Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-02-10 | use default value for hiera lookup (#5118) | varac | |
2014-02-10 | Merge remote-tracking branch 'elijah/feature/known_hosts' into 4982_check_mk | varac | |
Conflicts: platform.rb | |||
2014-02-09 | deploy a valid /etc/ssh/ssh_known_hosts for all nodes (requires new leap_cli) | elijah | |
2014-02-08 | disable purging of /etc/nagios3 and /etc/nagios3/conf.d | varac | |
2014-02-08 | reload nagios after check_mk | varac | |
2014-02-08 | restricted check_mk ssh login a bit more | varac | |
2014-02-07 | added local check_mk dir /etc/nagios3/local to nagios.cfg | varac | |
2014-02-07 | updated LEAP archive signing key 0x1E34A1828E207901 | varac | |
2014-02-07 | deploy check_mk on monitoring server | varac | |
2014-02-07 | deploy check_mk pubkey on clients | varac | |
2014-02-07 | added custom $datasource_programs check_mk variable to call the agent via ssh | varac | |
2014-02-06 | add a comment why we use a custom way to populate authorized_keys | varac | |
2014-02-06 | updated submodule check_mk | varac | |
2014-02-06 | Merge branch '5096_monitor_node_has_no_apache_conf' into 4982_check_mk | varac | |
2014-02-06 | move leap_webapp.conf template to common.conf which is included by the ↵ | varac | |
nagios and webapp node (#5096) | |||
2014-02-06 | added site_nagios::server::apache | varac | |
2014-02-06 | added site_nagios::server::check_mk | varac | |
2014-02-05 | use check_mk::agent to install check-mk-agent | varac | |
2014-02-05 | updated submodule check_mk | varac | |
2014-02-05 | updated submodule check_mk | varac | |
2014-02-05 | include site_nagios::client by default | varac | |
2014-02-05 | updated submodule check_mk | varac | |
2014-02-05 | site_nagios::client: install check_mk agent | varac | |
2014-02-04 | added submodule check_mk from ↵ | varac | |
https://git.codecoop.org/varacanero/puppet_check_mk.git | |||
2014-02-04 | updated submodule rubygems, change gem source to use https instead of http ↵ | varac | |
(Feature #3827) | |||
2014-01-30 | Merge branch 'feature/4889_restrict_port_5984_proc_to_localhost' into develop0.5.0rc2 | varac | |
2014-01-24 | swiss privacy foundation changed their nameserver IPs: ↵ | varac | |
http://www.privacyfoundation.ch/de/service/server.html | |||
2014-01-22 | anonymize webapp ips (Bug #4896) | varac | |
2014-01-21 | updated submodule couchdb | varac | |
2014-01-21 | properly purge cloudant repository leftovers (#4971) | varac | |
2014-01-20 | configure leap_platform to install our leap bigcouch package (Feature #4971) | varac | |
2014-01-13 | load_design_documents.sh fails (Bug #4945) | varac | |
2014-01-09 | fix function issues in webapp design documents | Azul | |
This change is a result of https://github.com/leapcode/leap_web/pull/133. Both should be deployed at the same time to prevent conflicts. | |||
2014-01-08 | fix webapp couchdb.yml to be couchdb.yml not couchdb.yml.webapp | elijah | |
2014-01-07 | restrict bigcouch chttp proc to localhost | varac | |
2014-01-06 | install ntp on all platform nodes (Feature #4913) | varac | |
2014-01-04 | updated submodule couchdb | varac | |
2014-01-03 | reduce tapicero log level. | Azul | |
Debug is becoming quite verbose with the backtraces. Info should suffice as a default. | |||
2014-01-02 | added support for minimum client version checking | elijah | |
2013-12-31 | add design docs for new soledad version to shared db | Azul | |
2013-12-24 | move nickserver config to /etc/nickserver.yml (fixes #4843) | elijah | |
2013-12-22 | Adopt tapicero config file to tapicero > 0.2.0 | Azul | |
In order to reuse the couch changes observer for key uploads I extracted it from tapicero and made the configuration more generic. This results in some changes to the config file format. When deploying tapicero >= 0.2.0 this config file format should be used instead. Also set log_level to debug by default. We can reduce this later but it might be useful for now. | |||
2013-12-19 | Set mynetworks to include any mx server in the provider to allow them to0.5.0rc1 | Micah Anderson | |
Helo as the domain (#4495) Change-Id: I6c8ac28faceb8b0c6129a606ede04837efd3d261 | |||
2013-12-19 | Fix the location of the smtp/smtpd_tls_session_cache_database (#4813) | Micah Anderson | |
Change-Id: I959fa40ff508bbeaf7baa0b6ba90c10c9e6b0ef7 | |||
2013-12-19 | Deploy /etc/leap/couchdb_scripts_defaults.conf so we can exclude some DBs, ↵ | varac | |
i.e. sessions + tokens (#4794) | |||
2013-12-18 | Merge branch 'feature/4506' into develop | Micah Anderson | |
2013-12-18 | Fix for openvpn/unbound not starting at boot (#4506) | Micah Anderson | |
This change sets the sysctl net.ipv4.ip_nonlocal_bind to allow applications to bind to an address, even when the link is down. This is necessary because applications like unbound and openvpn fail to start on boot in some situations because interfaces are not fully up (due to a combination of non-deterministic booting because of the likely potential setting of allow-hotplug in the interfaces file and the LSB boot dependency on $network not being sufficient. The only down-side to setting this is a daemon could bind to an incorrect ip and we wouldn't get an error, but this would be a configuration mistake, rather than a fatal condition. Change-Id: I5c03083e8c20bb25afad85a1230f4555808d341c | |||
2013-12-18 | add a smtp_tls class and include that on both mx servers and satellites | Micah Anderson | |
Change-Id: I779ea60e6d726d042203fa0756d73b4af079d728 | |||
2013-12-18 | rename the tls.pp to be smtpd_tls.pp, this allows us to have a separate | Micah Anderson | |
class for smtp vs. smtpd tls configurations Change-Id: Ic1cc560c76924fcbbc15e245bec7b78ac2de83d3 | |||
2013-12-17 | add a smtp_tls class and include that on both mx servers and satellites | Micah Anderson | |
Change-Id: I779ea60e6d726d042203fa0756d73b4af079d728 |