Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-09-03 | Merge branch 'master' into develop | varac | |
Conflicts: platform.rb puppet/modules/site_config/manifests/hosts.pp | |||
2014-08-28 | syslog logs everything but webapp FIX #6020 | guido | |
2014-08-26 | Fix Tapicero not starting after first deploy (#6004) | varac | |
Added a dependency on the couchdb "tapicero" user to get created before starting the tapicero daemon. | |||
2014-08-22 | FQDN should come first in /etc/hosts | varac | |
fixes /etc/hosts: wrong order (Bug #5835) (now for real) before, /etc/hosts contained i.e. 127.0.1.1 plain1 plain1.bitmask.net plain1.bitmask.i which resulted in no fqdn reported both by "hostname -f" and "facter fqdn" this fix produces this order which is needed to report a fqdn: 127.0.1.1 plain1.bitmask.net plain1 plain1.bitmask.i | |||
2014-08-21 | Fix starting tapicero when it is not running (#6004)0.5.3 | Micah Anderson | |
Due to how tapicero's initscript is made, it is not possible to check for a valid exit code for the status (it returns a zero when it is not running). So we disable the puppet 'hasstatus' parameter and instead puppet will look in the process table for 'tapicero' Change-Id: I9b017ea8055c0207e43876dd4e3bbc2619c0fd35 | |||
2014-08-21 | Fix "Nagios ssh check is automatically added by the ssh module and cantains ↵ | varac | |
a wrong hostname on single node setup (Bug #5998)" before, the ssh module added this check, resulting in a wrong hostname and the port was always '22'. manage_nagios parameter is boolean, so we use false instead of 'no' manually add check_ssh to nagios (#5998) | |||
2014-08-05 | Fixes: #5952 Webapp now logs to it's own file instead of syslog and user.log | guido | |
2014-08-01 | Merge branch 'feature/replication-in-tapicero-security' into develop | Azul | |
2014-08-01 | minor: fix typo in webapp config | Azul | |
@provider -> @webapp | |||
2014-07-30 | add replication role to user databases with tapicero | Azul | |
This way the replication has read access on the source and write access on the target. | |||
2014-07-29 | Merge remote-tracking branch 'fbernitt/issue_5217_allow_registration' into ↵ | Azul | |
develop | |||
2014-07-15 | haproxy default to couch_write, couch_read on GET | Azul | |
METH_POST probably does not catch PUT, DESTROY etc. So instead we now use the master as the default and only use the replications for GET and HEAD requests. | |||
2014-07-14 | proper json for tapicero config | Azul | |
2014-07-14 | update couchdb puppet module | Azul | |
2014-07-11 | Added allow_registration to webapp config.yml. | Folker Bernitt | |
- See issue #5217 - See companion change in leap_web | |||
2014-07-01 | Use new macro pick_node to pick vpn gateway for obfsproxy.json | irregulator | |
2014-07-01 | Add apt preferences requirement for obfsproxy package resource | irregulator | |
2014-07-01 | Add User resource requirement for obfsproxy service, log, etc dir | irregulator | |
2014-07-01 | Remove unneeded newlines from obfsproxy.conf | irregulator | |
2014-07-01 | Explicitly set apt preferences for obfsproxy to wheezy-backports | irregulator | |
2014-07-01 | Make obfsproxy daemon bind to specific address rather than 0.0.0.0 | irregulator | |
If obfsproxy is spawned alongside eip service, make it listen to the gateway_adress IP. If obfsproxy is running standalone listen to ip_address. | |||
2014-07-01 | Remove initscript subscription to conf file | irregulator | |
2014-07-01 | Move log files to var/log instead of var/log/obfsproxy | irregulator | |
2014-07-01 | Subscribe obfsproxy service resource to conf file | irregulator | |
2014-07-01 | Simplify init script, let puppet service resource use init status | irregulator | |
2014-07-01 | Change logrotate's frequency and number of log files to keep | irregulator | |
2014-07-01 | Be able to specify log_level parameter for obfsproxy | irregulator | |
log_level sets minimum logging severity of obfsproxy daemon, can be error, warning, info, debug. Defaults to info. | |||
2014-07-01 | Address logging for obfsproxy daemon | irregulator | |
Create obfsproxy directory in /var/log, specify log file when obfsproxy is spawned by init script, create a logrotate configuration for obfsproxy's logs. | |||
2014-07-01 | Line up equal signs, change double to single quotes | irregulator | |
2014-07-01 | Remove commented lines from obfsproxy puppet module class | irregulator | |
2014-07-01 | Remove commented lines from init script status section | irregulator | |
2014-07-01 | Change exit status code if config file is missing | irregulator | |
2014-07-01 | Move obfsproxy_daemon to obfsproxy_init | irregulator | |
2014-07-01 | Add data directory to save scramblesuit's state. | irregulator | |
Also clean up a little the obfsproxy puppet class, create appropriate directories, restrict permissions. | |||
2014-07-01 | Make shorewall accept incoming traffic for obfsproxy server | irregulator | |
2014-07-01 | Initial commit for obfsproxy server feature in platform | irregulator | |
2014-06-27 | add a package resource for leap-keymanager to make sure it is also the | Micah Anderson | |
latest version, this is necessary to transition to the python-gnupg-ng package, which will not otherwise be installed Change-Id: I2ea631e15518fd40cb0ea4fe718498bdfba3c599 | |||
2014-06-27 | leap-mx package resource ensure parameter needs to be 'latest' to ensure | Micah Anderson | |
packages will be upgraded Change-Id: Ic94be8b732d9d2202f87c0c2cdd2fd0d16cc9efc | |||
2014-06-27 | reorder /etc/hosts | Christoph | |
now "hostname -f" results in the correct hostname. Fixes #5835 | |||
2014-06-26 | reorder /etc/hosts | Christoph | |
now "hostname -f" results in the correct hostname. Fixes #5835 | |||
2014-06-25 | lint site_couchdb | elijah | |
2014-06-25 | update couchdb submodule | elijah | |
2014-06-25 | create netrc files for all users with new puppet_couchdb | Azul | |
This only works with the latest patch to puppet_couchdb | |||
2014-06-25 | hand replication credentials to tapicero | Azul | |
2014-06-25 | minor: fix typo in replication user roles | Azul | |
2014-06-25 | haproxy: support read only couchdb mirrors | elijah | |
2014-06-25 | stunnel: make site_mx and site_webapp use new site_stunnel | elijah | |
2014-06-25 | add replication user | Azul | |
2014-06-25 | site_couchdb: support auto-stunnel setup, split master, bigcouch, and mirror ↵ | elijah | |
out into separate files. | |||
2014-06-25 | new generic system for stunnel: just `include site_stunnel` and stunnel + ↵ | elijah | |
needed shorewall will be automatically set up. requires new leap_cli |