summaryrefslogtreecommitdiff
path: root/puppet
AgeCommit message (Collapse)Author
2014-02-10Merge branch '0.6' into 4982_check_mkvarac
Conflicts: provider_base/services/monitor.json puppet/modules/site_nagios/manifests/server.pp
2014-02-10move leap_webapp.conf template to common.conf which is included by the ↵varac
nagios and webapp node (#5096)
2014-02-10add all nodes to check_mk main.mk configvarac
2014-02-10use default value for hiera lookup (#5118)varac
2014-02-10Merge remote-tracking branch 'elijah/feature/known_hosts' into 4982_check_mkvarac
Conflicts: platform.rb
2014-02-09deploy a valid /etc/ssh/ssh_known_hosts for all nodes (requires new leap_cli)elijah
2014-02-08disable purging of /etc/nagios3 and /etc/nagios3/conf.dvarac
2014-02-08reload nagios after check_mkvarac
2014-02-08restricted check_mk ssh login a bit morevarac
2014-02-07added local check_mk dir /etc/nagios3/local to nagios.cfgvarac
2014-02-07updated LEAP archive signing key 0x1E34A1828E207901varac
2014-02-07deploy check_mk on monitoring servervarac
2014-02-07deploy check_mk pubkey on clientsvarac
2014-02-07added custom $datasource_programs check_mk variable to call the agent via sshvarac
2014-02-06add a comment why we use a custom way to populate authorized_keysvarac
2014-02-06updated submodule check_mkvarac
2014-02-06Merge branch '5096_monitor_node_has_no_apache_conf' into 4982_check_mkvarac
2014-02-06move leap_webapp.conf template to common.conf which is included by the ↵varac
nagios and webapp node (#5096)
2014-02-06added site_nagios::server::apachevarac
2014-02-06added site_nagios::server::check_mkvarac
2014-02-05use check_mk::agent to install check-mk-agentvarac
2014-02-05updated submodule check_mkvarac
2014-02-05updated submodule check_mkvarac
2014-02-05include site_nagios::client by defaultvarac
2014-02-05updated submodule check_mkvarac
2014-02-05site_nagios::client: install check_mk agentvarac
2014-02-04added submodule check_mk from ↵varac
https://git.codecoop.org/varacanero/puppet_check_mk.git
2014-02-04updated submodule rubygems, change gem source to use https instead of http ↵varac
(Feature #3827)
2014-01-30Merge branch 'feature/4889_restrict_port_5984_proc_to_localhost' into develop0.5.0rc2varac
2014-01-24swiss privacy foundation changed their nameserver IPs: ↵varac
http://www.privacyfoundation.ch/de/service/server.html
2014-01-22anonymize webapp ips (Bug #4896)varac
2014-01-21updated submodule couchdbvarac
2014-01-21properly purge cloudant repository leftovers (#4971)varac
2014-01-20configure leap_platform to install our leap bigcouch package (Feature #4971)varac
2014-01-13load_design_documents.sh fails (Bug #4945)varac
2014-01-09fix function issues in webapp design documentsAzul
This change is a result of https://github.com/leapcode/leap_web/pull/133. Both should be deployed at the same time to prevent conflicts.
2014-01-08fix webapp couchdb.yml to be couchdb.yml not couchdb.yml.webappelijah
2014-01-07restrict bigcouch chttp proc to localhostvarac
2014-01-06install ntp on all platform nodes (Feature #4913)varac
2014-01-04updated submodule couchdbvarac
2014-01-03reduce tapicero log level.Azul
Debug is becoming quite verbose with the backtraces. Info should suffice as a default.
2014-01-02added support for minimum client version checkingelijah
2013-12-31add design docs for new soledad version to shared dbAzul
2013-12-24move nickserver config to /etc/nickserver.yml (fixes #4843)elijah
2013-12-22Adopt tapicero config file to tapicero > 0.2.0Azul
In order to reuse the couch changes observer for key uploads I extracted it from tapicero and made the configuration more generic. This results in some changes to the config file format. When deploying tapicero >= 0.2.0 this config file format should be used instead. Also set log_level to debug by default. We can reduce this later but it might be useful for now.
2013-12-19Set mynetworks to include any mx server in the provider to allow them to0.5.0rc1Micah Anderson
Helo as the domain (#4495) Change-Id: I6c8ac28faceb8b0c6129a606ede04837efd3d261
2013-12-19Fix the location of the smtp/smtpd_tls_session_cache_database (#4813)Micah Anderson
Change-Id: I959fa40ff508bbeaf7baa0b6ba90c10c9e6b0ef7
2013-12-19Deploy /etc/leap/couchdb_scripts_defaults.conf so we can exclude some DBs, ↵varac
i.e. sessions + tokens (#4794)
2013-12-18Merge branch 'feature/4506' into developMicah Anderson
2013-12-18Fix for openvpn/unbound not starting at boot (#4506)Micah Anderson
This change sets the sysctl net.ipv4.ip_nonlocal_bind to allow applications to bind to an address, even when the link is down. This is necessary because applications like unbound and openvpn fail to start on boot in some situations because interfaces are not fully up (due to a combination of non-deterministic booting because of the likely potential setting of allow-hotplug in the interfaces file and the LSB boot dependency on $network not being sufficient. The only down-side to setting this is a daemon could bind to an incorrect ip and we wouldn't get an error, but this would be a configuration mistake, rather than a fatal condition. Change-Id: I5c03083e8c20bb25afad85a1230f4555808d341c