| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2013-10-03 | It turns out postfix's variable for 1024bit DH parameters can actually take ↵ | Micah Anderson | |
| a file of arbitrary length (#4012) Neither Postfix nor OpenSSL actually care about the size of the prime in "smtpd_tls_dh1024_param_file". You can make it 2048 bits Change-Id: Id60deec93547e7df6dfc414209afaf9d53c710b5 | |||
| 2013-10-02 | setup smtpd_tls_eecdh_grade to 'ultra' and configure the ↵ | Micah Anderson | |
| smtpd_tls_dh1024_param file, after generating it (#3953) Change-Id: I8e88a4862cda052c2f0ca0149f1d0753c7c83cb5 | |||
| 2013-09-26 | create a site_config::packages directory, move site_config::base_packages to ↵ | Micah Anderson | |
| site_config::packages::base add site_config::packages::gnutls for inclusion (#3955) Change-Id: I9599eb26844503613c16f57ee17d6ea7bd0cf6fb | |||
| 2013-09-26 | Merge branch 'bug/3868' into develop | Micah Anderson | |
| 2013-09-26 | properly set the $smtps_recipient_restrictions variable in master.cf (#3935) | Micah Anderson | |
| Change-Id: Ia5f35977b3dad08c10256f0281ab36ffb230c9fd | |||
| 2013-09-25 | add smtp_tls_received_header to include information about the protocol and ↵ | Micah Anderson | |
| cipher used as well as the client and issuer CommonName into the "Received:" header Also, clean up the parameters to standardize them Change-Id: Ib6be27f0f93e0a9e20fbdffa1d42220a25fc8ed4 | |||
| 2013-09-25 | openvpn is restarted before package is installed (Bug #3904) | varac | |
| 2013-09-25 | recent couchdb puppet - requires git submodule update | Azul | |
| 2013-09-24 | deploy client_ca on webapp node | varac | |
| 2013-09-24 | webapp leftover for seperate cert and key deployment (Feature #3918) | varac | |
| 2013-09-24 | fix client_ca cert+key for mx service (Feature #3921) | varac | |
| 2013-09-24 | added site_config::x509::client_ca::cert and ↵ | varac | |
| site_config::x509::client_ca::key for client_ca deployment (#3917) | |||
| 2013-09-24 | https://bitmask.net/ca.crt gives 403 Forbidden (Bug #3919) | varac | |
| 2013-09-24 | Webapp doesn't serve commercial cert (Bug #3916) | varac | |
| 2013-09-24 | move commercial x509 deployment to site_x509 (Feature #3889) | varac | |
| 2013-09-24 | seperate cert and key deployment (#3918) | varac | |
| 2013-09-22 | Merge branch 'api-crt-3384' into develop fixes #3384 | kwadronaut | |
| 2013-09-22 | adding fqdn as default servername and moving service.domain to ServerAlias ↵ | kwadronaut | |
| (fixing #3384) node name and dns fqdn could be different Also note that on local deploys that warning from #3384 will continue to exist (because of dns) | |||
| 2013-09-20 | use newer haproxy_servers macro in order to allow couchdb and webapp to be ↵ | elijah | |
| on the same node (requires latest leap_cli) | |||
| 2013-09-20 | Merge branch 'feature/3782_Discuss_run_stages_on_deploy' into develop | varac | |
| 2013-09-20 | move all resources that are applied on every node into site_config::default ↵ | varac | |
| (#3782) in commit 338833, we established a relationship between all resources that have a leap_service tag, that are called in site.pp. But we had some resources as default on every node in site.pp (apt::update, Package { require => Exec['apt_updated'] }, site_config::slow and stdlib), that were still lacking any relationship to the leap_service tag. By moving them into default.pp they automatically are executed before resources with a leap_service tag. | |||
| 2013-09-20 | fix whitespace issues from https://review.leap.se/r/82 | varac | |
| 2013-09-19 | fix x509 path in webapp config.yml.erb (#3894) | varac | |
| 2013-09-19 | tidy soledad x509 definitions (#3841) | varac | |
| 2013-09-19 | tidy webapp api x509 definitions (#3840) | varac | |
| 2013-09-19 | tidy nickserver x509 definitions (#3842) | varac | |
| 2013-09-19 | webapp: Depend services on deployment of default key, cert and ca (Feature ↵ | varac | |
| #3838) | |||
| 2013-09-19 | Depend services on deployment of default key, cert and ca (Feature #3838) | varac | |
| 2013-09-19 | soledad should use default key, cert and ca (Feature #3841) | varac | |
| 2013-09-19 | tidy openvpn x509 definitions (#3831) | varac | |
| 2013-09-19 | only deploy x509 stuff for nodes if it existes in hiera (Feature #3875) | varac | |
| 2013-09-19 | Merge branch 'develop' of ssh://code.leap.se/leap_platform into develop | varac | |
| 2013-09-18 | Setup a class dependency for every tag 'leap_service' to make sure that ↵ | Micah Anderson | |
| shorewall is setup before the service is setup. This is necessary due to the strict initial firewall that stops various service setup operations from happening, but is relaxed once shorewall is setup properly (#3782) Change-Id: Ia9640c4118aa0053cdb99e7bc11860fed5527501 | |||
| 2013-09-18 | use x509 for postfix ca and fix names for cert+key (Feature #3833) | varac | |
| 2013-09-18 | deploy client_ca (#3833) | varac | |
| 2013-09-18 | openvpn should use /usr/local/share/ca-certificates/leap_ca.crt (Feature #3831) | varac | |
| 2013-09-18 | include shorewall::interface{eth0} in setup.pp so packages can be installed ↵ | varac | |
| during main puppetrun, even before shorewall is configured completly | |||
| 2013-09-17 | fix stunnel module so that code was not removed accidentally | Micah Anderson | |
| Change-Id: Ia236eb5b7609d9f96970230fce4d0051d832e3cb | |||
| 2013-09-17 | shorewall: #2399 blocks uplink (Bug #2866) | varac | |
| 2013-09-17 | site_config::params::interface should contain eth1 for vagrant cause it's ↵ | varac | |
| the main interface we use (#2399, #2401) | |||
| 2013-09-17 | update stunnel submodule commit id to correct one for new repository | Micah Anderson | |
| Change-Id: I33292b9eb2a5553ac296857c99fdaf350ed52542 | |||
| 2013-09-17 | Merge branch 'bug/3757' into develop | Micah Anderson | |
| 2013-09-17 | updated submodule stunnel - include stunnel in stunnel::service ↵ | varac | |
| (https://leap.se/code/issues/3861) | |||
| 2013-09-17 | Merge branch 'feature/3817_3836_3837_Duplicate_declarations' into develop | varac | |
| 2013-09-14 | ensure site_config::caching_resolver runs with tag leap_base (#3757) | Micah Anderson | |
| Change-Id: I593602ff9d3486dee39227673147e137045c55c5 | |||
| 2013-09-14 | moved openvpn submodule back to 25f1fe8d8, like it was before | kwadronaut | |
| 2013-09-13 | change vcsrepo submodule url (bug #3139) | kwadronaut | |
| 2013-09-13 | setup stunnel config to use default x509 cert,key+ca (#3837) | varac | |
| * fix stunnel setups for couchdb, mx, webapp services | |||
| 2013-09-13 | Deploy default x509 cert + key that services can use (Feature #3836) | varac | |
| 2013-09-13 | remove x509::ca for leap_ca in site_openvpn::keys and site_stunnel::stunnel ↵ | varac | |
| (#3817) | |||
 |
index : leap_platform.git | |
| [leap_platform] | git repository hosting |
| summaryrefslogtreecommitdiff |