Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-04-18 | Fix clamd start configuration (#8048) | Micah | |
If clamd is not running, the helpful cronjob tries to start it again, but the way it is being started can only be run as root, and the cronjob is run as the clamav user, so you get an error on each cron run. This fixes that problem Change-Id: I4cdb29dc651bee8a2eef1655ad4748d885afae0f | |||
2016-04-18 | [style] more manual linting for custom manifests | varac | |
2016-04-18 | [style] lint some custom manifests | varac | |
I used `puppet-lint -f FILE` to fix most issues, while finishing with manual intervention. | |||
2016-04-12 | fix incorrect template name | Micah | |
Change-Id: I23d7fcea3755e9ecab561ecf69d8a6ecb8bdeca4 | |||
2016-04-12 | Put openvpn logs into leap directory (#8021) | Micah | |
Have openvpn logs go to /var/log/leap/openvpn_$protocol, instead of to /var/log/daemon.log. Change-Id: I1fc33de660648ab0dba1ce98de2864649c104719 | |||
2016-04-12 | Log stunnel server logs same as client (#8021) | Micah | |
stunnel server logs were not going to /var/log/stunnel4/*, but to /var/log/syslog instead. This was different from stunnel client logging, now its the same. Change-Id: I2dc2024b77dbb65554fc7865b0e46aedf930c6d8 | |||
2016-04-12 | Remove duplicate mail logging (#8021) | Micah | |
Add a site_rsyslog config that removes duplicate mail logging. Previously mail logs would be copied to /var/log/syslog, mail.log, mail.err, mail.info, maillog and to the console. This removes those and only puts them in /var/log/mail.log. It also removes other superfluous configurations, either because they are commented out already, or because they are uucp or nntp. Change-Id: Ib05036787d2c818bf8802c22a4b8050f945a6e6d | |||
2016-04-12 | Fix postfix connection to opendkim milter (#8020) | Micah | |
In order for postfix to access the opendkim milter socket, we need to remove the chroot option for the cleanup service. See e97a9d3800b173375a630e18e4b1aa0894eb96e1 for opendkim implementation. Change-Id: I2742650965e61273fb804ebe9ce3f9bd38796582 | |||
2016-04-05 | testing: adds mx delivery tests | elijah | |
2016-04-03 | check_mk: monitor webapp log for response code 500 | Azul | |
2016-03-31 | [bug] Fix couch_stats script | varac | |
It failed to calculate the sessions and tokens db names. - Resolves: #7658 | |||
2016-03-31 | [feat] Dont install recommended packages | varac | |
By default, Puppet installs recommended packages. We turn this off for all apt Package resources. | |||
2016-03-21 | update submodule nagios | varac | |
2016-03-18 | update submodule nagios | varac | |
2016-03-17 | update nagios submodule | varac | |
2016-03-15 | Revert "[feat] Use systemd as service provider" | varac | |
This reverts commit 0aebb4c41f96f6ad7a7e8a3b07eaffa1f9075f51. We enabled systemd as puppet service default provider, but this results in these services falsely detected as not running, and restarted on every deploy. We need to indivually configure systemd as service provider only for those services that ship a systed unit file. see #7966 for details | |||
2016-03-14 | Merge branch '7716_remove_obsolete_backports_pinning' into develop | varac | |
2016-03-13 | static site: don't call site_static::location unless locations are actually ↵ | elijah | |
defined. | |||
2016-03-11 | update tor module to fix deprecated variable references (see ↵ | Micah | |
https://gitlab.com/shared-puppet-modules-group/tor/merge_requests/3) Change-Id: I7905bedc0256bc1c7b9d7316584c9622b92b7670 | |||
2016-03-11 | update backupninja to latest shared version | Micah | |
Change-Id: I886b104b1caf561477361e382dae54d718ea88c2 | |||
2016-03-11 | fix tor-related jessie deprecation problems (#7962) | Micah | |
Change-Id: If493b8a1f06a786df36a28aa1fc592e270eba639 | |||
2016-03-11 | update tor submodule to latest, to adapt to new jessie puppet requirements | Micah | |
Change-Id: I0ed4827bc53da280d9ed62ea71382ca302ce6924 | |||
2016-03-11 | Set MUA required ciphers, tighten up the mandatory protocols (#4232) | Micah | |
Change-Id: I328aa37b393817e1764ea7e635fcefc801adbbf4 | |||
2016-03-10 | [feat] add /etc/nagios3/conf.d/local as confdir | varac | |
- Related: #2327 | |||
2016-03-10 | [jessie] Remove obsolete backports pinning | varac | |
2016-03-10 | [bug] Remove stunnel leftovers from bigcouch | varac | |
- Resolves: #7785 | |||
2016-03-10 | Merge branch 'serviceprovider_systemd' into develop | varac | |
2016-03-10 | Merge branch 'add_site_nagios_dependencies' into develop | varac | |
2016-03-10 | Update submodule nagios | varac | |
2016-03-10 | Add Dependencies to site_nagios resources | varac | |
2016-03-09 | [bug] Adopt new parameters from nagios and check_mk module | varac | |
2016-03-09 | Merge branch '2327_dont_recreate_nagios_resources' into develop | varac | |
2016-03-09 | Update submodule check_mk | varac | |
2016-03-09 | Update submoduls nagios | varac | |
2016-03-08 | update copy of the archive signing keys, switching to the new names | Micah | |
Change-Id: I0305e33c743c15ec38abcf66979a1b2f582f693c | |||
2016-03-08 | change name of leap-keyring package to leap-archive-keyring (#7950) | Micah | |
Change-Id: I5f04e31e49642597c69895b5aca3ff5326dfd6ec | |||
2016-03-08 | [feat] Use systemd as service provider | varac | |
Even when the service provider defaults to systemd in latest puppet, it still defaults to 'debian' in puppet 3.7.2 (jessie version). We dropped wheezy support so we should use the systemd provider for now. https://docs.puppetlabs.com/puppet/latest/reference/type.html#service-provider-systemd | |||
2016-03-08 | [bug] Fix inline template with deprecated variable notation | varac | |
- Resolves: #7948 | |||
2016-03-08 | updated submodule couchdb | varac | |
2016-03-04 | fix location of couchdb.admin.yml | elijah | |
2016-03-04 | ensure /var/leap/couchdb exists before creating files there. | elijah | |
2016-03-04 | move the location of couchdb.admin.yml so that it does not need to have its ↵ | elijah | |
ownership reset on each deploy. | |||
2016-03-04 | only not create soledad admin .netrc file if soledad is enabled | elijah | |
2016-03-02 | Dont recreate nagios resources on every run | varac | |
Use purging of nagios resources in a way that not all resources are recreated on every puppetrun. Resolves: #2327 | |||
2016-02-26 | Update submodules apache and apt | varac | |
2016-02-26 | Merge branch 'develop' of ssh://leap.se/leap_platform into develop | elijah | |
2016-02-26 | plain couchdb now required, bigcouch support disabled. | elijah | |
2016-02-25 | fix typo in last commit | varac | |
2016-02-25 | check-mk's mk_job depends on the time package | varac | |
2016-02-25 | couchdb module uses pbkdf2 as default pwhash algor. now | varac | |