projects
/
mirror
/
dsa-puppet.git
/ history
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅
next
Add wuiet volumes at UBC
[mirror/dsa-puppet.git]
/
modules
/
ferm
/
templates
/
2019-09-11
Peter Palfrader
Retire unused ferm varible definitions for HOST_STATIC*
tree
|
commitdiff
2019-09-11
Peter Palfrader
ssh between static hosts should be handled by the ssh...
tree
|
commitdiff
2019-09-11
Peter Palfrader
restrict ssh to static-master-ubc-01 by default. we...
tree
|
commitdiff
2019-09-11
Peter Palfrader
restrict ssh to static-master-grnet-01 by default....
tree
|
commitdiff
2019-09-07
Peter Palfrader
ssh restrict dns geo and dns primary hosts
tree
|
commitdiff
2019-09-07
Peter Palfrader
no longer need to manually whitelist adayevskaya on...
tree
|
commitdiff
2019-09-07
Peter Palfrader
gitolite pushes puppetmaster
tree
|
commitdiff
2019-09-07
Peter Palfrader
make puppetmaster a role included via hiera
tree
|
commitdiff
2019-09-07
Peter Palfrader
Move adayevskaya from bm to manda
tree
|
commitdiff
2019-08-28
Aurelien Jarno
Fix CSAIL IPv6 subnet
tree
|
commitdiff
2019-08-28
Aurelien Jarno
ferm: drop FREEBSD_SSH_ACCESS
tree
|
commitdiff
2019-08-28
Aurelien Jarno
ferm: add syncproxy.na.debian.org IPv6
tree
|
commitdiff
2019-07-07
Peter Palfrader
geo ferm
tree
|
commitdiff
2019-07-07
Peter Palfrader
geo ferm
tree
|
commitdiff
2019-07-07
Peter Palfrader
fw on kaufmann
tree
|
commitdiff
2019-07-07
Peter Palfrader
unify v4 and v6 rules in named::primary
tree
|
commitdiff
2019-01-02
Tollef Fog Heen
Open up some IPs for tfheen
tree
|
commitdiff
2018-11-18
Peter Palfrader
Also restrict "ganeti/kvm host" purpose
tree
|
commitdiff
2018-10-30
Peter Palfrader
Move logging and related/established out of ferm.conf...
tree
|
commitdiff
2018-10-30
Peter Palfrader
move munin rules from conf.d to the rules dir
tree
|
commitdiff
2018-10-30
Peter Palfrader
rename interfaces to 50-munin-interfaces
tree
|
commitdiff
2018-10-30
Peter Palfrader
merge munin_ip v4 and v6 into one rule
tree
|
commitdiff
2018-10-23
Peter Palfrader
Add a second easydns ipv4 address
tree
|
commitdiff
2018-10-16
Peter Palfrader
allow ssh from ftpmaster to debug_mirrors
tree
|
commitdiff
2018-07-31
Peter Palfrader
ferm/munin: use already split v[46]addrs for munin...
tree
|
commitdiff
2018-07-17
Julien Cristau
Remove wheezy-supporting cruft
tree
|
commitdiff
2018-06-18
Julien Cristau
Update my home ip ranges yet again
tree
|
commitdiff
2018-05-06
Julien Cristau
New IP ranges for jcristau
tree
|
commitdiff
2018-03-06
Peter Palfrader
start ferm config with a 00-init and start SSH*SOURCES...
tree
|
commitdiff
2018-02-08
Martin Zobel-Helas
remove sgran IP range. he can hop via master if needed
tree
|
commitdiff
2018-01-06
Peter Palfrader
Allow adayevskaya to ssh trigger puppetmaster/handel
tree
|
commitdiff
2017-11-23
Julien Cristau
Add extra netnod servers to ferm
tree
|
commitdiff
2017-10-18
Luca Filipozzi
always a typo
tree
|
commitdiff
2017-10-18
Luca Filipozzi
prune ssh ACLs for luca
tree
|
commitdiff
2017-10-03
Julien Cristau
Add syncproxy addresses to ssh whitelist
tree
|
commitdiff
2017-10-03
Julien Cristau
Restrict ssh to mirrors
tree
|
commitdiff
2017-09-27
Julien Cristau
Revert "Restrict ssh to anycast and static mirrors"
tree
|
commitdiff
2017-09-27
Julien Cristau
Restrict ssh to anycast and static mirrors
tree
|
commitdiff
2017-09-10
Aurelien Jarno
ferm: restrict access to all buildds
tree
|
commitdiff
2017-08-13
Peter Palfrader
Add 62.46.0.0/15 to weasel's networks
tree
|
commitdiff
2017-08-06
Julien Cristau
Fix getfastlyranges harder
tree
|
commitdiff
2017-08-06
Tollef Fog Heen
Update IPs for tfheen
tree
|
commitdiff
2017-08-06
Julien Cristau
Fix template syntax
tree
|
commitdiff
2017-08-06
Julien Cristau
Handle exceptions from reading fastly IP ranges
tree
|
commitdiff
2017-08-06
Julien Cristau
ferm: accept syslog from fastly IPs
tree
|
commitdiff
2017-07-22
Peter Palfrader
new network space for weasel
tree
|
commitdiff
2017-04-26
Martin Zobel-Helas
Merge branch 'master' of git+ssh://puppet.debian.org...
