Luca Filipozzi [Fri, 7 Mar 2014 05:10:28 +0000 (05:10 +0000)]
but make sure the ugly is correct
Luca Filipozzi [Fri, 7 Mar 2014 05:09:45 +0000 (05:09 +0000)]
add some ugliness
Luca Filipozzi [Fri, 7 Mar 2014 04:56:12 +0000 (04:56 +0000)]
add [denis.debian.org, xfr0.easydns.com] as another tsig key
Luca Filipozzi [Mon, 3 Mar 2014 19:15:44 +0000 (19:15 +0000)]
add security-cdn{1,2} as ServerAliases for security.debian.org
Peter Palfrader [Fri, 28 Feb 2014 18:14:23 +0000 (19:14 +0100)]
db.d.o ldap cert no longer signed from SPI
Peter Palfrader [Fri, 28 Feb 2014 18:10:49 +0000 (18:10 +0000)]
Do not notify rehash on update of chains
Peter Palfrader [Fri, 28 Feb 2014 18:10:37 +0000 (18:10 +0000)]
Produce a -chained file for our certs
Peter Palfrader [Thu, 27 Feb 2014 08:57:29 +0000 (09:57 +0100)]
no backups for eberlin
Peter Palfrader [Wed, 26 Feb 2014 17:09:43 +0000 (18:09 +0100)]
Add eberlin
Stephen Gran [Wed, 19 Feb 2014 15:38:16 +0000 (15:38 +0000)]
autodoc headers
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 19 Feb 2014 15:36:01 +0000 (15:36 +0000)]
up apache memlimit
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Tue, 18 Feb 2014 20:31:45 +0000 (21:31 +0100)]
disable dacs for now, will move into roles later on
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Peter Palfrader [Mon, 17 Feb 2014 06:49:21 +0000 (07:49 +0100)]
Do not catch www.*. in the www vhost
Martin Zobel-Helas [Sat, 15 Feb 2014 15:30:02 +0000 (16:30 +0100)]
remove crap
Martin Zobel-Helas [Fri, 14 Feb 2014 20:00:33 +0000 (21:00 +0100)]
add tchaikovsky
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Fri, 14 Feb 2014 16:53:58 +0000 (17:53 +0100)]
add sudo for debsso
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Peter Palfrader [Fri, 14 Feb 2014 15:28:38 +0000 (16:28 +0100)]
new piuparts cert
Peter Palfrader [Fri, 14 Feb 2014 11:43:22 +0000 (12:43 +0100)]
Make www vhost's sort oder 005 instead of 010
Peter Palfrader [Wed, 12 Feb 2014 08:31:21 +0000 (09:31 +0100)]
retire paganini (RT#4407)
Peter Palfrader [Tue, 11 Feb 2014 09:44:52 +0000 (10:44 +0100)]
Deploy bugs-master cert
Peter Palfrader [Tue, 11 Feb 2014 09:43:34 +0000 (10:43 +0100)]
Add bugs-master cert
Peter Palfrader [Tue, 11 Feb 2014 07:30:35 +0000 (08:30 +0100)]
Disable nameserver of ftcollins in hoster.yaml
Peter Palfrader [Mon, 10 Feb 2014 21:20:41 +0000 (22:20 +0100)]
Install cert on packages hosts
Peter Palfrader [Mon, 10 Feb 2014 21:18:26 +0000 (22:18 +0100)]
Add packages.debian.org cert
Stephen Gran [Sat, 8 Feb 2014 11:07:37 +0000 (11:07 +0000)]
allow nrpe to restart samhain as well
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Thu, 6 Feb 2014 10:34:33 +0000 (11:34 +0100)]
Fix shell script postgres-make-base-backups
Stephen Gran [Sun, 2 Feb 2014 15:43:10 +0000 (15:43 +0000)]
wrong path
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 2 Feb 2014 09:47:10 +0000 (09:47 +0000)]
sigh, typo
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 2 Feb 2014 09:45:44 +0000 (09:45 +0000)]
add cron job for squeeze hosts
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Sat, 1 Feb 2014 15:44:10 +0000 (16:44 +0100)]
Get rid of ensure => latest
Tollef Fog Heen [Wed, 29 Jan 2014 20:47:01 +0000 (21:47 +0100)]
master does not handle @d.o mail any longer
Peter Palfrader [Tue, 28 Jan 2014 10:24:18 +0000 (11:24 +0100)]
Check pipe status
Peter Palfrader [Tue, 28 Jan 2014 08:39:45 +0000 (09:39 +0100)]
Fix verbosity handling in while loop
Peter Palfrader [Tue, 28 Jan 2014 08:35:07 +0000 (09:35 +0100)]
move pg full backups to pull model
Peter Palfrader [Mon, 27 Jan 2014 22:00:55 +0000 (23:00 +0100)]
