Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-02-02 | don't deploy bundler debug to servers | kwadronaut | |
2016-01-22 | restructured site.pp, now only one class gets included in site.pp per ↵ | varac | |
service (Bug #6851) Also, moved global Exec{} defaults to site.pp Change-Id: I9ae91b77afde944d2f1312613b9d9030e32239dd | |||
2016-01-04 | Fix status module invocation for hidden service enabled webapps (#7776) | Micah | |
Change-Id: I101e4c9791102123d4334e1b84a48dacea99ac52 | |||
2015-11-30 | fix missing apache status module (#7638) | Micah | |
Change-Id: I77fa50990b5ae60074c54738e8c19929b486d1d0 | |||
2015-11-17 | [bug] [jessie] Load needed modules for apache 2.4 | varac | |
- Related: #6920 | |||
2015-10-30 | [feat] Add soledad::client class for soledad-sync | varac | |
- Restructure soledad class - Include soledad::client class on webapp nodes - Tested: [unstable.bitmask.net] - Related: #7523 | |||
2015-10-07 | [bug] Fix removal of webapp apache config file | varac | |
Done by including a service-dependend site_config::remove::webapp class. | |||
2015-09-30 | Fix server-status availability to tor hidden services (#7456) | Micah Anderson | |
Make the server-status information unavailable by putting the vhost on a port that isn't configured as available to the tor hidden-service. Change-Id: Idd3bfefb5b7fc26fb0a8cf48cdf6afc68a4192bb | |||
2015-09-03 | make couchdb.admin.yml only readable by root, make non-admin cron run as ↵ | elijah | |
webapp user. | |||
2015-04-16 | properly clean up unused files | elijah | |
2015-04-16 | clean up logging mess: add 'logfile' define, mv openvpn and stunnel logs to ↵ | elijah | |
their own files, fix mx logwatch path. | |||
2015-04-15 | disable 'rake cleanup:sessions' cron job. | elijah | |
2015-04-08 | move rotated db creation to site_couchdb and fix rotated db tests | elijah | |
2015-03-30 | added support for rotating couchdb databases. | elijah | |
2015-02-04 | consolidate sources into common.json | elijah | |
2015-01-12 | Adds apache support for webapp.domain if defined. Fixes #6632 | guido | |
Change-Id: If63aac60e44c4a68f030f93e20e8dc071f9df610 | |||
2014-12-09 | Soledad sync check needs python-u1db package installed (Bug #6520) | varac | |
Change-Id: I8a6c27434f548f24d9dba1a969699200ab307477 | |||
2014-12-02 | Use $hostname to locate tor.key. Fixes #6478 | guido | |
Change-Id: Ibbe3687d5a773b444f6e9145bf235aaeea637e1d | |||
2014-11-07 | Better check for tor hidden service on a webapp node. | guido | |
Change-Id: I92f69b6fa30aae953243ae19096e2998810c9ac6 | |||
2014-11-04 | Adds support for Tor hidden service on webapp (Feature #6273) | guido | |
Change-Id: I56250e05e3a933deacd0b6e02192e712d3fd9fd5 | |||
2014-09-03 | Merge branch 'master' into develop | varac | |
Conflicts: platform.rb puppet/modules/site_config/manifests/hosts.pp | |||
2014-08-28 | syslog logs everything but webapp FIX #6020 | guido | |
2014-08-05 | Fixes: #5952 Webapp now logs to it's own file instead of syslog and user.log | guido | |
2014-06-25 | stunnel: make site_mx and site_webapp use new site_stunnel | elijah | |
2014-06-17 | allow webapp.json to configure what engines are enabled | elijah | |
2014-05-22 | remove old classes | Christoph | |
site_mx::haproxy and site_webapp::haproxy only included site_haproxy. They didn't do anything else. So just include site_haproxy in manifests/init.pp and remove the unused classes | |||
2014-05-22 | fix haproxy config if webapp and mx run on the same host | Christoph | |
the problem was, that both site_mx::haproxy and site_webapp::haproxy declared the same resource. I fixed it by moving that resource to site_haproxy. Since that gets included by both classes, everything works like a charm | |||
2014-02-27 | check syslog for webapp errors | varac | |
2014-02-10 | move leap_webapp.conf template to common.conf which is included by the ↵ | varac | |
nagios and webapp node (#5096) | |||
2014-01-22 | anonymize webapp ips (Bug #4896) | varac | |
2014-01-08 | fix webapp couchdb.yml to be couchdb.yml not couchdb.yml.webapp | elijah | |
2014-01-02 | added support for minimum client version checking | elijah | |
2013-11-28 | fix cwd in webapp cronjobs | Micah Anderson | |
Change-Id: I2e189bf5e209c731077539a57f9b334ac66cd25b | |||
2013-11-28 | remove admin access from webapp | Micah Anderson | |
Change-Id: Ib2ce0d38a8e4dd30ae6842bfb5579d9c3dd10f18 | |||
2013-11-27 | add webapp cron entries to cleanup sessions and tokens (#4572) | Micah Anderson | |
Change-Id: Ic1ef7e25f07cbbbcea9bcc90248479009904303e | |||
2013-11-22 | improvements to webapp deployment: allow for greater customization, allow ↵ | elijah | |
for custom git source, improve apache config. | |||
2013-11-22 | added custom index.html | elijah | |
2013-10-11 | fixed issues from https://review.leap.se/r/98/ | varac | |
2013-10-11 | install ruby-dev for nickserver/webapp (#4079 + #4080) | varac | |
2013-09-24 | deploy client_ca on webapp node | varac | |
2013-09-24 | webapp leftover for seperate cert and key deployment (Feature #3918) | varac | |
2013-09-24 | https://bitmask.net/ca.crt gives 403 Forbidden (Bug #3919) | varac | |
2013-09-24 | move commercial x509 deployment to site_x509 (Feature #3889) | varac | |
2013-09-24 | seperate cert and key deployment (#3918) | varac | |
2013-09-22 | Merge branch 'api-crt-3384' into develop fixes #3384 | kwadronaut | |
2013-09-22 | adding fqdn as default servername and moving service.domain to ServerAlias ↵ | kwadronaut | |
(fixing #3384) node name and dns fqdn could be different Also note that on local deploys that warning from #3384 will continue to exist (because of dns) | |||
2013-09-20 | use newer haproxy_servers macro in order to allow couchdb and webapp to be ↵ | elijah | |
on the same node (requires latest leap_cli) | |||
2013-09-19 | webapp: Depend services on deployment of default key, cert and ca (Feature ↵ | varac | |
#3838) | |||
2013-09-19 | only deploy x509 stuff for nodes if it existes in hiera (Feature #3875) | varac | |
2013-09-18 | Setup a class dependency for every tag 'leap_service' to make sure that ↵ | Micah Anderson | |
shorewall is setup before the service is setup. This is necessary due to the strict initial firewall that stops various service setup operations from happening, but is relaxed once shorewall is setup properly (#3782) Change-Id: Ia9640c4118aa0053cdb99e7bc11860fed5527501 |