Fix postgres-make-one-base-backup for pg 11
[mirror/dsa-puppet.git] / modules / ferm /
2019-08-30 Peter Palfraderremove olin from bmdb1 access
2019-08-28 Aurelien JarnoFix CSAIL IPv6 subnet
2019-08-28 Aurelien Jarnoferm: drop FREEBSD_SSH_ACCESS
2019-08-28 Aurelien Jarnoferm: add syncproxy.na.debian.org IPv6
2019-08-22 Peter Palfradermove syslog ferm into syslog role
2019-07-07 Peter Palfradergeo ferm
2019-07-07 Peter Palfradergeo ferm
2019-07-07 Peter Palfraderfw on kaufmann
2019-07-07 Peter Palfraderunify v4 and v6 rules in named::primary
2019-06-09 Luca Filipozziallow ssh access to ubc-node-arm* from ubc-bulwark...
2019-05-28 Peter Palfradersnapshotdb-manda-01: allow pg access from lw
2019-05-23 Peter PalfraderAllow snapshotdb-manda-01 to access pg on sallinen
2019-04-03 Aurelien JarnoAllow access to dak@bmdb1 from ullmann
2019-04-03 Aurelien JarnoAllow access to wanna-build@bmdb1 from respighi
2019-04-02 Aurelien JarnoAllow access to ullmann from wuiet
2019-03-17 Aurelien JarnoDecommission lully.d.o
2019-01-28 Julien Cristauadd loghost-osuosl-01
2019-01-02 Tollef Fog HeenOpen up some IPs for tfheen
2018-12-17 Peter Palfraderreload ferm on changes instead of restart
2018-11-18 Peter PalfraderAlso restrict "ganeti/kvm host" purpose
2018-11-13 Peter Palfraderferm cleanup: sallinen
2018-11-13 Peter Palfraderferm cleanup: bmdb1:debsources, fix
2018-11-13 Peter Palfraderferm cleanup: bmdb1:debsources
2018-11-13 Peter Palfraderferm cleanup: bmdb1:dedup
2018-11-13 Peter Palfraderferm cleanup: bmdb1:bacula
2018-11-13 Peter Palfraderferm cleanup: bmdb1:wannabuild, remove duplicate allow...
2018-11-13 Peter Palfraderferm cleanup: bmdb1:wannabuild
2018-11-13 Peter Palfraderferm cleanup: bmdb1:dak, fix
2018-11-13 Peter Palfraderferm cleanup: bmdb1:dak
2018-11-13 Peter Palfraderferm cleanup: bmdb1:main, fix
2018-11-13 Peter Palfraderferm cleanup: bmdb1:main
2018-11-13 Peter Palfraderferm cleanup: fasolo postgres
2018-11-13 Peter Palfradertest avoiding hardcoding addresses
2018-11-13 Peter Palfraderno more varnish on sibelius
2018-11-13 Peter Palfraderbugs-search no longer runs on sonntag
2018-11-01 Julien CristauDrop firewall rule for pg @ sibelius
2018-10-31 Peter Palfraderunique all ip addresses
2018-10-31 Peter PalfraderTry a unique around v4addrs
2018-10-30 Peter PalfraderMove logging and related/established out of ferm.conf...
2018-10-30 Peter Palfradermove munin rules from conf.d to the rules dir, 2
2018-10-30 Peter Palfradermove munin rules from conf.d to the rules dir
2018-10-30 Peter Palfraderrename interfaces to 50-munin-interfaces
2018-10-30 Peter Palfradermerge munin_ip v4 and v6 into one rule
2018-10-30 Peter Palfraderchange default ferm rule priority to 10 from 00
2018-10-23 Peter PalfraderAdd a second easydns ipv4 address
2018-10-16 Peter Palfradertry a HEREdoc as the syntax checker seems to have issue...
2018-10-16 Peter Palfraderallow respighi to access udd on ullmann
2018-10-16 Peter Palfradermerge ipv4 and ipv6 rule for ullmann's dsa-postgres...
