Age | Commit message (Collapse) | Author | |
---|---|---|---|
2017-04-09 | make output nicer | mh | |
2017-04-08 | group that together | mh | |
2017-04-07 | make dependencies a bit more clear | mh | |
2017-04-07 | fix path | mh | |
2017-04-07 | first step towards shorewall6, basic service is running | mh | |
2017-04-07 | calculate whether we want to disable ipv6 (if there is no public ipv6 ↵ | mh | |
address) or not | |||
2016-06-26 | older puppet versions can't yet dealt with that | mh | |
2016-06-26 | modernize so we don't need to deploy a full config file anymore | mh | |
2015-12-05 | check shorewall daily on problems to alert if a rule won't compile | mh | |
2015-12-05 | linting | mh | |
2015-12-05 | make service restart more failsafe | mh | |
2015-12-05 | Deprecated | Sylvain Veyrié | |
2015-12-05 | only manage the config_path if we do not manage the config file | mh | |
2015-05-19 | provide a class ordering hint for augeas setup | Micah Anderson | |
2015-05-19 | Remove 'require augeas' (#4396) | Micah Anderson | |
Because the puppet 'require' keyword actually instantiates a class, having 'require augeas' in base.pp means that you cannot instantiate the augeas class anywhere else in your manifests, for example with some optional parameters to the class. If you do, you will get a duplicate definition error. The README already says that the augeas module is required. It seems better that this is managed outside of the module, allowing for class parameter flexibility. | |||
2013-03-23 | linting | mh | |
2013-03-23 | only manage the config_path if we do not manage the config file | mh | |
2013-02-23 | remove the class requirement in the augeas block, it is handled by the ↵ | Micah Anderson | |
top-level require | |||
2013-02-23 | change the 'include augeas' to a 'require augeas' | Micah Anderson | |
2013-02-12 | augeas definition needs to make sure the shorewall package is installed ↵ | Micah Anderson | |
before it tries to run | |||
2013-01-24 | fix missing dependency on augeas | Micah Anderson | |
make sure that the augeas class has been applied before attempting to do any augeas operations. without this, you will non-deterministically get: err: /Stage[main]/Shorewall::Base/Augeas[shorewall_module_config_path]: Could not evaluate: Save failed with return code false | |||
2013-01-02 | provide an easy option to still manage the source of the central conf file | mh | |
2013-01-02 | Merge remote-tracking branch 'riseup/master' | mh | |
Conflicts: files/shorewall.conf.CentOS.6 files/shorewall.conf.Debian.wheezy | |||
2013-01-02 | Merge remote-tracking branch 'sarava/master' | mh | |
Conflicts: manifests/base.pp manifests/init.pp | |||
2012-12-11 | Because the puppet shorewall module uses concat::fragment assembly to put the | Micah Anderson | |
final results in /etc/shorewall/puppet, we have to make sure the shorewall.conf is pointing to that directory to get those configurations. This commit fixes that. | |||
2012-12-04 | actually it is not possible to provide the site-shorewall sources for | Micah Anderson | |
shorewall.conf, because if they do not exist, you will get a puppet error. this commit removes them, and updates the README to provide instructions for how you can do it the old way, if you want | |||
2012-12-04 | Stop shipping the default shorewall.conf file, instead we should let the | Micah Anderson | |
operatingsystem package install its default config (this lets us stop having to keep this file updated), and instead tell people to configure their shorewall.conf file using the augeas method. It is possible still to distribute a shorewall.conf from a site-shorewall directory, however if the file is distributed, then it is not possible to use the augeas method. https://labs.riseup.net/code/issues/2738 | |||
2012-06-20 | Merge remote-tracking branch 'immerda/master' into riseup | Micah Anderson | |
NOTE: the conflicts in the files/shorewall.conf.Debian.squeeze I resolved by favoring the actual debian squeeze shorewall.conf, there were a few options in the immerda one that were not the same. Conflicts: README files/shorewall.conf.Debian.squeeze manifests/base.pp manifests/blacklist.pp manifests/debian.pp manifests/host.pp manifests/init.pp manifests/interface.pp manifests/masq.pp manifests/nat.pp manifests/params.pp manifests/policy.pp manifests/proxyarp.pp manifests/rfc1918.pp manifests/routestopped.pp manifests/rule.pp manifests/rule_section.pp manifests/rules/out/ekeyd.pp manifests/zone.pp | |||
2012-06-06 | fix for new style for 2.7 | mh | |
2011-12-22 | add CentOS 6 version | mh | |
2011-09-13 | Adding shorewall::tunnel | Silvio Rhatto | |
2011-08-04 | refactor things to use the concat module | Marcel Haerry | |
2011-08-04 | add management for providers | Matthias Imsand | |
2011-02-14 | Make $shorewall_ensure_version = present by default | Silvio Rhatto | |
2010-10-17 | Merge remote branch 'riseup/master' | intrigeri | |
Conflicts: files/debian/default manifests/init.pp templates/debian/default templates/debian_default.erb | |||
2010-08-07 | remove unnecessary fileserver variable (#2460) | mh | |
2010-05-05 | adapt shorewall module to new behavior of concatenated_file | mh | |
2009-12-07 | shorewall package is only missing for karmic -> treat only karmic special | mh | |
2009-12-07 | Added Ubuntu Support. That means installed package is now shorewall-shell ↵ | Varac | |
instead of shorewall (which is dummy package for shorewall-shell anyway). | |||
2009-12-07 | fix lookup problem of default config, copy CentOS to be default, copy lenny ↵ | mh | |
to be default for debian | |||
2009-12-07 | update to 0.25.x style | mh | |
2009-12-07 | update file path to new 0.25 style | mh | |
2009-12-07 | whitespace fixes | mh | |
2009-12-07 | factored everything out in its own file | Marcel Haerry | |