Age | Commit message (Collapse) | Author | |
---|---|---|---|
2013-07-09 | smtpd_recipient_restrictions: +permit_tls_all_clientcerts | varac | |
2013-07-09 | smtpd_checks: smtpd_delay_reject | varac | |
2013-07-09 | smtpd_checks: smtpd_data_restrictions | varac | |
2013-07-09 | using alias resolver | varac | |
2013-07-09 | fixed provider_base/services/mx.json syntax | varac | |
2013-07-09 | update postfix module to new shared version for parameterized classes, and other | Micah Anderson | |
2.7 updates update site_postfix::mx to use parameterized classes | |||
2013-07-09 | initial mx couchdb stunnel configuration | Micah Anderson | |
2013-07-09 | no need to import common anymore | varac | |
2013-07-09 | Configure Postfix for incoming mails (Feature #2269) | varac | |
2013-07-09 | hiera variable mx.contact -> postfix $root_mail_recipient | varac | |
2013-07-09 | initial mx couchdb stunnel configuration | Micah Anderson | |
2013-07-09 | added provider_base/services/mx.json | varac | |
2013-07-09 | added site_mx::haproxy | varac | |
2013-07-09 | added basic site_postfix::mx config | varac | |
2013-07-09 | include shorewall rules for site_mx | varac | |
2013-07-09 | shorewall rules for site_mx | varac | |
2013-07-09 | added site_mx | varac | |
2013-07-09 | added submodule postfix from git://labs.riseup.net/shared-postfix | varac | |
2013-07-09 | include site_mx | varac | |
2013-07-06 | site_webapp -- make bundler not install test-only or development-only gems. | elijah | |
2013-07-04 | bugfix - properly generate provider.json file. | elijah | |
2013-07-04 | more robust openvpn restarting | Micah Anderson | |
this ensures that an actual restart is run on the service when config files are added or removed, instead of relying on the status parameter of the initscript, which can be confused if config files are removed out from under it Change-Id: I1c69fff26933338b707acf7dc4593547f32f92e3 | |||
2013-07-04 | make sure webapps have the full domain suffix as an alias (fixes problems ↵ | elijah | |
generating zone file). | |||
2013-07-04 | couchdb.json should not set service_type, since internal_service is the default. | elijah | |
2013-07-04 | remove stupid bandwidth limit from default provider.json | elijah | |
2013-07-03 | Merge branch 'feature/documentation_update' into leap | Micah Anderson | |
2013-07-03 | Copy the current state of the platform documentation into the doc directory. | Micah Anderson | |
Originally I thought it would be better to add the leap_doc git repository as a submodule, but I decided against that: . it requires that the user has to start off by initializing submodules, something that the leap_cli does for you . it would result in more up-to-date documentation than was targeted for this release . it would result in an unfortunate directory structure (doc/doc/platform). For these reasons it seemed to me better to put a snapshot of our current platform documentation into the doc directory right before release. This just means a step in our release process of refreshing these docs once we have reviewed them and updated the known-issues for this release. Change-Id: Ib395ea30553772fd195dd50315f026a2576feedd | |||
2013-07-03 | Update README to guide a user through a basic understanding, and where to go ↵ | Micah Anderson | |
next to get started or report problems Change-Id: I254e73db7bdbf181bd993d2e9d73e864a62d1112 | |||
2013-07-03 | Merge branch 'bug/1983' into leap | Micah Anderson | |
2013-07-03 | Merge branch 'bug/1983' of /home/git/repositories/micah/leap_platform into ↵ | micah | |
develop | |||
2013-07-02 | update stunnel submodule to fix refresh bug #3013 | Micah Anderson | |
Change-Id: I9ed218d9353c05b34d34c363a6a3f10d54b3a60a | |||
