summaryrefslogtreecommitdiff
path: root/manifests/base.pp
AgeCommit message (Collapse)Author
2017-04-09make output nicermh
2017-04-08group that togethermh
2017-04-07make dependencies a bit more clearmh
2017-04-07fix pathmh
2017-04-07first step towards shorewall6, basic service is runningmh
2017-04-07calculate whether we want to disable ipv6 (if there is no public ipv6 ↵mh
address) or not
2016-06-26older puppet versions can't yet dealt with thatmh
2016-06-26modernize so we don't need to deploy a full config file anymoremh
2015-12-05check shorewall daily on problems to alert if a rule won't compilemh
2015-12-05lintingmh
2015-12-05make service restart more failsafemh
2015-12-05DeprecatedSylvain Veyrié
2015-12-05only manage the config_path if we do not manage the config filemh
2015-05-19provide a class ordering hint for augeas setupMicah Anderson
2015-05-19Remove 'require augeas' (#4396)Micah Anderson
Because the puppet 'require' keyword actually instantiates a class, having 'require augeas' in base.pp means that you cannot instantiate the augeas class anywhere else in your manifests, for example with some optional parameters to the class. If you do, you will get a duplicate definition error. The README already says that the augeas module is required. It seems better that this is managed outside of the module, allowing for class parameter flexibility.
2013-03-23lintingmh
2013-03-23only manage the config_path if we do not manage the config filemh
2013-02-23remove the class requirement in the augeas block, it is handled by the ↵Micah Anderson
top-level require
2013-02-23change the 'include augeas' to a 'require augeas'Micah Anderson
2013-02-12augeas definition needs to make sure the shorewall package is installed ↵Micah Anderson
before it tries to run
2013-01-24fix missing dependency on augeasMicah Anderson
make sure that the augeas class has been applied before attempting to do any augeas operations. without this, you will non-deterministically get: err: /Stage[main]/Shorewall::Base/Augeas[shorewall_module_config_path]: Could not evaluate: Save failed with return code false
2013-01-02provide an easy option to still manage the source of the central conf filemh
2013-01-02Merge remote-tracking branch 'riseup/master'mh
Conflicts: files/shorewall.conf.CentOS.6 files/shorewall.conf.Debian.wheezy
2013-01-02Merge remote-tracking branch 'sarava/master'mh
Conflicts: manifests/base.pp manifests/init.pp
2012-12-11Because the puppet shorewall module uses concat::fragment assembly to put theMicah Anderson
final results in /etc/shorewall/puppet, we have to make sure the shorewall.conf is pointing to that directory to get those configurations. This commit fixes that.
2012-12-04actually it is not possible to provide the site-shorewall sources forMicah Anderson
shorewall.conf, because if they do not exist, you will get a puppet error. this commit removes them, and updates the README to provide instructions for how you can do it the old way, if you want
2012-12-04Stop shipping the default shorewall.conf file, instead we should let theMicah Anderson
operatingsystem package install its default config (this lets us stop having to keep this file updated), and instead tell people to configure their shorewall.conf file using the augeas method. It is possible still to distribute a shorewall.conf from a site-shorewall directory, however if the file is distributed, then it is not possible to use the augeas method. https://labs.riseup.net/code/issues/2738
2012-06-20Merge remote-tracking branch 'immerda/master' into riseupMicah Anderson
NOTE: the conflicts in the files/shorewall.conf.Debian.squeeze I resolved by favoring the actual debian squeeze shorewall.conf, there were a few options in the immerda one that were not the same. Conflicts: README files/shorewall.conf.Debian.squeeze manifests/base.pp manifests/blacklist.pp manifests/debian.pp manifests/host.pp manifests/init.pp manifests/interface.pp manifests/masq.pp manifests/nat.pp manifests/params.pp manifests/policy.pp manifests/proxyarp.pp manifests/rfc1918.pp manifests/routestopped.pp manifests/rule.pp manifests/rule_section.pp manifests/rules/out/ekeyd.pp manifests/zone.pp
2012-06-06fix for new style for 2.7mh
2011-12-22add CentOS 6 versionmh
2011-09-13Adding shorewall::tunnelSilvio Rhatto
2011-08-04refactor things to use the concat moduleMarcel Haerry
2011-08-04add management for providersMatthias Imsand
2011-02-14Make $shorewall_ensure_version = present by defaultSilvio Rhatto
2010-10-17Merge remote branch 'riseup/master'intrigeri
Conflicts: files/debian/default manifests/init.pp templates/debian/default templates/debian_default.erb
2010-08-07remove unnecessary fileserver variable (#2460)mh
2010-05-05adapt shorewall module to new behavior of concatenated_filemh
2009-12-07shorewall package is only missing for karmic -> treat only karmic specialmh
2009-12-07Added Ubuntu Support. That means installed package is now shorewall-shell ↵Varac
instead of shorewall (which is dummy package for shorewall-shell anyway).
2009-12-07fix lookup problem of default config, copy CentOS to be default, copy lenny ↵mh
to be default for debian
2009-12-07update to 0.25.x stylemh
2009-12-07update file path to new 0.25 stylemh
2009-12-07whitespace fixesmh
2009-12-07factored everything out in its own fileMarcel Haerry