projects
/
mirror
/
dsa-puppet.git
/ search
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
first
⋅
prev
⋅
next
Comment out rate-limiting of https traffic on security-tracker
2017-11-20
Julien Cristau
remove ticharich from experimental_apache group
commit
|
commitdiff
|
tree
2017-11-19
Julien Cristau
Reduce WAL retention from 21 to 14 days for bmdb1/debsources
commit
|
commitdiff
|
tree
2017-11-10
Julien Cristau
Distinguish ssl/nossl access logs for planet-backend
commit
|
commitdiff
|
tree
2017-11-10
Julien Cristau
Revert "install newer version of devscripts"
commit
|
commitdiff
|
tree
2017-11-10
Julien Cristau
Fix planet-backend.d.o
commit
|
commitdiff
|
tree
2017-11-10
Julien Cristau
add ssl vhost for planet-backend
commit
|
commitdiff
|
tree
2017-11-10
Julien Cristau
Fix http://www.debian.org
commit
|
commitdiff
|
tree
2017-11-08
Julien Cristau
picconi and pkgmirror-csail are on stretch, remove...
commit
|
commitdiff
|
tree
2017-11-06
Julien Cristau
Fixup sources.d.o config
commit
|
commitdiff
|
tree
2017-11-03
Julien Cristau
Rotate fastly syslogs
commit
|
commitdiff
|
tree
2017-11-01
Julien Cristau
seger's dak db is on postgresql 9.6
commit
|
commitdiff
|
tree
2017-11-01
Julien Cristau
Disable ftp:// on security-master
commit
|
commitdiff
|
tree
2017-11-01
Julien Cristau
Turn off ftp:// on ftp.debian.org
commit
|
commitdiff
|
tree
2017-11-01
Julien Cristau
Turn off ftp:// on security mirrors
commit
|
commitdiff
|
tree
2017-11-01
Julien Cristau
Add debsources role for sources.d.o
commit
|
commitdiff
|
tree
2017-10-30
Julien Cristau
Disable OCSP stapling on the default vhost
commit
|
commitdiff
|
tree
2017-10-29
Julien Cristau
Further restrict access to cgi-bin on http://popcon.d.o
commit
|
commitdiff
|
tree
2017-10-29
Julien Cristau
Remove unneeded bits from the http popcon vhost, and...
commit
|
commitdiff
|
tree
2017-10-29
Julien Cristau
Import popcon.d.o apache vhost config
commit
|
commitdiff
|
tree
2017-10-29
Julien Cristau
Add ssl key/cert for popcon
commit
|
commitdiff
|
tree
2017-10-20
Julien Cristau
Cleanup experimental_apache role
commit
|
commitdiff
|
tree
2017-10-18
Julien Cristau
Add mail filters for some aliases (rt#6227)
commit
|
commitdiff
|
tree
2017-10-15
Julien Cristau
bmdb1 main cluster is back on timeline 1
commit
|
commitdiff
|
tree
2017-10-03
Julien Cristau
Have gobby reload its config when we change its ssl...
commit
|
commitdiff
|
tree
2017-10-03
Julien Cristau
Add syncproxy addresses to ssh whitelist
commit
|
commitdiff
|
tree
2017-10-03
Julien Cristau
Add tls key for gobby server
commit
|
commitdiff
|
tree
2017-10-03
Julien Cristau
Use restrict authorized_keys option for geodns
commit
|
commitdiff
|
tree
2017-10-03
Julien Cristau
Restrict ssh to mirrors
commit
|
commitdiff
|
tree
2017-10-03
Julien Cristau
Fix ssl key template
commit
|
commitdiff
|
tree
2017-10-02
Julien Cristau
bmdb1/main on postgresql 9.6
commit
|
commitdiff
|
tree
2017-10-02
Julien Cristau
don't spawn a shell in create-onionbalance-config
commit
|
commitdiff
|
tree
2017-10-02
Julien Cristau
Make sure onionbalance private keys are group-readable
commit
|
commitdiff
|
tree
2017-10-01
Julien Cristau
bmdb1's debsources cluster is on 9.6
commit
|
commitdiff
|
tree
2017-10-01
Julien Cristau
Add debconf17.dc.o static component
commit
|
commitdiff
|
tree
2017-10-01
Julien Cristau
stop hardcoding danzi in postgres-make-base-backup
commit
|
commitdiff
|
tree
2017-10-01
Julien Cristau
Use postgres::backup_source for danzi's main pg cluster
commit
|
commitdiff
|
tree
2017-10-01
Julien Cristau
add danzi/debconf pg cluster as backup source
commit
|
commitdiff
|
tree
2017-10-01
Julien Cristau
.onion for debconf18.dc.o
commit
|
commitdiff
|
tree
2017-10-01
Julien Cristau
Add debconf18.dc.o static component
commit
|
commitdiff
|
tree
2017-10-01
Julien Cristau
serial on klecker
commit
|
commitdiff
|
tree
2017-10-01
Julien Cristau
mirror-health: have systemd restart the service when...
