summaryrefslogtreecommitdiff
path: root/puppet/modules
AgeCommit message (Collapse)Author
2013-01-29fix syntax error from enclosing variables in curlyMicah Anderson
2013-01-29it seems facts cannot start with numbersMicah Anderson
2013-01-29create a special case for vagrant machines that need to have both interfaces inMicah Anderson
the net zone so we dont lock ourselves out during deploy, but also are able to access the internet
2013-01-29enclose the variables in curly braces, as recommended by puppet-lintMicah Anderson
2013-01-29add a new fact that provides a fact for each configured ip address, telling youMicah Anderson
which interface has it (essentially the inverse of the ipaddress_${interface} fact). Switch the hiera lookups of the $interface, which was pulling from the .json to pull instead from the above fact, see #1547 and #1548
2013-01-29Purge nagios config files on every run (Feature #1544)varac
2013-01-29fix deprecation warnings in site_configvarac
2013-01-29start shorewall on deploy (fixes #1122)varac
2013-01-29run stage declaration moved to site.ppvarac
2013-01-29apt-get update + dist-upgrade in initial stagevarac
2013-01-29automatic update of submodule puppet_aptvarac
2013-01-28set nagiosadmin htpasswdvarac
2013-01-28re-add nagios service check openvpnvarac
2013-01-28disabled notice about nagios services not deployedvarac
2013-01-28use check_https for websitevarac
2013-01-28don't deploy openvpn check until we fix #1546varac
2013-01-28deploy openvpn checkvarac
2013-01-28main nagios config: allow external cmds, debug modevarac
2013-01-28automatic update of submodule puppet_nagiosvarac
2013-01-28adapted new hiera config, see #1546varac
2013-01-28automatic update of submodule puppet_nagiosvarac
2013-01-27site_nagios: add hosts + servicesvarac
2013-01-26beginning of puppet/modules/site_nagiosvarac
2013-01-26added submodule nagiosvarac
2013-01-24update shorewall module to latest release for fixesMicah Anderson
2013-01-23require that the unbound package is installed before attempting to makeMicah Anderson
sub-directories under /etc/unbound (#1412)
2013-01-21client ca -- configure the webapp with the client caelijah
2013-01-21update augeas submodule to get new upstream lints and package fixes for wheezyMicah Anderson
2013-01-20don't run if another apt-get process is runningvarac
2013-01-20configure fqdn for hostvarac
2013-01-20remove bind9 service stop (#1421)varac
2013-01-20configure fqdn for hostvarac
2013-01-18lintedvarac
2013-01-18create cronjob for leap_cavarac
2013-01-17require the augeas class before doing any augeas operations (#1215)Micah Anderson
2013-01-17notify unbound when these configuration files changeMicah Anderson
2013-01-17fix typo in cidr variable nameMicah Anderson
2013-01-17change to using the CIDR notation for unbound access listMicah Anderson
2013-01-17fully qualify the variables that are used in the vpn gateway resolverMicah Anderson
2013-01-17unfortunately the version of unbound that is in wheezy does not support wildcardMicah Anderson
include directives, so this commit works around this by doing something less elegant than before. When we have the newer unbound available, we should switch to that method instead.
2013-01-17fix unbound access controlMicah Anderson
2013-01-16setup openvpn gateway resolver to listen on the udp/tcp virtual network ips soMicah Anderson
that queries can be made from clients on the vpn
2013-01-16update unbound submodule to fix infinite service restart problemMicah Anderson
2013-01-16Swtich from bind9 as the local caching resolver to unbound. This will enable usMicah Anderson
to do tor lookups over DNS on servers, if tor services are defined. To do this, we remove the bind9 configurations from site_config::resolvconf.pp and replace it with site_config::caching_resolver with a basic unbound configuration that can be used everywhere. The unbound configuration enables a /etc/unbound/conf.d directory for additional config snippits that can be dropped in from other places. This will be used for setting up different interfaces in the vpn gateway, for example. There will be a set of transition package/file absent blocks to clean up providers.
2013-01-16fix syntax errorMicah Anderson
2013-01-16setup site_unbound with a basic caching-only configuration and include that onMicah Anderson
the openvpn gateway (see #1172)
2013-01-16remove unnecessary include that was left over from ↵Micah Anderson
c2d57624c15dfaff038f9991f04ade46b5ad1d40:
2013-01-15add stdlib and unbound submodulesMicah Anderson
2013-01-13added ability to customize the webapp appearanceelijah
2013-01-11configure webapp with correct domainelijah