Age | Commit message (Collapse) | Author |
|
- Related: #6920
|
|
- Related: #6920
|
|
- sshd
- couchdb
- apache
- Related: #6920
|
|
leap_cli integrates a check for running mx procs already,
which is also integrated into nagios (called "Mx/Are_MX_daemons_running")
|
|
Change-Id: I8756c5c3212a3d7e3c44414fdf6bfff5cd29d70f
|
|
Change-Id: Ied475dd1d555a2388034012f5a799a202dcc6ee7
|
|
|
|
Change-Id: I6a6e68908b71d7499eb3ef3c7f0173b3d5b7baa2
|
|
issue #5924
Change-Id: I6aa1e7751633407d441cbc6436d8426d37dbbfa7
|
|
|
|
Duplicate declaration:
File[/srv/leap/nagios/plugins/check_unix_open_fds.pl] is already
declared in file
/srv/leap/puppet/modules/site_check_mk/manifests/agent/couchdb/bigcouch.pp
at line 44; cannot redeclare at
/srv/leap/puppet/modules/site_check_mk/manifests/agent/couchdb.pp:23 on
node rewdevcouch1.rewire.org
|
|
When migrating from bigcouch to couchdb, we need to remove leftover nagios
tests for bigcouch.
- Added new classes: site_check_mk::agent::couchdb::bigcouch and
site_check_mk::agent::couchdb::master
- Tested: unstable.pixelated-project.org
- Resolves: https://github.com/pixelated/pixelated-platform/issues/126
|
|
- Restructure soledad class
- Include soledad::client class on webapp nodes
- Tested: [unstable.bitmask.net]
- Related: #7523
|
|
- Tested: [unstable.pixelated-project.org]
- Related: https://github.com/pixelated/pixelated-platform/issues/127
|
|
|
|
Without this configuration, a very basic, and non-functional virtualhost
is created, making the hidden service not work
Change-Id: Ibe87c6acf5c21cff2388247c4ba320a5b6af7933
|
|
Redirect to webapp_domain instead of domain
This is needed for webapp when running on a subdomain.
See merge request !80
|
|
redirects (#7540)
Change-Id: Ic77c64c03a99dad951f42633de04c352bed17c1e
|
|
This is needed for webapp when running on a subdomain.
|
|
- Tested: [local singlenode, citest]
- Resolves: #7530
|
|
Change-Id: I398b929fc96cf64e46075266ace0d8d1145b3aac
|
|
|
|
as a pre-requisite
Change-Id: Ic9c8cc6ccfb31ce5e56937a2d95de7974707c368
|
|
Change-Id: Ic9f022dcbb9f2096b933c898ae43023e0bf278c6
|
|
|
|
messages, these are spamming provider's logs and will continue to do so
until we have ipv6 working for the VPN (#6540)
Change-Id: I80673bb64d8239e478bc042794929640f7a7cc39
|
|
|
|
anymore by the nagios module, and our config template has drifted.
Fixes: #7527
Change-Id: I56c3492056fcb95c499cf78b893249adcf0ae67f
|
|
7514 remove tapicero couchdb user
- Resolves: #7514
this depends on this couchdb m.r.: https://gitlab.com/leap/couchdb/merge_requests/2
See merge request !78
|
|
whitelisting (#3625)
Change-Id: I15985ca00ee95bc62855f098a78e364ebbc32616
|
|
- Resolves: #7514
|
|
|
|
|
|
We need to remove local check-mk-agent checks on the tapicero
nodes, and want to notify the monitoring server to re-inventarize the
local checks.
This doesn't work when both services run on different hosts, it will
fail with:
Could not find dependent Exec[check_mk-refresh] for Tidy[checkmk_logwatch_spool]
So i remove the notifies, because we will re-inventarize of local checks
by a daily cronjob anyway, see #6873.
...
- Resolves: #XYZ
- Related: #XYZ
- Documentation: #XYZ
- Releases: XYZ
|
|
Done by including a service-dependend site_config::remove::webapp
class.
|
|
|
|
Remove from:
- platform white-box tests (couchdb user ACLs, tapicero daemon test)
- provider_base/ dir that handles the compilation of the hiera config
file
- Resolves: #7501
|
|
Soledad now creates user-dbs, which has been done by tapicero
in the past. we need to remove any leftovers from tapicero.
|
|
|
|
|
|
- create soledad-admin user
- deploy netrc file for userdb creation
- Move soledad-server.conf from /etc/leap to /etc/soledad
- make soledad-server.conf group-accessible for the soledad group, so
the soledad-admin user can read it
- Resolves: #7502
|
|
|
|
this tidy should only happen on webapp nodes
Change-Id: I56faac4fa28fde9dcad7ce9a6ed0d684630a556e
|
|
Make the server-status information unavailable by putting the vhost on a
port that isn't configured as available to the tor hidden-service.
Change-Id: Idd3bfefb5b7fc26fb0a8cf48cdf6afc68a4192bb
|
|
Make the server-status information unavailable by putting the vhost on a
port that isn't configured as available to the tor hidden-service.
Change-Id: Idd3bfefb5b7fc26fb0a8cf48cdf6afc68a4192bb
|
|
|
|
|
|
|
|
|
|
this tidy should only happen on webapp nodes
Change-Id: I56faac4fa28fde9dcad7ce9a6ed0d684630a556e
|