Age | Commit message (Collapse) | Author | |
---|---|---|---|
2013-09-24 | deploy client_ca on webapp node | varac | |
2013-09-24 | webapp leftover for seperate cert and key deployment (Feature #3918) | varac | |
2013-09-24 | added site_config::x509::client_ca::cert and ↵ | varac | |
site_config::x509::client_ca::key for client_ca deployment (#3917) | |||
2013-09-24 | https://bitmask.net/ca.crt gives 403 Forbidden (Bug #3919) | varac | |
2013-09-24 | move commercial x509 deployment to site_x509 (Feature #3889) | varac | |
2013-09-24 | seperate cert and key deployment (#3918) | varac | |
2013-09-22 | Merge branch 'api-crt-3384' into develop fixes #3384 | kwadronaut | |
2013-09-22 | adding fqdn as default servername and moving service.domain to ServerAlias ↵ | kwadronaut | |
(fixing #3384) node name and dns fqdn could be different Also note that on local deploys that warning from #3384 will continue to exist (because of dns) | |||
2013-09-20 | use newer haproxy_servers macro in order to allow couchdb and webapp to be ↵ | elijah | |
on the same node (requires latest leap_cli) | |||
2013-09-20 | fix whitespace issues from https://review.leap.se/r/82 | varac | |
2013-09-19 | fix x509 path in webapp config.yml.erb (#3894) | varac | |
2013-09-19 | webapp: Depend services on deployment of default key, cert and ca (Feature ↵ | varac | |
#3838) | |||
2013-09-19 | only deploy x509 stuff for nodes if it existes in hiera (Feature #3875) | varac | |
2013-09-18 | Setup a class dependency for every tag 'leap_service' to make sure that ↵ | Micah Anderson | |
shorewall is setup before the service is setup. This is necessary due to the strict initial firewall that stops various service setup operations from happening, but is relaxed once shorewall is setup properly (#3782) Change-Id: Ia9640c4118aa0053cdb99e7bc11860fed5527501 | |||
2013-09-13 | setup stunnel config to use default x509 cert,key+ca (#3837) | varac | |
* fix stunnel setups for couchdb, mx, webapp services | |||
2013-09-13 | use define instead of class for site_stunnel::setup (#3817) | varac | |
so it can be called multiple times | |||
2013-09-05 | require that shorewall is up before running bundler commands, it needs to ↵0.3.0rc1 | Micah Anderson | |
pull things from git (#3756) Change-Id: If404452c54dedb7a39a910994dc68309257d351d | |||
2013-09-04 | change git repository clone URIs from git:// to https:// (#3732) | Micah Anderson | |
Change-Id: Ic700fec9cfb8e8474fb65dbdd4a1a537bf586ec9 | |||
2013-09-02 | specify RAILS_ENV when calling bundle assets-precompile (fixes #3638) | Azul | |
We currently disable the billing gem in production while it's on in development and test. Therefore bundler will not install its dependencies - in particular the braintree gem when deploying. Since the RAILS_ENV was not specified rake was called with the default of 'development'. It therefore tried to load the development gems and failed when looking for 'braintree'. Specifying the production RAILS_ENV fixes this. It looks like we'll always need to specify RAILS_ENV when calling rake or we might want to export it to the environment in a separate task or the user config files such as .bashrc | |||
2013-08-29 | create individual classes for the apache modules so they can be included ↵ | Micah Anderson | |
more than once in different locations, depending on what services are configured on a node (#3612) Change-Id: Iff064d3d67baa132fb5198fea741522ab4e71770 | |||
2013-08-28 | require VCS repo before git assume-unchanged (feature #1608) | Azul | |
2013-08-27 | move git::changes into git module, whitespace fix | Azul | |
2013-08-27 | specify cwd when using git:changes | Azul | |
2013-08-27 | git:changes expect changes to certain files | Azul | |
