projects
/
mirror
/
dsa-puppet.git
/ history
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅
next
eximconf: include RBL response value in reject messages
[mirror/dsa-puppet.git]
/
modules
/
ferm
/
manifests
/
2019-10-01
Peter Palfrader
retire manual firewalling on bmdb1 for dak replica...
tree
|
commitdiff
2019-09-30
Peter Palfrader
manage bmdb1/main pg_hba
tree
|
commitdiff
2019-09-30
Peter Palfrader
Move draghi finger/ldap/ldaps fw into dbmaster role
tree
|
commitdiff
2019-09-30
Peter Palfrader
Move gombert infinoted fw into gobby role
tree
|
commitdiff
2019-09-30
Peter Palfrader
Move kaufmann keyserver fw into keyring role
tree
|
commitdiff
2019-09-30
Peter Palfrader
manage ullmann/udd pg_hba
tree
|
commitdiff
2019-09-29
Peter Palfrader
manage danzi/wanna-build pg_hba
tree
|
commitdiff
2019-09-29
Peter Palfrader
manage danzi/main pg_hba
tree
|
commitdiff
2019-09-29
Peter Palfrader
manage danzi/tracker pg_hba
tree
|
commitdiff
2019-09-29
Peter Palfrader
remove manual firewall allow snapshotdb-manda-01->sallinen
tree
|
commitdiff
2019-09-29
Peter Palfrader
remove manual firewall allow leaseweb->snapshotdb-manda-01
tree
|
commitdiff
2019-09-29
Peter Palfrader
remove manual firewall allow bmdb1->fasolo
tree
|
commitdiff
2019-09-29
Peter Palfrader
manage debsources access to its DB on bmdb1
tree
|
commitdiff
2019-09-29
Julien Cristau
Merge branch 'fordsa' of https://git.adam-barratt.org...
tree
|
commitdiff
2019-09-29
Peter Palfrader
fix ferm::rule::chain template
tree
|
commitdiff
2019-09-29
Peter Palfrader
puppet rule to create an empty ferm chain
tree
|
commitdiff
2019-09-29
Peter Palfrader
reload ferm when files are removed
tree
|
commitdiff
2019-09-29
Julien Cristau
Merge branch 'fordsa' of https://git.adam-barratt.org...
tree
|
commitdiff
2019-09-29
Peter Palfrader
Remove manual fw for dinis/storace access to postgresql...
tree
|
commitdiff
2019-09-28
Peter Palfrader
lw07 no longer runs a snapshot pg db
tree
|
commitdiff
2019-09-28
Peter Palfrader
migrate away from old postgres_backup_server role
tree
|
commitdiff
2019-09-28
Peter Palfrader
switch sallinen to modern pg backup config fu
tree
|
commitdiff
2019-09-28
Peter Palfrader
switch bmdb1 to modern pg backup config fu
tree
|
commitdiff
2019-09-28
Peter Palfrader
switch seger to modern pg backup config fu
tree
|
commitdiff
2019-09-28
Peter Palfrader
remove explicit ferm allow from the pgbackup hosts...
tree
|
commitdiff
2019-09-28
Aurelien Jarno
Drop the dedup cluster at bytemark
tree
|
commitdiff
2019-09-28
Aurelien Jarno
ferm@serger: merge dsa-postgres-backup and dsa-postgres...
tree
|
commitdiff
2019-09-27
Aurelien Jarno
ferm: do not open PG to backup hosts for clusters defin...
tree
|
commitdiff
2019-09-27
Aurelien Jarno
pg@danzi: use a list of hosts instead of whitelisting...
tree
|
commitdiff
2019-09-25
Peter Palfrader
Document ferm::rule::simple
tree
|
commitdiff
2019-09-24
Julien Cristau
ticharich no longer needs access to bmdb1
tree
|
commitdiff
2019-09-23
Julien Cristau
bacula cluster moved to postgresql-manda-01
tree
|
commitdiff
2019-09-22
Aurelien Jarno
danzi: merge dsa-postgres2-danzi and dsa-postgres2...
