Update bacula db location in bacula-dir config
[mirror/dsa-puppet.git] / modules / ferm /
2019-09-23 Julien Cristaubacula cluster moved to postgresql-manda-01
2019-09-22 Aurelien Jarnodanzi: merge dsa-postgres2-danzi and dsa-postgres2...
2019-09-22 Aurelien Jarnodanzi: merge dsa-postgres-danzi and dsa-postgres-danzi6
2019-09-22 Aurelien JarnoAllow access to the tracker db @ danzi from ticharich
2019-09-22 Peter Palfradernagiosmaster -> hiera role; bind acls still not converted
2019-09-22 Peter Palfradermerge SSH_SOURCES and SSH_V6_SOURCES
2019-09-22 Peter PalfraderRemove empty ferm::zivit
2019-09-22 Peter Palfraderiptables -vnL on zelenka suggests that zivit no longer...
2019-09-22 Peter PalfraderApparently we no longer monitor the time service on...
2019-09-22 Peter Palfradermuninmaster -> hiera role, new ssh store/collect, no...
2019-09-22 Peter Palfraderretire old HOST_MAILRELAY ferm variable
2019-09-22 Peter Palfraderremove smtp_sources from ferm's me.conf, retire old...
2019-09-21 Peter Palfraderremove old-style ssh firewalling setup for mirrors...
2019-09-21 Aurelien JarnoDecommission rusca (RT#7949)
2019-09-21 Peter Palfraderretire old-style firewalling for mirrormaster sshing...
2019-09-21 Julien CristauRevert "ferm: open ssh from mirror-master to ports...
2019-09-21 Julien Cristauferm: open ssh from mirror-master to ports mirror
2019-09-20 Peter PalfraderRetire unused extranrpeclient role -- the mini-nag...
2019-09-16 Aurelien JarnoUpdate wuiet IP address
2019-09-16 Aurelien Jarnowannabuild has been moved from bmdb1 to danzi
2019-09-16 Peter Palfradermake dns primary export and keyring host collect firewa...
2019-09-16 Peter PalfraderIf the name is too long for netfilter, hash it
2019-09-16 Peter Palfradermove 3rd party nameserver info from the ferm template...
2019-09-16 Peter PalfraderTry a new ferm rule class
2019-09-16 Peter Palfraderwhitespace/quoting: modules/ferm/manifests/ (make lint...
2019-09-15 Peter PalfraderOne of the last changes broke dbmaster role based ferm...
2019-09-15 Peter Palfraderdo not use role-based ssh restrict
2019-09-13 Peter PalfraderTry to avoid reserved site keyword
2019-09-11 Peter PalfraderRetire unused ferm varible definitions for HOST_STATIC*
2019-09-11 Peter Palfraderssh between static hosts should be handled by the ssh...
2019-09-11 Peter Palfraderrestrict ssh to static-master-ubc-01 by default. we...
2019-09-11 Peter Palfraderrestrict ssh to static-master-grnet-01 by default....
2019-09-10 Julien Cristauferm::ftp_conntrack: remove jessie support
2019-09-07 Peter Palfraderstop using virtual resources for ferm::rule
2019-09-07 Peter Palfraderssh restrict dns geo and dns primary hosts
2019-09-07 Peter Palfraderno longer need to manually whitelist adayevskaya on...
2019-09-07 Peter Palfradergitolite pushes puppetmaster
2019-09-07 Peter Palfradermake puppetmaster a role included via hiera
2019-09-07 Peter PalfraderMove adayevskaya from bm to manda
2019-08-30 Peter Palfraderremove olin from bmdb1 access
2019-08-28 Aurelien JarnoFix CSAIL IPv6 subnet
2019-08-28 Aurelien Jarnoferm: drop FREEBSD_SSH_ACCESS
2019-08-28 Aurelien Jarnoferm: add syncproxy.na.debian.org IPv6
2019-08-22 Peter Palfradermove syslog ferm into syslog role
2019-07-07 Peter Palfradergeo ferm
2019-07-07 Peter Palfradergeo ferm
2019-07-07 Peter Palfraderfw on kaufmann
2019-07-07 Peter Palfraderunify v4 and v6 rules in named::primary
2019-06-09 Luca Filipozziallow ssh access to ubc-node-arm* from ubc-bulwark...
