Stephen Gran [Sun, 27 Apr 2014 13:58:08 +0000 (14:58 +0100)]
redo blade assignment to multipath configs
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Sun, 27 Apr 2014 12:38:09 +0000 (14:38 +0200)]
No more testing for sparc
Peter Palfrader [Sun, 27 Apr 2014 09:29:00 +0000 (11:29 +0200)]
Remove vieuxtemps
Stephen Gran [Sat, 26 Apr 2014 08:21:51 +0000 (09:21 +0100)]
fix up firewalls for openstack api
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Fri, 25 Apr 2014 20:53:00 +0000 (22:53 +0200)]
No more heavy exim on franck
Peter Palfrader [Fri, 25 Apr 2014 20:52:45 +0000 (22:52 +0200)]
No more release mail on franck
Peter Palfrader [Fri, 25 Apr 2014 20:15:35 +0000 (22:15 +0200)]
Let the mail front ends handle release
Tollef Fog Heen [Thu, 24 Apr 2014 08:37:31 +0000 (10:37 +0200)]
Fix typo
Tollef Fog Heen [Thu, 24 Apr 2014 08:26:56 +0000 (10:26 +0200)]
Use sender_address_domain when checking sender stuff
Make sure to look up data for the sending domain when checking
senders, not receivers.
Tollef Fog Heen [Thu, 24 Apr 2014 08:18:14 +0000 (10:18 +0200)]
Fix $emaildomain/neversenders
Exim's match_local_part does not expand the second argument (unless
compiled with EXPAND_LISTMATCH_RHS), so this could not really have
worked before. We now use an lookup/lsearch instead of
match_local_part.
Martin Zobel-Helas [Wed, 23 Apr 2014 23:12:16 +0000 (01:12 +0200)]
add sudo for cinder
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Wed, 23 Apr 2014 21:34:18 +0000 (23:34 +0200)]
add additional IP
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Wed, 23 Apr 2014 19:31:52 +0000 (21:31 +0200)]
add openstack
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Wed, 23 Apr 2014 17:26:57 +0000 (19:26 +0200)]
unbreak puppet
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Wed, 23 Apr 2014 17:20:47 +0000 (19:20 +0200)]
some more openstack firewall rules
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Peter Palfrader [Wed, 23 Apr 2014 17:13:46 +0000 (19:13 +0200)]
the l10n.d.o mail config is empty. drop
Peter Palfrader [Wed, 23 Apr 2014 17:06:02 +0000 (19:06 +0200)]
group the heavy-exim hosts
Martin Zobel-Helas [Wed, 23 Apr 2014 17:10:40 +0000 (19:10 +0200)]
ignore openvswitch/conf.db
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Peter Palfrader [Wed, 23 Apr 2014 16:59:51 +0000 (18:59 +0200)]
no more heavy exim on ravel
Peter Palfrader [Wed, 23 Apr 2014 16:58:49 +0000 (18:58 +0200)]
no more women on ravel
Peter Palfrader [Wed, 23 Apr 2014 16:55:46 +0000 (18:55 +0200)]
Add women.debian.org
Peter Palfrader [Wed, 23 Apr 2014 16:55:28 +0000 (18:55 +0200)]
run star as nogroup
Peter Palfrader [Wed, 23 Apr 2014 16:50:09 +0000 (18:50 +0200)]
No more mail for @gobby
Peter Palfrader [Wed, 23 Apr 2014 16:32:36 +0000 (18:32 +0200)]
Move debian.STAR mail to front-ends
Peter Palfrader [Wed, 23 Apr 2014 16:19:06 +0000 (18:19 +0200)]
Remove commented-out, old stuff
Peter Palfrader [Wed, 23 Apr 2014 16:16:27 +0000 (18:16 +0200)]
There is no @keyring.debian.org mail
Peter Palfrader [Wed, 23 Apr 2014 16:16:19 +0000 (18:16 +0200)]
Change path from /org/keyring to /srv/keyring
Peter Palfrader [Wed, 23 Apr 2014 16:14:54 +0000 (18:14 +0200)]
There is no tartini.debian.org
Peter Palfrader [Wed, 23 Apr 2014 12:02:34 +0000 (14:02 +0200)]
chopin no longer is part of heavy_exim
Peter Palfrader [Wed, 23 Apr 2014 12:01:58 +0000 (14:01 +0200)]
chopin no longer is responsible for security.debian.org mail
Peter Palfrader [Wed, 23 Apr 2014 07:47:32 +0000 (09:47 +0200)]
Add security.d.o virtual domain to front ends
