summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2017-04-09make output nicermh
2017-04-08migrate to dedicated paramsmh
2017-04-08introduce params4 and params6 helper to more easily differentiatemh
2017-04-08add missing filemh
2017-04-08introduce params only for ipv6 and only for ipv4mh
2017-04-08introduce params for shorewall6, by default it's just a copy of the ones for ↵mh
shorewall
2017-04-08broadcast column is not needed for shorewall6mh
2017-04-08add missing filemh
2017-04-08manage interfaces for shorewall6mh
2017-04-08cleanup certain unsupported optionsmh
2017-04-08add a full version fact and derive the maj from that one and make the fact ↵mh
work, even if there is no shorewall installed
2017-04-08group that togethermh
2017-04-07we need thismh
2017-04-07rename snippetmh
2017-04-07add mgmt of files for shorewall6mh
2017-04-07make zones also for ipv6mh
2017-04-07make dependencies a bit more clearmh
2017-04-07fix pathmh
2017-04-07correct namingmh
2017-04-07first step towards shorewall6, basic service is runningmh
2017-04-07calculate whether we want to disable ipv6 (if there is no public ipv6 ↵mh
address) or not
2017-02-24Merge branch 'avoid-duplicate-package-definition' into 'master' Micah
Use ensure_packages, to avoid duplicate definition in case Package['shorewall'] is defined elsewhere already. See merge request !10
2017-02-22Merge branch '5.x-3' into 'master' Micah
5.x part 3 See merge request !9
2017-02-20update config file headers to current upstream versionsMatt Taggart
2017-02-20update URLs to new working upstream locationsMatt Taggart
2017-02-20new stoppedrules, replaces routestoppedMatt Taggart
2017-02-20add some notes about deprecated featuresMatt Taggart
2017-02-20new shorewall_version fact, switch shorewall_major_version to use itMatt Taggart
from https://0xacab.org/riseup-puppet-recipes/shorewall/commit/0cd2a305f7fd9ba830a1fa3de25428ffa71d39f7#note_92590
2017-02-19no need for openvpn outgoingmh
2017-02-14Use ensure_packages, to avoid duplicate definition in case ↵intrigeri
Package['shorewall'] is defined elsewhere already.
2017-02-13Merge branch '5.x-2' into 'master' Micah
5.x changes part 2 See merge request !8
2017-02-10remove deprecated rfc1918 fileMatt Taggart
this hasn't been supported since 3.x days
2017-02-10remove deprecated norfc1918 optionMatt Taggart
It was deprecated in 4.2.0 http://www.shorewall.net/upgrade_issues.htm
2017-02-10remove deprecated blacklistMatt Taggart
the blacklist file was deprecated by upstream in 4.5.7, remove all references to them. Debian wheezy shipped with 4.5.5.3-3 (but could use a backport) and jessie has 4.6.4.3-2 currently.
2017-02-10remove redundant factMicah Anderson
2017-02-10Merge remote-tracking branch 'origin/master' into riseupMicah Anderson
2017-02-10Merge two facts: shorewall_version && shorewall_major_version. The first one ↵Micah Anderson
would be line 1 and the second one would take the value of the first fact and do the stuff we see here.
2017-02-10Merge branch '5.x' into 'master' Micah
changes needed for 5.x See merge request !7
2017-02-09correct decisionmh
2017-02-09cherry pick fixes for 5.xmh
Conflicts: manifests/rule_section.pp
2017-02-09mory rubyismmh
2017-02-09* Fix typoLebedev Vadim
2017-02-09* Add exampleLebedev Vadim
2017-02-09* Add shorewall-blrules supportLebedev Vadim
2017-02-09* fix rule sectionLebedev Vadim
2017-02-09* add shorewal version facterLebedev Vadim
2017-02-03Merge remote-tracking branch 'shared/master'mh
2017-02-01Fix fact for when shorewall is not yet installed.Micah Anderson
When a node has puppet run for the first time, shorewall may not be installed. In that case there are a few problems that appear in puppet4: 1. Warning: Facter: Could not retrieve fact='shorewall_major_version', resolution='<anonymous>': undefined method `split' for nil:NilClass This is because running 'shorewall version' fails and so results in a nil, and the split cannot be done on a nil. That is solved by first running the 'shorewall version' and setting a variable. If that variable is not nil, then we can split off of that 2. Error: Could not retrieve catalog from remote server: Error 500 on SERVER: Server Error: Evaluation Error: Error while evaluating a Resource Statement, Evaluation Error: Error while evaluating a Function Call, 'versioncmp' parameter 'a' expects a String value, got Undef This happens because the shorewall_version is set to Undef, but we need to have it set to a String. So we set the variable to '-1' if it is not installed.
2017-02-01Merge remote-tracking branch 'immerda/master' into riseupMicah Anderson
2017-01-31don't include augeas due to conflict with riseup_commonMatt Taggart