| Age | Commit message (Collapse) | Author |
|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
site_shorewall::defaults can be used on every host, it configures
a basic firewall, which blocks everything from outside except
ping + ssh, and allows outgoing traffic for http, git, dns.
|
|
|
|
|
|
Exec[bundler_update] can take a really long time, increasing
timeout from 300s (default) to 600s
fixes Increase command timeout for Exec[bundler_update] (Feature #1643)
|
|
Because in site.pp it didn't get the tag "leap_base"
and would not be declared with leap cli's default puppet
tags.
Fixes: parent directory /var/lib/puppet/concat
does not exist (Feature#1625)
|
|
|
|
|
|
|
|
enhancement
put the leap-webapp user in the 'ssl-cert' group
pass group => 'leap-webapp' to the leap_client_ca.key so the application can access it
|
|
if the node is a monitor node
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
fine here
|
|
|
|
This file will have the .disabled removed by the apt wrapper when the apt-get
update fails
|
|
|
|
|
|
in the json is ~ (nil), which ends up being undef in puppet (closes #1575)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
the net zone so we dont lock ourselves out during deploy, but also are able to
access the internet
|
|
|
|
which interface has it (essentially the inverse of the ipaddress_${interface}
fact).
Switch the hiera lookups of the $interface, which was pulling from the .json to
pull instead from the above fact, see #1547 and #1548
|
|
|
|
|
|
|
|
|
|
|
