summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2012-12-10couchdb: use x509 module to deploy certs (fixes #1063)varac
2012-12-10also deploy ca_certvarac
2012-12-10updated leap_ca_daemon config file, deploying x509 cert+keyvarac
2012-12-10use leap_ca master branchvarac
2012-12-10include site_apt::dist_upgrade (fixes #1107)varac
2012-12-08minor - fix hint.elijah
2012-12-07added hostname tracking and late evaluation. new key "hosts" added, for ↵elijah
building /etc/hosts. also, now ssh.known_hosts only includes what is necessary.
2012-12-07new names for couchdb DBsvarac
2012-12-07removed pinning couchdb to unstable because 1.2.0-3 is in wheezy, finallyvarac
2012-12-07Merge branch 'feature/ca' into developvarac
2012-12-07added module site_ca_daemonvarac
2012-12-07ca -> ca_daemon in site.pp and services/ca.jsonvarac
2012-12-07added couchdb hiera variables to services/ca.jsonvarac
2012-12-04remove no longer needed removal of the ports.conf fileMicah Anderson
2012-12-04alphabetize the apache modulesMicah Anderson
2012-12-04Stop the [warn] NameVirtualHost *:443 has no VirtualHosts errorsMicah Anderson
When we include apache::ssl it ships the ssl.conf file which sets up the NameVirtualHost *:443, so we just do what that class does fixes: https://leap.se/code/issues/944
2012-12-04set ip_forwarding using augeasMicah Anderson
2012-12-04update shorewall module to latest revision, fixing a bug on the ↵Micah Anderson
shorewall.conf sources
2012-12-04changed shorewall submodule location, this requires you do a git submodule syncMicah Anderson
2012-12-04use site_cavarac
2012-11-29include apt in the site_config/apt classMicah Anderson
2012-11-29disable apt pdiffs, they are slow on fast linksMicah Anderson
2012-11-29change api CA cert deployment to just symlink to the already deployed fileMicah Anderson
2012-11-29change ensure parameter to explicit 'directory' for /srv/leap-webappMicah Anderson
2012-11-29updated bundler module to accept 'package' to install_method to be a little ↵Micah Anderson
more obvious how it is operating
2012-11-28updated service templates to reflect new command nameselijah
2012-11-27Merge branch 'feature/webapp' into developMicah Anderson
2012-11-27fix location of SSLCertificateChainFile locationMicah Anderson
2012-11-27switch from hiera_array to just hieraMicah Anderson
2012-11-27fix location of couchdb.yml templateMicah Anderson
2012-11-27fix name of eip_serviceMicah Anderson
2012-11-27fix name of couchdb.yml templateMicah Anderson
2012-11-27add the couchdb configuration templateMicah Anderson
2012-11-27setup the couchdb class to provide the couchdb connection parametersMicah Anderson
2012-11-27fix webapp: only list couchdb hosts that match node's 'local' value.elijah
2012-11-27make sure the webapp/public/config directory exists and the eip-service.json ↵Micah Anderson
is provided there
2012-11-27map /1 -> document rootMicah Anderson
2012-11-27add site_webapp class to install the certs/keys/CAs and virtual host ↵Micah Anderson
configurations
2012-11-27place the provider.json and ca.crt in the webrootMicah Anderson
2012-11-27add hiera keys for providerMicah Anderson
include site_webapp::apache
2012-11-27add passenger and x509 submodulesMicah Anderson
2012-11-24new leap_cli sets local tag automatically.elijah
2012-11-23enable ip_forwarding #1029varac
2012-11-23openvpn -- enforce certain cipher choices on the serverelijah
2012-11-23get rid of paths in webapp.json, use symbolic filenames instead.elijah
2012-11-23added a template that is used to generate a client config file for openvpn ↵elijah
(to be used for testing).
2012-11-23fix bugs in eip-service.json templateelijah
2012-11-22clean up openvpn and x509 pathselijah
2012-11-22use origin/develop instead of develop as revisionvarac
2012-11-22remove unnecessary blank line in .gitmodulesMicah Anderson