You can either ensure assume-unchanged or ensure those changes are tracked. Used to keep the git status clean. | |||
2013-08-27 | make git forget about the changes due to symlinking files | Azul | |
Git normally tracks the dummy files we replace with symlinks. So we tell it to ignore these changes on deploy. | |||
2013-08-14 | Fix problem where webapp production.log had the wrong permissions - #3471 | Micah Anderson | |
Change-Id: I20a6ecc43e36fc1e8416c46f7e4d14726995d2f2 | |||
2013-07-30 | webapp - use hiera config "webapp.admins" for the list of admin usernames, ↵ | elijah | |
default to empty list. | |||
2013-07-30 | added webapp.secure flag (turns on secure cookies and HSTS) | elijah | |
2013-07-30 | site_webapp - add support for haproxy weights and backup servers (resolves ↵ | elijah | |
#3278) | |||
2013-07-29 | site_webapp bugfix - get compile_assets to run by ensuring .scss files are ↵ | elijah | |
created beforehand and have the correct permissions. | |||
2013-07-23 | not need for file { '/srv/leap/webapp': }, we have vcsrepo { ↵ | varac | |
'/srv/leap/webapp': } | |||
2013-07-23 | /srv/leap/webapp/public/img: require => Vcsrepo['/srv/leap/webapp'] | varac | |
2013-07-11 | changes to support restrictive permissions for /etc/leap. this is required ↵ | elijah | |
to work with the latest leap_cli. | |||
2013-07-06 | site_webapp -- make bundler not install test-only or development-only gems. | elijah | |
2013-05-23 | Merge branch 'feature/switch-webapp-location' into develop | Micah Anderson | |
Conflicts: puppet/modules/site_webapp/manifests/init.pp Resolved lint differences Change-Id: Ifbc535ec844222c9f6f0dd71ac12742230bb64ee | |||
2013-05-22 | add missing require => on the vcsrepo which could cause these resources to fail | Micah Anderson | |
2013-05-22 | add requirements to the try::file resources | Micah Anderson | |
normally a file resource would automatically require the parent directory first, but try::file doesn't do this so it has errors if /srv/leap/webapp doesn't exist yet: for example: - [web1] err: /Stage[main]/Site_webapp/Try::File[/srv/leap/webapp/public/img]/Exec[restore_/srv/leap/webapp/public/img]/returns: change from notrun to 0 failed: Working directory '/srv/leap/webapp/public' does not exist that was 'tried' before the vcsrepo was done which would have resolved that problem. This makes sure that the vcsrepo is done first | |||
2013-05-22 | add force => true parameter to webapp vcsrepo checkout | Micah Anderson | |
this should have been added to d669a5fb56acf9101cf677ecbd30bcc47b092cd3 resolve #1722 after the vcsrepo module was updated to handle this, but it wasn't. | |||
2013-05-22 | change paths for leap webapp to be under /srv/leap/webapp from /srv/leap-webapp | Micah Anderson | |
2013-05-18 | added module site_nickserver | elijah | |
2013-05-14 | added smtp-service.json, requires latest leap_cli | elijah | |
2013-04-30 | added soledad-service.json | elijah | |
2013-04-26 | Merge branch 'develop' of ssh://code.leap.se/leap_platform into develop | varac | |
2013-04-26 | Revert "webapp: use admin creds for now, until we fixed couchdb user ↵ | varac | |
permissions" This reverts commit 830f2408fa210016fdef855da8b3fd28421bff32. | |||
2013-04-24 | provider base - service definitions are now versioned (requires new leap_cli) | elijah | |
2013-04-24 | user leap-webapp instead of leap_webapp | varac | |
2013-04-24 | couchdb.yml.admin is changed on every puppetrun from leap-webapp to root | varac | |
2013-04-23 | fix mode for webapp production.log (#2300) | Micah Anderson | |
2013-04-22 | webapp -- fixed bug in configuration | elijah | |
2013-04-18 | update apache module to take the 'ssl' parameter, and pass it to the class, this | Micah Anderson | |
eliminates a potential variable lookup ordering problem (#2273) |