Stephen Gran [Wed, 24 Mar 2010 20:16:27 +0000 (20:16 +0000)]
allow zivit to monitor their machines
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Tue, 23 Mar 2010 12:21:56 +0000 (13:21 +0100)]
corelli logs to paganini
Peter Palfrader [Tue, 23 Mar 2010 12:20:05 +0000 (13:20 +0100)]
udp logging to paganini
Peter Palfrader [Tue, 23 Mar 2010 12:19:55 +0000 (13:19 +0100)]
puppet header for syslog-ng.conf
Peter Palfrader [Mon, 22 Mar 2010 11:15:05 +0000 (12:15 +0100)]
Allow 82.195.75.84 on schroeder - this will not scale for long
Peter Palfrader [Sun, 21 Mar 2010 09:57:19 +0000 (10:57 +0100)]
That would have been too easy
Peter Palfrader [Sun, 21 Mar 2010 09:53:58 +0000 (10:53 +0100)]
Try a new modules/ferm/templates/me.conf.erb
Martin Zobel-Helas [Sun, 21 Mar 2010 12:33:09 +0000 (13:33 +0100)]
Merge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Martin Zobel-Helas [Sun, 21 Mar 2010 12:32:40 +0000 (13:32 +0100)]
add corelli, fix date at gabrielli
Stephen Gran [Sun, 21 Mar 2010 09:35:23 +0000 (09:35 +0000)]
restrict schroeder ssh, now with syntax
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 21 Mar 2010 09:30:04 +0000 (09:30 +0000)]
restrict schroeder ssh
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Sat, 20 Mar 2010 23:42:15 +0000 (00:42 +0100)]
Remove schroeder's motd notice about /etc/rc.boot/firewall{,6}
Peter Palfrader [Sat, 20 Mar 2010 23:26:17 +0000 (00:26 +0100)]
And once more
Peter Palfrader [Sat, 20 Mar 2010 23:25:23 +0000 (00:25 +0100)]
Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet
* 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet:
add gabrielli.debian.org
add apt-in-chroot to allowed sudo commands
add missing archs
make porter stuff a bit nicer
play with porter commands
Peter Palfrader [Sat, 20 Mar 2010 23:25:18 +0000 (00:25 +0100)]
I wonder if that makes puppet work
Martin Zobel-Helas [Sat, 20 Mar 2010 17:53:07 +0000 (18:53 +0100)]
add gabrielli.debian.org
Martin Zobel-Helas [Thu, 18 Mar 2010 21:39:22 +0000 (22:39 +0100)]
add apt-in-chroot to allowed sudo commands
Martin Zobel-Helas [Thu, 18 Mar 2010 18:35:57 +0000 (19:35 +0100)]
add missing archs
Martin Zobel-Helas [Thu, 18 Mar 2010 16:29:47 +0000 (17:29 +0100)]
make porter stuff a bit nicer
Martin Zobel-Helas [Thu, 18 Mar 2010 15:48:45 +0000 (16:48 +0100)]
play with porter commands
Peter Palfrader [Thu, 18 Mar 2010 13:53:00 +0000 (14:53 +0100)]
%debian-cd gets sudo to debian-cd
Peter Palfrader [Thu, 18 Mar 2010 13:09:19 +0000 (14:09 +0100)]
Move logrotate dependency from apache to debian-org
Peter Palfrader [Thu, 18 Mar 2010 12:59:20 +0000 (13:59 +0100)]
puppet does not like requiring the same package twice, apparently
Peter Palfrader [Thu, 18 Mar 2010 12:58:16 +0000 (13:58 +0100)]
ulogd logs: Rotate daily, compress them (delayed), and keep 10, but do not rotate empty files
Peter Palfrader [Thu, 18 Mar 2010 12:56:08 +0000 (13:56 +0100)]
puppet header
Peter Palfrader [Thu, 18 Mar 2010 12:55:49 +0000 (13:55 +0100)]
Add logrotate.d/ulogd
Stephen Gran [Thu, 18 Mar 2010 12:06:24 +0000 (12:06 +0000)]
add nixon key for pettersson
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 16 Mar 2010 23:48:14 +0000 (23:48 +0000)]
stupid net-lsearch type
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Tue, 16 Mar 2010 11:46:54 +0000 (12:46 +0100)]
Merge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Martin Zobel-Helas [Tue, 16 Mar 2010 11:46:23 +0000 (12:46 +0100)]
disable dns_ipv4_lookup upon sgrans request
Stephen Gran [Mon, 15 Mar 2010 13:12:04 +0000 (13:12 +0000)]
allow local_part_suffixes in procmail router
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 8 Mar 2010 23:54:50 +0000 (23:54 +0000)]
enable the nf_ftp_conntrack hook
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 8 Mar 2010 17:59:51 +0000 (17:59 +0000)]
stop serving a broken file for now
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 8 Mar 2010 17:55:49 +0000 (17:55 +0000)]
and let's try pointing at the right file
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 8 Mar 2010 17:53:35 +0000 (17:53 +0000)]
and the inevitable syntax error
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 8 Mar 2010 17:52:03 +0000 (17:52 +0000)]
a stab at auto loading conntrack modules
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Mon, 8 Mar 2010 13:34:57 +0000 (14:34 +0100)]
Revert "lets load nf_conntrack_ftp on buildds"
This reverts commit
1689c9c9a7ca632ec433fd952ce19b9bd254a3bb.