backup access to franck and sibelius
Peter Palfrader [Mon, 27 Jan 2014 21:56:13 +0000 (22:56 +0100)]
backup access to danzi
Peter Palfrader [Mon, 27 Jan 2014 21:48:28 +0000 (22:48 +0100)]
backup access to bmdb1
Peter Palfrader [Mon, 27 Jan 2014 21:08:00 +0000 (21:08 +0000)]
get rid of wrong comment
Peter Palfrader [Mon, 27 Jan 2014 21:04:13 +0000 (22:04 +0100)]
syntax fix
Peter Palfrader [Mon, 27 Jan 2014 21:03:13 +0000 (22:03 +0100)]
Allow backuphost to access chopin
Peter Palfrader [Sun, 26 Jan 2014 14:41:03 +0000 (15:41 +0100)]
Fix sudo entry for static push ports
Martin Zobel-Helas [Fri, 24 Jan 2014 19:31:07 +0000 (20:31 +0100)]
ignore samhain and voip stuff
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Fri, 24 Jan 2014 17:28:05 +0000 (18:28 +0100)]
more local packages for draghi
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Stephen Gran [Sun, 19 Jan 2014 13:32:39 +0000 (13:32 +0000)]
be specific
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 19 Jan 2014 13:23:43 +0000 (13:23 +0000)]
sudo for nrpe/rabbit check
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 19 Jan 2014 13:08:12 +0000 (13:08 +0000)]
gather some debug output
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 18 Jan 2014 13:22:48 +0000 (13:22 +0000)]
chgrp the file
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 18 Jan 2014 11:37:11 +0000 (11:37 +0000)]
syntax
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 18 Jan 2014 11:35:55 +0000 (11:35 +0000)]
add kombu dep
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 18 Jan 2014 11:17:16 +0000 (11:17 +0000)]
oops, typo
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 18 Jan 2014 10:54:17 +0000 (10:54 +0000)]
add ud-replicated to inittab
Signed-off-by: Stephen Gran <steve@lobefin.net>
Luca Filipozzi [Fri, 17 Jan 2014 20:19:30 +0000 (20:19 +0000)]
ensure that rtc.debian.org cert is deployed to static mirror hosts
Luca Filipozzi [Fri, 17 Jan 2014 20:14:45 +0000 (20:14 +0000)]
deploy ssl certificate for rtc.debian.org
Luca Filipozzi [Fri, 17 Jan 2014 19:15:25 +0000 (19:15 +0000)]
allow debvoip group to update rtc.debian.org website
Stephen Gran [Fri, 17 Jan 2014 19:02:00 +0000 (19:02 +0000)]
prepare for a time when we have two things in inittab
Signed-off-by: Stephen Gran <steve@lobefin.net>
Luca Filipozzi [Fri, 17 Jan 2014 17:58:50 +0000 (17:58 +0000)]
update apache config for rtc.debian.org
Luca Filipozzi [Fri, 17 Jan 2014 16:44:06 +0000 (16:44 +0000)]
added rtc.debian.org to static-components
Luca Filipozzi [Fri, 17 Jan 2014 06:54:21 +0000 (06:54 +0000)]
sip -> rtc rename + monit
Stephen Gran [Wed, 15 Jan 2014 17:00:16 +0000 (17:00 +0000)]
wow, how did that make it
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 15 Jan 2014 16:59:12 +0000 (16:59 +0000)]
it's a template, not a static file
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 15 Jan 2014 16:54:40 +0000 (16:54 +0000)]
sigh, include the params class
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 15 Jan 2014 16:41:12 +0000 (16:41 +0000)]
make pubsub.conf a concat fragment
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 15 Jan 2014 16:21:37 +0000 (16:21 +0000)]
add these for correctness
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 14 Jan 2014 19:57:04 +0000 (19:57 +0000)]
new section for ud-replicate
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Tue, 14 Jan 2014 17:43:49 +0000 (18:43 +0100)]
remove grieg (RT#4393)
Luca Filipozzi [Tue, 14 Jan 2014 17:25:14 +0000 (17:25 +0000)]
switch from init scripts to /usr/sbin/service
Luca Filipozzi [Tue, 14 Jan 2014 16:17:05 +0000 (16:17 +0000)]
