summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2015-05-26Implement weakdh recommendations for cipher suites (#7024)Micah Anderson
This is a first step mitigation until we can have a newer apache that will allow us to specify dh parameters other than the default. Change-Id: Ibfcee53b331e8919466027dde1a93117b5210d9d
2015-05-26Merge branch '6964_use_exec_to_remove_matching_fileline' into 0.7.0varac
2015-05-26updated couchdb submodule fix random couch_doc_update errors (#6850)varac
Change-Id: I0d824e3f65ecfc9b6442b39003dacc35009fe10d
2015-05-26check_mk complains about non-existing logfile (#6964)varac
Change-Id: Ic58f9516854f812d46aa3a574628318951f99a95
2015-05-26Revert "remove old leap_mx logfile location from check_mk logwatch state ↵varac
file #6964" This reverts commit 984684f56f15d9d89ea78ffe6ed67dabf3d63208. Needed because: Augeas fails after upgrading augeas packages during same puppetrun, but only on first deploy - https://leap.se/code/issues/6997
2015-05-14use latest puppet_couchdbelijah
2015-05-14Merge branch '6964_remove_old_leap_mx_logfile_from_check_mk_logwatch' into ↵Micah
'0.7.0' remove old leap_mx logfile location from check_mk logwatch state file #6964 Change-Id: I385c639e5c096deef4f81691a85c1b83cbab9421 See merge request !46
2015-05-14remove old leap_mx logfile location from check_mk logwatch state file #6964varac
Change-Id: I385c639e5c096deef4f81691a85c1b83cbab9421
2015-05-07better user db test.elijah
2015-05-06Merge branch '0.7.0' into developvarac
2015-05-06update postfix submodule to contain fix for non-existing fact ↵varac
operatingsystemmajrelease Change-Id: If29f562cb91354151147092b7ea7acc558f504cb
2015-05-06Merge branch '0.7.0' into developvarac
2015-05-06update postfix submodule to latest shared, necessary to fix module_dir problemMicah Anderson
Change-Id: I95e8eb0f4b2299aca0b70806d7aeac0e8714ab19
2015-05-06update common module to the latestMicah Anderson
Change-Id: I0a52033bfafdb5f492fe21b0b33fe790a94212d5
2015-05-06fix unattended-upgrades now that jessie has been releasedMicah Anderson
Change-Id: I69e6a0f8e676be72bce492af32fef76c9167f5ee
2015-05-06Change http.debian.net to now official name: httpredir.debian.org (#6932)Micah Anderson
Change-Id: I1e411ef3ffa2ef7fdcae90081f530f44023a96b6
2015-05-06pin compatible cli to 1.7.xelijah
2015-05-06Merge branch '0.7.0' into developMicah Anderson
2015-05-06update apt submodule to fix unattended-upgrades and account for jessie releaseMicah Anderson
Change-Id: I69e6a0f8e676be72bce492af32fef76c9167f5ee
2015-05-06Change http.debian.net to now official name: httpredir.debian.org (#6932)Micah Anderson
Change-Id: I1e411ef3ffa2ef7fdcae90081f530f44023a96b6
2015-05-05improved `leap cert csr` error messageelijah
2015-05-05take advantage of improved environment binding in leap_cli (requires v 1.7.1)elijah
2015-05-05much faster secret generation (now they only get generated when needed)elijah
2015-05-05pin compatible cli to 1.7.xelijah
2015-04-30added a bunch more forbidden usernames0.7.0rc1elijah
2015-04-28Merge branch '6829_reject_inbound_mail_to_system_users' into developvarac
2015-04-28Reject inbound mail to local system users that don't appear invarac
/ect/aliases #6829 We began to recieve spam for vmail@DOMAIN. So we want to block inbound mail to local system users. However, users in the /etc/aliases file are still accepted on inbound mail - see https://leap.se/code/issues/6909 for a follow up. Change-Id: I03d3014984c4bd27f90147125fb037b68716624d
2015-04-27Merge branch 'rsyslog_traditional_timestamps' into developvarac
2015-04-26update couchdb submoduleelijah
2015-04-26Use rsyslog traditional timestamp format in custom logfiles #6886varac
Change-Id: I9e033f63e3b387e95f5bf1c3820e456f740d8180
2015-04-26run check_mk_agent every 4 instead of 10 minutes, useful for better graphsvarac
Change-Id: Ibefc6ce08cf714cf79a460a8b6eb32e2851ce22c
2015-04-26Tapicero changed it's error message when uploading design doc fails in race ↵varac
condition with another tapicero instance #6534 Change-Id: Ie194a2983210601bd24aef5e74f8b7fa2b7c433f
2015-04-26Exec[] should log the output of the command on failure #6851varac
Change-Id: If99ae4036f9210516762f5cd7eb66744661a9665
2015-04-26updated submodule nagios to improve readability of notification mailsvarac
Change-Id: I518b2291317b81e915f7189f2a48110528e80e18
2015-04-22update known issues with a link to leap_mx known issuesvarac
Change-Id: I6c0e8f5a99a22e2cbe26aa3ec1fa6a6c75f4931f
2015-04-21block username 'vmail'elijah
2015-04-21removed leftover puppet/manifests/setup.pp, it's not used anymorevarac
Change-Id: Ib64c9a9d15eb6f276e7928e47e96cd44291583c9
2015-04-17update CHANGESelijah
2015-04-17Merge branch 'bugfix/logs' into developelijah
2015-04-17rename leap-mx logrotate file; minor style change.elijah
2015-04-16keep five log files instead of seven.elijah
2015-04-16stunnel shouldn't use syslog, and leap_mx can't.elijah
2015-04-16properly clean up unused fileselijah
2015-04-16restore tapicero heartbeat.elijah
2015-04-16clean up logging mess: add 'logfile' define, mv openvpn and stunnel logs to ↵elijah
their own files, fix mx logwatch path.
2015-04-16updated CHANGES.mdvarac
Change-Id: I9a80fdc78f144cc80b9fa9206d059f5cb73e1725
2015-04-15fix tapicero & webapp logs: remove heartbeat log check, move to ↵elijah
/var/log/tapicero, fix webapp logwatch location.
2015-04-15disable 'rake cleanup:sessions' cron job.elijah
2015-04-14minor edits to CHANGES file.elijah
2015-04-09fix tests (don't dump dummy records in tmp_users)elijah