github.com/freerange/freerange-puppet commits

10gen no longer distribute 1.8.1, only 1.8.2 and above

3aba86e59d364e63ef4a81d5c36c41e6f6b1301d authored over 13 years ago by Tom Ward <[email protected]>

Fix puppet to version 2.6.4

8b866cc12b46befd1326d045c87a815981e23e6c authored over 13 years ago by Tom Ward <[email protected]>

Bumping version

a98f5e6863d5e1a3ad142d21bbb9e702b2b30a18 authored over 13 years ago by Kalvir Sandhu <[email protected]>

Update mongodb to version 1.8.1 so that we can enable journaling which should allow safe backups

Had to change apt source as 10gen is no longer supported the previous one. Also package name was...

6719c26878244f6db341261ad26b82db553634f9 authored over 13 years ago by Kalvir Sandhu <[email protected]>

Bumping version.

8b63c3948d9a90e50a9d600baebb773b3c6f9766 authored over 13 years ago by James Adam <[email protected]>

Added a logrotate module and definition; use with logrotate::rotate_log

a6ca013ea9db5aa3647a486d71e60e24a926ddf5 authored over 13 years ago by James Adam <[email protected]>

Released version 1.1.19

66d92cd5d4b00e20f60ec03005170f2d51537069 authored almost 14 years ago by Chris Roos <[email protected]>

Don't be so strict on the version of passenger that we require.

* Version 3.0.1+82~lucid1 no longer exists as a package. The current version is 3.0.4+86~lucid1...

695c99dcd2c374d7f00a3ae4405ef5538be92093 authored almost 14 years ago by Chris Roos <[email protected]>

Update the installed version of Bundler to 1.0.10.

dc54666cae71b8b6e0cc133cf998681d0936538f authored almost 14 years ago by James Adam & James Mead <[email protected]>

Released version 1.1.18

249f6afc86dc15c6ddf735b02014fb45d095cb6d authored almost 14 years ago by James Adam & James Mead <[email protected]>

Having tcpdump on servers is useful for debugging all sorts, but VPNs in particular.

443199d4a1681ba9fd933700cd75c94bf17d3cee authored almost 14 years ago by James Adam & James Mead <[email protected]>

Released version 1.1.17

36e3d431511ded756d88916bf97c53625ec16cd1 authored almost 14 years ago by Chris Roos & James Adam <[email protected]>

We had a different version of the Passenger module installed on staging.hashblue.com (3.0.0+76~lucid1) and hashblue.com (3.0.1+82~lucid1). Being explicit about it ensures consistency across our servers.

We also need the brightbox.list (removed in 4b8af3dba02c706e6e74d0cdf7bdc07587a64c3b) as that co...

e7e4445df6e1af8093664654bbcbfbc7ff655d10 authored almost 14 years ago by Chris Roos & James Adam <[email protected]>

Released version 1.1.16

b5111f6d3cdfe92d9b135fdf579ed276f4505624 authored almost 14 years ago by James Mead <[email protected]>

We want to use the Brightbox Apt repository which includes Ruby

Enterprise Edition.

4b8af3dba02c706e6e74d0cdf7bdc07587a64c3b authored almost 14 years ago by James Mead <[email protected]>

Released version 1.1.15

668f01a97d8aff8426384c240ebedcdc943a854d authored almost 14 years ago by James Mead <[email protected]>

By using the built-in puppet 'host' type, we can avoid constant and unnecessary updates to /etc/hosts.

This commit does change what will appear in a freshly puppet-provisioned VM's /etc/hosts file, b...

179486488810f8ab83bf81497d6c97a0566a1d00 authored almost 14 years ago by James Mead <[email protected]>

Released version 1.1.14

38f8134f024ed17138c8dd9dc3383e4667643cc6 authored almost 14 years ago by James Mead <[email protected]>

By parameterizing the redis class and using an ERB template, we can be more declarative, avoid appending configuration overrides to redis.conf every puppet:apply, and avoid unnecessary restarts of the redis service.

00bee9dc126983dfcf631616e3dcf9555abb396d authored almost 14 years ago by James Mead <[email protected]>

Remove duplication for Apache modules by extracting into a Puppet define. It might be better if the individual modules were enabled in the application project, but I think this is still an improvement.

