summaryrefslogtreecommitdiff
path: root/puppet/manifests/site.pp
AgeCommit message (Collapse)Author
2017-10-05Feat: split tor service into threeelijah
The 'tor' service is now three separate services, 'tor_exit', 'tor_relay', or 'hidden_service'.
2017-05-06Restructure site_tor to be more clear and re-usable (fixes #8784).Micah Anderson
This makes a more clear site_tor::relay class that the leap service includes, and a more generic site_tor class that other classes can depend on for setting up the initial install.
2016-06-14[bug] Fix site_obfsproxy services variable lookupvarac
After including everything into a `node default` scope in puppet/manifests/site.pp to make puppet-catalog-test happy (see commit 62ea45d47), we get this error: Error: member(): Requires array to work with at /srv/leap/puppet/modules/site_obfsproxy/manifests/init.pp:14 Moving the `services` hiera avaluation out of the node scope back to top level scope will solve this.
2016-06-11use node default {} in site.pp for catalog testvarac
2016-03-31[feat] Dont install recommended packagesvarac
By default, Puppet installs recommended packages. We turn this off for all apt Package resources.
2016-03-15Revert "[feat] Use systemd as service provider"varac
This reverts commit 0aebb4c41f96f6ad7a7e8a3b07eaffa1f9075f51. We enabled systemd as puppet service default provider, but this results in these services falsely detected as not running, and restarted on every deploy. We need to indivually configure systemd as service provider only for those services that ship a systed unit file. see #7966 for details
2016-03-08[feat] Use systemd as service providervarac
Even when the service provider defaults to systemd in latest puppet, it still defaults to 'debian' in puppet 3.7.2 (jessie version). We dropped wheezy support so we should use the systemd provider for now. https://docs.puppetlabs.com/puppet/latest/reference/type.html#service-provider-systemd
2016-01-28[feat] Fix fast deploy using 'leap deploy --fast'varac
This worked before, but somehow stopped working. We need to include 'site_config::slow' top-level scope instead of including it in 'site_config::default', because otherwise it would get tagged with 'leap_base', and would be included always. This way 'site_config::slow' gets included by default, but can be excluded by using 'leap deploy --fast'. See https://leap.se/en/docs/platform/details/under-the-hood#tags - Resolves: #7844
2016-01-22restructured site.pp, now only one class gets included in site.pp per ↵varac
service (Bug #6851) Also, moved global Exec{} defaults to site.pp Change-Id: I9ae91b77afde944d2f1312613b9d9030e32239dd
2015-10-06[feat] remove tapicero leftoversvarac
Soledad now creates user-dbs, which has been done by tapicero in the past. we need to remove any leftovers from tapicero.
2015-04-26Exec[] should log the output of the command on failure #6851varac
Change-Id: If99ae4036f9210516762f5cd7eb66744661a9665
2014-07-01Check appropriately if obfsproxy is included in servicesirregulator
2014-07-01Initial commit for obfsproxy server feature in platformirregulator
2014-06-04bugfix: actually apply modules based on $serviceselijah
2014-06-03move hiera from site.pp to site_config::setupChristoph
the problem was following: if a host has the webapp service, the template for /etc/hosts adds some stuff. But setup.pp did not ask hiera about the services so "/srv/leap/bin/puppet_command set_hostname" always resets the hostname. Since that gets triggered every time you run "leap deploy" the hostname changes, some services restart, then the hostname changes back and the services restart again. The solution is to get the hiera data before every run.
2014-04-04Merge branch '2993_setup_subclass' into 0.6varac
2014-03-25Move setup.pp to a subclass (site_config::setup) (Feature #2993)varac
2014-03-23modules/site_static: part 1 - amberelijah
2013-11-27initial tapicero configurationMicah Anderson
Change-Id: Ie53b09df0758ba01b30ed658bee04682bc180b01
2013-09-20move all resources that are applied on every node into site_config::default ↵varac
(#3782) in commit 338833, we established a relationship between all resources that have a leap_service tag, that are called in site.pp. But we had some resources as default on every node in site.pp (apt::update, Package { require => Exec['apt_updated'] }, site_config::slow and stdlib), that were still lacking any relationship to the leap_service tag. By moving them into default.pp they automatically are executed before resources with a leap_service tag.
2013-09-05puppet fails if no services are configured (Bug #3747)varac
2013-07-26Merge branch 'feature/soledad' into feature/leap_mxMicah Anderson
2013-07-26Merge branch 'varac/feature/mx' into feature/leap_mxMicah Anderson
Conflicts: provider_base/services/mx.json puppet/manifests/site.pp puppet/modules/site_mx/manifests/init.pp puppet/modules/site_postfix/manifests/mx.pp Change-Id: Ib2952f6cb972c40a998f20d7bbdb23bb35bef419
2013-07-25initial soledad configurationMicah Anderson
Change-Id: I19e91887c3f8e90764b4baef8c5e29e25658e190
2013-07-25no need to import common anymorevarac
2013-07-25include site_mxvarac
2013-07-09re-add mx servicevarac
2013-07-09no need to import common anymorevarac
2013-06-27update the apt submodule in order to get the fix for unattended_upgrades ↵Micah Anderson
(#2984) and the custom_key_dir as a class parameter remove the global variable from setup.pp and site.pp and instead pass it into the apt class declaration as a parameter Change-Id: I24806f2fd22b5a066b951c5f76f3dd748481b5b6
2013-06-18The way we were testing if $services had a particular word in it is not veryMicah Anderson
good. If we search for the word 'tor' we will find it when the variable contains "monitor". This commit makes the regular expression more specific based on the word boundaries. Change-Id: I4dcd80db7322cabc3f71b77fabf7eacd83b4d572
2013-06-11Fixes #2669 - stop services array from being reported smashed togetherMicah Anderson
Change-Id: I74dfe1941eb338a89be994ac9e1b61739601d9db
2013-05-18added module site_nickserverelijah
2013-04-24take out plain couchdb setup, always deploy bigcouch (Feature #2176)varac
2013-04-10clean up ca_daemon things, it is not used any longer because it has been ↵Micah Anderson
included in the web app (#1978) remove site_ca_daemon module and configuration in site.pp as well as the provider_base/services/ca.json
2013-03-14evalute $services before including site_config::*varac
2013-03-12enable leap deb package repository and leap apt key on all hostsvarac
2013-03-10use parameterized couchdb class instead of calling site_couchdb::bigcouch ↵varac
directly
2013-03-09use site_couchdb::bigcouchvarac
2013-02-12make sure that apt-get update is run before any package is installed (#1745)Micah Anderson
2013-02-12switch to using stdlib's standard stagesMicah Anderson
2013-02-06add basic tor servicevarac
2013-02-01moved concat::setup to site_config::defaultvarac
Because in site.pp it didn't get the tag "leap_base" and would not be declared with leap cli's default puppet tags. Fixes: parent directory /var/lib/puppet/concat does not exist (Feature#1625)
2013-01-31include site_nagios so every subclass inherits tag 'service'varac
2013-01-31puppet tags: site_config::default and site_config::slowvarac
2013-01-29run stage declaration moved to site.ppvarac
2013-01-27added 'development' hiera hash to exclude certain class for better testingvarac
2013-01-26apply site_nagios::servervarac
2013-01-17set a default exec path for all nodesMicah Anderson
2012-12-07ca -> ca_daemon in site.pp and services/ca.jsonvarac
2012-12-04use site_cavarac