Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-07-30 | add replication role to user databases with tapicero | Azul | |
This way the replication has read access on the source and write access on the target. | |||
2014-07-29 | Merge remote-tracking branch 'fbernitt/issue_5217_allow_registration' into ↵ | Azul | |
develop | |||
2014-07-15 | haproxy default to couch_write, couch_read on GET | Azul | |
METH_POST probably does not catch PUT, DESTROY etc. So instead we now use the master as the default and only use the replications for GET and HEAD requests. | |||
2014-07-14 | proper json for tapicero config | Azul | |
2014-07-14 | update couchdb puppet module | Azul | |
2014-07-11 | Added allow_registration to webapp config.yml. | Folker Bernitt | |
- See issue #5217 - See companion change in leap_web | |||
2014-07-01 | Use new macro pick_node to pick vpn gateway for obfsproxy.json | irregulator | |
2014-07-01 | Check appropriately if obfsproxy is included in services | irregulator | |
2014-07-01 | Add apt preferences requirement for obfsproxy package resource | irregulator | |
2014-07-01 | Add User resource requirement for obfsproxy service, log, etc dir | irregulator | |
2014-07-01 | Remove unneeded newlines from obfsproxy.conf | irregulator | |
2014-07-01 | Explicitly set apt preferences for obfsproxy to wheezy-backports | irregulator | |
2014-07-01 | Make obfsproxy daemon bind to specific address rather than 0.0.0.0 | irregulator | |
If obfsproxy is spawned alongside eip service, make it listen to the gateway_adress IP. If obfsproxy is running standalone listen to ip_address. | |||
2014-07-01 | Remove initscript subscription to conf file | irregulator | |
2014-07-01 | Move log files to var/log instead of var/log/obfsproxy | irregulator | |
2014-07-01 | Subscribe obfsproxy service resource to conf file | irregulator | |
2014-07-01 | Simplify init script, let puppet service resource use init status | irregulator | |
2014-07-01 | Change logrotate's frequency and number of log files to keep | irregulator | |
2014-07-01 | Be able to specify log_level parameter for obfsproxy | irregulator | |
log_level sets minimum logging severity of obfsproxy daemon, can be error, warning, info, debug. Defaults to info. | |||
2014-07-01 | Address logging for obfsproxy daemon | irregulator | |
Create obfsproxy directory in /var/log, specify log file when obfsproxy is spawned by init script, create a logrotate configuration for obfsproxy's logs. | |||
2014-07-01 | Line up equal signs, change double to single quotes | irregulator | |
2014-07-01 | Remove commented lines from obfsproxy puppet module class | irregulator | |
2014-07-01 | Remove commented lines from init script status section | irregulator | |
2014-07-01 | Change exit status code if config file is missing | irregulator | |
2014-07-01 | Move obfsproxy_daemon to obfsproxy_init | irregulator | |
2014-07-01 | Add data directory to save scramblesuit's state. | irregulator | |
Also clean up a little the obfsproxy puppet class, create appropriate directories, restrict permissions. | |||
2014-07-01 | Make shorewall accept incoming traffic for obfsproxy server | irregulator | |
2014-07-01 | Initial commit for obfsproxy server feature in platform | irregulator | |
2014-06-27 | add a package resource for leap-keymanager to make sure it is also the | Micah Anderson | |
latest version, this is necessary to transition to the python-gnupg-ng package, which will not otherwise be installed Change-Id: I2ea631e15518fd40cb0ea4fe718498bdfba3c599 | |||
2014-06-27 | leap-mx package resource ensure parameter needs to be 'latest' to ensure | Micah Anderson | |
packages will be upgraded Change-Id: Ic94be8b732d9d2202f87c0c2cdd2fd0d16cc9efc | |||
2014-06-27 | reorder /etc/hosts | Christoph | |
now "hostname -f" results in the correct hostname. Fixes #5835 | |||
2014-06-26 | reorder /etc/hosts | Christoph | |
now "hostname -f" results in the correct hostname. Fixes #5835 | |||
2014-06-25 | lint site_couchdb | elijah | |
2014-06-25 | update couchdb submodule | elijah | |
2014-06-25 | create netrc files for all users with new puppet_couchdb | Azul | |
This only works with the latest patch to puppet_couchdb | |||
2014-06-25 | hand replication credentials to tapicero | Azul | |
2014-06-25 | minor: fix typo in replication user roles | Azul | |
2014-06-25 | haproxy: support read only couchdb mirrors | elijah | |
2014-06-25 | stunnel: make site_mx and site_webapp use new site_stunnel | elijah | |
2014-06-25 | add replication user | Azul | |
2014-06-25 | site_couchdb: support auto-stunnel setup, split master, bigcouch, and mirror ↵ | elijah | |
out into separate files. | |||
2014-06-25 | new generic system for stunnel: just `include site_stunnel` and stunnel + ↵ | elijah | |
needed shorewall will be automatically set up. requires new leap_cli | |||
2014-06-25 | first steps towards mirroring couch | Azul | |
2014-06-25 | set mirror option if we are on a couch mirror | Azul | |
2014-06-25 | separate bigcouch specifics from init.pp | Azul | |
2014-06-25 | split bigcouch stunnel from plain couch stunnel | Azul | |
2014-06-17 | allow webapp.json to configure what engines are enabled | elijah | |
2014-06-04 | clean up how /etc/hosts is generated so it doesn't require custom behavior ↵0.5.2 | elijah | |
depending on the services. | |||
2014-06-04 | bugfix: actually apply modules based on $services | elijah | |
2014-06-03 | move hiera from site.pp to site_config::setup | Christoph | |
the problem was following: if a host has the webapp service, the template for /etc/hosts adds some stuff. But setup.pp did not ask hiera about the services so "/srv/leap/bin/puppet_command set_hostname" always resets the hostname. Since that gets triggered every time you run "leap deploy" the hostname changes, some services restart, then the hostname changes back and the services restart again. The solution is to get the hiera data before every run. |