7f6e46a74b6150bd365d08e626cd96780688edd9 authored almost 14 years ago by James Mead <[email protected]>

Fixed copy and paste errors in enabling of the Apache headers module. This was leading to the module being unnecesarily enabled on every puppet:apply and Apache being unnecessarily restarted.

1464b78267cf02b25ab4c2cf2ea7b9da9dfdb021 authored almost 14 years ago by James Mead <[email protected]>

Released version 1.1.13

36496489f521e4991b46991131bd681f64dbab50 authored almost 14 years ago by James Mead <[email protected]>

Run Passenger and Rack processes as "application" user instead of "freerange" to bring them into line with application daemon processes.

I had hoped this would avoid the following warning/error that is appearing in the resque_worker ...

50908a85c70743839524efe65bbb04b95210dbc2 authored almost 14 years ago by James Mead <[email protected]>

Released version 1.1.12

f30bdaaadb4e97a2e162cdf7609b4fa2be335792 authored almost 14 years ago by Chris Roos & James Adam <[email protected]>

It was frustrating to have to bump the version in the Rakefile and commit that change before running 'rake tag' to create the gemspec and tag and push the changes. To release a new version of this gem, increment the version and run 'rake tag'.

db4adc235253d60c00c55dbfa244c87bfd149329 authored almost 14 years ago by Chris Roos & James Adam <[email protected]>

Being explicit about the version of the ubuntu package to install (2:1.2.0-1) means that we can remove the bind-local command as the redis.conf file already includes this rule.

8412850e7f54ab809881ccf11c2b0f8e03282ace authored almost 14 years ago by Chris Roos <[email protected]>

These files were made redundant in commit 9d7da337d98c3d24e51ad0a84523730a3b8cfa4d.

9c01b50b80e8878ffb31b0e7056e50d29f425d25 authored almost 14 years ago by Chris Roos <[email protected]>

Bumped gem version to v1.1.11

b66dff1d41f0dc5464416f79b035d0e547ff1375 authored almost 14 years ago by Chris Roos & Kalvir Sandhu <[email protected]>

IPSec wasn't starting after machine reboot as it was installed in the incorrect runlevels (see https://bugs.launchpad.net/ubuntu/+source/openswan/+bug/554592). The ipsec status was incorrect because /var/lock/subsys isn't created.

66cc9e40317b2fbfe46afe873a56b1aa5f83a393 authored almost 14 years ago by Chris Roos & Kalvir Sandhu <[email protected]>

Released version 1.1.10

4d128d12b20cc432d2204db017a0f72146f047db authored about 14 years ago by Chris Roos & James Adam <[email protected]>

Bumped version.

53dcbde68560f711653f4ea46a14a80432dd98c4 authored about 14 years ago by Chris Roos & James Adam <[email protected]>

The secrets files are named <name>.secret, not <name>.secrets.

5a2dff999242aac1cbfd7a84559dbc8e5084cd0b authored about 14 years ago by Chris Roos & James Adam <[email protected]>

Enable expires, deflate & headers Apache modules by default. Note that this will have no real effect unless you have some Apache configuration that makes use of these extra modules. I added these modules because I want to use them on my personal website, but this change will obviously apply to any website (including Hashblue) that is using this set of recipes. It would probably be better to provide a way for individual Apache vhosts to declare their dependence on specific modules, but that's for another time.

3bbe029d60f90d45ac4e48f056a8f478d6e7b44d authored about 14 years ago by James Mead <[email protected]>

Added descriptions to capistrano tasks so they show up in the list of tasks.

1793088dd18115bd13f4b390d112ab6293a5c1a1 authored about 14 years ago by James Mead <[email protected]>

Easily add iptable rules from application puppet manifests.

Whenever defining an iptables rule from an application we must require the pre and post iptables...

064145ecf5a86db7d704e681d2a9dab89106c7d7 authored about 14 years ago by Kalvir Sandhu <[email protected]>

When setting hostname need to add to hosts file so that it can resolve

cca8a57081a1bf45d45b37eb4de29e97119da95b authored about 14 years ago by Kalvir Sandhu <[email protected]>

Released version 1.1.7

41640d38a09775a77fc75d2792b45c7d571ffa16 authored about 14 years ago by Chris Roos <[email protected]>

Bumping the version number.

