Stephen Gran [Sun, 25 Jul 2010 22:38:16 +0000 (23:38 +0100)]
ravel gets ferm
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 22:34:29 +0000 (23:34 +0100)]
Merge branch 'master' of ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Stephen Gran [Sun, 25 Jul 2010 22:33:39 +0000 (23:33 +0100)]
add ferm::nfs-server module
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Sun, 25 Jul 2010 22:13:02 +0000 (00:13 +0200)]
Merge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Martin Zobel-Helas [Sun, 25 Jul 2010 22:12:28 +0000 (00:12 +0200)]
make spohr recursor
Stephen Gran [Sun, 25 Jul 2010 22:07:04 +0000 (23:07 +0100)]
alphabetize
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Sun, 25 Jul 2010 22:03:32 +0000 (00:03 +0200)]
add chopin back
Martin Zobel-Helas [Sun, 25 Jul 2010 21:58:12 +0000 (23:58 +0200)]
draghi does ldap and ldaps
Martin Zobel-Helas [Sun, 25 Jul 2010 21:47:41 +0000 (23:47 +0200)]
remove chopin
Martin Zobel-Helas [Sun, 25 Jul 2010 21:37:38 +0000 (23:37 +0200)]
add dns and finger rules for draghi
Martin Zobel-Helas [Sun, 25 Jul 2010 21:29:19 +0000 (23:29 +0200)]
spohr without firewall for now!
Martin Zobel-Helas [Sun, 25 Jul 2010 21:17:26 +0000 (23:17 +0200)]
chopin does ftp
Stephen Gran [Sun, 25 Jul 2010 20:18:13 +0000 (21:18 +0100)]
nor these two
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 20:15:10 +0000 (21:15 +0100)]
nor paganini
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 20:12:55 +0000 (21:12 +0100)]
ravel not ready yet
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 20:02:24 +0000 (21:02 +0100)]
and use new module layout
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 19:59:50 +0000 (20:59 +0100)]
try to start breaking up firewall rules into something not quite as messy
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 19:36:06 +0000 (20:36 +0100)]
bellini has ferm
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 19:30:02 +0000 (20:30 +0100)]
petterson has ferm
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Sun, 25 Jul 2010 19:27:32 +0000 (21:27 +0200)]
Merge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Martin Zobel-Helas [Sun, 25 Jul 2010 19:26:05 +0000 (21:26 +0200)]
add master
Stephen Gran [Sun, 25 Jul 2010 19:25:21 +0000 (20:25 +0100)]
cimarosa has ferm
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 19:23:41 +0000 (20:23 +0100)]
no longer need to double include ferm
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 19:22:24 +0000 (20:22 +0100)]
Make ferm list exclusive rather than inclusive
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Sun, 25 Jul 2010 18:30:46 +0000 (20:30 +0200)]
Merge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Martin Zobel-Helas [Sun, 25 Jul 2010 18:30:38 +0000 (20:30 +0200)]
add master
Stephen Gran [Sun, 25 Jul 2010 18:01:54 +0000 (19:01 +0100)]
well, of course - that's an obvious syntactic difference that makes no difference whatsoever in irb. Thanks, ruby
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 17:55:07 +0000 (18:55 +0100)]
cast to string
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 17:00:05 +0000 (18:00 +0100)]
s/DROP/ACCEPT/
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 16:40:00 +0000 (17:40 +0100)]
add smarthosts
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 16:39:06 +0000 (17:39 +0100)]
sort list
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 16:38:45 +0000 (17:38 +0100)]
add to buildd
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 16:37:55 +0000 (17:37 +0100)]
dedications