Luca Filipozzi [Wed, 23 Apr 2014 07:02:29 +0000 (07:02 +0000)]
removed eff.org from blacklist
Martin Zobel-Helas [Tue, 22 Apr 2014 21:23:30 +0000 (23:23 +0200)]
oyens was missing in hieradata
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Tue, 22 Apr 2014 21:18:30 +0000 (23:18 +0200)]
add role keystone
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Tue, 22 Apr 2014 20:34:52 +0000 (22:34 +0200)]
add openstack.bm.debian.org (DEBIAN-CA) certificate
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Peter Palfrader [Tue, 22 Apr 2014 17:18:49 +0000 (19:18 +0200)]
Sanitize mailrelay virtualdomain paths
Peter Palfrader [Tue, 22 Apr 2014 12:44:42 +0000 (14:44 +0200)]
Try messing with signing options
Peter Palfrader [Mon, 21 Apr 2014 17:39:36 +0000 (19:39 +0200)]
move quantz
Peter Palfrader [Mon, 21 Apr 2014 17:36:15 +0000 (19:36 +0200)]
quantz gets the autofs::bytemark treatment
Peter Palfrader [Mon, 21 Apr 2014 17:21:55 +0000 (19:21 +0200)]
give wuiet and quantz access to the main cluster on bmdb1
Stephen Gran [Mon, 21 Apr 2014 16:47:21 +0000 (17:47 +0100)]
add neutron range
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Mon, 21 Apr 2014 10:46:03 +0000 (12:46 +0200)]
add an NFS mirror to delfin
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Peter Palfrader [Mon, 21 Apr 2014 07:27:26 +0000 (09:27 +0200)]
quantz devices
Martin Zobel-Helas [Sat, 19 Apr 2014 07:41:53 +0000 (09:41 +0200)]
ups, Host_Alias should be defined too
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Sat, 19 Apr 2014 07:39:46 +0000 (09:39 +0200)]
add OpenStack sudo entries
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Fri, 18 Apr 2014 18:33:34 +0000 (20:33 +0200)]
open firewall ports on oyens
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Fri, 18 Apr 2014 14:34:43 +0000 (16:34 +0200)]
allow 5672
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Fri, 18 Apr 2014 07:08:57 +0000 (09:08 +0200)]
no ganeti for bm-bl9 to bm-bl14
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Peter Palfrader [Thu, 17 Apr 2014 17:15:56 +0000 (19:15 +0200)]
Barriere volumes
Martin Zobel-Helas [Wed, 16 Apr 2014 22:12:23 +0000 (00:12 +0200)]
add oyens
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Wed, 16 Apr 2014 21:17:16 +0000 (23:17 +0200)]
add oyens
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Wed, 16 Apr 2014 20:07:27 +0000 (22:07 +0200)]
add oyens
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Peter Palfrader [Mon, 14 Apr 2014 19:42:21 +0000 (21:42 +0200)]
add comment
Peter Palfrader [Mon, 14 Apr 2014 18:03:30 +0000 (20:03 +0200)]
Set a saner max-journal-size than unlimited
Peter Palfrader [Sun, 13 Apr 2014 15:33:07 +0000 (17:33 +0200)]
remove ftp-debian.org virtual mail domain from franck
Peter Palfrader [Sun, 13 Apr 2014 12:06:57 +0000 (14:06 +0200)]
Add ftp-debian.org virtual domain on the mail relays
Peter Palfrader [Sun, 13 Apr 2014 08:37:03 +0000 (10:37 +0200)]
more stupid rails ignores
Tollef Fog Heen [Fri, 11 Apr 2014 20:04:53 +0000 (22:04 +0200)]
Add eff.org to blacklist, they are not doing double opt-in and fail to respond to questions about spam
Peter Palfrader [Fri, 11 Apr 2014 06:23:31 +0000 (08:23 +0200)]
blacklist 216.158.85.34 for sending us training spam
Peter Palfrader [Thu, 10 Apr 2014 07:28:13 +0000 (07:28 +0000)]
activate all new certs
Peter Palfrader [Wed, 9 Apr 2014 19:57:01 +0000 (21:57 +0200)]
Add a couple -new certs
Peter Palfrader [Wed, 9 Apr 2014 18:24:22 +0000 (20:24 +0200)]
Add -new bugs-master cert
Peter Palfrader [Wed, 9 Apr 2014 16:31:23 +0000 (18:31 +0200)]
activate two certs
