]>
git.donarmstrong.com Git - dsa-puppet.git/log
Peter Palfrader [Tue, 7 Apr 2009 23:32:16 +0000 (01:32 +0200)]
Obligatory puppet disclaimer
Peter Palfrader [Tue, 7 Apr 2009 23:20:31 +0000 (01:20 +0200)]
Fix a typo
Peter Palfrader [Tue, 7 Apr 2009 23:13:57 +0000 (01:13 +0200)]
Add logrotate config for apache
Peter Palfrader [Tue, 7 Apr 2009 22:50:42 +0000 (00:50 +0200)]
And a few more hosts
Peter Palfrader [Tue, 7 Apr 2009 22:36:38 +0000 (00:36 +0200)]
rm sperger.debian.org/sudoers
Peter Palfrader [Tue, 7 Apr 2009 22:36:19 +0000 (00:36 +0200)]
/usr/sbin/upgrade-porter-chroots for adm
Peter Palfrader [Tue, 7 Apr 2009 22:34:12 +0000 (00:34 +0200)]
rm carver.debian.org/sudoers
Peter Palfrader [Tue, 7 Apr 2009 22:33:55 +0000 (00:33 +0200)]
Add apachectrl group
Peter Palfrader [Tue, 7 Apr 2009 22:31:08 +0000 (00:31 +0200)]
rm rore.debian.org/sudoers
Peter Palfrader [Tue, 7 Apr 2009 22:30:51 +0000 (00:30 +0200)]
Let nagios check SA controllers
Peter Palfrader [Tue, 7 Apr 2009 22:23:55 +0000 (00:23 +0200)]
On a few more hosts
Peter Palfrader [Tue, 7 Apr 2009 22:22:08 +0000 (00:22 +0200)]
rm malo.debian.org/sudoers
Peter Palfrader [Tue, 7 Apr 2009 22:21:49 +0000 (00:21 +0200)]
Add buildd
Peter Palfrader [Tue, 7 Apr 2009 22:20:57 +0000 (00:20 +0200)]
rm wieck.debian.org/sudoers
Peter Palfrader [Tue, 7 Apr 2009 22:20:40 +0000 (00:20 +0200)]
whitespace
Peter Palfrader [Tue, 7 Apr 2009 22:19:50 +0000 (00:19 +0200)]
mirroradm gets access to archvsync everywhere
Peter Palfrader [Tue, 7 Apr 2009 22:19:25 +0000 (00:19 +0200)]
comments
Peter Palfrader [Tue, 7 Apr 2009 22:17:51 +0000 (00:17 +0200)]
Removed geo*/sudoers - they were all equal and a subset of common
Peter Palfrader [Tue, 7 Apr 2009 22:16:21 +0000 (00:16 +0200)]
nagios no longer calls samhain
Peter Palfrader [Tue, 7 Apr 2009 22:15:41 +0000 (00:15 +0200)]
Tell the lazy DSA to use visudo or forever be damned
Peter Palfrader [Tue, 7 Apr 2009 22:13:17 +0000 (00:13 +0200)]
Move handel's sudoers to common - it will be the template to start from
Peter Palfrader [Tue, 7 Apr 2009 22:11:24 +0000 (00:11 +0200)]
Remove sudo from debian-org manifest
Peter Palfrader [Tue, 7 Apr 2009 22:09:34 +0000 (00:09 +0200)]
Start testing sudo on handel
Peter Palfrader [Tue, 7 Apr 2009 22:08:47 +0000 (00:08 +0200)]
Add sudoers files
Stephen Gran [Tue, 7 Apr 2009 21:44:24 +0000 (22:44 +0100)]
Ignore the new file shipped outSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 7 Apr 2009 21:39:58 +0000 (22:39 +0100)]
Some more domains for spohr to relaySigned-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Tue, 7 Apr 2009 21:29:40 +0000 (23:29 +0200)]
Mention sponsors
Peter Palfrader [Tue, 7 Apr 2009 21:23:16 +0000 (23:23 +0200)]
Sentences end with a full stop
Peter Palfrader [Tue, 7 Apr 2009 21:20:17 +0000 (23:20 +0200)]
This is my version of mkdir -p
Peter Palfrader [Tue, 7 Apr 2009 21:17:06 +0000 (23:17 +0200)]
So, if you require a package in a files block you also need to declare it
Peter Palfrader [Tue, 7 Apr 2009 21:15:44 +0000 (23:15 +0200)]
Another silly instance of picky parsers. Clearly I meant include
Peter Palfrader [Tue, 7 Apr 2009 21:13:35 +0000 (23:13 +0200)]
I wonder if quoting does change anything
Stephen Gran [Tue, 7 Apr 2009 21:11:20 +0000 (22:11 +0100)]
Fix hostlistSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 7 Apr 2009 21:08:35 +0000 (22:08 +0100)]
Some fixup for submission modeSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 7 Apr 2009 21:02:06 +0000 (22:02 +0100)]
Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet
Stephen Gran [Tue, 7 Apr 2009 21:01:44 +0000 (22:01 +0100)]
we also need to accept mail for local domains on 587, strangelySigned-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Tue, 7 Apr 2009 21:00:15 +0000 (23:00 +0200)]
Try to resolve syntax bug
Peter Palfrader [Tue, 7 Apr 2009 20:58:38 +0000 (22:58 +0200)]
Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet
Stephen Gran [Tue, 7 Apr 2009 20:57:58 +0000 (21:57 +0100)]
do recipient verification for mailhubdomains correctlySigned-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Tue, 7 Apr 2009 20:57:51 +0000 (22:57 +0200)]
Enable apache2 just for carver
Peter Palfrader [Tue, 7 Apr 2009 20:56:22 +0000 (22:56 +0200)]
Add apache2 module
Stephen Gran [Tue, 7 Apr 2009 20:46:24 +0000 (21:46 +0100)]
Stop ignoring my own advice about syntax for alternate portsSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 7 Apr 2009 20:42:16 +0000 (21:42 +0100)]
really accept localhostSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 7 Apr 2009 20:40:31 +0000 (21:40 +0100)]
Accept localhostSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 7 Apr 2009 20:37:06 +0000 (21:37 +0100)]
Stupid macro parser not liking substringsSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 7 Apr 2009 20:35:01 +0000 (21:35 +0100)]
Move firewall definitionSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 7 Apr 2009 20:31:54 +0000 (21:31 +0100)]
lafayette relay rulesSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 7 Apr 2009 20:25:19 +0000 (21:25 +0100)]
Syntax errorSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 7 Apr 2009 20:24:07 +0000 (21:24 +0100)]
Also serve local-settings.confSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 7 Apr 2009 20:20:46 +0000 (21:20 +0100)]
Send local setttings as wellSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 7 Apr 2009 20:17:01 +0000 (21:17 +0100)]
spohr should relay out for lafayetteSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 7 Apr 2009 20:12:17 +0000 (21:12 +0100)]
lafayette is behind a broken firewallSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 7 Apr 2009 20:09:31 +0000 (21:09 +0100)]
spohr should relay mail to lafayetteSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 6 Apr 2009 00:25:07 +0000 (01:25 +0100)]
Ignore a file generated by an automatic upgradeSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 6 Apr 2009 00:11:45 +0000 (01:11 +0100)]
Short test - this is the wrong way to do it, but lets see if the ideaSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 5 Apr 2009 16:18:06 +0000 (17:18 +0100)]
Comment out the require options for now. This is just making noise inSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 5 Apr 2009 13:12:39 +0000 (14:12 +0100)]
Using the right name helpsSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 5 Apr 2009 12:50:03 +0000 (13:50 +0100)]
Allow relaying by certsSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 5 Apr 2009 12:44:35 +0000 (13:44 +0100)]
Add mailhubdomains for hub/spoke setupSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 5 Apr 2009 12:34:59 +0000 (13:34 +0100)]
Make client verify server cert as wellSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 5 Apr 2009 11:43:40 +0000 (12:43 +0100)]
Always ask for certSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 5 Apr 2009 10:32:52 +0000 (11:32 +0100)]
and samhain for sameSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 5 Apr 2009 10:30:20 +0000 (11:30 +0100)]
Add /etc/timezone to puppet.Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 5 Apr 2009 03:02:25 +0000 (04:02 +0100)]
And fix the syntax errorSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 5 Apr 2009 03:00:38 +0000 (04:00 +0100)]
Gratuitous change to force exim reloadSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 5 Apr 2009 02:58:40 +0000 (03:58 +0100)]
We need to HUP exim after changing macro definitionsSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 5 Apr 2009 01:56:49 +0000 (02:56 +0100)]
It's Facter, not facterSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 5 Apr 2009 01:47:05 +0000 (02:47 +0100)]