give group debvoip permission to restart servers
Stephen Gran [Tue, 14 Jan 2014 08:31:41 +0000 (08:31 +0000)]
and fix errors
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 14 Jan 2014 08:24:31 +0000 (08:24 +0000)]
also send lastlog times
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Tue, 14 Jan 2014 06:54:15 +0000 (07:54 +0100)]
rename ftp-master.metadata to metadata.ftp-master
Luca Filipozzi [Mon, 13 Jan 2014 23:23:37 +0000 (23:23 +0000)]
move concat cert files to /etc/repro
Luca Filipozzi [Mon, 13 Jan 2014 23:14:23 +0000 (23:14 +0000)]
refresh hashes
Luca Filipozzi [Mon, 13 Jan 2014 22:30:12 +0000 (22:30 +0000)]
add sip-ws.debian.org certificate
Stephen Gran [Mon, 13 Jan 2014 21:56:49 +0000 (21:56 +0000)]
go with platform.node()
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 13 Jan 2014 21:48:37 +0000 (21:48 +0000)]
send data over MQ
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Mon, 13 Jan 2014 11:18:33 +0000 (12:18 +0100)]
Update (c) comment
Peter Palfrader [Mon, 13 Jan 2014 10:11:02 +0000 (11:11 +0100)]
fix bugs sert chain
Stephen Gran [Sun, 12 Jan 2014 20:29:30 +0000 (20:29 +0000)]
mark as from extra repo
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 20:27:25 +0000 (20:27 +0000)]
actually add script ...
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 20:26:09 +0000 (20:26 +0000)]
except with correct path, take 2
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 20:25:24 +0000 (20:25 +0000)]
except with correct path
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 20:24:35 +0000 (20:24 +0000)]
try to run apt-get update on repo change
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 20:17:59 +0000 (20:17 +0000)]
duplicate
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 20:13:51 +0000 (20:13 +0000)]
push out pubsub library
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 18:55:14 +0000 (18:55 +0000)]
use the correct parameter
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 18:52:50 +0000 (18:52 +0000)]
protect the password
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 18:51:33 +0000 (18:51 +0000)]
pubsub client config
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Sun, 12 Jan 2014 18:28:53 +0000 (19:28 +0100)]
Start cleaning out homedirs automatically, as announced
Peter Palfrader [Sun, 12 Jan 2014 18:28:45 +0000 (19:28 +0100)]
Cleanup
Luca Filipozzi [Sun, 12 Jan 2014 11:30:06 +0000 (11:30 +0000)]
Merge branch 'master' of ssh://handel.debian.org/~/dsa-puppet
Luca Filipozzi [Sun, 12 Jan 2014 11:29:49 +0000 (11:29 +0000)]
use require instead
Stephen Gran [Sun, 12 Jan 2014 10:51:38 +0000 (10:51 +0000)]
automatic permissions as well
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 10:49:08 +0000 (10:49 +0000)]
er, this should be a variable
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 10:47:57 +0000 (10:47 +0000)]
create users for debian.org hosts
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 10:45:45 +0000 (10:45 +0000)]
use same secret file
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 10:37:43 +0000 (10:37 +0000)]
update gitignore
Signed-off-by: Stephen Gran <steve@lobefin.net>
Luca Filipozzi [Sun, 12 Jan 2014 10:36:10 +0000 (10:36 +0000)]
try notify
Stephen Gran [Sun, 12 Jan 2014 10:22:40 +0000 (10:22 +0000)]
we manage plugins with puppet
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 12 Jan 2014 10:14:17 +0000 (10:14 +0000)]
Revert "add ssl auth support"
This reverts commit
f419a83c524efb35f70c9e0901a1289f0033b662.
Luca Filipozzi [Sun, 12 Jan 2014 09:50:46 +0000 (09:50 +0000)]
Merge branch 'master' of ssh://handel.debian.org/~/dsa-puppet