Age | Commit message (Collapse) | Author | |
---|---|---|---|
2013-07-30 | added webapp.secure flag (turns on secure cookies and HSTS) | elijah | |
2013-07-30 | site_webapp - add support for haproxy weights and backup servers (resolves ↵ | elijah | |
#3278) | |||
2013-07-29 | site_webapp bugfix - get compile_assets to run by ensuring .scss files are ↵ | elijah | |
created beforehand and have the correct permissions. | |||
2013-07-23 | not need for file { '/srv/leap/webapp': }, we have vcsrepo { ↵ | varac | |
'/srv/leap/webapp': } | |||
2013-07-23 | /srv/leap/webapp/public/img: require => Vcsrepo['/srv/leap/webapp'] | varac | |
2013-07-11 | changes to support restrictive permissions for /etc/leap. this is required ↵ | elijah | |
to work with the latest leap_cli. | |||
2013-07-06 | site_webapp -- make bundler not install test-only or development-only gems. | elijah | |
2013-05-23 | Merge branch 'feature/switch-webapp-location' into develop | Micah Anderson | |
Conflicts: puppet/modules/site_webapp/manifests/init.pp Resolved lint differences Change-Id: Ifbc535ec844222c9f6f0dd71ac12742230bb64ee | |||
2013-05-22 | add missing require => on the vcsrepo which could cause these resources to fail | Micah Anderson | |
2013-05-22 | add requirements to the try::file resources | Micah Anderson | |
normally a file resource would automatically require the parent directory first, but try::file doesn't do this so it has errors if /srv/leap/webapp doesn't exist yet: for example: - [web1] err: /Stage[main]/Site_webapp/Try::File[/srv/leap/webapp/public/img]/Exec[restore_/srv/leap/webapp/public/img]/returns: change from notrun to 0 failed: Working directory '/srv/leap/webapp/public' does not exist that was 'tried' before the vcsrepo was done which would have resolved that problem. This makes sure that the vcsrepo is done first | |||
2013-05-22 | add force => true parameter to webapp vcsrepo checkout | Micah Anderson | |
this should have been added to d669a5fb56acf9101cf677ecbd30bcc47b092cd3 resolve #1722 after the vcsrepo module was updated to handle this, but it wasn't. | |||
2013-05-22 | change paths for leap webapp to be under /srv/leap/webapp from /srv/leap-webapp | Micah Anderson | |
2013-05-18 | added module site_nickserver | elijah | |
2013-05-14 | added smtp-service.json, requires latest leap_cli | elijah | |
2013-04-30 | added soledad-service.json | elijah | |
2013-04-26 | Merge branch 'develop' of ssh://code.leap.se/leap_platform into develop | varac | |
2013-04-26 | Revert "webapp: use admin creds for now, until we fixed couchdb user ↵ | varac | |
permissions" This reverts commit 830f2408fa210016fdef855da8b3fd28421bff32. | |||
2013-04-24 | provider base - service definitions are now versioned (requires new leap_cli) | elijah | |
2013-04-24 | user leap-webapp instead of leap_webapp | varac | |
2013-04-24 | couchdb.yml.admin is changed on every puppetrun from leap-webapp to root | varac | |
2013-04-23 | fix mode for webapp production.log (#2300) | Micah Anderson | |
2013-04-22 | webapp -- fixed bug in configuration | elijah | |
2013-04-18 | update apache module to take the 'ssl' parameter, and pass it to the class, this | Micah Anderson | |
eliminates a potential variable lookup ordering problem (#2273) | |||
2013-04-17 | update apache module to new 2.7 style | Micah Anderson | |
2013-04-16 | move secret token into the config.yaml | Micah Anderson | |
2013-04-11 | webapp: use admin creds for now, until we fixed couchdb user permissions | varac | |
2013-04-09 | make sure the production environment is used for the migrations | Micah Anderson | |
2013-04-09 | add a httpchk line to haproxy to properly test if the couchdb is available | Micah Anderson | |
add the useful http-server-close option set check option on the servers, with a 3 second interval, a one second fastinter (for flapping) and a one second downinter. Set the number of checks for failure to be one (so it will take 3 seconds for a node to fail out) and 2 checks to come back | |||
2013-04-04 | set permissions on the rails production.log, otherwise passenger complains ↵ | Micah Anderson | |
about this in the apache log file | |||
2013-04-04 | fix typo in x509::variables | Micah Anderson | |
2013-04-04 | make sure the couchdb.yml permissions are set properly | Micah Anderson | |
2013-04-04 | fix missing comma | Micah Anderson | |
2013-04-04 | pass $ca_name to stunnel::setup - this eliminates a dynamic scoped variable ↵ | Micah Anderson | |
lookup, and warning | |||
2013-04-02 | refactor couch_client stunnel to use new stunnel_client leap_cli macro | Micah Anderson | |
re-order variables to be more consistant | |||
2013-04-02 | provide stunnel connect_port to site_webapp:couchdb | varac | |
2013-04-02 | moving generic stunnel config from site_webapp to site_stunnel now working | varac | |
2013-04-02 | moved generic stunnel config from site_webapp to site_stunnel | varac | |
2013-03-28 | added stunnel_server | elijah | |
2013-03-19 | add webapp secret token that pulls from hiera a 'secret' | Micah Anderson | |
2013-03-19 | cp instead of mv for the couchdb configuration file | Micah Anderson | |
if we move, then we need to re-create the file on the next deploy | |||
2013-03-19 | create a separate couchdb.yml.admin that contains the couchdb admin ↵ | Micah Anderson | |
privileges, putting the unprivileged ones in as user webapp in couchdb.yml. This allows us to migrate the couchdb design docs on deployment, but use an unprivileged user the remainder of the time | |||
2013-03-19 | fix spelling of 'command' parameter | Micah Anderson | |
2013-03-19 | fix missing closing curly brace | Micah Anderson | |
2013-03-19 | configure webapp haproxy couchdb connection | Micah Anderson | |
2013-03-19 | configure site_webapp::haproxy to ship a haproxy config::fragment to setup the | Micah Anderson | |
haproxy listener 'bigcouch-in'. This haproxy listener is configured to listen on port 4096 (arbitrarily chosen) and balance across the locally configured stunnels to the bigcouch instances It may be that we will need some additional haproxy options for handling persistence, cookies, or other HTTP headers, I'm unsure as of this moment | |||
2013-03-19 | Migrate the couchdb design documents during webapp deploy (#1976) | Micah Anderson | |
2013-03-19 | turn off automatic updates of couchdb design docs (#1979) | Micah Anderson | |
2013-03-18 | Webapp: Use stunnel localhost:5000 for couchdb connection | varac | |
2013-03-17 | fix webapp/couchdb stunnel certificate authority | Micah Anderson | |
2013-03-17 | added support for "limited" service levels (although vpn is not yet actually ↵ | elijah | |
rate limited). |