2013-07-03 | Merge branch 'bug/3013' of /home/git/repositories/micah/leap_platform into ↵ | micah | |
develop | |||
2013-07-02 | update stunnel submodule to fix refresh bug #3013 | Micah Anderson | |
Change-Id: I9ed218d9353c05b34d34c363a6a3f10d54b3a60a | |||
2013-07-02 | create a site_config subclass for package installation and removal add ↵ | Micah Anderson | |
packages that we want to make sure are installed remove packages that were found on vagrant and PC installations that have no business being there Change-Id: I4887a327ca89eb60945ad817a75ff199859824d3 | |||
2013-07-02 | deleted bind9 purging, it was only needed for the transition from bind to ↵ | varac | |
unbound | |||
2013-07-01 | Merge branch 'bug/hosts_restart_stunnels' of ↵ | micah | |
/home/git/repositories/micah/leap_platform into develop | |||
2013-07-01 | restart stunnels if /etc/hosts is changed (#3031) | Micah Anderson | |
Due to the fact that /etc/hosts is modified in the early stage setup.pp run and the stunnel service is not deployed on an initial puppet run, we cannot simply override the Service['stunnel'] but instead need to trigger a restart through an exec calling the init script that first tests to see if it is present. Change-Id: I6bf5dfece9ecbdb8319747774185dec50d5a55f6 | |||
2013-07-01 | Merge branch 'bug/3019' of /home/git/repositories/micah/leap_platform into ↵ | micah | |
develop | |||
2013-06-30 | Fix 'Failed to call refresh: /usr/local/sbin/reload_dhclient returned 2 instead | Micah Anderson | |
of one of [0]' by putting in the missing closing single quote. Change-Id: I86feb5d06dd25e28ea67da0b5627e7be4174e01e | |||
2013-07-01 | Merge branch 'feature/authorized_keys' of ↵ | micah | |
/home/git/repositories/micah/leap_platform into develop | |||
2013-06-30 | switch to own define for managing ssh keys | varac | |
The problem with puppet's built-in ssh_authorized_key is that you can purge unmanaged keys in a authorized_keys file. see https://leap.se/code/issues/3010 for details. Conflicts: puppet/modules/site_sshd/manifests/authorized_keys.pp Change-Id: I640bf7ebc0f0f7fb19cc46feb4cb2702d6561a9b | |||
2013-06-30 | modularize and standardize site_sshd: | Micah Anderson | |
. move the setting of the xterm title to site_config::shell . change the xterm file resource to use standard source lines, switch to single quotes, quote mode, and line up parameters . move the mosh pieces into a site_ssh::mosh class and only include it if the right mosh variable is enabled, passing into the class the necessary hiera parameters . lint the site_ssh::mosh resources . change the authorized_keys class to accept the key parameter which is passed in from the main ssh class (but allow for out of scope variable lookup when the tag is passed) Change-Id: Ieec5a3932de9bad1b98633032b28f88e91e46604 | |||
2013-06-28 | added site_sshd::authorized_keys | varac | |
2013-06-27 | Merge branch 'develop' into leap | Micah Anderson | |
2013-06-27 | Merge branch 'bug/2984' into develop | Micah Anderson | |
2013-06-27 | update the apt submodule in order to get the fix for unattended_upgrades ↵ | Micah Anderson | |
(#2984) and the custom_key_dir as a class parameter remove the global variable from setup.pp and site.pp and instead pass it into the apt class declaration as a parameter Change-Id: I24806f2fd22b5a066b951c5f76f3dd748481b5b6 | |||
2013-06-25 | add hash for authorized_keys to common.json | elijah | |
2013-06-25 | fix for #2986 - the services variable is no longer an array | Micah Anderson | |
Change-Id: Ia6fc60c0c1fdfa50e1d6d981699c1d8010df63fc | |||
2013-06-25 | Merge remote-tracking branch 'leap/develop' into develop | Micah Anderson | |
2013-06-25 | fix preferences description for Debian squeeze | Micah Anderson | |
Change-Id: I30ca424bd9b89b3e95532e325828982e8e513fc7 |