62623a635908246a9ddb7d04dc85d8938b80d1d0 authored about 14 years ago by Chris Roos <[email protected]>

removed rsyslog as was only needed for o2 requirements.

c71ed058efebed4f055b68f3a3e687c65b4b5f2b authored about 14 years ago by Chris Roos & Kalvir Sandhu <[email protected]>

Added postfix puppet recipe

2e59abf6a2ea1aa82252de22a640b5abfedee3bd authored about 14 years ago by Chris Roos & Kalvir Sandhu <[email protected]>

Be able to set a hostname for a puppet server

3b1678d6331c5370c77e3cc68547a0b93a6e09fb authored about 14 years ago by Chris Roos & Kalvir Sandhu <[email protected]>

Set up iptables when class is defined in application manifests

A base set of rules is applied for ports, 22, 80 and 443. We will later extend this recipe to ha...

ab7ee88034c523443944ea64a6034edfd5ca7350 authored about 14 years ago by Chris Roos & Kalvir Sandhu <[email protected]>

Allow customisation of user shell.

aed2b7bac2b0a9c8c59e3dc9065982acda52a3e6 authored about 14 years ago by James Adam <[email protected]>

Bumping version.

f57556b742e0998254ace2898131d62fe6570974 authored about 14 years ago by James Adam <[email protected]>

If the user definition expects the 'freerange' user, don't depend on the app to provide it.

b4e08f41957373158c029ffd007880dbe5ab9c06 authored about 14 years ago by James Adam <[email protected]>

Released version 1.1.5

79fb450c3b56ba58d826d4a05ab7086878b513ce authored about 14 years ago by Chris Roos & Kalvir Sandhu <[email protected]>

Monit was not being correctly setup, we believe that it was targeting cent os (we don't care for now)

b00dcbab5b6fbc15ab8ba59e40d53a22490d2523 authored about 14 years ago by Chris Roos & Kalvir Sandhu <[email protected]>

Released version 1.1.4

eb0ca90f20a69090ee1154b483c4e1d9c3730ea9 authored about 14 years ago by Chris Roos & Kalvir Sandhu <[email protected]>

/bin/sh is a crap shell.

f1c3a6e68dfea08af307839c1c37d0beb8090970 authored about 14 years ago by Chris Roos & Kalvir Sandhu <[email protected]>

Released version 1.1.3

c201a38f0222f7df87d009923a8736ff95b15559 authored about 14 years ago by Chris Roos <[email protected]>

We need to ensure that the user's home directory exists before creating their ssh key. The ssh_authorized_key definition already ensures that the user exists but not necessarily that their home directory exists.

4a36622176dc4bafdbd6f83d1476002749daf745 authored about 14 years ago by Chris Roos <[email protected]>

Released version 1.1.2

0fee8ad97801417d9f6cca2ed39a5912a51b2f73 authored about 14 years ago by Chris Roos & Kalvir Sandhu <[email protected]>

We couldn't create a user with multiple SSH keys which was preventing us deploying as a single user.

0b70fc8ac77cf39c0592ce4464d0b5ff1587080f authored about 14 years ago by Chris Roos & Kalvir Sandhu <[email protected]>

1.1.1 now works with Ubuntu (as far as we can tell).

0a641cb415f97d4e63ab9046aa96e5002f84a2a6 authored about 14 years ago by James Adam <[email protected]>

The apache user needs to be part of the application group; on ubuntu, that user is different.

8a8fa1f2d29e1297dffbeaa2771c2d543b50ea17 authored about 14 years ago by James Adam <[email protected]>

We can't set up an apache host without apache.

4537e99fc706c3e235be1de565644e588026b451 authored about 14 years ago by James Adam <[email protected]>

Monit puts its configuration in a different place on ubuntu.

da595f1a8b49fef562029d30446095f1cb80d05c authored about 14 years ago by James Adam <[email protected]>

Enable mod_ssl on ubuntu.

2fef8392a787bed0f8e426ce36c307c39bdb70a0 authored about 14 years ago by James Adam <[email protected]>

We need a C++ compiler and the zip utility.

102aba471863629e641db5f3bd946068f53ecdcf authored about 14 years ago by James Adam <[email protected]>

We can use the redis-server package for ubuntu.

On lucid this is 1.2.0, although we were installing a 1.3 version.

