]>
git.donarmstrong.com Git - dsa-puppet.git/log
Stephen Gran [Sun, 19 Jan 2014 13:32:39 +0000 (13:32 +0000)]
be specific
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 19 Jan 2014 13:23:43 +0000 (13:23 +0000)]
sudo for nrpe/rabbit check
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 19 Jan 2014 13:08:12 +0000 (13:08 +0000)]
gather some debug output
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 18 Jan 2014 13:22:48 +0000 (13:22 +0000)]
chgrp the file
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 18 Jan 2014 11:37:11 +0000 (11:37 +0000)]
syntax
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 18 Jan 2014 11:35:55 +0000 (11:35 +0000)]
add kombu dep
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 18 Jan 2014 11:17:16 +0000 (11:17 +0000)]
oops, typo
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 18 Jan 2014 10:54:17 +0000 (10:54 +0000)]
add ud-replicated to inittab
Signed-off-by: Stephen Gran <steve@lobefin.net>
Luca Filipozzi [Fri, 17 Jan 2014 20:19:30 +0000 (20:19 +0000)]
ensure that rtc.debian.org cert is deployed to static mirror hosts
Luca Filipozzi [Fri, 17 Jan 2014 20:14:45 +0000 (20:14 +0000)]
deploy ssl certificate for rtc.debian.org
Luca Filipozzi [Fri, 17 Jan 2014 19:15:25 +0000 (19:15 +0000)]
allow debvoip group to update rtc.debian.org website
Stephen Gran [Fri, 17 Jan 2014 19:02:00 +0000 (19:02 +0000)]
prepare for a time when we have two things in inittab
Signed-off-by: Stephen Gran <steve@lobefin.net>
Luca Filipozzi [Fri, 17 Jan 2014 17:58:50 +0000 (17:58 +0000)]
update apache config for rtc.debian.org
Luca Filipozzi [Fri, 17 Jan 2014 16:44:06 +0000 (16:44 +0000)]
added rtc.debian.org to static-components
Luca Filipozzi [Fri, 17 Jan 2014 06:54:21 +0000 (06:54 +0000)]
sip -> rtc rename + monit
Stephen Gran [Wed, 15 Jan 2014 17:00:16 +0000 (17:00 +0000)]
wow, how did that make it
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 15 Jan 2014 16:59:12 +0000 (16:59 +0000)]
it's a template, not a static file
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 15 Jan 2014 16:54:40 +0000 (16:54 +0000)]
sigh, include the params class
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 15 Jan 2014 16:41:12 +0000 (16:41 +0000)]
make pubsub.conf a concat fragment
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 15 Jan 2014 16:21:37 +0000 (16:21 +0000)]
add these for correctness
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 14 Jan 2014 19:57:04 +0000 (19:57 +0000)]
new section for ud-replicate
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Tue, 14 Jan 2014 17:43:49 +0000 (18:43 +0100)]
remove grieg (RT#4393)
Luca Filipozzi [Tue, 14 Jan 2014 17:25:14 +0000 (17:25 +0000)]
switch from init scripts to /usr/sbin/service
Luca Filipozzi [Tue, 14 Jan 2014 16:17:05 +0000 (16:17 +0000)]
give group debvoip permission to restart servers
Stephen Gran [Tue, 14 Jan 2014 08:31:41 +0000 (08:31 +0000)]
and fix errors
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 14 Jan 2014 08:24:31 +0000 (08:24 +0000)]
also send lastlog times
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Tue, 14 Jan 2014 06:54:15 +0000 (07:54 +0100)]
rename ftp-master.metadata to metadata.ftp-master
Luca Filipozzi [Mon, 13 Jan 2014 23:23:37 +0000 (23:23 +0000)]
move concat cert files to /etc/repro
Luca Filipozzi [Mon, 13 Jan 2014 23:14:23 +0000 (23:14 +0000)]
refresh hashes
Luca Filipozzi [Mon, 13 Jan 2014 22:30:12 +0000 (22:30 +0000)]
add sip-ws.debian.org certificate
Stephen Gran [Mon, 13 Jan 2014 21:56:49 +0000 (21:56 +0000)]
go with platform.node()
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 13 Jan 2014 21:48:37 +0000 (21:48 +0000)]
send data over MQ
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Mon, 13 Jan 2014 11:18:33 +0000 (12:18 +0100)]
Update (c) comment
Peter Palfrader [Mon, 13 Jan 2014 10:11:02 +0000 (11:11 +0100)]
fix bugs sert chain
Stephen Gran [Sun, 12 Jan 2014 20:29:30 +0000 (20:29 +0000)]
mark as from extra repo
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 20:27:25 +0000 (20:27 +0000)]
actually add script ...
