leap_platform.git - [leap

Age	Commit message (Collapse)	Author
2016-02-02	[refactor] Don't declare dependencies for apt resources	varac
	The apt module now takes care of all the dependencies removed from `site_apt`. Also, the dependency to install the `lsb` package after `refresh_apt` is unnesseccary because lsb facts won't work anyway on the first run if `lsb` is not installed before, so we can safely remove it.
2016-02-02	don't deploy bundler debug to servers	kwadronaut

2016-02-02	finally fix leap-mx logging, for the last time, hopefully.	elijah

2016-02-01	updated submodule apt	varac

2016-01-28	[feat] Fix fast deploy using 'leap deploy --fast'	varac
	This worked before, but somehow stopped working. We need to include 'site_config::slow' top-level scope instead of including it in 'site_config::default', because otherwise it would get tagged with 'leap_base', and would be included always. This way 'site_config::slow' gets included by default, but can be excluded by using 'leap deploy --fast'. See https://leap.se/en/docs/platform/details/under-the-hood#tags - Resolves: #7844
2016-01-28	[bug] Fix removing of bigcouch logwatch spoolfiles	varac
	The problem was that puppet tried to remove them on the couch node, but they need to get removed on monitor node. - Resolves: #7641
2016-01-27	[bug] [jessie] Fix apache 2.4 auth directives	varac
	- Resolves: #7853
2016-01-27	[refactor] Optimize static apache vhost templates	varac
	- Related: #7853
2016-01-27	[feat] Cronjob to delete orphaned userdbs	varac
	- Resolves: #7418
2016-01-26	[bug] Fix unattended-upgrades on jessie	varac
	- Resolves: #7842
2016-01-26	[bug] remove bigcouch compaction cronjob	varac
	- Resolves: #7629
2016-01-26	[feat] Move bigcouch removals to own class	varac
	We now include "site_config::remove::bigcouch" in class "site_couchdb::master", which sets up plain couchdb.
2016-01-26	[bug] Use ruby::devel to install ruby-dev deb	varac
	Ruby itself is a parameterized class, and parameters cannot get overridden (see https://projects.puppetlabs.com/issues/9259). The webapp node didn't install the ruby-dev package (we never noticed because our vagrant images as probably other debian images had ruby-dev preinstalled). We now use the ruby::devel class to install ruby-dev. - Tested: [citest-jessie] - Resolves: #7838
2016-01-26	[feat] Don't install rubygems package on every run	varac
	I merged immerda's changes to the `rubygems` module, which remove the installation of the `rubygems` package from jessie on, because it's a dependency of the `ruby2.1` package, which is a dep of puppet, and therefore installed on every node. - Tested: [local singlenode] - Resolves: #7619
2016-01-23	[feat] Don't remove portmap on vagrant	varac
	Vagrant uses portmap and nfs-common for mounting shared folders using nfs.
2016-01-22	[bug] refactor build-essential package installation	varac
	In certain node setups, the webapp gems cannot get built because `build-essential` and dependent packages were not present. I refactored the `site_config::packages::build_essential` class, which now inherits `site_config::packages`. The latter class removes all unneccessary (development) packages, but when the `site_config::packages::build_essential` class is included, some dev packages are overridden to be installed. - Tested: [local] - Resolves: #7834
2016-01-22	linted puppet/modules/site_openvpn/manifests/init.pp	varac

2016-01-22	Include site_config::params in all x509 subclasses (#6851)	varac
	After restructuring site.pp to only include site_config::default and the service-specific classes, we got this: Duplicate declaration: X509::Cert[undef] is already declared in file /srv/leap/puppet/modules/site_config/manifests/x509/commercial/cert.pp at line 8; cannot redeclare at /srv/leap/puppet/modules/site_config/manifests/x509/cert.pp:8 on node rewcitestweb1.rewire.org So i included site_config::params in all site_config::x509 clases. Change-Id: Ib8387abfdc68b36c73a45fd2dd1f3a159eaec4a5
2016-01-22	restructured site.pp, now only one class gets included in site.pp per ↵	varac
	service (Bug #6851) Also, moved global Exec{} defaults to site.pp Change-Id: I9ae91b77afde944d2f1312613b9d9030e32239dd
2016-01-21	Make sure the certs are installed for all smtp tls clients, thus	Micah
	ensuring the satellite hosts are setup properly (#7611) Change-Id: I9dce57c305a6fd6a39596a941174fe1879af5e4f
2016-01-20	Merge remote-tracking branch 'micah/bug/7822' into develop	varac

