leap_platform.git - [leap

Age	Commit message (Collapse)	Author
2014-05-22	Implement #2328: unbound.conf: content changed on every puppetrun	Micah Anderson
	This is done by using the include glob capability that is in the wheezy-backports and newer unbound to include the /etc/unbound/unbound.conf.d/* config files. To do this, we need to transition from our /etc/unbound/conf.d directory structure to use the one that the debian package uses. This allows us to clean up the rather ugly way we were configuring the resolver before. Change-Id: I68347922f265bbd0ddf11d59d8574a612a7bd82c
2013-10-02	only add vpn_(un)?limited_udp_resolver and vpn_(un)?limited_tcp_resolver ↵	Micah Anderson
	lines to unbound.conf if the openvpn package is installed (#3868) Change-Id: I65852660a606ccea7569b2207bd535bd8aa3867c
2013-07-09	use file_line from stdlib instead of line, now both ↵	varac
	vpn_unlimited_tcp_resolver and vpn_unlimited_udp_resolver are included
2013-03-17	added support for "limited" service levels (although vpn is not yet actually ↵	elijah
	rate limited).
2013-02-26	require that the package unbound be installed before trying to write to its	Micah Anderson
	configuration file, this addresses issue #1853 - [vpn1] err: /Stage[main]/Site_openvpn::Resolver/Line[add_tcp_resolver]/Exec[echo 'server: include: /etc/unbound/conf.d/vpn_tcp_resolver' >> '/etc/unbound/unbound.conf']/returns: change from notrun to 0 failed: echo 'server: include: /etc/unbound/conf.d/vpn_tcp_resolver' >> '/etc/unbound/unbound.conf' returned 2 instead of one of [0] at /srv/leap/puppet/modules/common/manifests/defines/line.pp:45
2013-02-21	linted	varac

2013-01-17	notify unbound when these configuration files change	Micah Anderson

2013-01-17	fix typo in cidr variable name	Micah Anderson

2013-01-17	change to using the CIDR notation for unbound access list	Micah Anderson

2013-01-17	fully qualify the variables that are used in the vpn gateway resolver	Micah Anderson

2013-01-17	unfortunately the version of unbound that is in wheezy does not support wildcard	Micah Anderson
	include directives, so this commit works around this by doing something less elegant than before. When we have the newer unbound available, we should switch to that method instead.
2013-01-17	fix unbound access control	Micah Anderson

2013-01-16	setup openvpn gateway resolver to listen on the udp/tcp virtual network ips so	Micah Anderson
	that queries can be made from clients on the vpn
2013-01-16	update unbound submodule to fix infinite service restart problem	Micah Anderson