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 25 Jul 2010 16:21:49 +0000 (17:21 +0100)]
guard against empty syslog version for new installs
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Sun, 25 Jul 2010 16:01:38 +0000 (18:01 +0200)]
add liszt
Martin Zobel-Helas [Sun, 25 Jul 2010 15:53:43 +0000 (17:53 +0200)]
yes, liszt might want to speak smtp
Martin Zobel-Helas [Sun, 25 Jul 2010 15:36:20 +0000 (17:36 +0200)]
add liszt
Martin Zobel-Helas [Sun, 25 Jul 2010 15:20:08 +0000 (17:20 +0200)]
add klecker
Martin Zobel-Helas [Sun, 25 Jul 2010 14:38:09 +0000 (16:38 +0200)]
be a bad zobel
Martin Zobel-Helas [Sun, 25 Jul 2010 14:28:34 +0000 (16:28 +0200)]
ries runs dns recursor
Martin Zobel-Helas [Sun, 25 Jul 2010 14:25:44 +0000 (16:25 +0200)]
add unger
Martin Zobel-Helas [Sun, 25 Jul 2010 14:23:27 +0000 (16:23 +0200)]
add rietz
Martin Zobel-Helas [Sun, 25 Jul 2010 14:19:40 +0000 (16:19 +0200)]
add ries
Martin Zobel-Helas [Sun, 25 Jul 2010 14:03:25 +0000 (16:03 +0200)]
add busoni
Martin Zobel-Helas [Sun, 25 Jul 2010 13:57:15 +0000 (15:57 +0200)]
add grieg
Martin Zobel-Helas [Sun, 25 Jul 2010 13:18:55 +0000 (15:18 +0200)]
add englund
Martin Zobel-Helas [Sun, 25 Jul 2010 12:55:43 +0000 (14:55 +0200)]
Revert "add cilea"
This reverts commit
2a3c519f08fd98199d230a7619943851cc990878.
Martin Zobel-Helas [Sun, 25 Jul 2010 12:55:36 +0000 (14:55 +0200)]
Revert "add pre-hook for cilea to load nf_conntrack_sip and nf_conntrack_h323"
This reverts commit
3ecf7721c32e4e34ee964ec57ac581ae44aca8ba.
Martin Zobel-Helas [Sun, 25 Jul 2010 12:55:25 +0000 (14:55 +0200)]
Revert "older ferm syntax"
This reverts commit
4fea88ca758ac7f9a4a1a6909040403245004727.
Martin Zobel-Helas [Sun, 25 Jul 2010 12:54:04 +0000 (14:54 +0200)]
older ferm syntax
Martin Zobel-Helas [Sun, 25 Jul 2010 12:47:49 +0000 (14:47 +0200)]
add pre-hook for cilea to load nf_conntrack_sip and nf_conntrack_h323
Martin Zobel-Helas [Sun, 25 Jul 2010 12:25:16 +0000 (14:25 +0200)]
add cilea
Martin Zobel-Helas [Sun, 25 Jul 2010 12:07:15 +0000 (14:07 +0200)]
add krenek
Martin Zobel-Helas [Sun, 25 Jul 2010 11:51:15 +0000 (13:51 +0200)]
add valente
Martin Zobel-Helas [Sun, 25 Jul 2010 11:50:36 +0000 (13:50 +0200)]
add valente
Martin Zobel-Helas [Sun, 25 Jul 2010 11:44:30 +0000 (13:44 +0200)]
add morricone
Martin Zobel-Helas [Sun, 25 Jul 2010 11:36:41 +0000 (13:36 +0200)]
add respighi
Martin Zobel-Helas [Sun, 25 Jul 2010 11:15:27 +0000 (13:15 +0200)]
add scelsi
Martin Zobel-Helas [Sun, 25 Jul 2010 11:12:32 +0000 (13:12 +0200)]
add vitry
Martin Zobel-Helas [Sun, 25 Jul 2010 11:09:04 +0000 (13:09 +0200)]
add vivaldi
Martin Zobel-Helas [Sun, 25 Jul 2010 11:04:01 +0000 (13:04 +0200)]
add wolkenstein
Martin Zobel-Helas [Sun, 25 Jul 2010 11:01:22 +0000 (13:01 +0200)]
add lindberg
Martin Zobel-Helas [Sun, 25 Jul 2010 10:55:28 +0000 (12:55 +0200)]
add soler
Martin Zobel-Helas [Sun, 25 Jul 2010 10:51:36 +0000 (12:51 +0200)]
add duarte
Martin Zobel-Helas [Sun, 25 Jul 2010 09:15:19 +0000 (11:15 +0200)]
add orff
Martin Zobel-Helas [Sun, 25 Jul 2010 08:34:36 +0000 (10:34 +0200)]
add more porterboxes
Martin Zobel-Helas [Sun, 25 Jul 2010 05:46:43 +0000 (07:46 +0200)]
fix type, need coffee
Martin Zobel-Helas [Sun, 25 Jul 2010 05:43:42 +0000 (07:43 +0200)]
add zee,zelenka
Martin Zobel-Helas [Sat, 24 Jul 2010 22:13:40 +0000 (00:13 +0200)]
add albeniz gabrielli
Martin Zobel-Helas [Sat, 24 Jul 2010 22:05:50 +0000 (00:05 +0200)]
add agricola
Stephen Gran [Wed, 21 Jul 2010 21:43:01 +0000 (22:43 +0100)]
make sure dsa gets a login too
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 21 Jul 2010 21:12:24 +0000 (22:12 +0100)]
