Peter Palfrader [Sun, 15 Sep 2013 16:04:57 +0000 (18:04 +0200)]
pg network access
Tollef Fog Heen [Sun, 15 Sep 2013 10:32:40 +0000 (12:32 +0200)]
Add dedication for wuiet
Tollef Fog Heen [Sun, 15 Sep 2013 10:30:54 +0000 (12:30 +0200)]
Adjust puppet for wuiet being a buildd master
Tollef Fog Heen [Sun, 15 Sep 2013 10:23:21 +0000 (12:23 +0200)]
s/ressource/resource/
Tollef Fog Heen [Sun, 15 Sep 2013 10:22:15 +0000 (12:22 +0200)]
Key apache memory for buildd master on role, not host name
Tollef Fog Heen [Sun, 15 Sep 2013 09:26:54 +0000 (11:26 +0200)]
Add disks for wuiet
Tollef Fog Heen [Sun, 15 Sep 2013 09:25:58 +0000 (11:25 +0200)]
Sort multipath-bm list
Stephen Gran [Wed, 11 Sep 2013 07:41:10 +0000 (08:41 +0100)]
add stuff for mail
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 11 Sep 2013 07:35:18 +0000 (08:35 +0100)]
refactor
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 11 Sep 2013 06:51:00 +0000 (07:51 +0100)]
add some samhain ignores
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 10 Sep 2013 21:18:16 +0000 (22:18 +0100)]
fix options
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 10 Sep 2013 21:11:17 +0000 (22:11 +0100)]
try ssl for management
Signed-off-by: Stephen Gran <steve@lobefin.net>
Tollef Fog Heen [Tue, 10 Sep 2013 20:17:10 +0000 (22:17 +0200)]
Allow ssh from mail relays to adayevskaya
Stephen Gran [Sun, 8 Sep 2013 15:37:50 +0000 (16:37 +0100)]
right package
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 8 Sep 2013 15:26:57 +0000 (16:26 +0100)]
porterboxes need chronic
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Sat, 7 Sep 2013 15:43:41 +0000 (17:43 +0200)]
moar networks for weasel
Tollef Fog Heen [Sat, 7 Sep 2013 07:39:05 +0000 (09:39 +0200)]
Ignore timestamps for sites-available, since some files in there comes from puppet
Martin Zobel-Helas [Fri, 6 Sep 2013 20:36:15 +0000 (22:36 +0200)]
let our apaches answer to {www,}.debian.us requests
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Fri, 6 Sep 2013 20:32:04 +0000 (22:32 +0200)]
add debian.us
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Tollef Fog Heen [Fri, 6 Sep 2013 09:55:23 +0000 (11:55 +0200)]
dir, not file
Tollef Fog Heen [Fri, 6 Sep 2013 09:51:56 +0000 (11:51 +0200)]
Move the ignore of /etc/exim4/email-virtualdomains to ignoreall
Tollef Fog Heen [Thu, 5 Sep 2013 17:49:16 +0000 (19:49 +0200)]
/etc/exim4/email-virtualdomains comes from git, ignore it
Peter Palfrader [Thu, 5 Sep 2013 13:29:39 +0000 (15:29 +0200)]
Support install less crap in chroots, 2
Peter Palfrader [Thu, 5 Sep 2013 13:27:12 +0000 (15:27 +0200)]
Support install less crap in chroots
Peter Palfrader [Thu, 5 Sep 2013 13:25:17 +0000 (15:25 +0200)]
Support building chroots that debootstrap does not know yet
Peter Palfrader [Wed, 4 Sep 2013 12:40:25 +0000 (14:40 +0200)]
Update *both* places that specify search paths
Peter Palfrader [Tue, 3 Sep 2013 20:32:52 +0000 (22:32 +0200)]
de-conflict tlsa record names for puppet
Peter Palfrader [Tue, 3 Sep 2013 20:29:02 +0000 (22:29 +0200)]
ssl cert stuff for nono: nm and contributors
Stephen Gran [Mon, 2 Sep 2013 18:00:44 +0000 (19:00 +0100)]
add more admin firewall access
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 2 Sep 2013 15:33:45 +0000 (16:33 +0100)]
ignore mq for now
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Sun, 1 Sep 2013 14:47:01 +0000 (16:47 +0200)]
add dedup sudo
Peter Palfrader [Sun, 1 Sep 2013 14:43:58 +0000 (16:43 +0200)]
add delfin
Peter Palfrader [Sun, 1 Sep 2013 14:43:14 +0000 (16:43 +0200)]
add delfin
Stephen Gran [Sun, 1 Sep 2013 09:04:47 +0000 (10:04 +0100)]
I think this is what we want
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 1 Sep 2013 09:00:43 +0000 (10:00 +0100)]
more buildd perms
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Sat, 31 Aug 2013 11:03:12 +0000 (13:03 +0200)]
open ullmann pg fw up for franck and coccia
Peter Palfrader [Sat, 31 Aug 2013 11:02:28 +0000 (13:02 +0200)]
move fw rules to the appropriate section
Peter Palfrader [Wed, 28 Aug 2013 15:01:10 +0000 (17:01 +0200)]
restricted ssh to adayevskaya
Stephen Gran [Wed, 28 Aug 2013 06:22:59 +0000 (07:22 +0100)]
add wbadm user
