Diffusion c4science (master) History

c4science/roles
masterd9556b40eef8d279c9bb946…

Mar 22 2016

Do not update phabricator
d9556b40eef8
·aubort on Mar 22 2016, 13:03.

Mar 20 2016

apache: less max spare to reclaim memory
b57469c739ee
·aubort on Mar 20 2016, 23:46.
ansible: conf only gluster
b00511e3116a
·aubort on Mar 20 2016, 11:41.
Check memory usage (gluster was using 1G of RAM and app00 was swaping like hell)
33bc2acb8e18
·aubort on Mar 20 2016, 03:30.

Mar 16 2016

add postfix to monitoring
44fd8a7a6417
·aubort on Mar 16 2016, 00:10.

Mar 15 2016

Monitoring of jenkins is working again
aa3ab56dd749
·aubort on Mar 15 2016, 09:52.

Mar 14 2016

restart shibd after perm change
7a6d0aed4737
·aubort on Mar 14 2016, 14:49.
Correct permission for shibd certificate and key
3d4bcb0ed32c
·aubort on Mar 14 2016, 13:28.
Correct script for shib auth
1b7b582c55a5
·aubort on Mar 14 2016, 12:33.
Correct monitoring
f809ca9aa548
·aubort on Mar 14 2016, 09:18.

Mar 11 2016

For now do not disable tlsv1 because phabricator uses cURL which is a mess with…
d964d67024b0
·aubort on Mar 11 2016, 17:16.
Install g++ for phab
f8429b0745b2
·aubort on Mar 11 2016, 13:17.

Mar 10 2016

Add example for field names
93d0f6fb9bcc
·D29
·aubort on Mar 10 2016, 18:05.
Better captions and labels
aa216d5b3160
·D29
·aubort on Mar 10 2016, 18:02.
Add error, fix typo
31dfe951797d
·D29
·aubort on Mar 10 2016, 17:43.
generate username from firstname and lastname
ece801bb63a1
·D29
·aubort on Mar 10 2016, 16:26.
Save the value
e50a8188cddc
·D29
·aubort on Mar 10 2016, 12:38.
Better login button for Shibboleth
4ef684181167
·D29
·aubort on Mar 10 2016, 10:50.

Mar 8 2016

Add email alias for admin
6e3e109bd225
·aubort on Mar 8 2016, 23:33.
Shibboleth extension for Phabricator now uses environment variables instead of…
ee2b86527d24
·aubort on Mar 8 2016, 21:52.
Use http headers for auth in shib
5aed15f13b87
·aubort on Mar 8 2016, 19:11.
Filter shibboleth header on lb
85f87e1491fd
·aubort on Mar 8 2016, 11:28.
Change text in shib plugin for phab so it says Switch AAI instead of Shibboleth
f6b569554ba0
·aubort on Mar 8 2016, 11:24.
Shib authentication for Phab
b867391de825
·aubort on Mar 8 2016, 10:59.
Document copy of certificate for shibd, unfortunatly SwitchAAI dont like…
9d9831af753f
·aubort on Mar 8 2016, 08:45.