Martin Zobel-Helas [Mon, 8 Mar 2010 13:32:21 +0000 (14:32 +0100)]
lets load nf_conntrack_ftp on buildds
Stephen Gran [Mon, 8 Mar 2010 00:07:08 +0000 (00:07 +0000)]
add ferm to tchaikovsky
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 8 Mar 2010 00:01:43 +0000 (00:01 +0000)]
restrict ssh to tchaikovsky
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 23:35:26 +0000 (23:35 +0000)]
v6 rule is v6
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 23:28:25 +0000 (23:28 +0000)]
handel gets a firewall
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 23:21:49 +0000 (23:21 +0000)]
try not to double include rietz when we do puppetize it
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 22:44:38 +0000 (22:44 +0000)]
add rietz back into munin
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 21:59:00 +0000 (21:59 +0000)]
match subnets that might exist
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 21:38:56 +0000 (21:38 +0000)]
add https ferm rule to apache class for now
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 20:52:24 +0000 (20:52 +0000)]
munin must run ip6 plugin as root as well
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 20:40:54 +0000 (20:40 +0000)]
make v6ips fail more gracefully
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 20:36:01 +0000 (20:36 +0000)]
get package name right
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 20:34:19 +0000 (20:34 +0000)]
reshuffle where template is served from
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 20:29:38 +0000 (20:29 +0000)]
bandwidth graphs for v6
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 20:28:18 +0000 (20:28 +0000)]
alphabetize
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 20:25:03 +0000 (20:25 +0000)]
some whitespace cleanup and move template to base class
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 20:24:16 +0000 (20:24 +0000)]
handle lack of v6 addresses nicely
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 15:30:45 +0000 (15:30 +0000)]
some more no_munin hosts
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 13:00:11 +0000 (13:00 +0000)]
more whitespace
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 12:36:47 +0000 (12:36 +0000)]
whitespace nazi
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 11:57:04 +0000 (11:57 +0000)]
get rid of way too many munin subclasses
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 11:23:26 +0000 (11:23 +0000)]
confine ip addr fact to linux
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 10:57:39 +0000 (10:57 +0000)]
yes, picky pain
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 10:56:52 +0000 (10:56 +0000)]
since we log to ulog, we should probably install it
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 10:43:29 +0000 (10:43 +0000)]
erm, time is tcp, ntp is udp
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 10:41:25 +0000 (10:41 +0000)]
sigh
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 10:39:19 +0000 (10:39 +0000)]
picky picky
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 10:37:41 +0000 (10:37 +0000)]
allow time for ancina and zelenka
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 09:39:57 +0000 (09:39 +0000)]
some more ferm fixups
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 09:25:30 +0000 (09:25 +0000)]
Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet
Stephen Gran [Sun, 7 Mar 2010 09:25:20 +0000 (09:25 +0000)]
buildd get minimal firewalls
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Sun, 7 Mar 2010 09:22:42 +0000 (10:22 +0100)]
Merge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Martin Zobel-Helas [Sun, 7 Mar 2010 09:20:19 +0000 (10:20 +0100)]
lets try the first buildd: ball
Stephen Gran [Sun, 7 Mar 2010 09:00:53 +0000 (09:00 +0000)]
this should be cool
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 08:35:56 +0000 (08:35 +0000)]
Revert "we want counters"
This reverts commit
f2f9d3efab7262bbdfb4e51feebfa6bd8aebc9a8.
