leap_platform.git - [leap

Age	Commit message (Collapse)	Author
2014-02-08	disable purging of /etc/nagios3 and /etc/nagios3/conf.d	varac

2014-02-08	reload nagios after check_mk	varac

2014-02-08	restricted check_mk ssh login a bit more	varac

2014-02-07	added local check_mk dir /etc/nagios3/local to nagios.cfg	varac

2014-02-07	updated LEAP archive signing key 0x1E34A1828E207901	varac

2014-02-07	deploy check_mk on monitoring server	varac

2014-02-07	deploy check_mk pubkey on clients	varac

2014-02-07	added custom $datasource_programs check_mk variable to call the agent via ssh	varac

2014-02-06	add a comment why we use a custom way to populate authorized_keys	varac

2014-02-06	updated submodule check_mk	varac

2014-02-06	Merge branch '5096_monitor_node_has_no_apache_conf' into 4982_check_mk	varac

2014-02-06	move leap_webapp.conf template to common.conf which is included by the ↵	varac
	nagios and webapp node (#5096)
2014-02-06	added site_nagios::server::apache	varac

2014-02-06	added site_nagios::server::check_mk	varac

2014-02-05	use check_mk::agent to install check-mk-agent	varac

2014-02-05	updated submodule check_mk	varac

2014-02-05	updated submodule check_mk	varac

2014-02-05	include site_nagios::client by default	varac

2014-02-05	updated submodule check_mk	varac

2014-02-05	site_nagios::client: install check_mk agent	varac

2014-02-04	added submodule check_mk from ↵	varac
	https://git.codecoop.org/varacanero/puppet_check_mk.git
2014-02-04	updated submodule rubygems, change gem source to use https instead of http ↵	varac
	(Feature #3827)
2014-01-30	Merge branch 'feature/4889_restrict_port_5984_proc_to_localhost' into develop0.5.0rc2	varac

2014-01-24	swiss privacy foundation changed their nameserver IPs: ↵	varac
	http://www.privacyfoundation.ch/de/service/server.html
2014-01-22	anonymize webapp ips (Bug #4896)	varac

2014-01-21	updated submodule couchdb	varac

2014-01-21	properly purge cloudant repository leftovers (#4971)	varac

2014-01-20	configure leap_platform to install our leap bigcouch package (Feature #4971)	varac

2014-01-13	load_design_documents.sh fails (Bug #4945)	varac

2014-01-09	fix function issues in webapp design documents	Azul
	This change is a result of https://github.com/leapcode/leap_web/pull/133. Both should be deployed at the same time to prevent conflicts.
2014-01-08	fix webapp couchdb.yml to be couchdb.yml not couchdb.yml.webapp	elijah

2014-01-07	restrict bigcouch chttp proc to localhost	varac

2014-01-06	install ntp on all platform nodes (Feature #4913)	varac

2014-01-04	updated submodule couchdb	varac

2014-01-03	reduce tapicero log level.	Azul
	Debug is becoming quite verbose with the backtraces. Info should suffice as a default.
2014-01-02	added support for minimum client version checking	elijah

2013-12-31	add design docs for new soledad version to shared db	Azul

2013-12-24	move nickserver config to /etc/nickserver.yml (fixes #4843)	elijah

2013-12-22	Adopt tapicero config file to tapicero > 0.2.0	Azul
	In order to reuse the couch changes observer for key uploads I extracted it from tapicero and made the configuration more generic. This results in some changes to the config file format. When deploying tapicero >= 0.2.0 this config file format should be used instead. Also set log_level to debug by default. We can reduce this later but it might be useful for now.
2013-12-19	Set mynetworks to include any mx server in the provider to allow them to0.5.0rc1	Micah Anderson
	Helo as the domain (#4495) Change-Id: I6c8ac28faceb8b0c6129a606ede04837efd3d261
2013-12-19	Fix the location of the smtp/smtpd_tls_session_cache_database (#4813)	Micah Anderson
	Change-Id: I959fa40ff508bbeaf7baa0b6ba90c10c9e6b0ef7
2013-12-19	Deploy /etc/leap/couchdb_scripts_defaults.conf so we can exclude some DBs, ↵	varac
	i.e. sessions + tokens (#4794)
2013-12-18	Merge branch 'feature/4506' into develop	Micah Anderson

2013-12-18	Fix for openvpn/unbound not starting at boot (#4506)	Micah Anderson
	This change sets the sysctl net.ipv4.ip_nonlocal_bind to allow applications to bind to an address, even when the link is down. This is necessary because applications like unbound and openvpn fail to start on boot in some situations because interfaces are not fully up (due to a combination of non-deterministic booting because of the likely potential setting of allow-hotplug in the interfaces file and the LSB boot dependency on $network not being sufficient. The only down-side to setting this is a daemon could bind to an incorrect ip and we wouldn't get an error, but this would be a configuration mistake, rather than a fatal condition. Change-Id: I5c03083e8c20bb25afad85a1230f4555808d341c
2013-12-18	add a smtp_tls class and include that on both mx servers and satellites	Micah Anderson
	Change-Id: I779ea60e6d726d042203fa0756d73b4af079d728
2013-12-18	rename the tls.pp to be smtpd_tls.pp, this allows us to have a separate	Micah Anderson
	class for smtp vs. smtpd tls configurations Change-Id: Ic1cc560c76924fcbbc15e245bec7b78ac2de83d3
2013-12-17	add a smtp_tls class and include that on both mx servers and satellites	Micah Anderson
	Change-Id: I779ea60e6d726d042203fa0756d73b4af079d728
2013-12-17	rename the tls.pp to be smtpd_tls.pp, this allows us to have a separate	Micah Anderson
	class for smtp vs. smtpd tls configurations Change-Id: Ic1cc560c76924fcbbc15e245bec7b78ac2de83d3
2013-12-17	Merge branch 'develop' of ssh://code.leap.se/leap_platform into develop	varac

2013-12-17	updated submodule couchdb	varac