| Age | Commit message (Collapse) | Author |
|---|
|
subrepo:
subdir: "puppet/modules/ntp"
merged: "8a554ab"
upstream:
origin: "https://leap.se/git/puppet_ntp"
branch: "master"
commit: "8a554ab"
git-subrepo:
version: "0.3.0"
origin: "https://github.com/ingydotnet/git-subrepo"
commit: "1e79595"
Change-Id: I6132c417d321ed4f48cc3cd52d4050603fada61a
|
|
subrepo:
subdir: "puppet/modules/lsb"
merged: "bac64e7"
upstream:
origin: "https://leap.se/git/puppet_lsb"
branch: "master"
commit: "bac64e7"
git-subrepo:
version: "0.3.0"
origin: "https://github.com/ingydotnet/git-subrepo"
commit: "1e79595"
Change-Id: Ia48799c5442c7b930952fdb822bd80d796eab321
|
|
subrepo:
subdir: "puppet/modules/apt"
merged: "33c61e8"
upstream:
origin: "https://leap.se/git/puppet_apt"
branch: "master"
commit: "33c61e8"
git-subrepo:
version: "0.3.0"
origin: "https://github.com/ingydotnet/git-subrepo"
commit: "1e79595"
Change-Id: I6515ec49bbacdffd9f3729d486d2868162f9ac78
|
|
subrepo:
subdir: "puppet/modules/sshd"
merged: "76f4f87"
upstream:
origin: "https://leap.se/git/puppet_sshd"
branch: "master"
commit: "76f4f87"
git-subrepo:
version: "0.3.0"
origin: "https://github.com/ingydotnet/git-subrepo"
commit: "1e79595"
Change-Id: Icf616796837cdbe40deb188d2b72f1c726c9e807
|
|
subrepo:
subdir: "puppet/modules/concat"
merged: "abce128"
upstream:
origin: "https://leap.se/git/puppet_concat"
branch: "master"
commit: "abce128"
git-subrepo:
version: "0.3.0"
origin: "https://github.com/ingydotnet/git-subrepo"
commit: "1e79595"
Change-Id: Ic28e31bdc5b32fd6c55636bc35d9ca2967daf997
|
|
subrepo:
subdir: "puppet/modules/openvpn"
merged: "26d4edc"
upstream:
origin: "https://leap.se/git/puppet_openvpn"
branch: "master"
commit: "26d4edc"
git-subrepo:
version: "0.3.0"
origin: "https://github.com/ingydotnet/git-subrepo"
commit: "1e79595"
Change-Id: I596766ccfb806b3ca2d1c755c4e24c5ad3d997f9
|
|
Change-Id: Ia7655153b556337f676e3d909559c4a7306bedd6
|
|
https://github.com/pixelated/leap_platform into develop
|
|
|
|
Configure DNSSEC validation for client verification, giving us a
stronger form of opportunistic TLS
Change-Id: Iab92d4f593c4a5a44e3b694295096b0d7f687a37
|
|
Without this set, dnssec will fail validation for internal domains,
which should not be validated
Change-Id: I8589332598fe97ad5218dd23825ac77af2d8def6
|
|
Change-Id: Ibdf39a721162b4a5663ef27c27b2db0261c6e8a5
|
|
|
|
In an attempt to resolve #8021, a template error was made, causing
duplicated entries to appear in the rsyslog template.
Change-Id: Ic41d6ef9aec9865cf64312c1eb96e408b39d441c
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Change-Id: Icaab817870d005b7a854a3fb8c402705d0b2d77f
|
|
Change-Id: I0c6e27298c63bd37de1410985d054799818c22a4
|
|
When tor is not configured, then its possible to get this error on
deploy:
Error: tor is not a hash or array when accessing it with hidden_service
at /srv/leap/puppet/modules/site_static/manifests/init.pp:16 on node
rewdevstatic1.rewire.org
This commit only accesses the array when its enabled.
Change-Id: Ia75ac7a51179da980966adba0cc614b9cd642b0c
|
|
|
|
When tor hidden services were enabled for static sites, only a very
basic configuration was setup and it didn't take into account the
different location configurations that can be configured for a
static site.
This commit resolves that by making a site_static::hidden_service class
similar to the site_webapp::hidden_service class, and fixes up the
apache vhost template to properly create the location blocks for the
hidden service vhost.
Change-Id: Ice3586f4173bd2d1bd3defca29d21c7403d5a03a
|
|
We were creating the hidden service name without a newline, and then tor
would be restarted and change the hidden service hostname file to have a
newline, which would then require that the next deploy would change that
file to not have a newline again.
This fixes that problem by making the hostname have a newline so it
matches what tor wants.
Change-Id: I38f450684d557cf943ec94f2f8e19cda3aefdf66
|
|
Change-Id: I3d733b6645c804a5fb337ad4b8edc59a66ad50b5
|
|
Change-Id: Icaab817870d005b7a854a3fb8c402705d0b2d77f
|
|
|
|
|
|
Will try later, but for now it fails with not finding bundle cmd.
|
|
|
|
|
|
|
|
|
|
|
|
|
