]>
git.donarmstrong.com Git - dsa-puppet.git/log
Martin Zobel-Helas [Wed, 8 Jan 2014 21:55:30 +0000 (22:55 +0100)]
push the cert to bugs
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Wed, 8 Jan 2014 21:34:24 +0000 (22:34 +0100)]
add bugs.d.o
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Stephen Gran [Wed, 8 Jan 2014 20:29:28 +0000 (20:29 +0000)]
admin should be able to see pet as well
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 8 Jan 2014 20:01:40 +0000 (20:01 +0000)]
duplicate name
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 8 Jan 2014 20:00:43 +0000 (20:00 +0000)]
change to rules by ip
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 8 Jan 2014 19:54:30 +0000 (19:54 +0000)]
change username
Signed-off-by: Stephen Gran <steve@lobefin.net>
Luca Filipozzi [Wed, 8 Jan 2014 19:09:04 +0000 (19:09 +0000)]
fix sed command
Stephen Gran [Wed, 8 Jan 2014 17:13:25 +0000 (17:13 +0000)]
add pet vhost
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 8 Jan 2014 17:13:05 +0000 (17:13 +0000)]
They don't need to be admins
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Wed, 8 Jan 2014 15:43:54 +0000 (15:43 +0000)]
mess with motd wrappig/spacing
Peter Palfrader [Wed, 8 Jan 2014 15:17:39 +0000 (16:17 +0100)]
change wrap in motd
Martin Zobel-Helas [Wed, 8 Jan 2014 08:15:59 +0000 (09:15 +0100)]
add bugs.debian.org
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Peter Palfrader [Tue, 7 Jan 2014 23:03:28 +0000 (00:03 +0100)]
Update list of geozones
Peter Palfrader [Tue, 7 Jan 2014 22:22:22 +0000 (23:22 +0100)]
Try to allow nagios access to denis
Peter Palfrader [Tue, 7 Jan 2014 21:57:24 +0000 (21:57 +0000)]
Fixes
Peter Palfrader [Tue, 7 Jan 2014 21:53:05 +0000 (22:53 +0100)]
denis: llow ssh from geo[123]
Peter Palfrader [Tue, 7 Jan 2014 21:46:50 +0000 (22:46 +0100)]
update firewalls regarding dns
Peter Palfrader [Tue, 7 Jan 2014 21:20:21 +0000 (22:20 +0100)]
Update geodns trigger keys
Luca Filipozzi [Tue, 7 Jan 2014 11:23:35 +0000 (11:23 +0000)]
augment the security-master role
Luca Filipozzi [Tue, 7 Jan 2014 11:09:21 +0000 (11:09 +0000)]
adding security-master's certificate
Peter Palfrader [Mon, 6 Jan 2014 11:46:32 +0000 (12:46 +0100)]
tlsa record for lists
Peter Palfrader [Sun, 5 Jan 2014 14:13:50 +0000 (15:13 +0100)]
restore sso role
Peter Palfrader [Sun, 5 Jan 2014 14:10:33 +0000 (15:10 +0100)]
try has_role
Luca Filipozzi [Sat, 4 Jan 2014 10:39:42 +0000 (10:39 +0000)]
restoring a deleted command entry
Luca Filipozzi [Sat, 4 Jan 2014 03:26:01 +0000 (03:26 +0000)]
resolve exec dependency and rename
Luca Filipozzi [Sat, 4 Jan 2014 03:14:39 +0000 (03:14 +0000)]
restore external dependency on exec
Luca Filipozzi [Sat, 4 Jan 2014 03:09:13 +0000 (03:09 +0000)]
ensure that links and hashes are properly created
Luca Filipozzi [Fri, 3 Jan 2014 23:02:06 +0000 (23:02 +0000)]
do markdown right
Luca Filipozzi [Fri, 3 Jan 2014 22:50:40 +0000 (22:50 +0000)]
delete old README
Luca Filipozzi [Fri, 3 Jan 2014 21:08:06 +0000 (21:08 +0000)]
markdown styling
Luca Filipozzi [Fri, 3 Jan 2014 20:57:25 +0000 (20:57 +0000)]
fix typo
Stephen Gran [Fri, 3 Jan 2014 19:37:41 +0000 (19:37 +0000)]
sigh, crucial one character
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Fri, 3 Jan 2014 19:36:34 +0000 (19:36 +0000)]
clean up Makefile a bit
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Fri, 3 Jan 2014 19:28:54 +0000 (19:28 +0000)]
Add some basic documentation
Signed-off-by: Stephen Gran <steve@lobefin.net>
Luca Filipozzi [Fri, 3 Jan 2014 16:36:56 +0000 (16:36 +0000)]
manage /etc/ca-certificates.conf because gandi
Stephen Gran [Fri, 3 Jan 2014 15:01:53 +0000 (15:01 +0000)]
Revert "Add a new puppet face"
This reverts commit
b75862abf9f8001f671f5fc603ffcfb981797231.
