into '0.7.0'varac
0.7.0 See merge request !50
2015-06-04add preferences snippet for leap repository (#7090)Micah Anderson
Change-Id: Ia7a35c8613350ad75ff1ebbdda0a09efa0960ba6
2015-06-02Merge pull request #71 from cz8s/ensure_dhcp_enterhook_presentvarac
ensure the enterhooks directory is present
2015-06-02ensure the enterhooks directory is presentChristoph Kluenter
2015-05-28Merge remote-tracking branch 'gitlab/0.7.0' into 0.7.0Micah Anderson
Change-Id: I2556ae99d01cbc53cd25d190d796067ce1a69175
2015-05-28Merge branch '0.7.0' into '0.7.0'Micah
Implement weakdh recommendations for cipher suites (#7024) This is a first step mitigation until we can have a newer apache that will allow us to specify dh parameters other than the default. Change-Id: Ibfcee53b331e8919466027dde1a93117b5210d9d See merge request !48
2015-05-28Merge branch '0.7.0' into developvarac
2015-05-27Merge remote-tracking branch 'gitlab/0.7.0' into 0.7.0Micah Anderson
2015-05-27Merge branch '6987_leap_couch_stats_handle_rotated_dbs' into '0.7.0'Micah
leap_couch_stats.sh handles rotated dbs (#6987) Change-Id: I115ebdefd7365bf15a30c4a3ce7a4543ad757cec See merge request !49
2015-05-27leap_couch_stats.sh handles rotated dbs (#6987)varac
Change-Id: I115ebdefd7365bf15a30c4a3ce7a4543ad757cec
2015-05-26Implement weakdh recommendations for cipher suites (#7024)Micah Anderson
This is a first step mitigation until we can have a newer apache that will allow us to specify dh parameters other than the default. Change-Id: Ibfcee53b331e8919466027dde1a93117b5210d9d
2015-05-26Merge branch '6964_use_exec_to_remove_matching_fileline' into 0.7.0varac
2015-05-26updated couchdb submodule fix random couch_doc_update errors (#6850)varac
Change-Id: I0d824e3f65ecfc9b6442b39003dacc35009fe10d
2015-05-26check_mk complains about non-existing logfile (#6964)varac
Change-Id: Ic58f9516854f812d46aa3a574628318951f99a95
2015-05-26Revert "remove old leap_mx logfile location from check_mk logwatch state ↵varac
file #6964" This reverts commit 984684f56f15d9d89ea78ffe6ed67dabf3d63208. Needed because: Augeas fails after upgrading augeas packages during same puppetrun, but only on first deploy - https://leap.se/code/issues/6997
2015-05-14use latest puppet_couchdbelijah
2015-05-14Merge branch '6964_remove_old_leap_mx_logfile_from_check_mk_logwatch' into ↵Micah
'0.7.0' remove old leap_mx logfile location from check_mk logwatch state file #6964 Change-Id: I385c639e5c096deef4f81691a85c1b83cbab9421 See merge request !46
2015-05-14remove old leap_mx logfile location from check_mk logwatch state file #6964varac
Change-Id: I385c639e5c096deef4f81691a85c1b83cbab9421
2015-05-07better user db test.elijah
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-17 22:14:01 +0000