Note that exim contains tracker-specific configuration
[mirror/dsa-puppet.git] / modules / ferm / manifests /
2019-10-01 Peter Palfraderretire manual firewalling on bmdb1 for dak replica...
2019-09-30 Peter Palfradermanage bmdb1/main pg_hba
2019-09-30 Peter PalfraderMove draghi finger/ldap/ldaps fw into dbmaster role
2019-09-30 Peter PalfraderMove gombert infinoted fw into gobby role
2019-09-30 Peter PalfraderMove kaufmann keyserver fw into keyring role
2019-09-30 Peter Palfradermanage ullmann/udd pg_hba
2019-09-29 Peter Palfradermanage danzi/wanna-build pg_hba
2019-09-29 Peter Palfradermanage danzi/main pg_hba
2019-09-29 Peter Palfradermanage danzi/tracker pg_hba
2019-09-29 Peter Palfraderremove manual firewall allow snapshotdb-manda-01->sallinen
2019-09-29 Peter Palfraderremove manual firewall allow leaseweb->snapshotdb-manda-01
2019-09-29 Peter Palfraderremove manual firewall allow bmdb1->fasolo
2019-09-29 Peter Palfradermanage debsources access to its DB on bmdb1
2019-09-29 Julien CristauMerge branch 'fordsa' of https://git.adam-barratt.org...
2019-09-29 Peter Palfraderfix ferm::rule::chain template
2019-09-29 Peter Palfraderpuppet rule to create an empty ferm chain
2019-09-29 Peter Palfraderreload ferm when files are removed
2019-09-29 Julien CristauMerge branch 'fordsa' of https://git.adam-barratt.org...
2019-09-29 Peter PalfraderRemove manual fw for dinis/storace access to postgresql...
2019-09-28 Peter Palfraderlw07 no longer runs a snapshot pg db
2019-09-28 Peter Palfradermigrate away from old postgres_backup_server role
2019-09-28 Peter Palfraderswitch sallinen to modern pg backup config fu
2019-09-28 Peter Palfraderswitch bmdb1 to modern pg backup config fu
2019-09-28 Peter Palfraderswitch seger to modern pg backup config fu
2019-09-28 Peter Palfraderremove explicit ferm allow from the pgbackup hosts...
2019-09-28 Aurelien JarnoDrop the dedup cluster at bytemark
2019-09-28 Aurelien Jarnoferm@serger: merge dsa-postgres-backup and dsa-postgres...
2019-09-27 Aurelien Jarnoferm: do not open PG to backup hosts for clusters defin...
2019-09-27 Aurelien Jarnopg@danzi: use a list of hosts instead of whitelisting...
2019-09-25 Peter PalfraderDocument ferm::rule::simple
2019-09-24 Julien Cristauticharich no longer needs access to bmdb1
2019-09-23 Julien Cristaubacula cluster moved to postgresql-manda-01
2019-09-22 Aurelien Jarnodanzi: merge dsa-postgres2-danzi and dsa-postgres2...
2019-09-22 Aurelien Jarnodanzi: merge dsa-postgres-danzi and dsa-postgres-danzi6
2019-09-22 Aurelien JarnoAllow access to the tracker db @ danzi from ticharich
2019-09-22 Peter PalfraderRemove empty ferm::zivit
2019-09-22 Peter Palfraderiptables -vnL on zelenka suggests that zivit no longer...
2019-09-22 Peter PalfraderApparently we no longer monitor the time service on...
2019-09-21 Aurelien JarnoDecommission rusca (RT#7949)
2019-09-16 Aurelien Jarnowannabuild has been moved from bmdb1 to danzi
2019-09-16 Peter PalfraderIf the name is too long for netfilter, hash it
2019-09-16 Peter PalfraderTry a new ferm rule class
2019-09-16 Peter Palfraderwhitespace/quoting: modules/ferm/manifests/ (make lint...
2019-09-13 Peter PalfraderTry to avoid reserved site keyword
2019-09-10 Julien Cristauferm::ftp_conntrack: remove jessie support
2019-09-07 Peter Palfraderstop using virtual resources for ferm::rule
2019-08-30 Peter Palfraderremove olin from bmdb1 access
2019-08-22 Peter Palfradermove syslog ferm into syslog role
2019-06-09 Luca Filipozziallow ssh access to ubc-node-arm* from ubc-bulwark...
