github.com/python/psf-salt commits | Ecosyste.ms: OpenCollective

Merge pull request #2 from python/ipv6-firewall

Enable ipv6 firewalling

bcf2124ab060211b4cdc6ce5e99cb0ad99fa9843 authored over 10 years ago

Enable ipv6 firewalling

2f998108513e6682883485e0cd8617bed2c0ce89 authored over 10 years ago

Apply a custom sshd_config to all nodes

4298024cf8c4f613a696e7aa9c5fe9b055f32f9f authored over 10 years ago

accept key w/o confirmation

ad221e256982ba6a80e63a09c86412be0b2e33f4 authored over 10 years ago

make apt quieter

fe907ceb2ab8576b1ff768c2e1d16f5223a495c5 authored over 10 years ago

Update our mine data every 5 minutes

e6e8f95bc2a71e1fef01c74e33eaf3bce4378915 authored over 10 years ago

Give our users a password

1fc88874fc0acbd5bc3c5287784a7607d5dd65a7 authored over 10 years ago

We're not going to use stunnel anymore

2e1cb2d6abd004c89ee35a21a5f018a81a0773ea authored over 10 years ago

Don't require TLS and use the md5 auth type

19db8d7bb6333ec6b8a7eb040df45f030d43a6b4 authored over 10 years ago

Create the database with an owner

9a5d7285e5f56854823b9c2d67c63ab7b762b031 authored over 10 years ago

fix some syntax

6144b99b7f016f69da727114fced095681c2412e authored over 10 years ago

create the database users and the databases

85fdf67fdebe841dc0171d8c861004fb63cbbedf authored over 10 years ago

Add the postgresql users to the tracker

867eda3ad68abdce8abb815b9f7c7ea2e2bba553 authored over 10 years ago

Correct the dependency

05cb056f9e0205a3afa943463edd19560208c8a7 authored over 10 years ago

Attempt to get stunnelt o verify certifcates

14c541ad0c66ab890d8d46dca6373a666ff537e5 authored over 10 years ago

Per user connection with the client key

3d6615e72bea3d04a49a6f1e42fd8daf1e954f19 authored over 10 years ago

Drop a key/cert for each user

aaed27683dae1ba9a4bb106a1c9e4fd66f70b972 authored over 10 years ago

Ensure that the stunnel service requires the server directories

3b8fd1dbdb42a3394955cbd4c2da81db4d13c0cf authored over 10 years ago

Attempt to make it possible for using local domain socket

a4177615cce5e51522586d80a1726845198923f2 authored over 10 years ago

Ensure permissions on the /var/run/stunnel4 directory

849f7e0872c0f235d7dfbfe51628853f84fdc351 authored over 10 years ago

stunnel4 not stunnel

7f59740d27e2f5ef76668d52197f4c6bd92158b4 authored over 10 years ago

Enable stunnel to start

1214172ea799bae305c3f4ddcf4be3e6eb99aceb authored over 10 years ago

Require our packages

b9512e5fc82a72b4e2b643a667ce052762a585a5 authored over 10 years ago

Remove this

d6c0bce1a50da1a91f48e61e97d32f657fb8fb8f authored over 10 years ago

Missed a spot

96d53d661bfa4e622bb3bdacec303f58e1c074b8 authored over 10 years ago

Finish stunnel -> stunnel4 and start the service

a64ef90a3dc9f235c4b8f82fdb47528c67cf4b7a authored over 10 years ago

Close the if statement

7e8e75fc0e2e0804d2374a513a6ccde927f3fbed authored over 10 years ago

Include stunnel4 instead of stunnel

08786cb00fb33f1c4b1e126ae0cdee00998be747 authored over 10 years ago

role:tracker needs to be able to connect to postgresql

3ade0994ec9c992cb04709e7dc4346124b961f8a authored over 10 years ago

We can do this for all of the postgresql servers

49d5caa234678eb7eda06801912213183d08546f authored over 10 years ago

Add the postgresql.client and a stunnel config

f4209dac998c3844bf2bf670dd95a159e2a800d5 authored over 10 years ago

Sort the IP addresses

64b7344768784843571b30939a3337f8125066c7 authored over 10 years ago

Switch the replicator to single IP addresses

c5e7619c4fb796daf3bca2b30ee1155d94fd04f9 authored over 10 years ago