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 20:26:09 +0000 (20:26 +0000)]
except with correct path, take 2
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 20:25:24 +0000 (20:25 +0000)]
except with correct path
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 20:24:35 +0000 (20:24 +0000)]
try to run apt-get update on repo change
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 20:17:59 +0000 (20:17 +0000)]
duplicate
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 20:13:51 +0000 (20:13 +0000)]
push out pubsub library
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 18:55:14 +0000 (18:55 +0000)]
use the correct parameter
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 18:52:50 +0000 (18:52 +0000)]
protect the password
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 18:51:33 +0000 (18:51 +0000)]
pubsub client config
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Sun, 12 Jan 2014 18:28:53 +0000 (19:28 +0100)]
Start cleaning out homedirs automatically, as announced
Peter Palfrader [Sun, 12 Jan 2014 18:28:45 +0000 (19:28 +0100)]
Cleanup
Luca Filipozzi [Sun, 12 Jan 2014 11:30:06 +0000 (11:30 +0000)]
Merge branch 'master' of ssh://handel.debian.org/~/dsa-puppet
Luca Filipozzi [Sun, 12 Jan 2014 11:29:49 +0000 (11:29 +0000)]
use require instead
Stephen Gran [Sun, 12 Jan 2014 10:51:38 +0000 (10:51 +0000)]
automatic permissions as well
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 10:49:08 +0000 (10:49 +0000)]
er, this should be a variable
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 10:47:57 +0000 (10:47 +0000)]
create users for debian.org hosts
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 10:45:45 +0000 (10:45 +0000)]
use same secret file
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 10:37:43 +0000 (10:37 +0000)]
update gitignore
Signed-off-by: Stephen Gran <steve@lobefin.net>
Luca Filipozzi [Sun, 12 Jan 2014 10:36:10 +0000 (10:36 +0000)]
try notify
Stephen Gran [Sun, 12 Jan 2014 10:22:40 +0000 (10:22 +0000)]
we manage plugins with puppet
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 10:14:17 +0000 (10:14 +0000)]
Revert "add ssl auth support"
This reverts commit
f419a83c524efb35f70c9e0901a1289f0033b662.
Luca Filipozzi [Sun, 12 Jan 2014 09:50:46 +0000 (09:50 +0000)]
Merge branch 'master' of ssh://handel.debian.org/~/dsa-puppet
Luca Filipozzi [Sun, 12 Jan 2014 09:50:15 +0000 (09:50 +0000)]
try concatenation
Peter Palfrader [Sun, 12 Jan 2014 09:44:01 +0000 (10:44 +0100)]
another samhain ignore
Luca Filipozzi [Sun, 12 Jan 2014 09:24:15 +0000 (09:24 +0000)]
or not
Luca Filipozzi [Sun, 12 Jan 2014 09:17:24 +0000 (09:17 +0000)]
create a concatenated ssl cert (end-entity cert + intermediate cert)
Luca Filipozzi [Sun, 12 Jan 2014 08:01:13 +0000 (08:01 +0000)]
push debian.org certificate to sip server
Luca Filipozzi [Sun, 12 Jan 2014 07:50:42 +0000 (07:50 +0000)]
enable ipv6 rules for sip
Luca Filipozzi [Sat, 11 Jan 2014 17:49:11 +0000 (17:49 +0000)]
remove mod state
Luca Filipozzi [Sat, 11 Jan 2014 17:16:07 +0000 (17:16 +0000)]
add another rule
Luca Filipozzi [Sat, 11 Jan 2014 17:06:19 +0000 (17:06 +0000)]
use standardized names for rules
Luca Filipozzi [Sat, 11 Jan 2014 17:05:21 +0000 (17:05 +0000)]
must ACCEPT the connections, silly
Luca Filipozzi [Sat, 11 Jan 2014 16:59:28 +0000 (16:59 +0000)]
add ferm rules for sip
Luca Filipozzi [Sat, 11 Jan 2014 16:15:49 +0000 (16:15 +0000)]
initial set up of role:sip
Peter Palfrader [Sat, 11 Jan 2014 14:58:17 +0000 (15:58 +0100)]