2019-05-28 Peter Palfradersnapshotdb-manda-01: allow pg access from lw
2019-05-23 Peter PalfraderAllow snapshotdb-manda-01 to access pg on sallinen
2019-04-03 Aurelien JarnoAllow access to dak@bmdb1 from ullmann
2019-04-03 Aurelien JarnoAllow access to wanna-build@bmdb1 from respighi
2019-04-02 Aurelien JarnoAllow access to ullmann from wuiet
2019-03-17 Aurelien JarnoDecommission lully.d.o
2019-01-28 Julien Cristauadd loghost-osuosl-01
2018-12-17 Peter Palfraderreload ferm on changes instead of restart
2018-11-13 Peter Palfraderferm cleanup: sallinen
2018-11-13 Peter Palfraderferm cleanup: bmdb1:debsources, fix
2018-11-13 Peter Palfraderferm cleanup: bmdb1:debsources
2018-11-13 Peter Palfraderferm cleanup: bmdb1:dedup
2018-11-13 Peter Palfraderferm cleanup: bmdb1:bacula
2018-11-13 Peter Palfraderferm cleanup: bmdb1:wannabuild, remove duplicate allow...
2018-11-13 Peter Palfraderferm cleanup: bmdb1:wannabuild
2018-11-13 Peter Palfraderferm cleanup: bmdb1:dak, fix
2018-11-13 Peter Palfraderferm cleanup: bmdb1:dak
2018-11-13 Peter Palfraderferm cleanup: bmdb1:main, fix
2018-11-13 Peter Palfraderferm cleanup: bmdb1:main
2018-11-13 Peter Palfraderferm cleanup: fasolo postgres
2018-11-13 Peter Palfradertest avoiding hardcoding addresses
2018-11-13 Peter Palfraderno more varnish on sibelius
2018-11-13 Peter Palfraderbugs-search no longer runs on sonntag
2018-11-01 Julien CristauDrop firewall rule for pg @ sibelius
2018-10-31 Peter Palfraderunique all ip addresses
2018-10-31 Peter PalfraderTry a unique around v4addrs
2018-10-30 Peter PalfraderMove logging and related/established out of ferm.conf...
2018-10-30 Peter Palfradermove munin rules from conf.d to the rules dir, 2
2018-10-30 Peter Palfradermove munin rules from conf.d to the rules dir
2018-10-30 Peter Palfraderrename interfaces to 50-munin-interfaces
2018-10-30 Peter Palfraderchange default ferm rule priority to 10 from 00
2018-10-16 Peter Palfradertry a HEREdoc as the syntax checker seems to have issue...
2018-10-16 Peter Palfraderallow respighi to access udd on ullmann
2018-10-16 Peter Palfradermerge ipv4 and ipv6 rule for ullmann's dsa-postgres...
2018-10-16 Peter Palfraderfix a prefix len in dsa-postgres-udd6
2018-10-10 Peter PalfraderStart with removing some moszumanska entries (in partic...
2018-08-07 Julien CristauRevert "allow access to pg on vittoria for dc18"
2018-08-07 Julien CristauRevert "RT#7368: add additional IP"
2018-07-31 Peter Palfraderretire old cleanup job for ip6_ munin plugins
2018-07-31 Peter PalfraderMake sure nodeinfo['misc']['v[46]addrs'] always exists...
2018-07-31 Peter Palfraderferm/munin: use already split v[46]addrs for munin...
2018-07-29 Martin Zobel-HelasRT#7368: add additional IP
2018-07-27 Julien Cristauallow access to pg on vittoria for dc18
2018-07-17 Julien CristauRemove wheezy-supporting cruft
2018-05-29 Peter Palfradersallinen: retire 443->5473 dnat
2018-05-28 Peter Palfraderpg firewalling
2018-05-28 Peter Palfraderadd lw07 to snapshot_web group
2018-03-11 Peter PalfraderThere is no ferm-restart Exec to notify
2018-03-06 Peter Palfraderferm::conf - include ferm
2018-03-06 Peter Palfraderstart ferm config with a 00-init and start SSH*SOURCES...
2018-03-06 Peter Palfraderferm::conf - merge with tor version
next