Age | Commit message (Collapse) | Author | |
---|---|---|---|
2017-04-08 | add missing file | mh | |
2017-04-08 | introduce params only for ipv6 and only for ipv4 | mh | |
2017-04-08 | introduce params for shorewall6, by default it's just a copy of the ones for ↵ | mh | |
shorewall | |||
2017-04-08 | broadcast column is not needed for shorewall6 | mh | |
2017-04-08 | add missing file | mh | |
2017-04-08 | manage interfaces for shorewall6 | mh | |
2017-04-08 | cleanup certain unsupported options | mh | |
2017-04-08 | add a full version fact and derive the maj from that one and make the fact ↵ | mh | |
work, even if there is no shorewall installed | |||
2017-04-08 | group that together | mh | |
2017-04-07 | we need this | mh | |
2017-04-07 | rename snippet | mh | |
2017-04-07 | add mgmt of files for shorewall6 | mh | |
2017-04-07 | make zones also for ipv6 | mh | |
2017-04-07 | make dependencies a bit more clear | mh | |
2017-04-07 | fix path | mh | |
2017-04-07 | correct naming | mh | |
2017-04-07 | first step towards shorewall6, basic service is running | mh | |
2017-04-07 | calculate whether we want to disable ipv6 (if there is no public ipv6 ↵ | mh | |
address) or not | |||
2017-02-24 | Merge branch 'avoid-duplicate-package-definition' into 'master' | Micah | |
Use ensure_packages, to avoid duplicate definition in case Package['shorewall'] is defined elsewhere already. See merge request !10 | |||
2017-02-22 | Merge branch '5.x-3' into 'master' | Micah | |
5.x part 3 See merge request !9 | |||
2017-02-20 | update config file headers to current upstream versions | Matt Taggart | |
2017-02-20 | update URLs to new working upstream locations | Matt Taggart | |
2017-02-20 | new stoppedrules, replaces routestopped | Matt Taggart | |
2017-02-20 | add some notes about deprecated features | Matt Taggart | |
2017-02-20 | new shorewall_version fact, switch shorewall_major_version to use it | Matt Taggart | |
from https://0xacab.org/riseup-puppet-recipes/shorewall/commit/0cd2a305f7fd9ba830a1fa3de25428ffa71d39f7#note_92590 | |||
2017-02-19 | no need for openvpn outgoing | mh | |
2017-02-14 | Use ensure_packages, to avoid duplicate definition in case ↵ | intrigeri | |
Package['shorewall'] is defined elsewhere already. | |||
2017-02-13 | Merge branch '5.x-2' into 'master' | Micah | |
5.x changes part 2 See merge request !8 | |||
2017-02-10 | remove deprecated rfc1918 file | Matt Taggart | |
this hasn't been supported since 3.x days | |||
2017-02-10 | remove deprecated norfc1918 option | Matt Taggart | |
It was deprecated in 4.2.0 http://www.shorewall.net/upgrade_issues.htm | |||
2017-02-10 | remove deprecated blacklist | Matt Taggart | |
the blacklist file was deprecated by upstream in 4.5.7, remove all references to them. Debian wheezy shipped with 4.5.5.3-3 (but could use a backport) and jessie has 4.6.4.3-2 currently. | |||
2017-02-10 | remove redundant fact | Micah Anderson | |
2017-02-10 | Merge remote-tracking branch 'origin/master' into riseup | Micah Anderson | |
2017-02-10 | Merge two facts: shorewall_version && shorewall_major_version. The first one ↵ | Micah Anderson | |
would be line 1 and the second one would take the value of the first fact and do the stuff we see here. | |||
2017-02-10 | Merge branch '5.x' into 'master' | Micah | |
changes needed for 5.x See merge request !7 | |||
2017-02-09 | correct decision | mh | |
2017-02-09 | cherry pick fixes for 5.x | mh | |
Conflicts: manifests/rule_section.pp | |||
2017-02-09 | mory rubyism | mh | |
2017-02-09 | * Fix typo | Lebedev Vadim | |
2017-02-09 | * Add example | Lebedev Vadim | |
2017-02-09 | * Add shorewall-blrules support | Lebedev Vadim | |
2017-02-09 | * fix rule section | Lebedev Vadim | |
2017-02-09 | * add shorewal version facter | Lebedev Vadim | |
2017-02-03 | Merge remote-tracking branch 'shared/master' | mh | |
2017-02-01 | Fix fact for when shorewall is not yet installed. | Micah Anderson | |
When a node has puppet run for the first time, shorewall may not be installed. In that case there are a few problems that appear in puppet4: 1. Warning: Facter: Could not retrieve fact='shorewall_major_version', resolution='<anonymous>': undefined method `split' for nil:NilClass This is because running 'shorewall version' fails and so results in a nil, and the split cannot be done on a nil. That is solved by first running the 'shorewall version' and setting a variable. If that variable is not nil, then we can split off of that 2. Error: Could not retrieve catalog from remote server: Error 500 on SERVER: Server Error: Evaluation Error: Error while evaluating a Resource Statement, Evaluation Error: Error while evaluating a Function Call, 'versioncmp' parameter 'a' expects a String value, got Undef This happens because the shorewall_version is set to Undef, but we need to have it set to a String. So we set the variable to '-1' if it is not installed. | |||
2017-02-01 | Merge remote-tracking branch 'immerda/master' into riseup | Micah Anderson | |
2017-01-31 | don't include augeas due to conflict with riseup_common | Matt Taggart | |
2017-01-31 | Merge remote-tracking branch 'shared/master' into merge | Matt Taggart | |
Conflicts: manifests/base.pp | |||
2017-01-14 | Merge pull request #13 from marknl/master | duritong | |
Conntrack support | |||
2017-01-13 | Merge remote-tracking branch 'github/master' | mh | |