| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2016-12-22 | bugfix: don't block commercial certs for mx servers | elijah | |
| 2016-12-22 | COMPATIBILITY CHANGE: set platform version to 0.10 & require client 0.9.4 or ↵ | elijah | |
| later | |||
| 2016-12-19 | bugfix: mx service does not require a commercial certificate | elijah | |
| 2016-12-08 | Use webapp/nickserver:master on leap_platform:master (#8678) | varac | |
| 2016-11-10 | Use webapp 0.9develop | varac | |
| 2016-10-20 | [bug] properly set 'enrollment_policy' in provider.json | elijah | |
| 2016-10-20 | upgrade: nickserver version 0.9.x | Azul | |
| 2016-10-04 | [bug] fix Tor hidden service key generation | elijah | |
| 2016-09-01 | added support for Let's Encrypt | elijah | |
| 2016-08-23 | added 'leap vm' command | elijah | |
| 2016-08-04 | switch to deb.d.o from httpredir.d.o (#8288). | Micah | |
| The deb.debian.org method may be a better one than httpredir: . deb.debian.org is maintained much more reliably than httpredir . httpredir is backed by the mirror network; deb.d.o is by a CDN . httpredir redirects to the mirror network. deb.d.o is a cache that sits in front of ftp.d.o (and security, and debug, and ports) . one potential disadvantage: deb.d.o's CDN is a commercial service (fastly) that donates its traffic to debian . in stretch and later, apt uses the SRV records of deb.d.o to find places instead of HTTP redirects . local peering arrangements of fastly are likely to result in mirror choices that are more local (and thus faster) to the machine Peering arrangements for the deb.d.o CDN can be seen here: https://www.peeringdb.com/asn/54113 Change-Id: I4dee089a3b2f674860bfff21eb25a6e37c491d32 | |||
| 2016-04-10 | pin nickserver source to origin/version/0.8 | elijah | |
| 2016-04-08 | tests: include _api_tester partial for couchdb nodes. | elijah | |
| 2016-04-08 | partials - add support for leap_cli's inheritable service partials (requires ↵ | elijah | |
| latest develop branch leap_cli) | |||
| 2016-04-08 | minor: remove _api_tester.json from soledad test. | elijah | |
| 2016-04-05 | testing: adds mx delivery tests | elijah | |
| 2016-02-26 | plain couchdb now required, bigcouch support disabled. | elijah | |
| 2016-02-23 | allow legacy plain couchdb nodes to stay couchdb nodes, although issue a ↵ | elijah | |
| warning. | |||
| 2016-02-23 | added templates for `leap node add`, so that new nodes can get default ↵ | elijah | |
| values set in their initial .json file. | |||
| 2016-02-23 | default to plain couchdb, unless otherwise specified. | elijah | |
| # Conflicts: # puppet/modules/site_couchdb/manifests/plain.pp | |||
| 2016-02-23 | get dkim working, closes #5924 | elijah | |
| 2016-02-10 | resolves #7646: leap_cli should fail when soledad and couchdb service are ↵ | elijah | |
| seperated | |||
| 2016-01-26 | pin webapp to 0.8 | elijah | |
| 2015-12-10 | [bug] Configure default sources.platform.apt.basic | varac | |
| Providing a custom sources.platform.apt.basic value worked with the last commit, but without that the platform would fail. So we provide a default value now in provider_base/common.json, which can get overridden. | |||
| 2015-10-27 | [bug] Add leap_mx username to soledad.conf | varac | |
| - Tested: [unstable.pixelated-project.org] - Related: https://github.com/pixelated/pixelated-platform/issues/127 | |||
| 2015-10-13 | add clamav filtering, with sanesecurity signature updating and provider ↵ | Micah | |
| whitelisting (#3625) Change-Id: I15985ca00ee95bc62855f098a78e364ebbc32616 | |||
| 2015-10-06 | [feat] Remove tapicero from more places | varac | |
| Remove from: - platform white-box tests (couchdb user ACLs, tapicero daemon test) - provider_base/ dir that handles the compilation of the hiera config file - Resolves: #7501 | |||
| 2015-09-24 | added firewall information to nodes (needed for `leap compile firewall`) | elijah | |
| 2015-09-10 | sshd: let nodes change default AllowTcpForwarding | elijah | |
| 2015-09-09 | ensure that the webapp has the service levels config it requires. | elijah | |
| 2015-09-09 | updates to zone compile and tags/development.json to be compatible with the ↵ | elijah | |
| definition of 'domain' in provider.env.json. | |||
| 2015-09-03 | service definition .json files should not refer to properties inherited from ↵ | elijah | |
| common.json. closes #7423 | |||
| 2015-08-31 | mx: added mx.key_lookup_domain property | elijah | |
| 2015-08-19 | allow ca_cert_uri to be configured | elijah | |
| 2015-08-19 | mv commands and macros to lib/leap_cli | elijah | |
| 2015-08-07 | move 'enabled service' calculation to a macro. | elijah | |
| 2015-08-03 | allow_registration should always be false if enrollment_policy is 'closed' | elijah | |
| 2015-08-03 | webapp: add support for customizing locales | elijah | |
| 2015-07-28 | Support RBL blocking of incoming mail (#5923) | Micah Anderson | |
| Set zen.spamhaus as the default rbl Change-Id: Ic3537d645c80ba42267bab370a1cf77730382158 | |||
| 2015-06-30 | pin leap_web to 0.7.1 | elijah | |
| 2015-05-06 | Merge branch '0.7.0' into develop | Micah Anderson | |
| 2015-05-06 | Change http.debian.net to now official name: httpredir.debian.org (#6932) | Micah Anderson | |
| Change-Id: I1e411ef3ffa2ef7fdcae90081f530f44023a96b6 | |||
| 2015-05-05 | improved `leap cert csr` error message | elijah | |
| 2015-05-05 | take advantage of improved environment binding in leap_cli (requires v 1.7.1) | elijah | |
| 2015-05-05 | much faster secret generation (now they only get generated when needed) | elijah | |
| 2015-04-30 | added a bunch more forbidden usernames0.7.0rc1 | elijah | |
| 2015-04-21 | block username 'vmail' | elijah | |
| 2015-03-30 | set platform version 0.7 | elijah | |
| 2015-03-30 | added support for rotating couchdb databases. | elijah | |
| 2015-03-19 | don't set a lower --fragment by default yet (not compatible with android client) | elijah | |
 |
index : leap_platform.git | |
| [leap_platform] | git repository hosting |
| summaryrefslogtreecommitdiff |
path: root/provider_base