2019-05-28 Peter Palfradersnapshotdb-manda-01: allow pg access from lw
2019-05-23 Peter PalfraderAllow snapshotdb-manda-01 to access pg on sallinen
2019-04-03 Aurelien JarnoAllow access to dak@bmdb1 from ullmann
2019-04-03 Aurelien JarnoAllow access to wanna-build@bmdb1 from respighi
2019-04-02 Aurelien JarnoAllow access to ullmann from wuiet
2019-03-17 Aurelien JarnoDecommission lully.d.o
2019-01-28 Julien Cristauadd loghost-osuosl-01
2019-01-02 Tollef Fog HeenOpen up some IPs for tfheen
2018-12-17 Peter Palfraderreload ferm on changes instead of restart
2018-11-18 Peter PalfraderAlso restrict "ganeti/kvm host" purpose
2018-11-13 Peter Palfraderferm cleanup: sallinen
2018-11-13 Peter Palfraderferm cleanup: bmdb1:debsources, fix
2018-11-13 Peter Palfraderferm cleanup: bmdb1:debsources
2018-11-13 Peter Palfraderferm cleanup: bmdb1:dedup
2018-11-13 Peter Palfraderferm cleanup: bmdb1:bacula
2018-11-13 Peter Palfraderferm cleanup: bmdb1:wannabuild, remove duplicate allow...
2018-11-13 Peter Palfraderferm cleanup: bmdb1:wannabuild
2018-11-13 Peter Palfraderferm cleanup: bmdb1:dak, fix
2018-11-13 Peter Palfraderferm cleanup: bmdb1:dak
2018-11-13 Peter Palfraderferm cleanup: bmdb1:main, fix
2018-11-13 Peter Palfraderferm cleanup: bmdb1:main
2018-11-13 Peter Palfraderferm cleanup: fasolo postgres
2018-11-13 Peter Palfradertest avoiding hardcoding addresses
2018-11-13 Peter Palfraderno more varnish on sibelius
2018-11-13 Peter Palfraderbugs-search no longer runs on sonntag
2018-11-01 Julien CristauDrop firewall rule for pg @ sibelius
2018-10-31 Peter Palfraderunique all ip addresses
2018-10-31 Peter PalfraderTry a unique around v4addrs
2018-10-30 Peter PalfraderMove logging and related/established out of ferm.conf...
2018-10-30 Peter Palfradermove munin rules from conf.d to the rules dir, 2
2018-10-30 Peter Palfradermove munin rules from conf.d to the rules dir
2018-10-30 Peter Palfraderrename interfaces to 50-munin-interfaces
2018-10-30 Peter Palfradermerge munin_ip v4 and v6 into one rule
2018-10-30 Peter Palfraderchange default ferm rule priority to 10 from 00
2018-10-23 Peter PalfraderAdd a second easydns ipv4 address
2018-10-16 Peter Palfradertry a HEREdoc as the syntax checker seems to have issue...
2018-10-16 Peter Palfraderallow respighi to access udd on ullmann
2018-10-16 Peter Palfradermerge ipv4 and ipv6 rule for ullmann's dsa-postgres...
2018-10-16 Peter Palfraderallow ssh from ftpmaster to debug_mirrors
2018-10-16 Peter Palfraderfix a prefix len in dsa-postgres-udd6
2018-10-10 Peter PalfraderStart with removing some moszumanska entries (in partic...
2018-08-07 Julien CristauRevert "allow access to pg on vittoria for dc18"
2018-08-07 Julien CristauRevert "RT#7368: add additional IP"
2018-07-31 Peter Palfraderretire old cleanup job for ip6_ munin plugins
2018-07-31 Peter PalfraderMake sure nodeinfo['misc']['v[46]addrs'] always exists...
2018-07-31 Peter Palfraderferm/munin: use already split v[46]addrs for munin...
2018-07-29 Martin Zobel-HelasRT#7368: add additional IP
2018-07-27 Julien Cristauallow access to pg on vittoria for dc18
2018-07-17 Julien CristauRemove wheezy-supporting cruft
2018-06-18 Julien CristauUpdate my home ip ranges yet again
2018-05-29 Peter Palfradersallinen: retire 443->5473 dnat
next