projects
/
mirror
/
dsa-puppet.git
/ history
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅
next
fd: also use the grep in public_addresses to learn if we support v4/v6
[mirror/dsa-puppet.git]
/
modules
/
ferm
/
templates
/
2019-09-24
Julien Cristau
paradis at ubc
tree
|
commitdiff
2019-09-22
Peter Palfrader
nagiosmaster -> hiera role; bind acls still not converted
tree
|
commitdiff
2019-09-22
Peter Palfrader
merge SSH_SOURCES and SSH_V6_SOURCES
tree
|
commitdiff
2019-09-22
Peter Palfrader
muninmaster -> hiera role, new ssh store/collect, no...
tree
|
commitdiff
2019-09-22
Peter Palfrader
retire old HOST_MAILRELAY ferm variable
tree
|
commitdiff
2019-09-22
Peter Palfrader
remove smtp_sources from ferm's me.conf, retire old...
tree
|
commitdiff
2019-09-21
Peter Palfrader
remove old-style ssh firewalling setup for mirrors...
tree
|
commitdiff
2019-09-21
Peter Palfrader
retire old-style firewalling for mirrormaster sshing...
tree
|
commitdiff
2019-09-21
Julien Cristau
Revert "ferm: open ssh from mirror-master to ports...
tree
|
commitdiff
2019-09-21
Julien Cristau
ferm: open ssh from mirror-master to ports mirror
tree
|
commitdiff
2019-09-20
Peter Palfrader
Retire unused extranrpeclient role -- the mini-nag...
tree
|
commitdiff
2019-09-16
Aurelien Jarno
Update wuiet IP address
tree
|
commitdiff
2019-09-16
Peter Palfrader
make dns primary export and keyring host collect firewa...
tree
|
commitdiff
2019-09-16
Peter Palfrader
move 3rd party nameserver info from the ferm template...
tree
|
commitdiff
2019-09-15
Peter Palfrader
One of the last changes broke dbmaster role based ferm...
tree
|
commitdiff
2019-09-15
Peter Palfrader
do not use role-based ssh restrict
tree
|
commitdiff
2019-09-13
Peter Palfrader
Try to avoid reserved site keyword
tree
|
commitdiff
2019-09-11
Peter Palfrader
Retire unused ferm varible definitions for HOST_STATIC*
tree
|
commitdiff
2019-09-11
Peter Palfrader
ssh between static hosts should be handled by the ssh...
tree
|
commitdiff
2019-09-11
Peter Palfrader
restrict ssh to static-master-ubc-01 by default. we...
tree
|
commitdiff
2019-09-11
Peter Palfrader
restrict ssh to static-master-grnet-01 by default....
tree
|
commitdiff
2019-09-07
Peter Palfrader
ssh restrict dns geo and dns primary hosts
tree
|
commitdiff
2019-09-07
Peter Palfrader
no longer need to manually whitelist adayevskaya on...
tree
|
commitdiff
2019-09-07
Peter Palfrader
gitolite pushes puppetmaster
tree
|
commitdiff
2019-09-07
Peter Palfrader
make puppetmaster a role included via hiera
tree
|
commitdiff
2019-09-07
Peter Palfrader
Move adayevskaya from bm to manda
tree
|
commitdiff
2019-08-28
Aurelien Jarno
Fix CSAIL IPv6 subnet
tree
|
commitdiff
2019-08-28
Aurelien Jarno
ferm: drop FREEBSD_SSH_ACCESS
tree
|
commitdiff
2019-08-28
Aurelien Jarno
ferm: add syncproxy.na.debian.org IPv6
tree
|
commitdiff
2019-07-07
Peter Palfrader
geo ferm
tree
|
commitdiff
2019-07-07
Peter Palfrader
geo ferm
tree
|
commitdiff
2019-07-07
Peter Palfrader
fw on kaufmann
tree
|
commitdiff
2019-07-07
Peter Palfrader
unify v4 and v6 rules in named::primary
tree
|
commitdiff
2019-01-02
Tollef Fog Heen
Open up some IPs for tfheen
tree
|
commitdiff
2018-11-18
Peter Palfrader
Also restrict "ganeti/kvm host" purpose
tree
|
commitdiff
2018-10-30
Peter Palfrader
Move logging and related/established out of ferm.conf...
tree
|
commitdiff
2018-10-30
Peter Palfrader
move munin rules from conf.d to the rules dir
tree
|
commitdiff
2018-10-30
Peter Palfrader
rename interfaces to 50-munin-interfaces
tree
|
commitdiff
2018-10-30
Peter Palfrader
merge munin_ip v4 and v6 into one rule
tree
|
commitdiff
2018-10-23
Peter Palfrader
Add a second easydns ipv4 address
tree
|
commitdiff
2018-10-16
Peter Palfrader
allow ssh from ftpmaster to debug_mirrors
tree
|
commitdiff
2018-07-31
Peter Palfrader
ferm/munin: use already split v[46]addrs for munin...
tree
|
commitdiff
2018-07-17
Julien Cristau
Remove wheezy-supporting cruft
tree
|
commitdiff
2018-06-18
Julien Cristau
Update my home ip ranges yet again
tree
|
commitdiff
2018-05-06
Julien Cristau
New IP ranges for jcristau
tree
|
commitdiff
2018-03-06
Peter Palfrader
start ferm config with a 00-init and start SSH*SOURCES...
