leap_platform.git - [leap

Age	Commit message (Collapse)	Author
2017-05-10	Nickserver direct access to couchdb on same node	varac
	Depending whether couchdb is running on the same node as nickserver, couchdb is available on localhost: - When couchdb is running on a different node: Via stunnel, which is bound to 4000. - When couchdb is running on the same node: On port 5984 Resolves: #8793
2017-03-15	[8144] Remove Haproxy	varac
	We used haproxy because we had multiple bigcouch nodes but now with a single couchdb node this is not needed anymore. - Resolves: #8144
2017-02-23	Cleanup modified Gemfile.lock before pulling nickserver vcsrepo	varac
	Resolves: #8492
2017-01-18	Use systemd unit file for nickserver [#8578]	varac

2016-07-13	Notify Exec[shorewall_check] not Service[shorew..]	varac
	Latest shorewall module does `shorewall check` (executed by `Exec[shorewall_check]`) so every related resource change must notify this Exec instead of `Service[shorewall]` as before.
2016-05-03	migrate from obsolete SSLCertificateChainFile apache option (#8055)	kwadronaut

2016-01-22	[bug] refactor build-essential package installation	varac
	In certain node setups, the webapp gems cannot get built because `build-essential` and dependent packages were not present. I refactored the `site_config::packages::build_essential` class, which now inherits `site_config::packages`. The latter class removes all unneccessary (development) packages, but when the `site_config::packages::build_essential` class is included, some dev packages are overridden to be installed. - Tested: [local] - Resolves: #7834
2015-12-02	fix nickserver dependency for wheezy	varac

2015-11-28	[bug] [jessie] register nickserver at systemd	varac
	- resolves #7614
2015-05-26	Implement weakdh recommendations for cipher suites (#7024)	Micah Anderson
	This is a first step mitigation until we can have a newer apache that will allow us to specify dh parameters other than the default. Change-Id: Ibfcee53b331e8919466027dde1a93117b5210d9d
2015-02-04	consolidate sources into common.json	elijah

2014-10-15	Disable SSLv3, and RC4 ciphers	Micah Anderson
	Change-Id: I7214aa4334e3d817dd1b6d8dce43523e3d955b5d
2013-12-24	move nickserver config to /etc/nickserver.yml (fixes #4843)	elijah

2013-11-28	remove nickserver admin user, and fix nickserver couchdb hiera variables	Micah Anderson
	Change-Id: I5bdb6b946becdc95cadc92651c06e66b826e2698
2013-11-28	remove admin access from nickserver	Micah Anderson
	Change-Id: If7fff4c2b839cef5807ee8cee1355aea4dc719a8
2013-10-11	fixed issues from https://review.leap.se/r/98/	varac

2013-10-11	install ruby-dev for nickserver/webapp (#4079 + #4080)	varac

2013-09-24	seperate cert and key deployment (#3918)	varac

2013-09-20	fix whitespace issues from https://review.leap.se/r/82	varac

2013-09-19	tidy nickserver x509 definitions (#3842)	varac

2013-09-19	only deploy x509 stuff for nodes if it existes in hiera (Feature #3875)	varac

2013-09-18	Setup a class dependency for every tag 'leap_service' to make sure that ↵	Micah Anderson
	shorewall is setup before the service is setup. This is necessary due to the strict initial firewall that stops various service setup operations from happening, but is relaxed once shorewall is setup properly (#3782) Change-Id: Ia9640c4118aa0053cdb99e7bc11860fed5527501
2013-09-04	change git repository clone URIs from git:// to https:// (#3732)	Micah Anderson
	Change-Id: Ic700fec9cfb8e8474fb65dbdd4a1a537bf586ec9
2013-08-29	change the name of the couch_database in the nickserver.yaml to the new one	Micah Anderson
	Change-Id: I5fe6912f3774ae87c595ca1dcac60a61e24de9e5
2013-07-15	lint nickserver class	Micah Anderson
	Change-Id: I03cdb5a6255d245cb1163a30b221b4c32dc4bef6
2013-05-21	nickserver - added support for apache reverse proxy frontend to handle the TLS.	elijah

2013-05-18	nickserver - ensure libssl-dev is installed before EventMachine gem is ↵	elijah
	installed.
2013-05-18	added module site_nickserver	elijah