commit
|
commitdiff
|
tree
2017-10-01
Julien Cristau
mirror-health: add shutdown check
commit
|
commitdiff
|
tree
2017-10-01
Julien Cristau
mirror-health: move up-to-date check to a function
commit
|
commitdiff
|
tree
2017-09-29
Julien Cristau
fixup ferm rule for danzi
commit
|
commitdiff
|
tree
2017-09-29
Julien Cristau
update ferm rules for postgresql@danzi
commit
|
commitdiff
|
tree
2017-09-29
Julien Cristau
sudo: debconf-web group can become debconf-web user
commit
|
commitdiff
|
tree
2017-09-29
Julien Cristau
add debussy
commit
|
commitdiff
|
tree
2017-09-29
Julien Cristau
add debussy volume at ubc
commit
|
commitdiff
|
tree
2017-09-29
Julien Cristau
danzi pg is now 9.6
commit
|
commitdiff
|
tree
2017-09-29
Julien Cristau
Revert "redirect linux updates to security-cdn"
commit
|
commitdiff
|
tree
2017-09-27
Julien Cristau
Revert "Restrict ssh to anycast and static mirrors"
commit
|
commitdiff
|
tree
2017-09-27
Julien Cristau
Restrict ssh to anycast and static mirrors
commit
|
commitdiff
|
tree
2017-09-23
Julien Cristau
Looks like bmdb1/wannabuild is back to timeline 1
commit
|
commitdiff
|
tree
2017-09-23
Julien Cristau
wannabuild cluster on pg 9.6
commit
|
commitdiff
|
tree
2017-09-23
Julien Cristau
fasolo on postgresql 9.6
commit
|
commitdiff
|
tree
2017-09-21
Julien Cristau
Set grub config on mirror-isc
commit
|
commitdiff
|
tree
2017-09-21
Julien Cristau
Add slapd service definition
commit
|
commitdiff
|
tree
2017-09-21
Julien Cristau
Restart slapd on TLS cert renew
commit
|
commitdiff
|
tree
2017-09-21
Julien Cristau
Restart repro when the sip-ws TLS cert is renewed
commit
|
commitdiff
|
tree
2017-09-20
Julien Cristau
redirect linux updates to security-cdn
commit
|
commitdiff
|
tree
2017-09-13
Julien Cristau
exim: treat Subject as a single line during regexp...
commit
|
commitdiff
|
tree
2017-09-12
Julien Cristau
Don't set grub_do_nopat or grub_do_extra unless grub_manage...
commit
|
commitdiff
|
tree
2017-09-03
Julien Cristau
grub: don't hardcode the list of hosts with nopat
commit
|
commitdiff
|
tree
2017-09-03
Julien Cristau
grub: nopat on villa, once more with feeling
commit
|
commitdiff
|
tree
2017-09-03
Julien Cristau
grub: nopat on villa
commit
|
commitdiff
|
tree
2017-09-03
Julien Cristau
villa on stretch, no more experimental_apache
commit
|
commitdiff
|
tree
2017-09-03
Julien Cristau
ssl/ca-global: add certs recently removed from nss...