tree
|
commitdiff
2019-09-22
Aurelien Jarno
danzi: merge dsa-postgres-danzi and dsa-postgres-danzi6
tree
|
commitdiff
2019-09-22
Aurelien Jarno
Allow access to the tracker db @ danzi from ticharich
tree
|
commitdiff
2019-09-22
Peter Palfrader
Remove empty ferm::zivit
tree
|
commitdiff
2019-09-22
Peter Palfrader
iptables -vnL on zelenka suggests that zivit no longer...
tree
|
commitdiff
2019-09-22
Peter Palfrader
Apparently we no longer monitor the time service on...
tree
|
commitdiff
2019-09-21
Aurelien Jarno
Decommission rusca (RT#7949)
tree
|
commitdiff
2019-09-16
Aurelien Jarno
wannabuild has been moved from bmdb1 to danzi
tree
|
commitdiff
2019-09-16
Peter Palfrader
If the name is too long for netfilter, hash it
tree
|
commitdiff
2019-09-16
Peter Palfrader
Try a new ferm rule class
tree
|
commitdiff
2019-09-16
Peter Palfrader
whitespace/quoting: modules/ferm/manifests/ (make lint...
tree
|
commitdiff
2019-09-13
Peter Palfrader
Try to avoid reserved site keyword
tree
|
commitdiff
2019-09-10
Julien Cristau
ferm::ftp_conntrack: remove jessie support
tree
|
commitdiff
2019-09-07
Peter Palfrader
stop using virtual resources for ferm::rule
tree
|
commitdiff
2019-08-30
Peter Palfrader
remove olin from bmdb1 access
tree
|
commitdiff
2019-08-22
Peter Palfrader
move syslog ferm into syslog role
tree
|
commitdiff
2019-06-09
Luca Filipozzi
allow ssh access to ubc-node-arm* from ubc-bulwark...
tree
|
commitdiff
2019-05-28
Peter Palfrader
snapshotdb-manda-01: allow pg access from lw
tree
|
commitdiff
2019-05-23
Peter Palfrader
Allow snapshotdb-manda-01 to access pg on sallinen
tree
|
commitdiff
2019-04-03
Aurelien Jarno
Allow access to dak@bmdb1 from ullmann
tree
|
commitdiff
2019-04-03
Aurelien Jarno
Allow access to wanna-build@bmdb1 from respighi
tree
|
commitdiff
2019-04-02
Aurelien Jarno
Allow access to ullmann from wuiet
tree
|
commitdiff
2019-03-17
Aurelien Jarno
Decommission lully.d.o
tree
|
commitdiff
2019-01-28
Julien Cristau
add loghost-osuosl-01
tree
|
commitdiff
2018-12-17
Peter Palfrader
reload ferm on changes instead of restart
tree
|
commitdiff
2018-11-13
Peter Palfrader
ferm cleanup: sallinen
tree
|
commitdiff
2018-11-13
Peter Palfrader
ferm cleanup: bmdb1:debsources, fix
tree
|
commitdiff
2018-11-13
Peter Palfrader
ferm cleanup: bmdb1:debsources
tree
|
commitdiff
2018-11-13
Peter Palfrader
ferm cleanup: bmdb1:dedup
tree
|
commitdiff
2018-11-13
Peter Palfrader
ferm cleanup: bmdb1:bacula
tree
|
commitdiff
2018-11-13
Peter Palfrader
ferm cleanup: bmdb1:wannabuild, remove duplicate allow...
