summaryrefslogtreecommitdiff
path: root/puppet
AgeCommit message (Collapse)Author
2012-12-19webapp api now uses a customizable port (so that we don't try to rely on SNI ↵elijah
for hosting two TLS domains on one IP).
2012-12-19automatic update of submodule puppet_aptvarac
2012-12-19added ca_daemon initscript for latervarac
2012-12-19move apt-get upgrade to inital stagevarac
2012-12-19automatic update of submodule puppet_aptvarac
2012-12-19Merge branch 'feature/dist_upgrade' into developvarac
Conflicts: puppet/modules/site_apt/manifests/init.pp
2012-12-18ca daemon -- ca daemon needs the x509 cert/key for the CA, not for the server.elijah
2012-12-16named.options -> named.conf.optionsvarac
2012-12-16bind: use local, ipv4 only name-caching resolver (fixes #1171)varac
2012-12-16/usr/local/bin/leap_ca_daemon symlinkvarac
2012-12-16automatic update of submodule puppet_aptvarac
2012-12-16no need for custom 50unattended-upgrades with new unattended_upgrades classvarac
2012-12-14deploy custom unettended upgrade filevarac
2012-12-14leftover apt sources file, see commit febd45328varac
2012-12-14moved site_config::apt to site_aptvarac
2012-12-14Merge branch 'feature/openvpn_ip_forward' into developvarac
2012-12-14no need for sections in shorewall rulesvarac
from the shorewall-rules manpage: "If no Section Headers appear in the file then all rules are assumed to be in the NEW section."
2012-12-11add prefix to couchdb.yamlMicah Anderson
2012-12-11update shorewall submodule to fix the shorewall.conf problemMicah Anderson
2012-12-11fix couchdb portMicah Anderson
2012-12-11neglected to add the 'refreshonly' parameter to the exec in previous commitMicah Anderson
2012-12-11change hostname exec to only apply when either the /etc/hostname or ↵Micah Anderson
/etc/hosts files are changed (otherwise it runs on every run)
2012-12-11set up an 'initial' run stage to happen before the 'main' run stage and put theMicah Anderson
site_config::hosts to be in the initial run stage to make sure the hostname is set before anything else.
2012-12-11replace Documentroot path from - to _Micah Anderson
2012-12-11remove extra space in hostname execMicah Anderson
2012-12-11test to see if the hosts value is empty before trying to reference it in a ↵Micah Anderson
template also set the hostname to what the hiera 'name' is set to
2012-12-11update augeas submodule to try and resolve unreferenced commitMicah Anderson
2012-12-11setup /etc/hosts based on a template and the hiera value 'hosts'Micah Anderson
This will replace the existing /etc/hosts, so we will want to make this more smart later
2012-12-10openvpn: use x509 module to deploy certs (fixes #1064)varac
2012-12-10couchdb: use x509 module to deploy certs (fixes #1063)varac
2012-12-10also deploy ca_certvarac
2012-12-10updated leap_ca_daemon config file, deploying x509 cert+keyvarac
2012-12-10use leap_ca master branchvarac
2012-12-10include site_apt::dist_upgrade (fixes #1107)varac
2012-12-07new names for couchdb DBsvarac
2012-12-07removed pinning couchdb to unstable because 1.2.0-3 is in wheezy, finallyvarac
2012-12-07Merge branch 'feature/ca' into developvarac
2012-12-07added module site_ca_daemonvarac
2012-12-07ca -> ca_daemon in site.pp and services/ca.jsonvarac
2012-12-04remove no longer needed removal of the ports.conf fileMicah Anderson
2012-12-04alphabetize the apache modulesMicah Anderson
2012-12-04Stop the [warn] NameVirtualHost *:443 has no VirtualHosts errorsMicah Anderson
When we include apache::ssl it ships the ssl.conf file which sets up the NameVirtualHost *:443, so we just do what that class does fixes: https://leap.se/code/issues/944
2012-12-04set ip_forwarding using augeasMicah Anderson
2012-12-04update shorewall module to latest revision, fixing a bug on the ↵Micah Anderson
shorewall.conf sources
2012-12-04changed shorewall submodule location, this requires you do a git submodule syncMicah Anderson
2012-12-04use site_cavarac
2012-11-29include apt in the site_config/apt classMicah Anderson
2012-11-29disable apt pdiffs, they are slow on fast linksMicah Anderson
2012-11-29change api CA cert deployment to just symlink to the already deployed fileMicah Anderson
2012-11-29change ensure parameter to explicit 'directory' for /srv/leap-webappMicah Anderson