summaryrefslogtreecommitdiff
path: root/puppet/modules/site_openvpn/manifests
AgeCommit message (Expand)Author
2013-02-26require that the package unbound be installed before trying to write to itsMicah Anderson
2013-02-21linted a bitvarac
2013-02-21lintedvarac
2013-02-21lintedvarac
2013-01-31tag 'base' is a bad idea because it invokes apache::base as wellvarac
2013-01-31Merge branch 'develop' of ssh://leap.se/leap_platform into developelijah
2013-01-31added /etc/openvpn/ca_bundle.pem in order to allow multiple CA certs to be used.elijah
2013-01-31tag 'service' for all service classesvarac
2013-01-30lintedvarac
2013-01-29added support for client ca cert in site openvpn.elijah
2013-01-29fix variable name for re-ordered factMicah Anderson
2013-01-29fix variable scopingMicah Anderson
2013-01-29fix syntax error from enclosing variables in curlyMicah Anderson
2013-01-29enclose the variables in curly braces, as recommended by puppet-lintMicah Anderson
2013-01-29add a new fact that provides a fact for each configured ip address, telling youMicah Anderson
2013-01-17notify unbound when these configuration files changeMicah Anderson
2013-01-17fix typo in cidr variable nameMicah Anderson
2013-01-17change to using the CIDR notation for unbound access listMicah Anderson
2013-01-17fully qualify the variables that are used in the vpn gateway resolverMicah Anderson
2013-01-17unfortunately the version of unbound that is in wheezy does not support wildcardMicah Anderson
2013-01-17fix unbound access controlMicah Anderson
2013-01-16setup openvpn gateway resolver to listen on the udp/tcp virtual network ips soMicah Anderson
2013-01-16update unbound submodule to fix infinite service restart problemMicah Anderson
2013-01-16setup site_unbound with a basic caching-only configuration and include that onMicah Anderson
2013-01-16remove unnecessary include that was left over from c2d57624c15dfaff038f9991f0...Micah Anderson
2012-12-10openvpn: use x509 module to deploy certs (fixes #1064)varac
2012-11-23enable ip_forwarding #1029varac
2012-11-23openvpn -- enforce certain cipher choices on the serverelijah
2012-11-22clean up openvpn and x509 pathselijah
2012-11-22deploy openvpn server.crt and server.keyvarac
2012-11-21move site_config::eip to site_openvpn (Feature #943)varac
2012-11-21hiera variable for openvpn dh parameters changedvarac
2012-10-30prettyfyingvarac
2012-10-29no need for server-up.sh right nowvarac
2012-10-11renamed hiera keys to work with leap_clivarac
2012-10-04different parameter for each configvarac
2012-10-04dh1204.pem -> dh.penvarac
2012-10-04finished site_openvpn::server_configvarac
2012-10-04adopted most static parametersvarac
2012-10-04include openvpn keysvarac
2012-10-04cosmeticsvarac
2012-10-04+ site_openvpn::keysvarac
2012-10-04cosmetics for server_config.ppvarac
2012-09-21basic configuration for openvpn server filesvarac
2012-09-21oved things aroundroot
2012-09-20beginning of site_openvpnvarac