Age | Commit message (Collapse) | Author |
|
|
|
special client certificates with the FREE prefix in the common name.
|
|
|
|
configuration file, this addresses issue #1853
- [vpn1] err: /Stage[main]/Site_openvpn::Resolver/Line[add_tcp_resolver]/Exec[echo 'server: include: /etc/unbound/conf.d/vpn_tcp_resolver' >> '/etc/unbound/unbound.conf']/returns: change from notrun to 0 failed: echo 'server: include: /etc/unbound/conf.d/vpn_tcp_resolver' >> '/etc/unbound/unbound.conf' returned 2 instead of one of [0] at /srv/leap/puppet/modules/common/manifests/defines/line.pp:45
|
|
site_shorewall
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
slows things down and I don't see a need for it
|
|
site_shorewall
|
|
https://leap.se/code/issues/1163
|
|
shorewall is installed first (#1741)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
otherwise the generated files will be owned by root and the bundle will be inside roots /home/max
|
|
|
|
|
|
|
|
|
|
production or local).
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
site_shorewall::defaults can be used on every host, it configures
a basic firewall, which blocks everything from outside except
ping + ssh, and allows outgoing traffic for http, git, dns.
|
|
|
|
|
|
Exec[bundler_update] can take a really long time, increasing
timeout from 300s (default) to 600s
fixes Increase command timeout for Exec[bundler_update] (Feature #1643)
|