samhain ignore new exim fileSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 5 Apr 2009 01:33:46 +0000 (02:33 +0100)]
Add skeleton manualroute file to exim setupSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 5 Apr 2009 01:09:02 +0000 (02:09 +0100)]
Make TLS usage in exim conditional on having the infrastructure to doSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 5 Apr 2009 00:11:20 +0000 (01:11 +0100)]
samhain ignore the ssl infrastructure for eximSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 5 Apr 2009 00:02:03 +0000 (01:02 +0100)]
Correct path for ca cert, and add crl checking (this may not work, butSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 4 Apr 2009 23:30:25 +0000 (00:30 +0100)]
Also ship the ca.crt and ca.crl to eximSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 4 Apr 2009 23:17:42 +0000 (00:17 +0100)]
Add logs.buildd.debian.org on raffSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 4 Apr 2009 23:06:39 +0000 (00:06 +0100)]
Make exim use tls certs distributed by puppetSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 4 Apr 2009 22:58:36 +0000 (23:58 +0100)]
AgainSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 4 Apr 2009 22:57:35 +0000 (23:57 +0100)]
Oh, you picky picky parserSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 4 Apr 2009 22:45:49 +0000 (23:45 +0100)]
Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet
Stephen Gran [Sat, 4 Apr 2009 22:45:32 +0000 (23:45 +0100)]
Ship exim ssl certsSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 4 Apr 2009 22:39:29 +0000 (00:39 +0200)]
gitignore certsSigned-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Sat, 4 Apr 2009 22:24:20 +0000 (00:24 +0200)]
Allow buildd-builder-meta from buildd.d.o
Stephen Gran [Sat, 4 Apr 2009 12:52:19 +0000 (13:52 +0100)]
samhainrc for spohr + puppetized nagios configSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Fri, 3 Apr 2009 17:38:13 +0000 (18:38 +0100)]
And the containing directoriesSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Fri, 3 Apr 2009 17:37:37 +0000 (18:37 +0100)]
Ignore some more nagios filesSigned-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Fri, 3 Apr 2009 14:09:42 +0000 (15:09 +0100)]
Allow lamont to monitor his machinesSigned-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Wed, 1 Apr 2009 11:00:07 +0000 (13:00 +0200)]
Merge common samhainrc changes into handel's version
Peter Palfrader [Wed, 1 Apr 2009 10:05:25 +0000 (12:05 +0200)]
Samhain ignore /etc/nagios/obsolete-packages-ignore - it comes from puppet
Peter Palfrader [Wed, 1 Apr 2009 06:53:53 +0000 (08:53 +0200)]
Move obsolete-packages-ignore file for dsa-check-packages into puppet
Peter Palfrader [Tue, 31 Mar 2009 20:21:34 +0000 (22:21 +0200)]
Everybody use the puppet nagios stuff
Peter Palfrader [Tue, 31 Mar 2009 20:04:24 +0000 (22:04 +0200)]
geo1 has a bad nrpe config - replace it with the one from puppet instead of fixing it
Peter Palfrader [Tue, 31 Mar 2009 19:37:08 +0000 (21:37 +0200)]
Add some chrome
Peter Palfrader [Tue, 31 Mar 2009 19:21:28 +0000 (21:21 +0200)]
It is called servicegroups, not servicesgroups
Peter Palfrader [Tue, 31 Mar 2009 19:17:23 +0000 (21:17 +0200)]
Create a puppetconf.d dir
Peter Palfrader [Tue, 31 Mar 2009 19:15:50 +0000 (21:15 +0200)]
Picky parser
Peter Palfrader [Tue, 31 Mar 2009 19:14:43 +0000 (21:14 +0200)]
Let's try turning spohr into a nagios server
Peter Palfrader [Tue, 31 Mar 2009 19:12:31 +0000 (21:12 +0200)]
New nrpe_dsa.cfg location - update samhain
Peter Palfrader [Tue, 31 Mar 2009 19:08:57 +0000 (21:08 +0200)]
A few puppet warnings
Peter Palfrader [Tue, 31 Mar 2009 19:04:39 +0000 (21:04 +0200)]
A try at a nagios server
Peter Palfrader [Tue, 31 Mar 2009 18:52:13 +0000 (20:52 +0200)]
Try it on bartok too
Peter Palfrader [Tue, 31 Mar 2009 18:50:22 +0000 (20:50 +0200)]
make nrpe_dsa.cfg depend on dsa-nagios-checks
projects / dsa-puppet.git / log