Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-04-05 | revert openvpn tls-cipher: closes https://leap.se/code/issues/5429 | elijah | |
2014-04-05 | openvpn: allow for configurable keepalive (aka ping & ping-restart) closes ↵ | elijah | |
https://leap.se/code/issues/4127 | |||
2014-04-04 | Merge branch '0.5' into develop | Micah Anderson | |
Conflicts: provider_base/services/tor.json Change-Id: I826579945a0d93c43384f0fd12c9833762b084cf | |||
2014-04-02 | Merge pull request #20 from elijh/feature/openvpn-config | varac | |
allow ability to customize openvpn security options | |||
2014-04-01 | Fix for Openstack/Amazon special case needing to allow ec2_public_ipv4 | Micah Anderson | |
in mynetworks (#5427) Change-Id: Iee954f8cacd852f8c7c598c68a8793a3523c0132 | |||
2014-04-01 | Include all the ips that are allowed to send mail through the relay in | Micah Anderson | |
the mynetworks parameter. Previously we only allowed other mx servers to relay to each other, but this prevents system mail from non-mx nodes from getting out. Fixes "Helo command rejected: You are not in domain bitmask.net (in reply to RCPT TO command))" (#5343) Change-Id: I5e204958cb235808eedc3a1724fb2dc6c7a5b73b | |||
2014-03-26 | contacts.tor must be an array | elijah | |
2014-03-23 | modules/site_static: part 1 - amber | elijah | |
2014-03-20 | allow ability to customize openvpn security stuff: tls-cipher, auth, and ↵ | elijah | |
cipher config options. | |||
2014-03-14 | added support for environment specific providers (e.g. ↵ | elijah | |
provider.production.json). requires latest leap_cli. | |||
2014-02-27 | Merge branch 'webapp_check' into 0.6 | varac | |
2014-02-27 | Merge branch 'one_monitornode_rules_them_all' into 0.6 | varac | |
2014-02-27 | fixed more places where passwords were set to the wrong environment. | elijah | |
2014-02-27 | fixed more places where passwords were set to the wrong environment. | elijah | |
2014-02-27 | include nagios_test user credentials in webapp hiera files | varac | |
2014-02-27 | provide nagios_test_pw in hiera files | varac | |
2014-02-27 | new monitor hosts rule: local environment monitors just see local machines, ↵ | elijah | |
other monitors see the nodes from all environments (except local) | |||
2014-02-27 | fixed horrible bug that caused all environments to use the same couchdb ↵ | elijah | |
soledad password. | |||
2014-02-27 | fixed horrible bug that caused all environments to use the same couchdb ↵ | elijah | |
soledad password. | |||
2014-02-12 | include monitor node also into nagios hash so check-mk-agent can run on ↵ | varac | |
monitor host itself via ssh to localhost (requires latest leap_cli) | |||
2014-02-12 | include monitor node into hosts hash so check-mk-agent can run on monitor ↵ | varac | |
host itself via ssh to localhost (requires latest leap_cli) | |||
2014-02-10 | Merge remote-tracking branch 'elijah/feature/known_hosts' into 4982_check_mk | varac | |
Conflicts: platform.rb | |||
2014-02-09 | deploy a valid /etc/ssh/ssh_known_hosts for all nodes (requires new leap_cli) | elijah | |
2014-02-07 | Merge remote-tracking branch 'origin/develop' into 4982_check_mk | varac | |
Conflicts: platform.rb provider_base/services/monitor.json | |||
2014-02-07 | monitor nodes get all nodes listed in /etc/hosts | elijah | |
2014-02-06 | added support for monitor ssh keys (requires latest leap_cli) | elijah | |
2014-02-06 | move leap_webapp.conf template to common.conf which is included by the ↵ | varac | |
nagios and webapp node (#5096) | |||
2014-01-02 | added support for minimum client version checking | elijah | |
2013-12-19 | Set mynetworks to include any mx server in the provider to allow them to0.5.0rc1 | Micah Anderson | |
Helo as the domain (#4495) Change-Id: I6c8ac28faceb8b0c6129a606ede04837efd3d261 | |||
2013-11-28 | fix soledad couchdb hiera variables, part ii | Micah Anderson | |
Change-Id: Ie0028056767358c4fe6796edd5ba4435e86a0cb3 | |||
2013-11-28 | fix soledad couchdb hiera variables | Micah Anderson | |
Change-Id: I0882fc993b407eddc40c03838050d42c0443bd3d | |||
2013-11-28 | remove leap_mx admin user and fix leap_mx couchdb hiera variables | Micah Anderson | |
Change-Id: I052576279d8a47313cd99412fdd7b715daa73374 | |||
2013-11-28 | remove nickserver admin user, and fix nickserver couchdb hiera variables | Micah Anderson | |
Change-Id: I5bdb6b946becdc95cadc92651c06e66b826e2698 | |||
2013-11-28 | remove admin access from nickserver | Micah Anderson | |
Change-Id: If7fff4c2b839cef5807ee8cee1355aea4dc719a8 | |||
2013-11-28 | remove admin access from soledad | Micah Anderson | |
Change-Id: I7c516c6a4ba26d2c5cebe19a9bff66eae3bd430f | |||
2013-11-27 | add the tapicero couchdb user, and appropriate roles | Micah Anderson | |
Change-Id: I41e9a73c8d04d5a2d74b41c8e32aca9906f3a4cf | |||
2013-11-27 | add nickserver couchdb user, set it to have 'identities' role | Micah Anderson | |
Change-Id: I06723ccf2ba040204e9fc5256c99a1faad6abb5f | |||
2013-11-27 | add leap_mx couchdb user/password | Micah Anderson | |
Change-Id: Ice83115e0feabddd40ad74c2a6e98e24da9b4c2f | |||
2013-11-27 | pretty reformat couchdb.json and site_couchdb/manifests/init.pp, ↵ | Micah Anderson | |
alphabetizing couchdb users Change-Id: I88264d32e9381f826652d1631083ba371e2b1b54 | |||
2013-11-22 | improvements to webapp deployment: allow for greater customization, allow ↵ | elijah | |
for custom git source, improve apache config. | |||
2013-11-22 | added custom index.html | elijah | |
2013-10-15 | produce a hash for nagios.hosts | elijah | |
2013-10-10 | provide global.provider.contacts.default on every node, no need to add in ↵ | varac | |
services/mx.json again | |||
2013-09-20 | use newer haproxy_servers macro in order to allow couchdb and webapp to be ↵ | elijah | |
on the same node (requires latest leap_cli) | |||
2013-09-18 | Include content of client_ca.crt and client_ca.key in hiera (Feature #3874) | varac | |
2013-08-15 | Revert "temp hack: deploy the webapp as couch user 'admin'" | Micah Anderson | |
This reverts commit 8c038fea91adc87adf9e408c16e2f0ec9838e3d2. | |||
2013-08-01 | run soledad daemon using the configured port. | elijah | |
2013-08-01 | add a requirement to soledad.json that soledad service is found on a couchdb | Micah Anderson | |
node, if it is not, it will fail to compile this requires a newer leap_cli, so I've bumped the compatibility requirement Change-Id: Ie1061798d058087126163793b216dd5938eb95a6 | |||
2013-08-01 | fix #3291: set the soledad port properly in the json and as a temporary ↵ | Micah Anderson | |
work-around, use the couchdb admin/passwd Change-Id: Ibb1cd8416d00552f8ca1716e42a08137a4b461aa | |||
2013-08-01 | Merge branch 'feature/issue/3278' into develop | varac | |