leap_platform.git - [leap

Age	Commit message (Collapse)	Author
2013-07-04	make sure webapps have the full domain suffix as an alias (fixes problems ↵	elijah
	generating zone file).
2013-07-04	couchdb.json should not set service_type, since internal_service is the default.	elijah

2013-07-04	remove stupid bandwidth limit from default provider.json	elijah

2013-06-25	add hash for authorized_keys to common.json	elijah

2013-06-12	temp hack: deploy the webapp as couch user 'admin'	elijah

2013-06-04	add support for client-side collection of facter facts.	elijah

2013-05-30	site_sshd -- added xterm title, optional support for mosh	elijah

2013-05-27	common.json - default all nodes to be 'enabled'	elijah

2013-05-23	added couch.bigcouch.neighbors to provider_base/services/couchdb.json	varac

2013-05-21	only advertise services that are actually deployed (in public provider.json)	elijah

2013-05-18	added module site_nickserver	elijah

2013-05-17	minor - webapp api port should be integer, not string.	elijah

2013-05-14	added smtp-service.json, requires latest leap_cli	elijah

2013-04-30	added soledad-service.json	elijah

2013-04-24	provider base - service definitions are now versioned (requires new leap_cli)	elijah

2013-04-24	updated needed couchdb users and DBs	varac

2013-04-23	remove no longer used json key couchdb_hosts	Micah Anderson

2013-04-23	move generic couchdb host configuration from bitmask into the provider base ↵	Micah Anderson
	(#2016)
2013-04-18	provider.json 'domain' entry should match the domain suffix of the node.	elijah

2013-04-10	clean up ca_daemon things, it is not used any longer because it has been ↵	Micah Anderson
	included in the web app (#1978) remove site_ca_daemon module and configuration in site.pp as well as the provider_base/services/ca.json
2013-04-04	add Erlang Distributed Node Protocol Port json entry under bigcouch	Micah Anderson
	setup ednp_server and ednp_client stunnels update couchdb puppet submodule to support configurable ednp_port parameter and general module cleanup pass ednp_port to couchdb setup so that it is configured in the vm.args template clarify in comments the difference between the epmd and ednp ports remove hard-coded erlang_vm_port variable and instead setup shorewall to allow for the stunnel connection only setup dnat rules for the ednp client connections
2013-04-04	rename bigcouch.port to more accurate bigcouch.epmd_port	Micah Anderson

2013-04-04	rename the bigcouch_replication_[server,client] to be the more accurately, and	Micah Anderson
	shorter named epmd (erlang port mapper daemon)
2013-04-03	added contacts.english for when you need a descriptive contact rather than ↵	elijah
	an email address contact.
2013-04-02	Merge branch 'develop' of ssh://leap.se/leap_platform into develop	elijah

2013-04-02	added password salt to services/couchdb.json (requires latest leap_cli)	elijah

2013-04-02	switch to using stunnel_client and stunnel_server leap_cli macros	Micah Anderson
	add bigcouch_replication_clients to couchdb.json change site_couchdb/manifests/stunnel to use stunnel_client and stunnel_server generated hiera values to setup the stunnels for the couch_server connections, and the bigcouch_replication_server and bigcouch_replication_clients tunnels instead of using hard-coded ips and ports. also change the pid names to be more consistent with what the tunnels are and are named
2013-04-02	updated shorewall dnat hiera values for bigcouch cluster protocol	varac

2013-04-02	add stunnel hiera values to provider_base/services/couchdb.json for bigcouch ↵	varac
	cluster protocol
2013-04-02	added stunnel config for bigcouch communication	varac

2013-03-28	added stunnel_server	elijah

2013-03-19	add webapp secret token that pulls from hiera a 'secret'	Micah Anderson

2013-03-19	create a separate couchdb.yml.admin that contains the couchdb admin ↵	Micah Anderson
	privileges, putting the unprivileged ones in as user webapp in couchdb.yml. This allows us to migrate the couchdb design docs on deployment, but use an unprivileged user the remainder of the time
2013-03-17	added support for "limited" service levels (although vpn is not yet actually ↵	elijah
	rate limited).
2013-03-16	the development tag now specifies an alternative provider domain. this ↵	elijah
	requires that we use domain.full_suffix instead of provider.domain, whenever possible.
2013-03-12	Merge branch 'feature/bigcouch' into develop	varac
	Conflicts: provider_base/services/couchdb.json
2013-03-10	added bigcouch:cookie to services/couchdb.json	varac

2013-03-08	couch - explicitly configure couch port	elijah

2013-03-08	node environment: switch from production=true to environment=production. ↵	elijah
	requires latest leap_cli
2013-03-05	change json comment to '//'	elijah

2013-02-27	openvpn -- added support for optional "free" rate-limited service via ↵	elijah
	special client certificates with the FREE prefix in the common name.
2013-02-12	temporarily make the webapp use the admin couchdb user. waiting on ↵	elijah
	https://leap.se/code/issues/1163
2013-02-10	vagrant configuration move to Leapfile	elijah

2013-02-08	changed contact_email to tor.contacts	elijah

2013-02-08	minor changes to default json: give common a name, add contacts.default	elijah

2013-02-08	make monitor service include the nodes that are of a similar type (e.g. ↵	elijah
	production or local).
2013-02-06	tor service defaults	varac

2013-01-31	added /etc/openvpn/ca_bundle.pem in order to allow multiple CA certs to be used.	elijah

2013-01-28	update services/monitoring.json to include openvpn_gateway_address	varac

2013-01-28	added 'monitor' service to provider_base	elijah