summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2016-01-22Include site_config::params in all x509 subclasses (#6851)varac
After restructuring site.pp to only include site_config::default and the service-specific classes, we got this: Duplicate declaration: X509::Cert[undef] is already declared in file /srv/leap/puppet/modules/site_config/manifests/x509/commercial/cert.pp at line 8; cannot redeclare at /srv/leap/puppet/modules/site_config/manifests/x509/cert.pp:8 on node rewcitestweb1.rewire.org So i included site_config::params in all site_config::x509 clases. Change-Id: Ib8387abfdc68b36c73a45fd2dd1f3a159eaec4a5
2016-01-22restructured site.pp, now only one class gets included in site.pp per ↵varac
service (Bug #6851) Also, moved global Exec{} defaults to site.pp Change-Id: I9ae91b77afde944d2f1312613b9d9030e32239dd
2016-01-21Make sure the certs are installed for all smtp tls clients, thusMicah
ensuring the satellite hosts are setup properly (#7611) Change-Id: I9dce57c305a6fd6a39596a941174fe1879af5e4f
2016-01-21Merge pull request #95 from pixelated/make_pixelate_accessiblevarac
forward port to pixelated
2016-01-21forward port to pixelatedChristoph
pixelated needs to be accessible when running inside vagrant problem is, that we can't add the forwarding anywhere else because vagrant always overwrites virtualbox settings.
2016-01-21Merge pull request #96 from pixelated/remove_port_8080varac
leap redirects port 80 to an invalid url
2016-01-20leap redirects port 80 to an invalid urlChristoph
on vagrant, we use example.org as domain and all requests to http are redirected to https://example.org thats why this does not work on vagrant. we connect to localhost:8080 and get redirected to https://example.org thats why we do not need this port forwarded
2016-01-20Merge remote-tracking branch 'micah/bug/7822' into developvarac
2016-01-19Make the reject parameter an array to fix the following (#7822):Micah
failed to parse template tor/torrc.exit_policy.erb, undefined method `each' for "*:*":String Change-Id: I2b7b444187376dbc2f3cc5095391ae54bf8321b3
2016-01-19Merge branch 'remove_double_apt_get_update' into developvarac
2016-01-19Ensure openvpn services are running on jessievarac
2016-01-19[feat] Add 'leap debug' cmdvarac
This will output node debug information by calling the bin/debug.sh script.
2016-01-19Swiss privacy foundation nameserver is not responding, switch secondaryMicah
fall-back to an OpenNIC resolver that does not log (#7781) Change-Id: I290321927c8188c82e95e2cd4b93cd01bd2258c2
2016-01-19Merge branch '7802_rsyslog_jessie' into developvarac
2016-01-19Make sure machines in mynetworks are able to send mail through us,Micah
without getting blocked by the rbl (#7819) Change-Id: Ib7a00f810b6c49528e5f99a1d83296553a81e65e
2016-01-19Ensure curl is installed before it is called (#7803)Micah
Change-Id: Iedd464a397e9944159991241cd84caad6a2a40d6
2016-01-18increase ram of vagrant nodes to 1,5gvarac
otherwise, machines will be out-of-mememory on deploy
2016-01-16[bug] Enable openvpn services on jessievarac
- Tested: [unstable.bitmask.net] - Resolves: #7798
2016-01-15[bug] Only pin rsyslog debs to backports on wheezyvarac
- Resolves: #7802
2016-01-15linted site_config::syslogvarac
2016-01-12Merge branch '7782_etc_leap_dir_0755' into developvarac
2016-01-12Merge pull request #94 from pixelated/run_git_as_uservarac
Run git as user, not root
2016-01-12Run git as user, not rootFolker Bernitt
2016-01-08[bug] Make /etc/leap world-readablevarac
Under jessie, leap-mx is started by systemd now, not as a forked proc by twistd anymore. Therefore leap-mx (the user the mx proc runs as) needs direct access to it's config file under /etc/leap/mx.conf. Before, twistd would start as root, read the config and then fork an mx proc as unprivileged leap-mx user. - Tested: [quetzal] - Resolves: #7782
2016-01-07updated submodule couchdbvarac
2016-01-06Update submodule aptvarac
2016-01-05[style] Lint site_apt::dist_upgradevarac
2016-01-05[feat] Remove double run of apt-get updatevarac
2016-01-04Fix status module invocation for hidden service enabled webapps (#7776)Micah
Change-Id: I101e4c9791102123d4334e1b84a48dacea99ac52
2016-01-01revert 4ff763c sorrykwadronaut
2015-12-31update postfix modulekwadronaut
2015-12-28[vagrant] dont deploy monitor service for speedvarac
2015-12-23Vagrant boxes need 1g of ramvarac
2015-12-23Vagrant Workaround for #7754 and #7755varac
2015-12-23Vagrant: use couchdb, create .ssh dirvarac
2015-12-23[bug] Fix leap::cli::install on jessievarac
leap_cli could not get installed from source on jessie
2015-12-23[feat] Vagrantfile now contains a jessie boxvarac
jessie is now the default box
2015-12-18Merge branch 'purge_postfix_config' into developMicah
2015-12-17Make sure values that might get set incorrectly, due to preseed orMicah
debconf selections, are set correctly (#7478) Change-Id: I3bd261fd6fe27bbf10b8994ffff9f8b7be5b9de0
2015-12-16[docs] Use jenkins.leap.se for build status badgevarac
2015-12-16Merge pull request #93 from pixelated/fix_7710varac
ensure that the key/value are only split on the first colon
2015-12-16ensure that the key/value are only split on the first colonChristoph Kluenter
2015-12-15add fingerprint map configuration section (#7725)Micah
Change-Id: I895c25daca65c19916c47267e61a4f04a6489a84
2015-12-16Merge branch '7681_apache_2_4_auth_error' into developvarac
2015-12-15Make sure /var/mail/leap-mx/Maildir and its associated common maildirMicah
directories are managed by the platform (#6936) Change-Id: I1836eb728c0379b6175ae6d54231a6f6a7ae1033
2015-12-15Merge branch 'dont_remove_nfs_client_on_vagrant' into developvarac
2015-12-15Merge branch 'remove_run_stages' into developvarac
2015-12-15Have leap-mx log with the process name 'leap-mx', but log toMicah
/var/log/leap/mx.log, and clean up the files associated with the previous configuration (#7691) Change-Id: Id08c97980292968e8e89f128afb5fa78bda30069
2015-12-12[bug] Use guess_apache_version in apache templatesvarac
The apache_version() fact only works if apache is already installed. So we use the guess_apache_version() function from the apache module to determine which apache version is to be installed. - Resolves: #7681
2015-12-10[feat] Dont remove nfs client on local vagrant nodesvarac