Mar 7 2016

Let shibboleth apache conf through :/
b325c3970bcd
·aubort on Mar 7 2016, 23:23.
haproxy: Use password from config
2f2c4157b805
·aubort on Mar 7 2016, 13:35.
Fix glusterd default config value
720b01ceeafb
·aubort on Mar 7 2016, 13:35.
apache: match serverlimit to ram available, dont read htaccess files
eb68032cf85a
·aubort on Mar 7 2016, 13:35.
discoveryurl for shib too on switchaai prod
f68b38aa8801
·aubort on Mar 7 2016, 13:35.
Use switchaai prod server
a4cce4de4bae
·aubort on Mar 7 2016, 13:35.
Order of condition on mysql create tables script
e8c18fe48aa8
·aubort on Mar 7 2016, 13:35.
remove shib tests from haproxy
7719541794bf
·aubort on Mar 7 2016, 13:35.
Shibboleth on every app instance, connected with mysql galera, phabricator…
83d52ff79fcf
·aubort on Mar 7 2016, 13:35.
correct config file name for apache
14d6d5b943dc
·aubort on Mar 7 2016, 13:35.
Migrate from nginx to apache for app servers (to integrate with mod_shibd)
5a3c7f3b9653
·aubort on Mar 7 2016, 13:35.
make shibboleth work behind haproxy
cc8cd289a212
·aubort on Mar 7 2016, 13:35.
configure and install shibboleth for Switch AAI
641e9caf1985
·aubort on Mar 7 2016, 13:35.
Shibboleth role
c36d5aad8f21
·aubort on Mar 7 2016, 13:35.
Create instance
50f97d0b53e8
·aubort on Mar 7 2016, 13:35.
Configure shib frontend
39caf05a8732
·aubort on Mar 7 2016, 13:35.
Actually add group config file :)
5929d44fac30
·aubort on Mar 7 2016, 13:34.
add groups for nagios
7f881ad188c8
·aubort on Mar 7 2016, 13:33.
Merge branch 'master' of ssh://c4science.ch:2222/diffusion/PHCODE/science
c23a4b2cae80
·aubort on Mar 7 2016, 13:21.
Nagios authentication handled by haproxy
9b51e3c6f7ac
·aubort on Mar 7 2016, 13:21.

Mar 6 2016

correct path in ansible receip
9a0d884ab4e7
·aubort on Mar 6 2016, 21:46.
Ignore Received header relayed by postfix
b4ca0507af68
·aubort on Mar 6 2016, 21:44.

Mar 3 2016

Correct logcheck rule..
5fb4e3d45609
·aubort on Mar 3 2016, 09:23.
logcheck: i fail at regex..
b36fb0c8ebb8
·aubort on Mar 3 2016, 09:20.
Merge branch 'master' of ssh://86.119.26.165:2222/diffusion/PHCODE/science
6e397a4ad9d9
·aubort on Mar 3 2016, 08:51.

Mar 2 2016

Complitely disable selinux
8eede36c5215
·aubort on Mar 2 2016, 15:19.

Mar 1 2016

selinux logs
3dbf87b4eebb
·aubort on Mar 1 2016, 13:12.

Feb 29 2016

Full SSL is now working, it then closes T19
9ad110bb6033
·aubort on Feb 29 2016, 21:56.
Allow acces by ip to phab (cert isnt valid though)
c06e7cadc17d
·aubort on Feb 29 2016, 21:41.
Restart php when phab conf changes
b100305f7024
·aubort on Feb 29 2016, 21:00.

Feb 28 2016

Logcheck ssh
c3ebfdf872a4
·aubort on Feb 28 2016, 19:59.
Logcheck: more precise rule
b0a31425207f
·aubort on Feb 28 2016, 19:49.
correct logcheck rule
a1919777e73a
·aubort on Feb 28 2016, 00:35.
correct again logcheck rule
e45b4e390ce7
·aubort on Feb 28 2016, 00:34.

Feb 27 2016

Add logcheck rule for ntp
dd556c15232b
·aubort on Feb 27 2016, 22:49.
fix logcheck rule for cron
385607ca2910
·aubort on Feb 27 2016, 22:48.
Fix ssl stuff for postfix
930b14bae71e
·aubort on Feb 27 2016, 22:47.
logcheck: match anything ansible
10b233aa2ef9
·aubort on Feb 27 2016, 13:15.
correct logcheck rules...
e788e1ffc957
·aubort on Feb 27 2016, 13:12.
logcheck: generic CROND, add rsyslog rule
6c2b622cb261
·aubort on Feb 27 2016, 12:39.
Add anacron rule on logcheck
d62180e3612d
·aubort on Feb 27 2016, 12:35.
reorder logcheck rules a bit
a0cfc59d6177
·aubort on Feb 27 2016, 12:33.
Add more logcheck rules
8326f55d36e6
·aubort on Feb 27 2016, 12:33.
more logcheck rules
9298881b854b
·aubort on Feb 27 2016, 01:08.