new debian.org DSset
Peter Palfrader [Sat, 11 Jan 2014 14:42:36 +0000 (15:42 +0100)]
Add vogler
Stephen Gran [Sat, 11 Jan 2014 11:53:02 +0000 (11:53 +0000)]
add ssl auth support
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Fri, 10 Jan 2014 20:18:16 +0000 (21:18 +0100)]
another MAG2 IP range
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Stephen Gran [Fri, 10 Jan 2014 19:57:46 +0000 (19:57 +0000)]
we never want to remove ~debian
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Fri, 10 Jan 2014 12:35:10 +0000 (13:35 +0100)]
add MAG2 range as per whois -h whois.nic.ad.jp
Network Information:
a. [Network Number] 115.125.152.0/24
b. [Network Name] MAG2-PORTAL
g. [Organization] INFOCOM CORPORATION
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Luca Filipozzi [Fri, 10 Jan 2014 07:12:21 +0000 (07:12 +0000)]
renew security-master certificate
Peter Palfrader [Thu, 9 Jan 2014 22:59:05 +0000 (23:59 +0100)]
make it 2 years
Peter Palfrader [Thu, 9 Jan 2014 18:48:30 +0000 (19:48 +0100)]
Allow queries from 82.195.75.64/26
Peter Palfrader [Thu, 9 Jan 2014 18:47:11 +0000 (19:47 +0100)]
own recursors at man-da
Peter Palfrader [Thu, 9 Jan 2014 12:46:35 +0000 (13:46 +0100)]
Forward 29.172.in-addr.arpa to ns[1234] even if we are not recursive and would usually use a forwarder upstream
Peter Palfrader [Thu, 9 Jan 2014 12:41:38 +0000 (13:41 +0100)]
new key for 29.172.in-addr.arpa
Martin Zobel-Helas [Thu, 9 Jan 2014 07:30:12 +0000 (08:30 +0100)]
add more of mag2.com to blacklist
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Wed, 8 Jan 2014 21:55:30 +0000 (22:55 +0100)]
push the cert to bugs
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Wed, 8 Jan 2014 21:34:24 +0000 (22:34 +0100)]
add bugs.d.o
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Stephen Gran [Wed, 8 Jan 2014 20:29:28 +0000 (20:29 +0000)]
admin should be able to see pet as well
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 8 Jan 2014 20:01:40 +0000 (20:01 +0000)]
duplicate name
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 8 Jan 2014 20:00:43 +0000 (20:00 +0000)]
change to rules by ip
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 8 Jan 2014 19:54:30 +0000 (19:54 +0000)]
change username
Signed-off-by: Stephen Gran <steve@lobefin.net>
Luca Filipozzi [Wed, 8 Jan 2014 19:09:04 +0000 (19:09 +0000)]
fix sed command
Stephen Gran [Wed, 8 Jan 2014 17:13:25 +0000 (17:13 +0000)]
add pet vhost
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 8 Jan 2014 17:13:05 +0000 (17:13 +0000)]
They don't need to be admins
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Wed, 8 Jan 2014 15:43:54 +0000 (15:43 +0000)]
mess with motd wrappig/spacing
Peter Palfrader [Wed, 8 Jan 2014 15:17:39 +0000 (16:17 +0100)]
change wrap in motd
Martin Zobel-Helas [Wed, 8 Jan 2014 08:15:59 +0000 (09:15 +0100)]
add bugs.debian.org
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Peter Palfrader [Tue, 7 Jan 2014 23:03:28 +0000 (00:03 +0100)]
Update list of geozones
Peter Palfrader [Tue, 7 Jan 2014 22:22:22 +0000 (23:22 +0100)]
Try to allow nagios access to denis
Peter Palfrader [Tue, 7 Jan 2014 21:57:24 +0000 (21:57 +0000)]
Fixes
Peter Palfrader [Tue, 7 Jan 2014 21:53:05 +0000 (22:53 +0100)]
denis: llow ssh from geo[123]
Peter Palfrader [Tue, 7 Jan 2014 21:46:50 +0000 (22:46 +0100)]
update firewalls regarding dns
Peter Palfrader [Tue, 7 Jan 2014 21:20:21 +0000 (22:20 +0100)]
Update geodns trigger keys
projects / dsa-puppet.git / log