Peter Palfrader [Wed, 9 Apr 2014 15:40:15 +0000 (17:40 +0200)]
fix yaml entry
Peter Palfrader [Wed, 9 Apr 2014 15:30:18 +0000 (17:30 +0200)]
Deploy gobby cert to gombert
Peter Palfrader [Wed, 9 Apr 2014 15:19:18 +0000 (17:19 +0200)]
Add new certs chained off ca.d.o
Peter Palfrader [Wed, 9 Apr 2014 11:22:53 +0000 (13:22 +0200)]
Print clearer problem report if setup-dchroot fails
Peter Palfrader [Tue, 8 Apr 2014 17:16:19 +0000 (19:16 +0200)]
The dns update script is named differently
Peter Palfrader [Tue, 8 Apr 2014 17:15:49 +0000 (19:15 +0200)]
allow nagios hpacucli to check LDs
Peter Palfrader [Tue, 8 Apr 2014 13:37:49 +0000 (15:37 +0200)]
Try to remove /etc/apt/trusted-keys.d harder, II
Peter Palfrader [Tue, 8 Apr 2014 13:37:04 +0000 (15:37 +0200)]
Try to remove /etc/apt/trusted-keys.d harder
Peter Palfrader [Tue, 8 Apr 2014 13:33:24 +0000 (15:33 +0200)]
and dearmor buildd.d.o gpgkey
Peter Palfrader [Tue, 8 Apr 2014 13:33:06 +0000 (15:33 +0200)]
fix filename
Peter Palfrader [Tue, 8 Apr 2014 13:30:37 +0000 (15:30 +0200)]
Update db.d.o key
Peter Palfrader [Tue, 8 Apr 2014 13:27:55 +0000 (15:27 +0200)]
get rid of duplicate
Peter Palfrader [Tue, 8 Apr 2014 13:27:06 +0000 (15:27 +0200)]
syntax I
Peter Palfrader [Tue, 8 Apr 2014 13:26:37 +0000 (15:26 +0200)]
Switch to /etc/apt/trusted.gpg.d
Peter Palfrader [Tue, 8 Apr 2014 12:02:06 +0000 (14:02 +0200)]
stunnel: Set socket option linger for accept sockets
Peter Palfrader [Tue, 8 Apr 2014 10:06:36 +0000 (12:06 +0200)]
ekeyd: Raise retry time
Peter Palfrader [Tue, 8 Apr 2014 09:17:04 +0000 (11:17 +0200)]
Raise ulimit -n for stunnel
Héctor Orón Martínez [Thu, 3 Apr 2014 14:34:02 +0000 (16:34 +0200)]
Remove decomissioned arm* references
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Peter Palfrader [Mon, 31 Mar 2014 18:10:03 +0000 (20:10 +0200)]
Set up armhf porting chroots on armel hosts
Stephen Gran [Mon, 31 Mar 2014 07:10:58 +0000 (08:10 +0100)]
add client configs for mail relay
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 31 Mar 2014 07:05:18 +0000 (08:05 +0100)]
introduce pubsub config for git master
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Fri, 28 Mar 2014 17:50:22 +0000 (18:50 +0100)]
Fix: Add security-team-backend
Peter Palfrader [Fri, 28 Mar 2014 17:44:08 +0000 (18:44 +0100)]
Add security-team-backend
Peter Palfrader [Fri, 28 Mar 2014 17:37:03 +0000 (18:37 +0100)]
Fix security-team entry
Peter Palfrader [Fri, 28 Mar 2014 17:31:45 +0000 (18:31 +0100)]
%security gets to update their static component
Peter Palfrader [Fri, 28 Mar 2014 17:31:12 +0000 (18:31 +0100)]
Add security-team vhost
Peter Palfrader [Fri, 28 Mar 2014 17:30:25 +0000 (18:30 +0100)]
Add security-team static component
Peter Palfrader [Fri, 28 Mar 2014 17:30:08 +0000 (18:30 +0100)]
Whitespace changes
Peter Palfrader [Fri, 28 Mar 2014 17:28:04 +0000 (18:28 +0100)]
Sort static components
Peter Palfrader [Fri, 28 Mar 2014 17:26:08 +0000 (18:26 +0100)]
Give %security sudo to security
Peter Palfrader [Thu, 27 Mar 2014 07:12:46 +0000 (08:12 +0100)]
try this
Peter Palfrader [Thu, 27 Mar 2014 07:10:25 +0000 (08:10 +0100)]
no hp-health on DL1xx
Peter Palfrader [Thu, 27 Mar 2014 07:04:41 +0000 (08:04 +0100)]
Fix url
Peter Palfrader [Thu, 27 Mar 2014 06:58:08 +0000 (07:58 +0100)]
Add leaseweb mirror
Peter Palfrader [Thu, 27 Mar 2014 06:53:09 +0000 (07:53 +0100)]
Set leaseweb netrange
Peter Palfrader [Wed, 26 Mar 2014 20:30:09 +0000 (21:30 +0100)]
Add leaseweb nameservers
Peter Palfrader [Wed, 26 Mar 2014 12:47:33 +0000 (13:47 +0100)]
Add puppet-dashboard ssl::service to puppetmaster