summaryrefslogtreecommitdiff
path: root/puppet
AgeCommit message (Expand)Author
2014-05-22Install wheezy-backports version of unbound, this is necessary to solve #2328Micah Anderson
2014-05-22Move rsyslog preferences snippet to site_apt::preferences::rsyslog, toMicah Anderson
2014-05-22remove old classesChristoph
2014-05-22fix haproxy config if webapp and mx run on the same hostChristoph
2014-05-21fix resolv.conf on virtualboxChristoph
2014-05-17static: pin amber version to 0.3.0elijah
2014-05-17fixes #5533 and updates rsyslog Merge branch 'rsyslog_backport' into developkwadronaut
2014-05-17change rsyslog pin from leaps debian repo to backports (fixes #5533)kwadronaut
2014-05-14revert accidental change to webapp config templateAzul
2014-05-14use hash for provider service levelsAzul
2014-05-13openvpn server config: script-security should be "1", since we don't need "2"...elijah
2014-05-07openvpn package resource needs to be ensure => latest to accommodate upgradesMicah Anderson
2014-05-06Change the initial firewall to subscribe to the rule file to be able toMicah Anderson
2014-05-06set the ipv6 configuration options on the serverMicah Anderson
2014-05-06install openvpn from wheezy-backports, this will bring in openvpn 2.3,Micah Anderson
2014-05-02fix incorrect shorewall parameter name 'protocol', should be 'proto'Micah Anderson
2014-04-29fix missing semicolon, causing syntax errorMicah Anderson
2014-04-29block DNS traffic at the OpenVPN gateway (#4164)Micah Anderson
2014-04-29nagios: make the check_procs tests for leap_mx and soledad be much moreMicah Anderson
2014-04-29require json so we can use it to dumpt the service levelsAzul
2014-04-24bring service_levels into webapp config - #5527Azul
2014-04-24initial firewall: allow port 22 by default. This is the most common portMicah Anderson
2014-04-24create a /var/run/tapicero directory, owned by tapicero:tacpiero to holdMicah Anderson
2014-04-24tor: provide a default 'nickname' (something likeMicah Anderson
2014-04-24change stunnel::service to 'subscribe' instead of 'require' the X509Micah Anderson
2014-04-24make sure concat fragments are put together before the openvpn serviceMicah Anderson
2014-04-24update indentation to be standardMicah Anderson
2014-04-17update couchdb submodule to get fix for timing issue that caused 409 Conflict...0.5.0Micah Anderson
2014-04-17change class instantiating to be includes and organizing things in theMicah Anderson
2014-04-17Change couchdb ordering hints (#5269, #4590, #3712):Micah Anderson
2014-04-17add exec resources to run the couchdb tests to wait for nodes andMicah Anderson
2014-04-15configure couchdb after starting shorewall (#53)varac
2014-04-15Merge branch 'develop' of ssh://code.leap.se/leap_platform into developvarac
2014-04-15fix concat::setup (#5503)varac
2014-04-12make the soledad service subscribe to package changes, cert and key changes (...Micah Anderson
2014-04-10#5315 update soledad design docsAzul
2014-04-10Merge branch '0.6' into developvarac
2014-04-10fix check_mk resource dependency deploy errors (Bug #5272)varac
2014-04-06better system for optionally uninstalling build-essential package closes http...kwadronaut
2014-04-05openvpn: allow for configurable keepalive (aka ping & ping-restart) closes ht...elijah
2014-04-05better system for optionally uninstalling build-essential package. closes htt...elijah
2014-04-05update site_static to work with new amber and have better tls cipherselijah
2014-04-04Merge branch '2993_setup_subclass' into 0.6varac
2014-04-02Force satellite hosts that only speak to relayhost to have aMicah Anderson
2014-04-02Update TLS apache vhost TLS configuration (#5137):Micah Anderson
2014-04-02Fix for satellite hosts that are unable to contact their relayhostMicah Anderson
2014-04-02Merge branch '5359_design_docs' into 0.6varac
2014-04-02Merge pull request #20 from elijh/feature/openvpn-configvarac
2014-04-02couch design docs should be always deployed, not only on update of the design...varac
2014-04-01Include all the ips that are allowed to send mail through the relay inMicah Anderson