summaryrefslogtreecommitdiff
path: root/puppet
AgeCommit message (Collapse)Author
2013-05-22add requirements to the try::file resourcesMicah Anderson
normally a file resource would automatically require the parent directory first, but try::file doesn't do this so it has errors if /srv/leap/webapp doesn't exist yet: for example: - [web1] err: /Stage[main]/Site_webapp/Try::File[/srv/leap/webapp/public/img]/Exec[restore_/srv/leap/webapp/public/img]/returns: change from notrun to 0 failed: Working directory '/srv/leap/webapp/public' does not exist that was 'tried' before the vcsrepo was done which would have resolved that problem. This makes sure that the vcsrepo is done first
2013-05-22add force => true parameter to webapp vcsrepo checkoutMicah Anderson
this should have been added to d669a5fb56acf9101cf677ecbd30bcc47b092cd3 resolve #1722 after the vcsrepo module was updated to handle this, but it wasn't.
2013-05-22change paths for leap webapp to be under /srv/leap/webapp from /srv/leap-webappMicah Anderson
2013-05-16special casing for pistoncloud/openstack/ec2Micah Anderson
2013-05-14added smtp-service.json, requires latest leap_clielijah
2013-05-09the leap platform repo should track 'stable'Micah Anderson
2013-05-02fixed dnat_ruleselijah
2013-04-30added soledad-service.jsonelijah
2013-04-30minor spacing changesMicah Anderson
2013-04-30setup a site_config::params class that can be used to set some common ↵Micah Anderson
variables that are used in different places to start with we setup the $interface variable, based on logic as defined in #2213 change the various places that were looking up this value to use site_config::params::interface instead
2013-04-26Merge branch 'develop' of ssh://code.leap.se/leap_platform into developvarac
2013-04-26Revert "webapp: use admin creds for now, until we fixed couchdb user ↵varac
permissions" This reverts commit 830f2408fa210016fdef855da8b3fd28421bff32.
2013-04-25update apache submodule to fix #2279Micah Anderson
2013-04-24provider base - service definitions are now versioned (requires new leap_cli)elijah
2013-04-24take out plain couchdb setup, always deploy bigcouch (Feature #2176)varac
2013-04-24user leap-webapp instead of leap_webappvarac
2013-04-24couchdb.yml.admin is changed on every puppetrun from leap-webapp to rootvarac
2013-04-24automatic update of submodule couchdbvarac
2013-04-24Use pre-salted+hashed admin pw for couchdb (Feature #1941)varac
2013-04-24updated needed couchdb users and DBsvarac
2013-04-24automatic update of submodule stdlibvarac
2013-04-24automatic update of submodule couchdbvarac
2013-04-24Use pre-salted+hashed user pw for couchdb (Feature #2324)varac
2013-04-23automatic update of submodule couchdbvarac
2013-04-23fix mode for webapp production.log (#2300)Micah Anderson
2013-04-22webapp -- fixed bug in configurationelijah
2013-04-18update apache module to take the 'ssl' parameter, and pass it to the class, thisMicah Anderson
eliminates a potential variable lookup ordering problem (#2273)
2013-04-18webapp: removed "Alias /1" from apache configelijah
2013-04-17update apache module to new 2.7 styleMicah Anderson
2013-04-17rename fallback apt source list so it will be more obvious when it is paired ↵Micah Anderson
with the primary.list
2013-04-16move secret token into the config.yamlMicah Anderson
2013-04-16pass version to haproxy so that the leap package will be installedMicah Anderson
this package is a newer version than the one in debian, and as of this writing haproxy is scheduled to be removed from wheezy, also it has hardened flags enabled
2013-04-16update haproxy submodule to get version parameter possibilityMicah Anderson
2013-04-11webapp: use admin creds for now, until we fixed couchdb user permissionsvarac
2013-04-10clean up ca_daemon things, it is not used any longer because it has been ↵Micah Anderson
included in the web app (#1978) remove site_ca_daemon module and configuration in site.pp as well as the provider_base/services/ca.json
2013-04-09make sure the production environment is used for the migrationsMicah Anderson
2013-04-09add a httpchk line to haproxy to properly test if the couchdb is availableMicah Anderson
add the useful http-server-close option set check option on the servers, with a 3 second interval, a one second fastinter (for flapping) and a one second downinter. Set the number of checks for failure to be one (so it will take 3 seconds for a node to fail out) and 2 checks to come back
2013-04-09update deprecated haproxy configuration options, set values a little lowerMicah Anderson
2013-04-04set permissions on the rails production.log, otherwise passenger complains ↵Micah Anderson
about this in the apache log file
2013-04-04fix typo in x509::variablesMicah Anderson
2013-04-04make sure the couchdb.yml permissions are set properlyMicah Anderson
2013-04-04fix missing commaMicah Anderson
2013-04-04pass $ca_name to stunnel::setup - this eliminates a dynamic scoped variable ↵Micah Anderson
lookup, and warning
2013-04-04update submodule to get fix for syntax errorMicah Anderson
2013-04-04add Erlang Distributed Node Protocol Port json entry under bigcouchMicah Anderson
setup ednp_server and ednp_client stunnels update couchdb puppet submodule to support configurable ednp_port parameter and general module cleanup pass ednp_port to couchdb setup so that it is configured in the vm.args template clarify in comments the difference between the epmd and ednp ports remove hard-coded erlang_vm_port variable and instead setup shorewall to allow for the stunnel connection only setup dnat rules for the ednp client connections
2013-04-04remove the apache_ssl_proxy cleanupMicah Anderson
2013-04-04rename bigcouch.port to more accurate bigcouch.epmd_portMicah Anderson
2013-04-04rename the bigcouch_replication_[server,client] to be the more accurately, andMicah Anderson
shorter named epmd (erlang port mapper daemon)
2013-04-03automatic update to stunnel moduleMicah Anderson
2013-04-03switch stunnel module to our version which has been modified for 2.7 ↵Micah Anderson
parameterized classes and qualified variables update our stunnel class instantiation to be parameterized