leap_platform.git - [leap

Age	Commit message (Collapse)	Author
2016-09-01	added support for Let's Encrypt	elijah

2016-08-23	added 'leap vm' command	elijah

2016-08-04	switch to deb.d.o from httpredir.d.o (#8288).	Micah
	The deb.debian.org method may be a better one than httpredir: . deb.debian.org is maintained much more reliably than httpredir . httpredir is backed by the mirror network; deb.d.o is by a CDN . httpredir redirects to the mirror network. deb.d.o is a cache that sits in front of ftp.d.o (and security, and debug, and ports) . one potential disadvantage: deb.d.o's CDN is a commercial service (fastly) that donates its traffic to debian . in stretch and later, apt uses the SRV records of deb.d.o to find places instead of HTTP redirects . local peering arrangements of fastly are likely to result in mirror choices that are more local (and thus faster) to the machine Peering arrangements for the deb.d.o CDN can be seen here: https://www.peeringdb.com/asn/54113 Change-Id: I4dee089a3b2f674860bfff21eb25a6e37c491d32
2016-04-10	pin nickserver source to origin/version/0.8	elijah

2016-04-08	tests: include _api_tester partial for couchdb nodes.	elijah

2016-04-08	partials - add support for leap_cli's inheritable service partials (requires ↵	elijah
	latest develop branch leap_cli)
2016-04-08	minor: remove _api_tester.json from soledad test.	elijah

2016-04-05	testing: adds mx delivery tests	elijah

2016-02-26	plain couchdb now required, bigcouch support disabled.	elijah

2016-02-23	allow legacy plain couchdb nodes to stay couchdb nodes, although issue a ↵	elijah
	warning.
2016-02-23	added templates for `leap node add`, so that new nodes can get default ↵	elijah
	values set in their initial .json file.
2016-02-23	default to plain couchdb, unless otherwise specified.	elijah
	# Conflicts: # puppet/modules/site_couchdb/manifests/plain.pp
2016-02-23	get dkim working, closes #5924	elijah

2016-02-10	resolves #7646: leap_cli should fail when soledad and couchdb service are ↵	elijah
	seperated
2016-01-26	pin webapp to 0.8	elijah

2015-12-10	[bug] Configure default sources.platform.apt.basic	varac
	Providing a custom sources.platform.apt.basic value worked with the last commit, but without that the platform would fail. So we provide a default value now in provider_base/common.json, which can get overridden.
2015-10-27	[bug] Add leap_mx username to soledad.conf	varac
	- Tested: [unstable.pixelated-project.org] - Related: https://github.com/pixelated/pixelated-platform/issues/127
2015-10-13	add clamav filtering, with sanesecurity signature updating and provider ↵	Micah
	whitelisting (#3625) Change-Id: I15985ca00ee95bc62855f098a78e364ebbc32616
2015-10-06	[feat] Remove tapicero from more places	varac
	Remove from: - platform white-box tests (couchdb user ACLs, tapicero daemon test) - provider_base/ dir that handles the compilation of the hiera config file - Resolves: #7501
2015-09-24	added firewall information to nodes (needed for `leap compile firewall`)	elijah

2015-09-10	sshd: let nodes change default AllowTcpForwarding	elijah

2015-09-09	ensure that the webapp has the service levels config it requires.	elijah

2015-09-09	updates to zone compile and tags/development.json to be compatible with the ↵	elijah
	definition of 'domain' in provider.env.json.
2015-09-03	service definition .json files should not refer to properties inherited from ↵	elijah
	common.json. closes #7423
2015-08-31	mx: added mx.key_lookup_domain property	elijah

2015-08-19	allow ca_cert_uri to be configured	elijah

2015-08-19	mv commands and macros to lib/leap_cli	elijah

2015-08-07	move 'enabled service' calculation to a macro.	elijah

2015-08-03	allow_registration should always be false if enrollment_policy is 'closed'	elijah

2015-08-03	webapp: add support for customizing locales	elijah

2015-07-28	Support RBL blocking of incoming mail (#5923)	Micah Anderson
	Set zen.spamhaus as the default rbl Change-Id: Ic3537d645c80ba42267bab370a1cf77730382158
2015-06-30	pin leap_web to 0.7.1	elijah

2015-05-06	Merge branch '0.7.0' into develop	Micah Anderson

2015-05-06	Change http.debian.net to now official name: httpredir.debian.org (#6932)	Micah Anderson
	Change-Id: I1e411ef3ffa2ef7fdcae90081f530f44023a96b6
2015-05-05	improved `leap cert csr` error message	elijah

2015-05-05	take advantage of improved environment binding in leap_cli (requires v 1.7.1)	elijah

2015-05-05	much faster secret generation (now they only get generated when needed)	elijah

2015-04-30	added a bunch more forbidden usernames0.7.0rc1	elijah

2015-04-21	block username 'vmail'	elijah

2015-03-30	set platform version 0.7	elijah

2015-03-30	added support for rotating couchdb databases.	elijah

2015-03-19	don't set a lower --fragment by default yet (not compatible with android client)	elijah

2015-03-18	pin webapp to version/0.6.1	elijah

2015-03-05	change default MTU to 1400 (#6745)	Micah Anderson
	Change-Id: Ia4b93776c6ae316b47f6e0b8e2763aa6fa9cab92
2015-03-03	pin client version to >=0.7 (#6743)	Micah Anderson
	Change-Id: I66f12a04bf92fbda77284665bc1186b10f4c2e15
2015-02-04	upgrade to tapicero 0.6.1, to remove auth in process list (closes #6697)	elijah

2015-02-04	consolidate sources into common.json	elijah

2015-01-28	update default provider.json to use the (now) correct expiration time ↵	elijah
	format. requires new leap_cli.
2015-01-27	provide way to customize all three apt sources urls (basic, security, backports)	varac
	Change-Id: I5542b320bb1edb52c63350b5e4fd2af681991fb5
2015-01-27	provide apt.url key that can be customized in provider.json	varac
	Change-Id: Ic8bcca7fde25b4eb540aab8cc4114748b9b2cfd7