tree
|
commitdiff
2018-11-13
Peter Palfrader
ferm cleanup: bmdb1:wannabuild
tree
|
commitdiff
2018-11-13
Peter Palfrader
ferm cleanup: bmdb1:dak, fix
tree
|
commitdiff
2018-11-13
Peter Palfrader
ferm cleanup: bmdb1:dak
tree
|
commitdiff
2018-11-13
Peter Palfrader
ferm cleanup: bmdb1:main, fix
tree
|
commitdiff
2018-11-13
Peter Palfrader
ferm cleanup: bmdb1:main
tree
|
commitdiff
2018-11-13
Peter Palfrader
ferm cleanup: fasolo postgres
tree
|
commitdiff
2018-11-13
Peter Palfrader
test avoiding hardcoding addresses
tree
|
commitdiff
2018-11-13
Peter Palfrader
no more varnish on sibelius
tree
|
commitdiff
2018-11-13
Peter Palfrader
bugs-search no longer runs on sonntag
tree
|
commitdiff
2018-11-01
Julien Cristau
Drop firewall rule for pg @ sibelius
tree
|
commitdiff
2018-10-31
Peter Palfrader
unique all ip addresses
tree
|
commitdiff
2018-10-31
Peter Palfrader
Try a unique around v4addrs
tree
|
commitdiff
2018-10-30
Peter Palfrader
Move logging and related/established out of ferm.conf...
tree
|
commitdiff
2018-10-30
Peter Palfrader
move munin rules from conf.d to the rules dir, 2
tree
|
commitdiff
2018-10-30
Peter Palfrader
move munin rules from conf.d to the rules dir
tree
|
commitdiff
2018-10-30
Peter Palfrader
rename interfaces to 50-munin-interfaces
tree
|
commitdiff
2018-10-30
Peter Palfrader
change default ferm rule priority to 10 from 00
tree
|
commitdiff
2018-10-16
Peter Palfrader
try a HEREdoc as the syntax checker seems to have issue...
tree
|
commitdiff
2018-10-16
Peter Palfrader
allow respighi to access udd on ullmann
tree
|
commitdiff
2018-10-16
Peter Palfrader
merge ipv4 and ipv6 rule for ullmann's dsa-postgres...
tree
|
commitdiff
2018-10-16
Peter Palfrader
fix a prefix len in dsa-postgres-udd6
tree
|
commitdiff
2018-10-10
Peter Palfrader
Start with removing some moszumanska entries (in partic...
tree
|
commitdiff
2018-08-07
Julien Cristau
Revert "allow access to pg on vittoria for dc18"
tree
|
commitdiff
2018-08-07
Julien Cristau
Revert "RT#7368: add additional IP"
tree
|
commitdiff
2018-07-31
Peter Palfrader
retire old cleanup job for ip6_ munin plugins
tree
|
commitdiff
2018-07-31
Peter Palfrader
Make sure nodeinfo['misc']['v[46]addrs'] always exists...
tree
|
commitdiff
2018-07-31
Peter Palfrader
ferm/munin: use already split v[46]addrs for munin...
tree
|
commitdiff
2018-07-29
Martin Zobel-Helas
RT#7368: add additional IP
tree
|
commitdiff
2018-07-27
Julien Cristau
allow access to pg on vittoria for dc18
tree
|
commitdiff
2018-07-17
Julien Cristau
Remove wheezy-supporting cruft
tree
|
commitdiff
2018-05-29
Peter Palfrader
sallinen: retire 443->5473 dnat
tree
|
commitdiff
2018-05-28
Peter Palfrader
pg firewalling
tree
|
commitdiff
2018-05-28
Peter Palfrader
add lw07 to snapshot_web group
tree
|
commitdiff
2018-03-11
Peter Palfrader
There is no ferm-restart Exec to notify
tree
|
commitdiff
2018-03-06
Peter Palfrader
ferm::conf - include ferm
tree
|
commitdiff
2018-03-06
Peter Palfrader
start ferm config with a 00-init and start SSH*SOURCES...
tree
|
commitdiff
2018-03-06
Peter Palfrader
ferm::conf - merge with tor version
tree
|
commitdiff
next