1.2 doesn't seem to be able ...

9d7da337d98c3d24e51ad0a84523730a3b8cfa4d authored about 14 years ago by James Adam <[email protected]>

Apt needs to be up to date if it's going to locate mongodb-stable from 10gen's repository.

We were seeing apt-get update being run before the mongo source was added to apt; this should en...

cee4903922c37decf2856c673185313439b9c2be authored about 14 years ago by James Adam <[email protected]>

Mongo wouldn't install on Ubuntu 10.04

`apt-get update` failed because of an error in the source list; puppet's $operatingsystemrelease...

d1f6d0512ccfae06a7a509acaf166aa90e442c27 authored about 14 years ago by James Adam <[email protected]>

Use a specific ubuntu version of openswan.

We still need to patch the init.d script, so it makes sense to continue to lock to a specific ve...

776c8e9ef12227b79b67607bc4a639e592f7bb1f authored about 14 years ago by James Adam <[email protected]>

wget doesn't seem to like github's SSL certificates.

Github now forces all traffic over SSL, but wget complains about the certificate being for *.git...

15a51be39014c66518caa1b14fa3f648c8af9a23 authored about 14 years ago by James Adam <[email protected]>

Bump version for initial ubuntu support.

efbf870a601e977b0e1d5d47a07aab3be986e0eb authored about 14 years ago by James Adam <[email protected]>

Get mysql running on Ubuntu.

b62994301d6d57cf2fb25e78e0f882fbb1899b0a authored about 14 years ago by James Adam <[email protected]>

Since we're using ruby, I don't know if this is necessary. Also, it doesn't exist in apt.

6e1e6c41c738a524a50476fc97559d53188935c7 authored about 14 years ago by James Adam <[email protected]>

On ubuntu mongodb was not being setup.

f0eb877bb480aede59a8c09069b974bb977903c7 authored about 14 years ago by Kalvir Sandhu <[email protected]>

Apache site template set up on Ubuntu

e1bc538f8ddac86681f0c668871f5e87d14dcef9 authored about 14 years ago by Kalvir Sandhu <[email protected]>

Just don't do this for now.

151c7427fb2aab6d3b7dc519cb413110f45bf954 authored about 14 years ago by James Adam <[email protected]>

Released version 1.0.20

ac6a7119195d60660bfc5da49bf7c4f3f87fc080 authored about 14 years ago by James Mead <[email protected]>

Set permissions on openswan secret-related files to read/write for root only to match the working installation.

Also bumped the version number.

34f22a2e6f9637a9d8a15fc4579bc9131c51ad58 authored about 14 years ago by James Mead <[email protected]>

New version of gem to include Openswan VPN configuration

55f608207d8bc4c4607a007cb57c102d7b859455 authored about 14 years ago by James Mead <[email protected]>

Since individual VPN connections have a lot of different parameters, it seems simpler to supply the whole config file from the application.

Renamed the secret function to reflect the fact that the config is specific to a PSK.

59849c4930b0c997c2d97527ce3846f8e9ad5fcd authored about 14 years ago by James Mead <[email protected]>

Provide parameterized templates for individual openswan connections & secrets.

Add newlines at the end of configuration files to avoid parser errors. Note that individual conf...

34269f3103fd8d0b8b9a2ecaef77b37fa0f3bb0e authored about 14 years ago by James Mead <[email protected]>

Updated ipsec basic configuration to match that described on the wiki [1].

[1] https://github.com/freerange/hashblue/wiki/Setting-up-VPN-to-O2

0946d381358f1a3b506c9362fec5837a272eee4f authored about 14 years ago by James Mead <[email protected]>

First stab at adding support for Openswan VPN client.

5f96c348e43533c21c690942a1a8704026627f13 authored about 14 years ago by James Mead <[email protected]>

The apache user should be a member of the application group, so that it can read application code

36844156852cb335a8a053308b841fa1a5c23d51 authored about 14 years ago by Tom Ward <[email protected]>

Revert this, it doesn't play well with deploy:setup

The capistrano "deploy:setup" task expects to be able to create the main application folder, sin...

81c330cf618996cec7d0b308b9a0aafd4724a3a6 authored about 14 years ago by Chris Roos & James Adam <[email protected]>

Some applications need the app directory to exist as part of puppet setup.