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 27 Aug 2013 19:27:32 +0000 (20:27 +0100)]
refactor module
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Tue, 27 Aug 2013 19:02:57 +0000 (21:02 +0200)]
Remove unneeded DefaulType lines
Stephen Gran [Tue, 27 Aug 2013 18:53:25 +0000 (19:53 +0100)]
update macros
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 27 Aug 2013 18:52:14 +0000 (19:52 +0100)]
Stephen Gran [Tue, 27 Aug 2013 18:50:32 +0000 (19:50 +0100)]
try this
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 27 Aug 2013 07:58:52 +0000 (08:58 +0100)]
we don't need that long a timeout
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 26 Aug 2013 20:38:37 +0000 (21:38 +0100)]
add build user
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 26 Aug 2013 20:32:58 +0000 (21:32 +0100)]
add build user & vhost
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 26 Aug 2013 09:36:15 +0000 (10:36 +0100)]
change to how ulimit is set now
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 26 Aug 2013 09:25:53 +0000 (10:25 +0100)]
add management modules and rules
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 26 Aug 2013 09:19:20 +0000 (10:19 +0100)]
regex, not glob
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 26 Aug 2013 09:11:50 +0000 (10:11 +0100)]
add forced mirror policy
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 26 Aug 2013 09:07:32 +0000 (10:07 +0100)]
change to ssl only port
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 26 Aug 2013 09:05:26 +0000 (10:05 +0100)]
fix up to make valid
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 26 Aug 2013 08:59:17 +0000 (09:59 +0100)]
ssl listeners for rabbit
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 26 Aug 2013 08:32:19 +0000 (09:32 +0100)]
add an ftpteam account
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Aug 2013 21:49:33 +0000 (22:49 +0100)]
make that an array
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Aug 2013 21:47:45 +0000 (22:47 +0100)]
add cluster rules
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Aug 2013 19:26:50 +0000 (20:26 +0100)]
add firewall rules
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Aug 2013 19:15:53 +0000 (20:15 +0100)]
some cleanup
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Aug 2013 19:14:27 +0000 (20:14 +0100)]
set up rabbit
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Aug 2013 19:08:43 +0000 (20:08 +0100)]
more ignores
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Aug 2013 15:04:36 +0000 (16:04 +0100)]
add new machines
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Aug 2013 14:44:32 +0000 (15:44 +0100)]
add rabbitmq module
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Aug 2013 14:44:17 +0000 (15:44 +0100)]
add control for ulimits
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Aug 2013 14:14:12 +0000 (15:14 +0100)]
new hosts in BM
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Sun, 25 Aug 2013 13:50:48 +0000 (15:50 +0200)]
Ignore 2 more dirs
Stephen Gran [Sun, 25 Aug 2013 12:58:01 +0000 (13:58 +0100)]
skeleton for pubsub hosts
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Aug 2013 09:59:48 +0000 (10:59 +0100)]
make puppet do the work
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Sun, 25 Aug 2013 09:57:59 +0000 (11:57 +0200)]
Prefer relative symlinks
Stephen Gran [Sun, 25 Aug 2013 09:55:58 +0000 (10:55 +0100)]
add --force
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Sun, 25 Aug 2013 09:52:46 +0000 (11:52 +0200)]
rename new cert files
Stephen Gran [Sun, 25 Aug 2013 09:51:03 +0000 (10:51 +0100)]
it's an argument, not a predicate
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Aug 2013 09:46:46 +0000 (10:46 +0100)]
set up new certs
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Sun, 25 Aug 2013 09:46:50 +0000 (11:46 +0200)]
Move -chains to a different dir on the puppet server
Peter Palfrader [Sun, 25 Aug 2013 09:37:43 +0000 (11:37 +0200)]
Push piuparts cert to pejacevic
Peter Palfrader [Sun, 25 Aug 2013 09:36:57 +0000 (11:36 +0200)]
Add piuparts cert
Stephen Gran [Sun, 25 Aug 2013 09:06:35 +0000 (10:06 +0100)]
Revert "try pushing more certs"
This reverts commit
fe4ca797ee815fad50d10e6b06229d522a34d5cf.