commit
|
commitdiff
|
tree
2017-09-03
Julien Cristau
ssl/ca-global: add ANSSI and CNNIC to the blacklist
commit
|
commitdiff
|
tree
2017-09-03
Julien Cristau
ssl/ca-global: blacklist SPI/StartCom/WoSign CAs
commit
|
commitdiff
|
tree
2017-09-01
Ansgar Burchardt
rsync-ssh-wrap: also allow uploads to SecurityUploadQueue
Signed-off-by:
Julien Cristau
<jcristau@debian.org>
commit
|
commitdiff
|
tree
2017-09-01
Julien Cristau
vsftp::site wants a root parameter, even when disabling it
commit
|
commitdiff
|
tree
2017-09-01
Julien Cristau
remove ftp_upload role from suchon
commit
|
commitdiff
|
tree
2017-09-01
Julien Cristau
Merge branch 'security-upload-host' of https://github...
commit
|
commitdiff
|
tree
2017-08-30
Julien Cristau
Make the static-mirror-run log per component
commit
|
commitdiff
|
tree
2017-08-29
Julien Cristau
Add /srv/security.upload.d.o on suchon
commit
|
commitdiff
|
tree
2017-08-11
Julien Cristau
Revert nrpe dsa2_shutdown command to its state before...
commit
|
commitdiff
|
tree
2017-08-11
Julien Cristau
milanollo on stretch, no more experimental apache
commit
|
commitdiff
|
tree
2017-08-08
Julien Cristau
Fix dell harder
commit
|
commitdiff
|
tree
2017-08-08
Julien Cristau
raid/dell: rename aptrepo declaration to avoid conflict...
commit
|
commitdiff
|
tree
2017-08-08
Julien Cristau
Add dell srvadmin tool to try and improve health monitoring
commit
|
commitdiff
|
tree
2017-08-08
Julien Cristau
Add codesign bits for secure boot
commit
|
commitdiff
|
tree
2017-08-08
Julien Cristau
Remove busoni from static
commit
|
commitdiff
|
tree
2017-08-08
Julien Cristau
Fix update-fastly-ips cron job
commit
|
commitdiff
|
tree
2017-08-07
Julien Cristau
And fixup cron job
commit
|
commitdiff
|
tree
2017-08-07
Julien Cristau
Move shutdown marker around
commit
|
commitdiff
|
tree
2017-08-07
Julien Cristau
One day I'll be able to rename things in all places...
commit
|
commitdiff
|
tree
2017-08-07
Julien Cristau
Export scheduled shutdowns to the web
commit
|
commitdiff
|
tree
2017-08-07
Julien Cristau
Rename cron.d entry to make it clear it comes from...
commit
|
commitdiff
|
tree
2017-08-06
Julien Cristau
Fix getfastlyranges harder
commit
|
commitdiff
|
tree
2017-08-06
Julien Cristau
Fix cron job
commit
|
commitdiff
|
tree
2017-08-06
Julien Cristau
Fix template syntax
commit
|
commitdiff
|
tree
2017-08-06
Julien Cristau
Handle exceptions from reading fastly IP ranges
commit
|
commitdiff
|
tree
2017-08-06
Julien Cristau
ferm: accept syslog from fastly IPs
commit
|
commitdiff
|
tree
2017-08-06
Julien Cristau
Keep a list of fastly IPs
commit
|
commitdiff
|
tree
2017-08-02
Julien Cristau
mirror-anu is on stretch, remove from experimental_apache
commit
|
commitdiff
|
tree
2017-07-22
Julien Cristau
remove senfter from experimental_apache
commit
|
commitdiff
|
tree
2017-07-22
Julien Cristau
wieck is on stretch, remove from experimental_apache
commit
|
commitdiff
|
tree
2017-07-22
Julien Cristau
Add https://release.d.o/oldstable-proposed-updates...
Signed-off-by:
Julien Cristau
<jcristau@debian.org>
commit
|
commitdiff
|
tree
2017-07-12
Julien Cristau
Revert "Don't push incoming to klecker"
commit
|
commitdiff
|
tree
2017-07-05
Julien Cristau
New ipv6 addresses for klecker
commit
|
commitdiff
|
tree
next