Age | Commit message (Collapse) | Author | |
---|---|---|---|
2013-03-28 | added stunnel_server | elijah | |
2013-03-19 | add webapp secret token that pulls from hiera a 'secret' | Micah Anderson | |
2013-03-19 | create a separate couchdb.yml.admin that contains the couchdb admin ↵ | Micah Anderson | |
privileges, putting the unprivileged ones in as user webapp in couchdb.yml. This allows us to migrate the couchdb design docs on deployment, but use an unprivileged user the remainder of the time | |||
2013-03-19 | fix spelling of 'command' parameter | Micah Anderson | |
2013-03-19 | fix missing closing curly brace | Micah Anderson | |
2013-03-19 | configure webapp haproxy couchdb connection | Micah Anderson | |
2013-03-19 | configure site_webapp::haproxy to ship a haproxy config::fragment to setup the | Micah Anderson | |
haproxy listener 'bigcouch-in'. This haproxy listener is configured to listen on port 4096 (arbitrarily chosen) and balance across the locally configured stunnels to the bigcouch instances It may be that we will need some additional haproxy options for handling persistence, cookies, or other HTTP headers, I'm unsure as of this moment | |||
2013-03-19 | Migrate the couchdb design documents during webapp deploy (#1976) | Micah Anderson | |
2013-03-18 | Webapp: Use stunnel localhost:5000 for couchdb connection | varac | |
2013-03-17 | fix webapp/couchdb stunnel certificate authority | Micah Anderson | |
2013-03-16 | Merge branch 'stunnel_switch' into develop | varac | |
2013-03-16 | pick the first couchdb host for webapp couch config | varac | |
Until we have a proper load balancing setup (see https://leap.se/code/issues/1994) | |||
2013-03-14 | add couchdb stunnel clients | Micah Anderson | |
2013-02-12 | Merge remote-tracking branch 'origin/develop' into bundle-and-precompile-as-user | Micah Anderson | |
2013-02-10 | set webapp module to use try::file where appropriate | elijah | |
2013-02-09 | run bundler and rake assets:precompile as normal user | Azul | |
otherwise the generated files will be owned by root and the bundle will be inside roots /home/max | |||
2013-02-06 | include shorewall config for webapp and couchdb | varac | |
2013-02-04 | compile assets for webapp, fixes #1628 | varac | |
2013-02-03 | Increase Exec[bundler_update] timeout | varac | |
Exec[bundler_update] can take a really long time, increasing timeout from 300s (default) to 600s fixes Increase command timeout for Exec[bundler_update] (Feature #1643) | |||
2013-01-31 | update the x509 submodule to get non-root application access to key file ↵ | Micah Anderson | |
enhancement put the leap-webapp user in the 'ssl-cert' group pass group => 'leap-webapp' to the leap_client_ca.key so the application can access it | |||
2013-01-31 | tag 'base' is a bad idea because it invokes apache::base as well | varac | |
2013-01-31 | tag 'service' for all service classes | varac | |
2013-01-29 | test the $webapp['img_dir'] variable to see if it is undef or not, the default | Micah Anderson | |
in the json is ~ (nil), which ends up being undef in puppet (closes #1575) | |||
2013-01-21 | client ca -- configure the webapp with the client ca | elijah | |
2013-01-13 | added ability to customize the webapp appearance | elijah | |
2013-01-11 | configure webapp with correct domain | elijah | |
2013-01-03 | using master branch for webapp now. | Azul | |
develop branch is no longer used in webapp dev and will be removed. | |||
2012-12-19 | webapp api now uses a customizable port (so that we don't try to rely on SNI ↵ | elijah | |
for hosting two TLS domains on one IP). | |||
2012-11-29 | change api CA cert deployment to just symlink to the already deployed file | Micah Anderson | |
2012-11-29 | change ensure parameter to explicit 'directory' for /srv/leap-webapp | Micah Anderson | |
2012-11-29 | updated bundler module to accept 'package' to install_method to be a little ↵ | Micah Anderson | |
more obvious how it is operating | |||
2012-11-27 | switch from hiera_array to just hiera | Micah Anderson | |
2012-11-27 | fix location of couchdb.yml template | Micah Anderson | |
2012-11-27 | fix name of eip_service | Micah Anderson | |
2012-11-27 | setup the couchdb class to provide the couchdb connection parameters | Micah Anderson | |
2012-11-27 | make sure the webapp/public/config directory exists and the eip-service.json ↵ | Micah Anderson | |
is provided there | |||
2012-11-27 | map /1 -> document root | Micah Anderson | |
2012-11-27 | add site_webapp class to install the certs/keys/CAs and virtual host ↵ | Micah Anderson | |
configurations | |||
2012-11-27 | place the provider.json and ca.crt in the webroot | Micah Anderson | |
2012-11-27 | add hiera keys for provider | Micah Anderson | |
include site_webapp::apache | |||
2012-11-22 | use origin/develop instead of develop as revision | varac | |
2012-11-22 | switch to the develop branch for the webapp git repository for ↵ | Micah Anderson | |
deployment/testing. when released, this should track a stable release | |||
2012-11-22 | remove escaping double-quotes, it turns out these are passed directly to the ↵ | Micah Anderson | |
command causing it to fail | |||
2012-11-20 | add initial site_webapp module | Micah Anderson | |