aboutsummaryrefslogtreecommitdiff
path: root/manifests
AgeCommit message (Collapse)Author
2015-12-05DeprecatedSylvain Veyrié
2015-12-05Non string mode is now deprecatedSylvain Veyrié
2015-12-05fix the missing includemh
2015-12-05get rid off lsb factsmh
2015-12-05indentationmh
2015-12-05there might be people who don't have a stun servermh
2015-12-05lintingmh
2015-12-05a cleaner namingmh
2015-12-05add rule for stuno
2015-12-05add rule for openvpno
2015-12-05manage new and legacy ports of managesievemh
2015-12-05add rules for pyzormh
2015-12-05make it easier to override behaviour of the dns rulesmh
2015-12-05fix definemh
2015-12-05migrate ipsec rules to a define so we can specify multiple zonesmh
2015-12-05only manage the config_path if we do not manage the config filemh
2015-12-05use the centos class on centos based systemsmh
2015-12-05with the latest updates on EL6 this is neededmh
2015-11-28Merge branch 'master' into 'master' ng
Remove 'require augeas' (#4396) Because the puppet 'require' keyword actually instantiates a class, having 'require augeas' in base.pp means that you cannot instantiate the augeas class anywhere else in your manifests, for example with some optional parameters to the class. If you do, you will get a duplicate definition error. The README already says that the augeas module is required. It seems better that this is managed outside of the module, allowing for class parameter flexibility. See merge request !3
2015-07-16shorewall::rules::libvirt::host: adjust to changes in shorewall::mangle.intrigeri
That is, make the resource's title more unique by including the destination interface in it, and accordingly pass the desired action via the new, dedicated parameter.
2015-07-16shorewall::mangle: allow specifying the ACTION explicitly.intrigeri
Previously, it was using $name, which prevented adding multiple mangle rules that share a common ACTION, with different parameters.
2015-05-19provide a class ordering hint for augeas setupMicah Anderson
2015-05-19Remove 'require augeas' (#4396)Micah Anderson
Because the puppet 'require' keyword actually instantiates a class, having 'require augeas' in base.pp means that you cannot instantiate the augeas class anywhere else in your manifests, for example with some optional parameters to the class. If you do, you will get a duplicate definition error. The README already says that the augeas module is required. It seems better that this is managed outside of the module, allowing for class parameter flexibility.
2015-05-08Make sure MUNINCOLLECTOR join() gets an array in munin ruleJerome Charaoui
2015-03-02Merge branch 'bugfix/Fix_DHCP_for_libvirt' into 'master'Jerome Charaoui
Fix dhcp for libvirt This branch uses the mangle table support added by the feature/Add_support_for_mangle_table branch to fix the libvirt DHCP when broken by recent kernel. It fills the checksum of this kind of packets on the libvirt interface. This patch shouldn't break older setup, and is implemented so that it can be disabled. See merge request !2
2015-02-27Fix DHCP from $vmz.bertagaz
On newer kernel (tested on 3.16), the libvirt and shorewall iptables rules have conflicts that need to be fixed by enabling back --checksum-fill on $vmz, otherwise the VMs can't get a DHCP lease.
2015-02-27Add support for the mangle table.bertagaz
2013-06-14Merge remote-tracking branch 'intrigeri/feature/libvirt-host'Micah Anderson
2013-03-23lintingmh
2013-03-23only manage the config_path if we do not manage the config filemh
2013-03-23linting the init.ppmh
2013-03-23use the centos class on centos based systemsmh
2013-03-23with the latest updates on EL6 this is neededmh
2013-03-02fixed leftovers from concat_file in rtrules.pp and tunnel.ppvarac
2013-02-23remove the class requirement in the augeas block, it is handled by the ↵Micah Anderson
top-level require
2013-02-23change the 'include augeas' to a 'require augeas'Micah Anderson
2013-02-12augeas definition needs to make sure the shorewall package is installed ↵Micah Anderson
before it tries to run
2013-02-09Linting.intrigeri
2013-02-09Allow not setting up masquerading in libvirt::host.intrigeri
2013-02-09libvirt::host: make debproxy port configurable.intrigeri
2013-01-24fix missing dependency on augeasMicah Anderson
make sure that the augeas class has been applied before attempting to do any augeas operations. without this, you will non-deterministically get: err: /Stage[main]/Shorewall::Base/Augeas[shorewall_module_config_path]: Could not evaluate: Save failed with return code false
2013-01-02cleanup a merge issuemh
2013-01-02provide an easy option to still manage the source of the central conf filemh
2013-01-02Merge remote-tracking branch 'riseup/master'mh
Conflicts: files/shorewall.conf.CentOS.6 files/shorewall.conf.Debian.wheezy
2013-01-02Merge remote-tracking branch 'varac/master'mh
Conflicts: files/boilerplate/providers.footer files/boilerplate/providers.header manifests/base.pp manifests/providers.pp
2013-01-02Merge remote-tracking branch 'sarava/master'mh
Conflicts: manifests/base.pp manifests/init.pp
2013-01-02Revert "Support exempting some users from torification measures."intrigeri
This reverts commit 6bc54f031b9ae12fe428c83e70733c8b2ff4c67a. This stuff is not ready for the shared repo, but we want to take benefit from me having already merged immerda's stuff into my branch and solved the conflicts.
2013-01-02Revert "Allow redirecting DNS requests to Tor for specific users or globally."intrigeri
This reverts commit 0c28fa636653f395c756f56c93f8c78fddfcee00. This stuff is not ready for the shared repo, but we want to take benefit from me having already merged immerda's stuff into my branch and solved the conflicts.
2013-01-02Merge remote-tracking branch 'immerda/master'intrigeri
2013-01-01make it possible to exent nets for ipsecmh