Stephen Gran [Fri, 3 Jan 2014 14:56:14 +0000 (14:56 +0000)]
Add a new puppet face
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Fri, 3 Jan 2014 12:11:53 +0000 (12:11 +0000)]
whitespace cleanup
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Fri, 3 Jan 2014 12:10:21 +0000 (12:10 +0000)]
use a puppet builtin for this
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Fri, 3 Jan 2014 09:07:32 +0000 (09:07 +0000)]
fix regexp
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Thu, 2 Jan 2014 22:40:04 +0000 (22:40 +0000)]
move over dns_primary/seconday
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Thu, 2 Jan 2014 22:26:39 +0000 (22:26 +0000)]
This comes from LDAP
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Thu, 2 Jan 2014 22:16:13 +0000 (22:16 +0000)]
In ruby, this must be an array
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Thu, 2 Jan 2014 21:58:52 +0000 (21:58 +0000)]
try this on
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Thu, 2 Jan 2014 21:37:23 +0000 (21:37 +0000)]
move more to roles
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Thu, 2 Jan 2014 21:33:26 +0000 (21:33 +0000)]
template breakage
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Thu, 2 Jan 2014 20:17:19 +0000 (20:17 +0000)]
try to fix nagios template
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Thu, 2 Jan 2014 19:55:19 +0000 (19:55 +0000)]
we are passed a string
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Thu, 2 Jan 2014 19:54:54 +0000 (19:54 +0000)]
puppet math is primitive
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Thu, 2 Jan 2014 19:52:10 +0000 (19:52 +0000)]
try to fix errors
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Thu, 2 Jan 2014 18:12:01 +0000 (19:12 +0100)]
A chain for www
Tollef Fog Heen [Thu, 2 Jan 2014 18:07:39 +0000 (19:07 +0100)]
More workarounds
Peter Palfrader [Thu, 2 Jan 2014 17:57:26 +0000 (18:57 +0100)]
Make denis an extra nrpe client
Tollef Fog Heen [Thu, 2 Jan 2014 17:56:07 +0000 (18:56 +0100)]
More workarounds
Tollef Fog Heen [Thu, 2 Jan 2014 17:53:57 +0000 (18:53 +0100)]
err, not error. Maybe
Tollef Fog Heen [Thu, 2 Jan 2014 17:49:34 +0000 (18:49 +0100)]
More workarounds
Tollef Fog Heen [Thu, 2 Jan 2014 17:47:12 +0000 (18:47 +0100)]
Add workaround for buildd not being a real role yet
Tollef Fog Heen [Thu, 2 Jan 2014 17:44:31 +0000 (18:44 +0100)]
Log error rather than exploding unhelpfully
Tollef Fog Heen [Thu, 2 Jan 2014 17:39:15 +0000 (18:39 +0100)]
Ruby is not python
Tollef Fog Heen [Thu, 2 Jan 2014 17:22:58 +0000 (18:22 +0100)]
Simply exim config slightly by checking for roles in manifest
Tollef Fog Heen [Wed, 1 Jan 2014 15:12:14 +0000 (16:12 +0100)]
Move all roles from local.yaml to hiera
Hopefully this won't break anything.