Only a single IP address

f8a79b551efa189c6a99f4fd1e47626d9973b903 authored over 10 years ago

Add the CIDR notation

9814de4fe511e7e21bf607926b005583da98701c authored over 10 years ago

Enable the bugs-python user to connect from roles:tracker

3abcee306df6ed348de4971b842457c1c6e0b595 authored over 10 years ago

Don't limit replication only to the primary

8332ba2caa8cbadb766d968b26d6d7a0c7132aca authored over 10 years ago

Dictionary syntax

d4e5d87cf268330e7e621901fd755082319e5ffc authored over 10 years ago

mine aliases do not exist until 2014.7

d60db3b504931d7ccc742783a7ae0010780e8990 authored over 10 years ago

Add some mine alias functions

a486899294faa18cf8d7c51dc12a2fe87b584804 authored over 10 years ago

give cron an id

b28b7e1e22672511ae32bc5f04a235b7c1e6fa77 authored over 10 years ago

Automatically apply salt highstate

16bcdc524e421275dab36655d7db44c88a674b56 authored over 10 years ago

Add mine functions which will record IP addresses

0a80ef99212f4697ca09b4f8d01e327deec19192 authored over 10 years ago

Ensure postgresql-data is created

0e6a275002fe36e399e2ead2ecb153ec96134d6e authored over 10 years ago

Setup to allow opt-in to synchronous replication, but default to asynchronous

85f78444b5f6efeee729d193e43afdc36fee1b5e authored over 10 years ago

Set the application_name to the fqdn

b9b19f8dbd88b432dac6ec74a7644f8106a6dcb6 authored over 10 years ago

Ensure string

2f2af293c0eb4415c7bd93b72220746237605d66 authored over 10 years ago

Verify the TLS certificate of the Database server

e4d0960e92ab7d705aba7f5a3509e7cdc2418390 authored over 10 years ago

Use the pg.psf.io certificate in the pg server

b17b799a2f1579e29a15b41bc0954305b80d8ea4 authored over 10 years ago

Remove the junk require

99c7787e432c601d1d4dc0ba9dcaf81d4ddfb34f authored over 10 years ago

Use a general pg.psf.io certificate

59970d5b9518bfa8aa3b4c742b6f40430efe9467 authored over 10 years ago

Use the normal group name

68d9ee4340fdf72dcd899dbff1063ae1e1dc6821 authored over 10 years ago

fix the permissions

cc203c37c74d91c5b7a369b328028ea64bb4f916 authored over 10 years ago

Add a psf-ca certificate for pg0.psf.io

f5b16d7f67e0dc1279d8a9cf08e8560896c6bf7f authored over 10 years ago

Move the recovery.conf into the data directory

1efc09142569e6b651c38a89c77b1f5d8a33f052 authored over 10 years ago

Write out our own pg_ident.conf file

0ea7ee2e321950c3caa33b5e949108a54ad9990f authored over 10 years ago

Run the basebackup command as the postgres user

f5dc9db7e87a4fdfdf66e8f58bc8a9059a668551 authored over 10 years ago

Ensure some permissions

2b7b4598dd68c3dad0ff8db0b6742abe14058ae8 authored over 10 years ago

Create all the needed directories

cf63872bd9a96014e32da2940bb55023477239e2 authored over 10 years ago

Fix indent

4a2ea86b3b399b876199f6a66402fd67c251fab0 authored over 10 years ago

Ensure the directory exists

fb007826ea2840a9736a3483372436ae0f202355 authored over 10 years ago

Remove extra brace

da58fdb9e934bcbabefa4caa1d01affaddb95242 authored over 10 years ago

Fix the require defintions

1bc555ec92ba74d2b70266e350c7bf54d523feb1 authored over 10 years ago

Try this organization

936d7459efca682e40d81bbbfa3012c95247c8f5 authored over 10 years ago

Setup the recovery.conf to enable streaming replication

7dc3472c1af293c048886a04c88c71b81c371047 authored over 10 years ago

Remove requires that are no longer needed

2e275fd0e35d12cc5bf0a634bebe26f63d24b7f7 authored over 10 years ago

try to first create a new cluster, then replace the data directory

