Skip to content

Bosfeatures #13

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 48 commits into
base: bosfeatures
Choose a base branch
from
Open

Bosfeatures #13

wants to merge 48 commits into from

Conversation

jonjhallettuob
Copy link

Hi Dan,

Hope this looks okay. Let me know if I should be bundling the changes differently.

Thanks,

Jon.

jonjhallettuob and others added 30 commits October 7, 2016 11:47
@jonjhallettuob
* Change owner of directories to project user
4e48dad 
* Change permissions of high-level directorys to remove group write (to make SSH work)
@jonjhallettuob
Puppet insists that uid and gid are strings in a concat section.
c9b71d4
@jonjhallettuob
* Backslash quote backslashes to prevent Puppet complaining about \. …
50c2eb7 
…not being

  a valid sequence
@jonjhallettuob
Use Puppet heredoc for complicated Apache config line...
4388dc5
@jonjhallettuob
Revert "Use Puppet heredoc for complicated Apache config line..."
d7ff480 
This reverts commit 4388dc5.

It turns out that Puppet 3 doesn't support heredocs :-(
@jonjhallettuob
Try adding reset-perms to the sudo list.
ca70ee2
@jonjhallettuob
Move the sudo::conf into the project definition...
a0d1898
@jonjhallettuob
Allow NOPASSWD for reset-perms. I hope this is a good idea...
8885ee9
@jonjhallettuob
* create apache and apache/conf
8fdf88a
@jonjhallettuob
* add dependencies for apache sub directories
60185d8
@jonjhallettuob
* typo - added commas to ends of lines
e86041d
@jonjhallettuob
* add group write to subdirectories in project directory
f3a1733 
* add dependency on project directory to subdirectories
@jonjhallettuob
* move apache directory creation to apache manifest
a5e06d7
@jonjhallettuob
* Move creation of project .ssh directory from Vagrantfile to Puppet
068472b
@jonjhallettuob
* Fix quotes to enable interpolation
7c7b58f
@jonjhallettuob
* Remove redundant requires
2423f7e
@jonjhallettuob
* remove apache dir from project root - this is the Debian structure. We
f157e77 
  should be using Dan's layout instead.
@jonjhallettuob
* fix up SELinux types
35c6544
@jonjhallettuob
* include Apache headers module
5f9797e
@jonjhallettuob
* allow no password for apachectl from bos2
6d93264
@kierenpitts
Make sure mod_wsgi is loaded
875ca4b
@mysysadmin-ltd
Added use_optional_includes to fix No matches for the wildcard '*.con…
ef93660 
…f' in fitnet
@kierenpitts
Merge pull request #1 from mysysadmin-ltd/patch-1
2894329 
Added use_optional_includes to fix No matches for the wildcard '*.conf' in fitnet
@jonjhallettuob
* add SELinux config to allow httpd to connect to database and send m…
61f2a90 
…ail.
@jonjhallettuob
Merge branch 'bosfeatures' of github.com:/ilrt/puppet-projects into b…
ff9f611 
…osfeatures
@jonjhallettuob
* tidy up names and titles for SELinux booleans
f720a4c
@jonjhallettuob
* use ensure_resource syntax for SELinux booleans - selboolean fails …
2bf3234 
…for some

  reason...
@jonjhallettuob
* Update SELinux type for ~/var to allow writes
2d4aeb3
@jonjhallettuob
* create ~/.settings and set the SELinux context for httpd
054ef7a
@jonjhallettuob
Ensure httpd starts after reboot.
37d3942
@jonjhallettuob
Add a possibly redundant but explanatory option to enable httpd at boot.
fe43fdf
@jonjhallettuob
Ensure keys are in place before httpd service starts.
3f9f040
@jonjhallettuob
Vhosts now accept a certificate name rather than default to the vhost…
9d8ce00 
… name.
@jonjhallettuob
Ensure consistent use of vhost_name for conf files.
705fadc
@jonjhallettuob
Don't create keys if they already exist and use ensure_resource to set
f591866 
SELinux type for existing certs.
@jonjhallettuob
Don't auto generate certs...
3132fdc
@jonjhallettuob
Logrotation is handled by rotatelog pipe
61b5352
@jonjhallettuob
Add link to cert as certificate chain
935c1fd
@jonjhallettuob
Change SELinux context of lib to allow pyc files to be created
85d51e0
@jonjhallettuob
Revert "Change SELinux context of lib to allow pyc files to be created"
37e5611 
This reverts commit 85d51e0.
@jonjhallettuob
Ensure Apache uses only strong ciphers
d4cf290
@jonjhallettuob
Move SSL Cipher config to Hiera
fa2be9f
@jonjhallettuob
Add security settings for Apache
2746082
@jonjhallettuob
Move server stuff to apache module from vhost
7cb8b83
@jonjhallettuob
Tidy up indentation
62329fa
@jonjhallettuob
Turn on SELinux boolean for httpd to get to memcache
3b818c4
@jonjhallettuob
Allow worker as an MPM option
9e12f0f
@jonjhallettuob
Give other access to the project Apache logs
da6648a
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@jonjhallettuob @kierenpitts @mysysadmin-ltd