From 818930af8a05dc44372b99f8e589527050120431 Mon Sep 17 00:00:00 2001
From: elijah <elijah@riseup.net>
Date: Thu, 10 Sep 2015 22:38:44 -0700
Subject: sshd: let nodes change default AllowTcpForwarding

---
 provider_base/common.json | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'provider_base/common.json')

diff --git a/provider_base/common.json b/provider_base/common.json
index 3d2965d7..e968dd27 100644
--- a/provider_base/common.json
+++ b/provider_base/common.json
@@ -16,6 +16,9 @@
   },
   "ssh": {
     "authorized_keys": "= authorized_keys",
+    "config": {
+      "AllowTcpForwarding": "no"
+    },
     "port": 22,
     "mosh": {
       "ports": "60000:61000",
-- 
cgit v1.2.3


From 9352ce45a7950ff1175d3a7e5412fc9006691799 Mon Sep 17 00:00:00 2001
From: elijah <elijah@riseup.net>
Date: Fri, 7 Aug 2015 14:22:48 -0700
Subject: added firewall information to nodes (needed for `leap compile
 firewall`)

---
 provider_base/common.json | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'provider_base/common.json')

diff --git a/provider_base/common.json b/provider_base/common.json
index e968dd27..9cc7875a 100644
--- a/provider_base/common.json
+++ b/provider_base/common.json
@@ -50,6 +50,14 @@
     "clients": {},
     "servers": {}
   },
+  "firewall": {
+    "ssh": {
+      "from": "sysadmin",
+      "to": "= ip_address",
+      "port": "= ssh.port"
+    },
+    "stunnel": "=> stunnel_firewall"
+  },
   "platform": {
     "version": "= Leap::Platform.version.to_s",
     "major_version": "= Leap::Platform.major_version"
-- 
cgit v1.2.3


From b1e50fc76ddece9944ae253da9bacd485ffea84b Mon Sep 17 00:00:00 2001
From: varac <varacanero@zeromail.org>
Date: Tue, 6 Oct 2015 13:23:56 +0200
Subject: [feat] Remove tapicero from more places

Remove from:

- platform white-box tests (couchdb user ACLs, tapicero daemon test)
- provider_base/ dir that handles the compilation of the hiera config
  file

- Resolves: #7501
---
 provider_base/common.json | 5 -----
 1 file changed, 5 deletions(-)

(limited to 'provider_base/common.json')

diff --git a/provider_base/common.json b/provider_base/common.json
index 9cc7875a..5821789b 100644
--- a/provider_base/common.json
+++ b/provider_base/common.json
@@ -83,11 +83,6 @@
       "package": "soledad-server",
       "revision": "latest"
     },
-    "tapicero": {
-      "type": "git",
-      "source": "https://leap.se/git/tapicero",
-      "revision": "origin/version/0.7"
-    },
     "webapp": {
       "type": "git",
       "source": "https://leap.se/git/leap_web",
-- 
cgit v1.2.3