cbe9777595a0495ab38030db616808bf932dd82e authored over 10 years ago

This also requires pg_ident.conf

6d9313876799a65882c01b14d94a5084ad7d6423 authored over 10 years ago

More files that need to exist for the cluster import

0b0781319239322741e9d8ec7e37a3173def3925 authored over 10 years ago

We require the file here too

b1fd140feb74140030b82733418faa3bfb4b19ba authored over 10 years ago

Create an empty postgresql.conf

e34bed67195688e175c9ea0ef19ad99058b4490c authored over 10 years ago

Refactor code to import the new backup into postmaster

915f9269b61f2ae6bf965568915ca296dc690671 authored over 10 years ago

We don't have a valid certificate on the server yet

bd31a1edb089c6a5fad4796b000c31ce827f0246 authored over 10 years ago

Fix permissions of the replicator.key

f58e60374e730e20327c9ff9b7a0b454d5ecb210 authored over 10 years ago

Bootstrap a replica with a basebackup

0731d55066305f8ede2e8e01e2175ddb5b005815 authored over 10 years ago

Restart instead of reload

214526c450edc0ada8e2f361d240f13820248eac authored over 10 years ago

Drop the Client side certificates for the replicator user

58368c2ca4eb40ffdc59cd2bf770b4dc33182e45 authored over 10 years ago

Start on adding in support for a replica

91931658a70b72ccab264532192e03b5c0d6de4f authored over 10 years ago

Configure the primary for replication

f1980db1fe37779c3a81ef64b1b6087f33592ecb authored over 10 years ago

Enable a replication user

f9273c4d3cf828a8aba332a0900e4b5094a578fe authored over 10 years ago

Add the firewall configuration to allow PostgreSQL connections

69495569296d991832382db816dc502aef8533d4 authored over 10 years ago

Listen on the internal networks

c6a185224733d39916fdb0da019b9f42fb9fcd64 authored over 10 years ago

Correct the source URLs

698322bfcb4ed82dc76512246935b085dfd1348a authored over 10 years ago

Add back the explicit /dev/

9744bda36e446f432b401956e26bffa62b1bf6c0 authored over 10 years ago

Use the correct dictionary item

0201e205182116530b130778b299e41e8fae9e28 authored over 10 years ago

Add an explicit /dev/

1a610c892ea03784cf360d8410914c18c0d7728b authored over 10 years ago

Backport the blockdev code

bda5f5e1c5b97146c6731547eaa585c5f818242a authored over 10 years ago

Fix filter

bdd7ea5725054c430e909e687d5be33cb3f3d243 authored over 10 years ago

Setup the filesystem for PostgreSQL on the data disk

5e3fa4b808d22f853a20f7dfaa8bf1622249c3ac authored over 10 years ago

Format and mount the data partition

41112e964d1cf06b313a770020e1a2f1bd513637 authored over 10 years ago

Add a module for handling rackspace stuff

c318781941ee4bb1589634162412bc901bc297d5 authored over 10 years ago

Only add roles to the grains

d6cfe6beb8d7eb96129f078341de76d8b91ffdc7 authored over 10 years ago

Only have bootstrap setup grains

a8ea143cff8ba520715ca5fc02a7e3be322ed670 authored over 10 years ago

Enable mounting data disks

0cbb83df4cbb99271f4e51f7d550ed7f78b7fc80 authored over 10 years ago

Start a salt state for handling a postgresql cluster

6636a513fd3f33b049188d2957f6098ebb3d8ed3 authored over 10 years ago

Install the PSF CA/CRL on all servers

86338e5812e54e1f154e897503aa7099b9e261a4 authored over 10 years ago

Generalize the PSF-CA files

1e8ec130be4278cd2d2d1df2ccbf1b3e4588c96e authored over 10 years ago

remove listen

4d922c28f7fcb06a438332f480cc7893f2e22bcc authored over 10 years ago

redirect should be to official domain

159e291492148e06c63da2aa20e13c17bc6eeaab authored over 10 years ago

redirect things to where I actually want them to go

b70e70faa341a3278268057fcb65bfea78a1c519 authored over 10 years ago