Stephen Gran [Sun, 7 Mar 2010 08:32:59 +0000 (08:32 +0000)]
get the ferm variable right
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 08:31:55 +0000 (08:31 +0000)]
and add a nop rule for munin
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 7 Mar 2010 08:23:48 +0000 (08:23 +0000)]
Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet
Stephen Gran [Sun, 7 Mar 2010 08:23:42 +0000 (08:23 +0000)]
new ipaddress fact
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Sun, 7 Mar 2010 07:15:52 +0000 (08:15 +0100)]
steffani being a recursor
Martin Zobel-Helas [Sat, 6 Mar 2010 21:49:04 +0000 (22:49 +0100)]
add steffani to ferm
Martin Zobel-Helas [Sat, 6 Mar 2010 21:24:28 +0000 (22:24 +0100)]
add wieck to ferm
Martin Zobel-Helas [Sat, 6 Mar 2010 20:36:15 +0000 (21:36 +0100)]
schein runs a local dns
Martin Zobel-Helas [Sat, 6 Mar 2010 20:30:01 +0000 (21:30 +0100)]
add schein
Martin Zobel-Helas [Sat, 6 Mar 2010 20:15:43 +0000 (21:15 +0100)]
add raff+gluck to ferm
Martin Zobel-Helas [Sat, 6 Mar 2010 19:27:54 +0000 (20:27 +0100)]
add lobos to ferm
Martin Zobel-Helas [Sat, 6 Mar 2010 19:24:09 +0000 (20:24 +0100)]
add villa to ferm
Martin Zobel-Helas [Sat, 6 Mar 2010 18:30:55 +0000 (19:30 +0100)]
remove obsolete modules
Martin Zobel-Helas [Sat, 6 Mar 2010 18:30:41 +0000 (19:30 +0100)]
we want counters
Martin Zobel-Helas [Sat, 6 Mar 2010 18:14:34 +0000 (19:14 +0100)]
ah, : missing
Martin Zobel-Helas [Sat, 6 Mar 2010 18:10:37 +0000 (19:10 +0100)]
typo?
Martin Zobel-Helas [Sat, 6 Mar 2010 18:04:50 +0000 (19:04 +0100)]
saens alone
Martin Zobel-Helas [Sat, 6 Mar 2010 18:02:15 +0000 (19:02 +0100)]
move ftp and rsync to site.pp
Martin Zobel-Helas [Sat, 6 Mar 2010 17:41:50 +0000 (18:41 +0100)]
add module ftp
Martin Zobel-Helas [Sat, 6 Mar 2010 17:38:29 +0000 (18:38 +0100)]
weasel is always right
Martin Zobel-Helas [Sat, 6 Mar 2010 17:36:57 +0000 (18:36 +0100)]
Merge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Conflicts:
manifests/site.pp
Martin Zobel-Helas [Sat, 6 Mar 2010 17:30:55 +0000 (18:30 +0100)]
start ferm'ing security mirrors
Stephen Gran [Sat, 6 Mar 2010 15:33:07 +0000 (15:33 +0000)]
see if global_variables works
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 6 Mar 2010 15:31:59 +0000 (15:31 +0000)]
and not cause a syntax error
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 6 Mar 2010 15:31:14 +0000 (15:31 +0000)]
and actually ship it
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 6 Mar 2010 15:29:49 +0000 (15:29 +0000)]
add first stab at interfaces
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 6 Mar 2010 13:37:07 +0000 (13:37 +0000)]
try in place array, but with bonus for syntactic correctness
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 6 Mar 2010 13:36:00 +0000 (13:36 +0000)]
try in place array
Signed-off-by: Stephen Gran <steve@lobefin.net>
projects / mirror / dsa-puppet.git / log