Age | Commit message (Collapse) | Author | |
---|---|---|---|
2013-07-23 | /srv/leap/webapp/public/img: require => Vcsrepo['/srv/leap/webapp'] | varac | |
2013-07-19 | try::file - absolute exec paths. | elijah | |
2013-07-19 | an entirely different implementation of try::file, using all execs. the ↵ | elijah | |
built in file resource of puppet can't be used for what we want, because if you specify $source, it always bombs out if it doesn't exist, regardless of dependencies. | |||
2013-07-17 | default to false for $hosts | elijah | |
2013-07-16 | lint site_openvpn manifests | Micah Anderson | |
Change-Id: I314031d93aa9f4a0f217680870678e39c096d46a | |||
2013-07-15 | lint nickserver class | Micah Anderson | |
Change-Id: I03cdb5a6255d245cb1163a30b221b4c32dc4bef6 | |||
2013-07-15 | Merge branch 'hotfix/issue/3140' into develop | varac | |
2013-07-15 | fix smtpd_recipient_restrictions, debug connections from localhost | varac | |
2013-07-11 | changes to support restrictive permissions for /etc/leap. this is required ↵ | elijah | |
to work with the latest leap_cli. | |||
2013-07-10 | ensure that /etc/hosts is output deterministically, so that content does not ↵ | elijah | |
change each time you deploy. | |||
2013-07-10 | added tls support, including smtp auth via client cert | varac | |
2013-07-09 | use file_line from stdlib instead of line, now both ↵ | varac | |
vpn_unlimited_tcp_resolver and vpn_unlimited_udp_resolver are included | |||
2013-07-09 | re-add mx service | varac | |
2013-07-09 | updated submodule apache | varac | |
2013-07-09 | updated submodule couchdb | varac | |
2013-07-09 | updated submodule apt | varac | |
2013-07-09 | beginning of smtp_auth config with client certs | varac | |
2013-07-09 | smtpd_recipient_restrictions: +permit_tls_all_clientcerts | varac | |
2013-07-09 | smtpd_checks: smtpd_delay_reject | varac | |
2013-07-09 | smtpd_checks: smtpd_data_restrictions | varac | |
2013-07-09 | using alias resolver | varac | |
2013-07-09 | update postfix module to new shared version for parameterized classes, and other | Micah Anderson | |
2.7 updates update site_postfix::mx to use parameterized classes | |||
2013-07-09 | no need to import common anymore | varac | |
2013-07-09 | Configure Postfix for incoming mails (Feature #2269) | varac | |
2013-07-09 | hiera variable mx.contact -> postfix $root_mail_recipient | varac | |
2013-07-09 | initial mx couchdb stunnel configuration | Micah Anderson | |
2013-07-09 | added site_mx::haproxy | varac | |
2013-07-09 | added basic site_postfix::mx config | varac | |
2013-07-09 | include shorewall rules for site_mx | varac | |
2013-07-09 | shorewall rules for site_mx | varac | |
2013-07-09 | added site_mx | varac | |
2013-07-09 | added submodule postfix from git://labs.riseup.net/shared-postfix | varac | |
2013-07-09 | include site_mx | varac | |
2013-07-06 | site_webapp -- make bundler not install test-only or development-only gems. | elijah | |
2013-07-04 | more robust openvpn restarting | Micah Anderson | |
this ensures that an actual restart is run on the service when config files are added or removed, instead of relying on the status parameter of the initscript, which can be confused if config files are removed out from under it Change-Id: I1c69fff26933338b707acf7dc4593547f32f92e3 | |||
2013-07-03 | Merge branch 'bug/1983' into leap | Micah Anderson | |
2013-07-02 | update stunnel submodule to fix refresh bug #3013 | Micah Anderson | |
Change-Id: I9ed218d9353c05b34d34c363a6a3f10d54b3a60a | |||
2013-07-02 | create a site_config subclass for package installation and removal add ↵ | Micah Anderson | |
packages that we want to make sure are installed remove packages that were found on vagrant and PC installations that have no business being there Change-Id: I4887a327ca89eb60945ad817a75ff199859824d3 | |||
2013-07-02 | deleted bind9 purging, it was only needed for the transition from bind to ↵ | varac | |
unbound | |||
2013-07-01 | restart stunnels if /etc/hosts is changed (#3031) | Micah Anderson | |
Due to the fact that /etc/hosts is modified in the early stage setup.pp run and the stunnel service is not deployed on an initial puppet run, we cannot simply override the Service['stunnel'] but instead need to trigger a restart through an exec calling the init script that first tests to see if it is present. Change-Id: I6bf5dfece9ecbdb8319747774185dec50d5a55f6 | |||
2013-06-30 | Fix 'Failed to call refresh: /usr/local/sbin/reload_dhclient returned 2 instead | Micah Anderson | |
of one of [0]' by putting in the missing closing single quote. Change-Id: I86feb5d06dd25e28ea67da0b5627e7be4174e01e | |||
2013-07-01 | Merge branch 'feature/authorized_keys' of ↵ | micah | |
/home/git/repositories/micah/leap_platform into develop | |||
2013-06-30 | switch to own define for managing ssh keys | varac | |
The problem with puppet's built-in ssh_authorized_key is that you can purge unmanaged keys in a authorized_keys file. see https://leap.se/code/issues/3010 for details. Conflicts: puppet/modules/site_sshd/manifests/authorized_keys.pp Change-Id: I640bf7ebc0f0f7fb19cc46feb4cb2702d6561a9b | |||
2013-06-30 | modularize and standardize site_sshd: | Micah Anderson | |
. move the setting of the xterm title to site_config::shell . change the xterm file resource to use standard source lines, switch to single quotes, quote mode, and line up parameters . move the mosh pieces into a site_ssh::mosh class and only include it if the right mosh variable is enabled, passing into the class the necessary hiera parameters . lint the site_ssh::mosh resources . change the authorized_keys class to accept the key parameter which is passed in from the main ssh class (but allow for out of scope variable lookup when the tag is passed) Change-Id: Ieec5a3932de9bad1b98633032b28f88e91e46604 | |||
2013-06-28 | added site_sshd::authorized_keys | varac | |
2013-06-27 | Merge branch 'bug/2984' into develop | Micah Anderson | |
2013-06-27 | update the apt submodule in order to get the fix for unattended_upgrades ↵ | Micah Anderson | |
(#2984) and the custom_key_dir as a class parameter remove the global variable from setup.pp and site.pp and instead pass it into the apt class declaration as a parameter Change-Id: I24806f2fd22b5a066b951c5f76f3dd748481b5b6 | |||
2013-06-25 | fix for #2986 - the services variable is no longer an array | Micah Anderson | |
Change-Id: Ia6fc60c0c1fdfa50e1d6d981699c1d8010df63fc | |||
2013-06-25 | Merge remote-tracking branch 'leap/develop' into develop | Micah Anderson | |
2013-06-25 | fix preferences description for Debian squeeze | Micah Anderson | |
Change-Id: I30ca424bd9b89b3e95532e325828982e8e513fc7 |