Also, version bump.

3783772be515927def25718686d0ccf80f3e3b0e authored about 14 years ago by Chris Roos & James Adam <[email protected]>

Bumping version number.

2254125035c6ac75532cad6611000c41fb1e9179 authored about 14 years ago by Chris Roos & James Adam <[email protected]>

Rsyslog prevented us from having permission to deploy

We generally need to make sure we are *always* left with permission to deploy into /var/apps. I ...

b171bd50d580fdad6af63ef323e863ad365a8fd2 authored about 14 years ago by Chris Roos & James Adam <[email protected]>

Released version 1.0.14

4d418e6cf28ce7d6b216153c45173e84f24bedd8 authored about 14 years ago by Tom Ward <[email protected]>

Use rsyslog rather than syslog-ng for syslogging, as its available on centos and works.

e1200b6feb19667460fffd0775215b869b992d8f authored about 14 years ago by Tom Ward <[email protected]>

Servers installing Munin failed due to missing folders.

a5eba5bdc2978a53cc8144190d2b4464d220ef28 authored over 14 years ago by Kalvir Sandhu <[email protected]>

Bump version.

8b132e951d3547fe067e66e3f10c3a44fb37a6e6 authored over 14 years ago by Chris Roos & James Adam <[email protected]>

It was hard to debug why redis wasn't starting again.

This should be suitable for production-level logging now.

4db88c177a9cc3f1c33e5fd361deb976a1dc18e4 authored over 14 years ago by Chris Roos & James Adam <[email protected]>

Redis could not restart.

This is because the stale PIDFILE was left kicking around. I suspect we didn't see this before b...

eec6690d63b791be605706cd9fd3c2984e0250a6 authored over 14 years ago by Chris Roos & James Adam <[email protected]>

Applications deploy to /var/apps (compatibility with freerange-deploy 1.0.0)

69b7f48a33e8f064266699f1e1bba3081ac832bc authored over 14 years ago by Chris Roos & James Adam <[email protected]>

Version bump.

16f052aff3792a5adfd230cb82ba6d8fa8c1b0bf authored over 14 years ago by Chris Roos & James Adam <[email protected]>

Ensure that rake is installed.

Previously, rake was only installed when passenger was, i.e. machines with the web role.

93578134e47e65f0f970883ae5bdd412ef8bc75c authored over 14 years ago by Chris Roos & James Adam <[email protected]>

Bump version number.

e4e831684b5b3abe8add51eda497b956dd385bad authored over 14 years ago by Chris Roos & James Adam <[email protected]>

We get deprecation warnings if these aren't capitalised.

409e0df336408ef52e49fb2636c1a148ed95c059 authored over 14 years ago by Chris Roos & James Adam <[email protected]>

Bumping the version number.

b7d0ca7815cb1137fd45aaa245ba515f9193b413 authored over 14 years ago by Chris Roos & James Adam <[email protected]>

Monit was failing to start when provisioning with puppet.

This was ultimately for one of three reasons:

* The monit RPM installs in a state that won't le...

4377e0669a6a481ee5fd32be5fa70bcf0283f1d1 authored over 14 years ago by Chris Roos & James Adam <[email protected]>

We could not deploy to machines without the web role.

For the load test, we want the application to be available on a simulator VPS, but this machine ...

e2d99a990eb77c3f70517f4af194eee3db4f01ca authored over 14 years ago by Chris Roos & James Adam <[email protected]>

Bumping the version number.

c2263497d9e32bc49b99f1e58818d8acd3c85250 authored over 14 years ago by Chris Roos & James Adam <[email protected]>

We shouldn't require apache just to create our user accounts.

Making users depend on the rack user, which required rack and apache to be installed, meant that...

4e6ca29f15aceae41bfbc5a19007054b68a48983 authored over 14 years ago by James Adam and Chris Roos <[email protected]>

Ensure that redis is installed before setting it to run after reboots

0e85503aae45d80cc14832b3abccc5b3f08ddef3 authored over 14 years ago by James Adam and Chris Roos <[email protected]>

Rails munin plugins should use rails 3 format

5cfd5c20e4bb7f34b7a39d2e795604de0347e324 authored over 14 years ago by Tom Ward <[email protected]>

Ecosyste.ms: OpenCollective

github.com/freerange/freerange-puppet