tree
|
commitdiff
2018-02-08
Martin Zobel-Helas
remove sgran IP range. he can hop via master if needed
tree
|
commitdiff
2018-01-06
Peter Palfrader
Allow adayevskaya to ssh trigger puppetmaster/handel
tree
|
commitdiff
2017-11-23
Julien Cristau
Add extra netnod servers to ferm
tree
|
commitdiff
2017-10-18
Luca Filipozzi
always a typo
tree
|
commitdiff
2017-10-18
Luca Filipozzi
prune ssh ACLs for luca
tree
|
commitdiff
2017-10-03
Julien Cristau
Add syncproxy addresses to ssh whitelist
tree
|
commitdiff
2017-10-03
Julien Cristau
Restrict ssh to mirrors
tree
|
commitdiff
2017-09-27
Julien Cristau
Revert "Restrict ssh to anycast and static mirrors"
tree
|
commitdiff
2017-09-27
Julien Cristau
Restrict ssh to anycast and static mirrors
tree
|
commitdiff
2017-09-10
Aurelien Jarno
ferm: restrict access to all buildds
tree
|
commitdiff
2017-08-13
Peter Palfrader
Add 62.46.0.0/15 to weasel's networks
tree
|
commitdiff
2017-08-06
Julien Cristau
Fix getfastlyranges harder
tree
|
commitdiff
2017-08-06
Tollef Fog Heen
Update IPs for tfheen
tree
|
commitdiff
2017-08-06
Julien Cristau
Fix template syntax
tree
|
commitdiff
2017-08-06
Julien Cristau
Handle exceptions from reading fastly IP ranges
tree
|
commitdiff
2017-08-06
Julien Cristau
ferm: accept syslog from fastly IPs
tree
|
commitdiff
2017-07-22
Peter Palfrader
new network space for weasel
tree
|
commitdiff
2017-04-26
Martin Zobel-Helas
Merge branch 'master' of git+ssh://puppet.debian.org...
tree
|
commitdiff
2017-04-26
Martin Zobel-Helas
add my other subnet
tree
|
commitdiff
2017-03-19
Martin Zobel-Helas
Merge branch 'master' of git+ssh://puppet.debian.org...
tree
|
commitdiff
2017-03-18
Julien Cristau
Attempt to fix version comparisons
tree
|
commitdiff
2017-03-18
Peter Palfrader
fix template
tree
|
commitdiff
2017-03-18
root
puppet 4 foo
tree
|
commitdiff
2017-03-18
root
puppet 4 foo
tree
|
commitdiff
2017-01-10
Peter Palfrader
other sil network for weasel
tree
|
commitdiff
2016-10-13
Luca Filipozzi
add new host for luca
tree
|
commitdiff
2016-10-07
Luca Filipozzi
remove fubar.emyr.net from luca's list of hosts
tree
|
commitdiff
2016-10-05
Luca Filipozzi
add IPv4 address for luca's new jumphost
tree
|
commitdiff
2016-09-26
Luca Filipozzi
new cable modem
tree
|
commitdiff
2016-06-28
Julien Cristau
Add topinambour.cristau.org to DSA_IPS
tree
|
commitdiff
2016-06-28
Peter Palfrader
Add people.do to DSA_IPs
tree
|
commitdiff
2016-06-25
Aurelien Jarno
beethoven has been decommissioned for a lot of time...
tree
|
commitdiff
2016-06-15
Julien Cristau
Decommission lebrun and schroeder
tree
|
commitdiff
2016-05-28
Julien Cristau
dsa -= paravoid (rt#6248)
tree
|
commitdiff
2016-04-16
Julien Cristau
ferm: remove my office addresses
tree
|
commitdiff
2016-04-15
Martin Zobel-Helas
add new office networks
tree
|
commitdiff
2016-03-07
Luca Filipozzi
add luca's home and work IPv4 since they are fixed...
tree
|
commitdiff
2016-03-02
Julien Cristau
ferm: squeeze cleanup
tree
|
commitdiff
2016-02-18
Luca Filipozzi
remove linode.emyr.net from ACL for luca
tree
|
commitdiff
2016-02-08
Luca Filipozzi
prep for transition away from linode
tree
|
commitdiff
2015-08-31
Julien Cristau
ferm: add yet another $work ip
tree
|
commitdiff
2015-08-25
Peter Palfrader
Remove /var/run/iptables-ferm.checksum /var/run/ip6tabl...
tree
|
commitdiff
2015-08-24
Aurelien Jarno
ferm: use NFLOG instead of LOG/ULOG on jessie
tree
|
commitdiff
2015-08-24
Aurelien Jarno
ferm: change ferm.conf to a template
tree
|
commitdiff
2015-08-24
Aurelien Jarno
ferm: drop aurel32's IPs
tree
|
commitdiff
2015-05-14
Peter Palfrader
retire ravel
tree
|
commitdiff
2015-04-28
Julien Cristau
ferm: office ip renumbering
tree
|
commitdiff
2015-02-11
Tollef Fog Heen
Drop no longer in use office network
tree
|
commitdiff
2014-11-19
Luca Filipozzi
allow netnod to reach denis on 53/tcp and 53/udp
tree
|
commitdiff
2014-11-06
Peter Palfrader
fix function name
tree
|
commitdiff
2014-11-06
Peter Palfrader
Handle hosts that are not in ldap yet
tree
|
commitdiff
2014-10-25
Peter Palfrader
Allow pg connections from pgbackuphost
tree
|
commitdiff
2014-10-06
Julien Cristau
ferm: add networks for jcristau
tree
|
commitdiff
2014-07-11
Martin Zobel-Helas
add ip for mfl
tree
|
commitdiff
next