Stephen Gran [Sun, 25 Aug 2013 09:02:04 +0000 (10:02 +0100)]
try pushing more certs
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Sun, 25 Aug 2013 08:25:33 +0000 (10:25 +0200)]
use cert itself if we have no chain
Peter Palfrader [Sun, 25 Aug 2013 08:23:29 +0000 (10:23 +0200)]
Split certs from their chains
Peter Palfrader [Sun, 25 Aug 2013 08:21:40 +0000 (08:21 +0000)]
replace -chain with a symlink
Peter Palfrader [Sun, 25 Aug 2013 08:12:02 +0000 (10:12 +0200)]
syntax
Peter Palfrader [Sun, 25 Aug 2013 08:07:27 +0000 (10:07 +0200)]
Allow splitting of service cert and its chain
Peter Palfrader [Tue, 20 Aug 2013 19:04:02 +0000 (21:04 +0200)]
bmdb1 fw access
Peter Palfrader [Tue, 20 Aug 2013 18:55:42 +0000 (20:55 +0200)]
decommissioning coincy (RT#4628)
Peter Palfrader [Tue, 20 Aug 2013 18:55:19 +0000 (20:55 +0200)]
udd db access from couper instead of coincy
Stephen Gran [Mon, 19 Aug 2013 07:34:28 +0000 (08:34 +0100)]
stop doing it twice
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Sun, 18 Aug 2013 17:13:22 +0000 (19:13 +0200)]
couper bm autofs
Peter Palfrader [Sun, 18 Aug 2013 16:59:07 +0000 (18:59 +0200)]
Add couper
Peter Palfrader [Sun, 18 Aug 2013 16:02:28 +0000 (18:02 +0200)]
couper multipath entries
Peter Palfrader [Wed, 14 Aug 2013 14:03:47 +0000 (16:03 +0200)]
Planet is now sourced on philp
Peter Palfrader [Wed, 14 Aug 2013 07:34:31 +0000 (09:34 +0200)]
coincy access to ullmann
Peter Palfrader [Wed, 14 Aug 2013 06:39:47 +0000 (08:39 +0200)]
sudo for codesearch
Peter Palfrader [Tue, 13 Aug 2013 20:30:07 +0000 (22:30 +0200)]
prepare for planet move to philp
Peter Palfrader [Tue, 13 Aug 2013 20:28:29 +0000 (22:28 +0200)]
Also ignore /etc/static-components.conf
Peter Palfrader [Tue, 13 Aug 2013 20:25:49 +0000 (22:25 +0200)]
philp is a static source
Martin Zobel-Helas [Tue, 13 Aug 2013 20:24:16 +0000 (22:24 +0200)]
Merge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
* 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet:
Add philp
Add philp multipath entry
Martin Zobel-Helas [Tue, 13 Aug 2013 20:23:56 +0000 (22:23 +0200)]
add multipath.conf
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Peter Palfrader [Tue, 13 Aug 2013 20:12:34 +0000 (22:12 +0200)]
Add philp
Peter Palfrader [Tue, 13 Aug 2013 20:08:41 +0000 (22:08 +0200)]
Add philp multipath entry
projects / mirror / dsa-puppet.git / log