Feb 26 2016

Correct cert path for postfix
0bcc6b15e5b3
·aubort on Feb 26 2016, 20:18.
postfix uses letsencrpyt cert, fix logcheck rule
4b0257195e47
·aubort on Feb 26 2016, 13:25.
fix postfix alias
d01e0a2c9d93
·aubort on Feb 26 2016, 13:25.
logcheck: more cutom rules for ssh, cron, systemd
60b3823bdba0
·aubort on Feb 26 2016, 11:36.
logcheck: more systemd rules
8561e06d1c2a
·aubort on Feb 26 2016, 10:53.

Feb 25 2016

arc symlink on app
85cfd8b8a43e
·aubort on Feb 25 2016, 18:35.
hostname logs
f01ee99e05a8
·aubort on Feb 25 2016, 17:36.
rsyslog and logcheck emails
895ba78cea45
·aubort on Feb 25 2016, 15:47.

Feb 24 2016

Configure email aliases for forwarding
4c1aa9e95d8e
·aubort on Feb 24 2016, 17:02.

Feb 23 2016

correct email alias
cefe5db248c2
·aubort on Feb 23 2016, 18:51.
Email alias for phab user
0ba58d5d8aae
·aubort on Feb 23 2016, 18:51.
Add contact group for Nagios
26dd463c9e7f
·aubort on Feb 23 2016, 18:30.
Add www domain to ssl cert
900f99fa573e
·aubort on Feb 23 2016, 17:56.
Moar postfix
60f9aad90d99
·aubort on Feb 23 2016, 17:55.
haproxy stats and nagios/ganglia over TLS
277e18ff2019
·aubort on Feb 23 2016, 15:04.
Add postfix config to jump server
9887e7d25026
·aubort on Feb 23 2016, 14:55.
jenkins: add build status badge, add ViewStatus permission
e429f52c0593
·aubort on Feb 23 2016, 13:29.
excplicitly disabled unused ports on jump server
abefbb3db2ab
·aubort on Feb 23 2016, 12:24.
option to allow http for jenkins
a8c62200f1b6
·aubort on Feb 23 2016, 11:42.

Feb 22 2016

order of options
64345608c4df
·aubort on Feb 22 2016, 21:42.
Moar good ciphers and blacklist tlsv1 and add hsts
60af6983846e
·aubort on Feb 22 2016, 21:39.
May I have secure ciphers ?
d2dbb21ce542
·aubort on Feb 22 2016, 21:36.
SSL everywhere
9690370a0003
·aubort on Feb 22 2016, 18:02.
Correct letsencrypt scripts
6fac146c9cac
·aubort on Feb 22 2016, 18:01.
letsencrypt rename script
42882da235ee
·aubort on Feb 22 2016, 17:27.
letsencrypt renew
689c65c25745
·aubort on Feb 22 2016, 17:27.
jenkins url config
740640ee499d
·aubort on Feb 22 2016, 17:08.
Jenkins is accessed by subdomain instead of by port
c1071710a2c1
·aubort on Feb 22 2016, 16:37.
static domain for files on phab
852233a898bb
·aubort on Feb 22 2016, 16:10.
haproxy: httpcheck and sorry page
ca995d8b1b29
·aubort on Feb 22 2016, 15:52.
Jenkins configuration
3a0311adce2f
·aubort on Feb 22 2016, 15:15.

c4science/rolesmasterd9556b40eef8d279c9bb946…

Mar 22 2016

Mar 20 2016

Mar 16 2016

Mar 15 2016

Mar 14 2016

Mar 11 2016

Mar 10 2016

Mar 8 2016

Mar 7 2016

Mar 6 2016

Mar 3 2016

Mar 2 2016

Mar 1 2016

Feb 29 2016

Feb 28 2016

Feb 27 2016

Feb 26 2016

Feb 25 2016

Feb 24 2016

Feb 23 2016

Feb 22 2016

c4science/roles
masterd9556b40eef8d279c9bb946…