Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-08-22 | FQDN should come first in /etc/hosts | varac | |
fixes /etc/hosts: wrong order (Bug #5835) (now for real) before, /etc/hosts contained i.e. 127.0.1.1 plain1 plain1.bitmask.net plain1.bitmask.i which resulted in no fqdn reported both by "hostname -f" and "facter fqdn" this fix produces this order which is needed to report a fqdn: 127.0.1.1 plain1.bitmask.net plain1 plain1.bitmask.i | |||
2014-08-21 | Merge tag '0.5.3' | Micah Anderson | |
Tagging 0.5.3 release | |||
2014-08-21 | Fix starting tapicero when it is not running (#6004)0.5.3 | Micah Anderson | |
Due to how tapicero's initscript is made, it is not possible to check for a valid exit code for the status (it returns a zero when it is not running). So we disable the puppet 'hasstatus' parameter and instead puppet will look in the process table for 'tapicero' Change-Id: I9b017ea8055c0207e43876dd4e3bbc2619c0fd35 | |||
2014-08-21 | Merge remote-tracking branch 'varac/5998_fix_nagios_nodename' into 0.5.3 | Micah Anderson | |
2014-08-21 | Fix "Nagios ssh check is automatically added by the ssh module and cantains ↵ | varac | |
a wrong hostname on single node setup (Bug #5998)" before, the ssh module added this check, resulting in a wrong hostname and the port was always '22'. manage_nagios parameter is boolean, so we use false instead of 'no' manually add check_ssh to nagios (#5998) | |||
2014-08-20 | set the maximum leap cli version for this version of the platform | Micah Anderson | |
Change-Id: I6be37c3c65c47e650c0e67bd43df8e2b1ac40dd6 | |||
2014-08-19 | Update README to make note about known issues so version number does not ↵ | Micah Anderson | |
need to be bumped each release Change-Id: I3aabe1a713f4244cbbd607137e5d8e46d992a2bc | |||
2014-08-05 | Fixes: #5952 Webapp now logs to it's own file instead of syslog and user.log | guido | |
2014-08-01 | Merge branch 'feature/replication-in-tapicero-security' into develop | Azul | |
2014-08-01 | minor: fix typo in webapp config | Azul | |
@provider -> @webapp | |||
2014-07-30 | add replication role to user databases with tapicero | Azul | |
This way the replication has read access on the source and write access on the target. | |||
2014-07-29 | fix haproxy_servers call with couchdb default port | Azul | |
2014-07-29 | Merge remote-tracking branch 'fbernitt/issue_5217_allow_registration' into ↵ | Azul | |
develop | |||
2014-07-16 | haproxy connects to a local couch if available | Azul | |
When running a service that requires couch (webapp or mx) on a node that also had couch running the haproxy was confused because it did not have an stunnel port for the local couch. Emit a more useful error and fixed this for webapp and mx | |||
2014-07-15 | haproxy default to couch_write, couch_read on GET | Azul | |
METH_POST probably does not catch PUT, DESTROY etc. So instead we now use the master as the default and only use the replications for GET and HEAD requests. | |||
2014-07-15 | adopt webapp test to new hiera couch clients format | Azul | |
2014-07-14 | fix couch tests to use admin credentials | Azul | |
2014-07-14 | proper json for tapicero config | Azul | |
2014-07-14 | update couchdb puppet module | Azul | |
2014-07-11 | Added allow_registration to webapp config.yml. | Folker Bernitt | |
- See issue #5217 - See companion change in leap_web | |||
2014-07-01 | Merge branch 'obfsproxy' into develop | elijah | |
2014-07-01 | Use new macro pick_node to pick vpn gateway for obfsproxy.json | irregulator | |
2014-07-01 | Check appropriately if obfsproxy is included in services | irregulator | |
2014-07-01 | A vpn node picks its openvpn.gateway as obfsproxy gateway address | irregulator | |
2014-07-01 | Add apt preferences requirement for obfsproxy package resource | irregulator | |
2014-07-01 | Add User resource requirement for obfsproxy service, log, etc dir | irregulator | |
2014-07-01 | Remove unneeded newlines from obfsproxy.conf | irregulator | |
2014-07-01 | Explicitly set apt preferences for obfsproxy to wheezy-backports | irregulator | |
2014-07-01 | Attach node's name to scramblesuit password and port secrets | irregulator | |
This makes every node with obfsproxy service have unique port and password for scramblesuit pluggable transport. | |||
2014-07-01 | Make obfsproxy daemon bind to specific address rather than 0.0.0.0 | irregulator | |
If obfsproxy is spawned alongside eip service, make it listen to the gateway_adress IP. If obfsproxy is running standalone listen to ip_address. | |||
2014-07-01 | Include obfsproxy descriptors in openvpn.json | irregulator | |
This is needed so as obfsproxy service is automatically deployed along with eip service. | |||
2014-07-01 | Use the try method to pick vpn gateway address in obfsproxy.json | irregulator | |
2014-07-01 | Remove initscript subscription to conf file | irregulator | |
2014-07-01 | Move log files to var/log instead of var/log/obfsproxy | irregulator | |
2014-07-01 | Subscribe obfsproxy service resource to conf file | irregulator | |
2014-07-01 | Simplify init script, let puppet service resource use init status | irregulator | |
2014-07-01 | Change logrotate's frequency and number of log files to keep | irregulator | |
2014-07-01 | Be able to specify log_level parameter for obfsproxy | irregulator | |
log_level sets minimum logging severity of obfsproxy daemon, can be error, warning, info, debug. Defaults to info. | |||
2014-07-01 | Address logging for obfsproxy daemon | irregulator | |
Create obfsproxy directory in /var/log, specify log file when obfsproxy is spawned by init script, create a logrotate configuration for obfsproxy's logs. | |||
2014-07-01 | Pick gateway address either from self or another openvpn node | irregulator | |
2014-07-01 | Line up equal signs, change double to single quotes | irregulator | |
2014-07-01 | Remove commented lines from obfsproxy puppet module class | irregulator | |
2014-07-01 | Remove commented lines from init script status section | irregulator | |
2014-07-01 | Change exit status code if config file is missing | irregulator | |
2014-07-01 | Move obfsproxy_daemon to obfsproxy_init | irregulator | |
2014-07-01 | Reflect change in leap_cli, use rand_range macro | irregulator | |
2014-07-01 | Add data directory to save scramblesuit's state. | irregulator | |
Also clean up a little the obfsproxy puppet class, create appropriate directories, restrict permissions. | |||
2014-07-01 | Make shorewall accept incoming traffic for obfsproxy server | irregulator | |
2014-07-01 | Initial commit for obfsproxy server feature in platform | irregulator | |
2014-07-01 | puppet_command: set hostname manually, not via puppet. | elijah | |