lebrun gets restricted carnet/kibi only rules
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 21 Jul 2010 20:47:47 +0000 (21:47 +0100)]
kibi can get to schroeder
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 14 Jul 2010 01:07:11 +0000 (02:07 +0100)]
ah, I want the regex form
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 14 Jul 2010 01:05:30 +0000 (02:05 +0100)]
update cilea freeswitch ignore
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 14 Jul 2010 01:01:29 +0000 (02:01 +0100)]
group debvoip can sudo to freeswitch on cilea
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Thu, 8 Jul 2010 20:39:44 +0000 (20:39 +0000)]
restrict ssh to handel
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Sun, 4 Jul 2010 19:23:55 +0000 (21:23 +0200)]
and remove obsolete list from ries
Peter Palfrader [Sun, 4 Jul 2010 19:21:03 +0000 (21:21 +0200)]
Update ignore list for packages check on franck
Stephen Gran [Sun, 4 Jul 2010 12:44:11 +0000 (12:44 +0000)]
some more machine that we don't want to munin check
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 3 Jul 2010 16:11:11 +0000 (16:11 +0000)]
I don't think that did what I meant
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 3 Jul 2010 16:08:27 +0000 (16:08 +0000)]
franck gets extra arguments
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 3 Jul 2010 15:41:22 +0000 (15:41 +0000)]
and one more try - franck has too many disks
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 3 Jul 2010 15:37:09 +0000 (15:37 +0000)]
try to actually match what needs scanning
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 3 Jul 2010 15:34:54 +0000 (15:34 +0000)]
franck has slot=1
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 3 Jul 2010 15:00:45 +0000 (15:00 +0000)]
typo
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 3 Jul 2010 14:58:42 +0000 (14:58 +0000)]
franck runs bind
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 3 Jul 2010 14:01:52 +0000 (14:01 +0000)]
can haz root ssh key, please
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 3 Jul 2010 13:12:24 +0000 (13:12 +0000)]
some more firewall rules for franck, redux
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 3 Jul 2010 13:11:56 +0000 (13:11 +0000)]
some more firewall rules for franck
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 3 Jul 2010 12:41:40 +0000 (12:41 +0000)]
franck has a different path than ries
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 3 Jul 2010 12:13:17 +0000 (12:13 +0000)]
some more ries -> franck work
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Sun, 27 Jun 2010 14:35:00 +0000 (16:35 +0200)]
Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet
* 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet:
s/ries/FTPHOSTS/
Peter Palfrader [Sun, 27 Jun 2010 14:34:35 +0000 (16:34 +0200)]
Stop service security.geo.debian.org - it is broken
Stephen Gran [Sun, 27 Jun 2010 08:55:37 +0000 (08:55 +0000)]
s/ries/FTPHOSTS/
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Sat, 26 Jun 2010 19:12:25 +0000 (21:12 +0200)]
Run geodns sync at boot so we have the latest zonefiles
Peter Palfrader [Sat, 26 Jun 2010 19:09:39 +0000 (21:09 +0200)]
puppet comment to bind/geo/trigger script
Peter Palfrader [Sat, 26 Jun 2010 09:27:07 +0000 (11:27 +0200)]
set -e in trigger script
Peter Palfrader [Sat, 26 Jun 2010 08:56:26 +0000 (10:56 +0200)]
move geozones to new location
Peter Palfrader [Sat, 26 Jun 2010 08:46:59 +0000 (10:46 +0200)]
Switch geo configuration distribution from push to trigger/pull