tree
|
commitdiff
2017-04-26
Martin Zobel-Helas
add my other subnet
tree
|
commitdiff
2017-03-19
Martin Zobel-Helas
Merge branch 'master' of git+ssh://puppet.debian.org...
tree
|
commitdiff
2017-03-18
Julien Cristau
Attempt to fix version comparisons
tree
|
commitdiff
2017-03-18
Peter Palfrader
fix template
tree
|
commitdiff
2017-03-18
root
puppet 4 foo
tree
|
commitdiff
2017-03-18
root
puppet 4 foo
tree
|
commitdiff
2017-01-10
Peter Palfrader
other sil network for weasel
tree
|
commitdiff
2016-10-13
Luca Filipozzi
add new host for luca
tree
|
commitdiff
2016-10-07
Luca Filipozzi
remove fubar.emyr.net from luca's list of hosts
tree
|
commitdiff
2016-10-05
Luca Filipozzi
add IPv4 address for luca's new jumphost
tree
|
commitdiff
2016-09-26
Luca Filipozzi
new cable modem
tree
|
commitdiff
2016-06-28
Julien Cristau
Add topinambour.cristau.org to DSA_IPS
tree
|
commitdiff
2016-06-28
Peter Palfrader
Add people.do to DSA_IPs
tree
|
commitdiff
2016-06-25
Aurelien Jarno
beethoven has been decommissioned for a lot of time...
tree
|
commitdiff
2016-06-15
Julien Cristau
Decommission lebrun and schroeder
tree
|
commitdiff
2016-05-28
Julien Cristau
dsa -= paravoid (rt#6248)
tree
|
commitdiff
2016-04-16
Julien Cristau
ferm: remove my office addresses
tree
|
commitdiff
2016-04-15
Martin Zobel-Helas
add new office networks
tree
|
commitdiff
2016-03-07
Luca Filipozzi
add luca's home and work IPv4 since they are fixed...
tree
|
commitdiff
2016-03-02
Julien Cristau
ferm: squeeze cleanup
tree
|
commitdiff
2016-02-18
Luca Filipozzi
remove linode.emyr.net from ACL for luca
tree
|
commitdiff
2016-02-08
Luca Filipozzi
prep for transition away from linode
tree
|
commitdiff
2015-08-31
Julien Cristau
ferm: add yet another $work ip
tree
|
commitdiff
2015-08-25
Peter Palfrader
Remove /var/run/iptables-ferm.checksum /var/run/ip6tabl...
tree
|
commitdiff
2015-08-24
Aurelien Jarno
ferm: use NFLOG instead of LOG/ULOG on jessie
tree
|
commitdiff
2015-08-24
Aurelien Jarno
ferm: change ferm.conf to a template
tree
|
commitdiff
2015-08-24
Aurelien Jarno
ferm: drop aurel32's IPs
tree
|
commitdiff
2015-05-14
Peter Palfrader
retire ravel
tree
|
commitdiff
2015-04-28
Julien Cristau
ferm: office ip renumbering
tree
|
commitdiff
2015-02-11
Tollef Fog Heen
Drop no longer in use office network
tree
|
commitdiff
2014-11-19
Luca Filipozzi
allow netnod to reach denis on 53/tcp and 53/udp
tree
|
commitdiff
2014-11-06
Peter Palfrader
fix function name
tree
|
commitdiff
2014-11-06
Peter Palfrader
Handle hosts that are not in ldap yet
tree
|
commitdiff
2014-10-25
Peter Palfrader
Allow pg connections from pgbackuphost
tree
|
commitdiff
2014-10-06
Julien Cristau
ferm: add networks for jcristau
tree
|
commitdiff
2014-07-11
Martin Zobel-Helas
add ip for mfl
tree
|
commitdiff
2014-07-09
Héctor Orón Martínez
portman: does not need ssh all buildd
tree
|
commitdiff
2014-07-08
Héctor Orón Martínez
ferm: update -ports rules
tree
|
commitdiff
2014-05-31
Luca Filipozzi
drop orff from dns_secondary; purge dns_secondary configs
tree
|
commitdiff
2014-05-14
Luca Filipozzi
add rcode0.net to primary nameserver firewall rules
tree
|
commitdiff
2014-03-07
Luca Filipozzi
add xfr0.easydns.com to firewall rules
tree
|
commitdiff
2014-01-14
Peter Palfrader
remove grieg (RT#4393)
tree
|
commitdiff
2014-01-07
Peter Palfrader
Fixes
tree
|
commitdiff
2014-01-07
Peter Palfrader
denis: llow ssh from geo[123]
tree
|
commitdiff
2014-01-07
Peter Palfrader
update firewalls regarding dns
tree
|
commitdiff
2014-01-02
Stephen Gran
In ruby, this must be an array
tree
|
commitdiff
2014-01-02
Stephen Gran
template breakage
tree
|
commitdiff
2014-01-02
Stephen Gran
try to fix errors
tree
|
commitdiff
2014-01-02
Tollef Fog Heen
Move all roles from local.yaml to hiera
tree
|
commitdiff
2013-12-30
Peter Palfrader
adayevskaya can ssh into denis
tree
|
commitdiff
2013-12-30
Peter Palfrader
Allow ssh to adayevskaya from all debian.org hosts
tree
|
commitdiff
2013-11-30
Peter Palfrader
Add denis to ssh restricted
tree
|
commitdiff
2013-11-18
Peter Palfrader
fix ferm
tree
|
commitdiff
next