2018-10-16 Peter Palfraderallow ssh from ftpmaster to debug_mirrors
2018-10-16 Peter Palfraderfix a prefix len in dsa-postgres-udd6
2018-10-10 Peter PalfraderStart with removing some moszumanska entries (in partic...
2018-08-07 Julien CristauRevert "allow access to pg on vittoria for dc18"
2018-08-07 Julien CristauRevert "RT#7368: add additional IP"
2018-07-31 Peter Palfraderretire old cleanup job for ip6_ munin plugins
2018-07-31 Peter PalfraderMake sure nodeinfo['misc']['v[46]addrs'] always exists...
2018-07-31 Peter Palfraderferm/munin: use already split v[46]addrs for munin...
2018-07-29 Martin Zobel-HelasRT#7368: add additional IP
2018-07-27 Julien Cristauallow access to pg on vittoria for dc18
2018-07-17 Julien CristauRemove wheezy-supporting cruft
2018-06-18 Julien CristauUpdate my home ip ranges yet again
2018-05-29 Peter Palfradersallinen: retire 443->5473 dnat
2018-05-28 Peter Palfraderpg firewalling
2018-05-28 Peter Palfraderadd lw07 to snapshot_web group
2018-05-06 Julien CristauNew IP ranges for jcristau
2018-03-11 Peter PalfraderThere is no ferm-restart Exec to notify
2018-03-06 Peter Palfraderferm::conf - include ferm
2018-03-06 Peter Palfraderstart ferm config with a 00-init and start SSH*SOURCES...
2018-03-06 Peter Palfraderferm::conf - merge with tor version
2018-02-08 Martin Zobel-Helasremove sgran IP range. he can hop via master if needed
2018-02-02 Tollef Fog HeenNo more conntrackd in bm, so drop firewall opening
2018-02-01 Martin Zobel-HelasMerge branch 'master' of git+ssh://git2.debian.org...
2018-02-01 Peter Palfraderremove bendel/lists blackhole rules that are probably...
2018-01-06 Peter PalfraderAllow adayevskaya to ssh trigger puppetmaster/handel
2018-01-04 Peter Palfradergive sallinen pg access to sibelius
2017-11-23 Julien CristauAdd extra netnod servers to ferm
2017-10-19 Luca FilipozziMerge branch 'master' of ssh://handel.debian.org/~...
2017-10-19 Luca Filipozziremove custom casulana rules
2017-10-18 Luca Filipozzialways a typo
2017-10-18 Luca Filipozziprune ssh ACLs for luca
2017-10-18 Luca Filipozziadd more casulana rules for br1
2017-10-18 Luca Filipozziadd masquerade rules for casulana virtual machines
2017-10-18 Luca Filipozziundo casulana custom roles
2017-10-17 Luca Filipozzifix up the custom cloud-admins rule
2017-10-17 Luca Filipozzicustom rule for cloud-builds on casaluna
2017-10-03 Julien CristauAdd syncproxy addresses to ssh whitelist
2017-10-03 Julien CristauRestrict ssh to mirrors
2017-10-01 Julien CristauUse postgres::backup_source for danzi's main pg cluster
2017-09-29 Julien Cristaufixup ferm rule for danzi
2017-09-29 Julien Cristauupdate ferm rules for postgresql@danzi
2017-09-27 Julien CristauRevert "Restrict ssh to anycast and static mirrors"
2017-09-27 Julien CristauRestrict ssh to anycast and static mirrors
2017-09-10 Aurelien Jarnoferm: restrict access to all buildds
2017-09-05 Peter Palfraderswitch buxtehude to more puppetized pg backups
2017-09-03 Peter Palfraderfirewall: Start moving vittoria over to puppetized...
2017-09-03 Peter Palfraderremove temporary dc17 access to vittoria
2017-09-01 Peter Palfradermanual entries for melartin for fw, authkeys, and make...
2017-08-26 Peter PalfraderRetire stockhausen/listsearch (RT#6848)
2017-08-13 Peter PalfraderAdd 62.46.0.0/15 to weasel's networks
2017-08-07 Tollef Fog HeenAllow traffic from Fastly to 5141 instead and set up...
2017-08-06 Julien CristauFix getfastlyranges harder
next