Peter Palfrader [Wed, 1 Jan 2014 21:58:40 +0000 (22:58 +0100)]
And put the ssl cert out
Peter Palfrader [Wed, 1 Jan 2014 21:55:40 +0000 (22:55 +0100)]
Try new www vhost config
Peter Palfrader [Wed, 1 Jan 2014 21:53:42 +0000 (22:53 +0100)]
Move volatile vhost from www to static
Peter Palfrader [Wed, 1 Jan 2014 21:08:45 +0000 (21:08 +0000)]
Checking for classes in templates is not reliable
Peter Palfrader [Wed, 1 Jan 2014 21:00:23 +0000 (22:00 +0100)]
no RRL on the primary
Peter Palfrader [Wed, 1 Jan 2014 20:58:49 +0000 (21:58 +0100)]
maybe these firewall rules are better
Peter Palfrader [Wed, 1 Jan 2014 20:45:52 +0000 (21:45 +0100)]
remove another hardcoding of hostnames
Peter Palfrader [Wed, 1 Jan 2014 20:43:12 +0000 (20:43 +0000)]
syntax fix
Peter Palfrader [Wed, 1 Jan 2014 20:41:15 +0000 (21:41 +0100)]
try to rolify dns
Peter Palfrader [Wed, 1 Jan 2014 20:29:32 +0000 (21:29 +0100)]
master is now denis
Peter Palfrader [Wed, 1 Jan 2014 20:29:26 +0000 (21:29 +0100)]
new way to update zones
Peter Palfrader [Wed, 1 Jan 2014 19:56:42 +0000 (20:56 +0100)]
put release cert onto franck - we have no release service yet
Peter Palfrader [Wed, 1 Jan 2014 19:55:08 +0000 (20:55 +0100)]
put nagios cert onto nagios host by role
Martin Zobel-Helas [Wed, 1 Jan 2014 19:51:18 +0000 (20:51 +0100)]
add nagios.debian.org
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Wed, 1 Jan 2014 19:45:12 +0000 (20:45 +0100)]
add nagios.debian.org and release.debian.org
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Wed, 1 Jan 2014 19:41:26 +0000 (20:41 +0100)]
add ftp-master.debian.org
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Peter Palfrader [Wed, 1 Jan 2014 17:52:32 +0000 (18:52 +0100)]
remove zappa
Peter Palfrader [Wed, 1 Jan 2014 17:52:06 +0000 (18:52 +0100)]
Use submission for mail to zani
Peter Palfrader [Wed, 1 Jan 2014 16:20:25 +0000 (17:20 +0100)]
Add vhost_listen_443
Peter Palfrader [Wed, 1 Jan 2014 16:14:56 +0000 (17:14 +0100)]
Try to enable ssl for dsa.d.o
Peter Palfrader [Wed, 1 Jan 2014 16:07:06 +0000 (17:07 +0100)]
dsa.d.o cert on static mirrors
Peter Palfrader [Wed, 1 Jan 2014 15:55:38 +0000 (16:55 +0100)]
Move dsa.d.o to static
Peter Palfrader [Wed, 1 Jan 2014 15:55:06 +0000 (16:55 +0100)]
Move dsa.d.o to static
Peter Palfrader [Wed, 1 Jan 2014 15:26:07 +0000 (16:26 +0100)]
deploy db.d.o cert
Martin Zobel-Helas [Wed, 1 Jan 2014 15:03:58 +0000 (16:03 +0100)]
add munin.debian.org
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Wed, 1 Jan 2014 15:02:28 +0000 (16:02 +0100)]
add dsa.debian.org
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Wed, 1 Jan 2014 15:00:11 +0000 (16:00 +0100)]
add db.debian.oradd db.debian.orgg
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Tollef Fog Heen [Wed, 1 Jan 2014 14:51:11 +0000 (15:51 +0100)]
Use fqdn, not hostname
Tollef Fog Heen [Wed, 1 Jan 2014 14:48:31 +0000 (15:48 +0100)]
Hiera does not know how to look up anything but top-level values
Tollef Fog Heen [Wed, 1 Jan 2014 14:27:33 +0000 (15:27 +0100)]
Start moving bits from local.yaml to hiera
Martin Zobel-Helas [Wed, 1 Jan 2014 11:53:54 +0000 (12:53 +0100)]
do not do backups of /var/log/apache2/
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Peter Palfrader [Wed, 1 Jan 2014 11:01:20 +0000 (12:01 +0100)]
only set sts header if mod headers is loaded
Peter Palfrader [Wed, 1 Jan 2014 10:59:35 +0000 (11:59 +0100)]
enable mod headers everywhere
Peter Palfrader [Wed, 1 Jan 2014 10:54:40 +0000 (11:54 +0100)]
Add SSL related apache macros
Peter Palfrader [Wed, 1 Jan 2014 10:46:08 +0000 (11:46 +0100)]
Remove sites-available/common-ssl.inc
Peter Palfrader [Wed, 1 Jan 2014 10:44:10 +0000 (11:44 +0100)]
install mod-macro everywhere
Peter Palfrader [Wed, 1 Jan 2014 10:23:45 +0000 (10:23 +0000)]
Tell bad apt where to find its certificate
Martin Zobel-Helas [Wed, 1 Jan 2014 10:02:32 +0000 (11:02 +0100)]
add more servicecerts
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Tue, 31 Dec 2013 22:27:25 +0000 (23:27 +0100)]
add sso.debian.org
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
projects / dsa-puppet.git / log