2016-01-19	Make the reject parameter an array to fix the following (#7822):	Micah
	failed to parse template tor/torrc.exit_policy.erb, undefined method `each' for ":":String Change-Id: I2b7b444187376dbc2f3cc5095391ae54bf8321b3
2016-01-19	Merge branch 'remove_double_apt_get_update' into develop	varac

2016-01-19	Ensure openvpn services are running on jessie	varac

2016-01-19	Swiss privacy foundation nameserver is not responding, switch secondary	Micah
	fall-back to an OpenNIC resolver that does not log (#7781) Change-Id: I290321927c8188c82e95e2cd4b93cd01bd2258c2
2016-01-19	Merge branch '7802_rsyslog_jessie' into develop	varac

2016-01-19	Make sure machines in mynetworks are able to send mail through us,	Micah
	without getting blocked by the rbl (#7819) Change-Id: Ib7a00f810b6c49528e5f99a1d83296553a81e65e
2016-01-19	Ensure curl is installed before it is called (#7803)	Micah
	Change-Id: Iedd464a397e9944159991241cd84caad6a2a40d6
2016-01-16	[bug] Enable openvpn services on jessie	varac
	- Tested: [unstable.bitmask.net] - Resolves: #7798
2016-01-15	[bug] Only pin rsyslog debs to backports on wheezy	varac
	- Resolves: #7802
2016-01-15	linted site_config::syslog	varac

2016-01-08	[bug] Make /etc/leap world-readable	varac
	Under jessie, leap-mx is started by systemd now, not as a forked proc by twistd anymore. Therefore leap-mx (the user the mx proc runs as) needs direct access to it's config file under /etc/leap/mx.conf. Before, twistd would start as root, read the config and then fork an mx proc as unprivileged leap-mx user. - Tested: [quetzal] - Resolves: #7782
2016-01-07	updated submodule couchdb	varac

2016-01-06	Update submodule apt	varac

2016-01-05	[style] Lint site_apt::dist_upgrade	varac

2016-01-05	[feat] Remove double run of apt-get update	varac

2016-01-04	Fix status module invocation for hidden service enabled webapps (#7776)	Micah
	Change-Id: I101e4c9791102123d4334e1b84a48dacea99ac52
2016-01-01	revert 4ff763c sorry	kwadronaut

2015-12-31	update postfix module	kwadronaut

2015-12-23	[bug] Fix leap::cli::install on jessie	varac
	leap_cli could not get installed from source on jessie
2015-12-17	Make sure values that might get set incorrectly, due to preseed or	Micah
	debconf selections, are set correctly (#7478) Change-Id: I3bd261fd6fe27bbf10b8994ffff9f8b7be5b9de0
2015-12-15	add fingerprint map configuration section (#7725)	Micah
	Change-Id: I895c25daca65c19916c47267e61a4f04a6489a84
2015-12-16	Merge branch '7681_apache_2_4_auth_error' into develop	varac

2015-12-15	Make sure /var/mail/leap-mx/Maildir and its associated common maildir	Micah
	directories are managed by the platform (#6936) Change-Id: I1836eb728c0379b6175ae6d54231a6f6a7ae1033
2015-12-15	Merge branch 'dont_remove_nfs_client_on_vagrant' into develop	varac

2015-12-15	Merge branch 'remove_run_stages' into develop	varac

2015-12-15	Have leap-mx log with the process name 'leap-mx', but log to	Micah
	/var/log/leap/mx.log, and clean up the files associated with the previous configuration (#7691) Change-Id: Id08c97980292968e8e89f128afb5fa78bda30069
2015-12-12	[bug] Use guess_apache_version in apache templates	varac
	The apache_version() fact only works if apache is already installed. So we use the guess_apache_version() function from the apache module to determine which apache version is to be installed. - Resolves: #7681
2015-12-10	[feat] Dont remove nfs client on local vagrant nodes	varac

2015-12-10	[bug] Configure default sources.platform.apt.basic	varac
	Providing a custom sources.platform.apt.basic value worked with the last commit, but without that the platform would fail. So we provide a default value now in provider_base/common.json, which can get overridden.