Commit graph

104 commits

Author SHA1 Message Date
b4ca46ae4d Make resolv.conf get set before packages are installed
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
2014-10-22 00:30:46 +00:00
c471482f3c Add resolv.conf for host1plus01
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
2014-10-22 00:15:39 +00:00
Aurélien Bompard
4f7ff8efd2 Mailman: ansible group conflict in staging 2014-10-20 09:55:33 +00:00
Ralph Bean
2e60797ef4 New "staging-friendly" group to be exempted from staging firewall ban. 2014-10-13 18:22:24 +00:00
Kevin Fenzi
1856ba1ff6 Try unsetting the explicit ipv4 as it breaks localhost. 2014-10-10 19:30:53 +00:00
Kevin Fenzi
dde8786675 Also install transports on bastion/gateway 2014-10-09 03:07:17 +00:00
Kevin Fenzi
6fb0963909 Drpo these forwarding rules now that we have the bridge workaround. 2014-10-08 22:16:46 +00:00
Kevin Fenzi
e2c4fd4d3d Try nuking the iptables hashlimit rules on coloamer and switch in pam_shield. 2014-10-08 20:50:57 +00:00
Stephen Smoogen
4434fdb965 and maybe this will get the right resolv.conf since it dont like cloud 2014-10-03 01:34:09 +00:00
a03781965d Setup the production and staging Dist Git 2014-08-26 18:28:28 +00:00
3f08b61023 allow outbound http and https to the compose box from the builders 2014-08-21 17:06:40 +00:00
f797aad45c allow traffic on virbr0 2014-08-18 17:36:07 +00:00
Ralph Bean
20344c943b Back to our explicit IP. 2014-08-18 16:09:48 +00:00
Ralph Bean
d530e7da49 Some comments. 2014-08-18 16:08:56 +00:00
Ralph Bean
056d0f22f9 The Internet seems to think I should do this. 2014-08-18 16:05:44 +00:00
Ralph Bean
b547198a95 Ban staging from prod. 2014-08-18 15:52:05 +00:00
Kevin Fenzi
445af9594c Make sure we enable iptables. 2014-07-31 00:06:34 +00:00
Aurélien Bompard
9676c5befb Align mailman's main.cf with the standard one 2014-07-21 17:56:14 +00:00
Aurélien Bompard
786d325a79 Move mailman's postfix config to the base role 2014-07-21 16:03:49 +00:00
Kevin Fenzi
7bb42d3c99 Just gzip here, xz confuses epylog. 2014-07-21 14:28:30 +00:00
Kevin Fenzi
2276f25345 Forgot to comment these out. 2014-07-18 20:44:36 +00:00
Kevin Fenzi
92549b5c05 Enter log01, bravest of the brave 2014-07-18 20:42:00 +00:00
Kevin Fenzi
8019968f01 Add syncHttpLogs to log01 2014-07-18 18:33:57 +00:00
Kevin Fenzi
d8be30c7ed Set download-ib02 to use bastion vpn for mail. 2014-07-18 17:15:16 +00:00
Kevin Fenzi
59df5e6b4b Setup logrotate for merged logs. 2014-07-16 22:10:52 +00:00
Kevin Fenzi
a7d016c2b3 aa! 2014-07-16 21:45:41 +00:00
Kevin Fenzi
d445a1df19 First rough cut at a logserver setup. Will need lots more tweaking. 2014-07-16 21:01:29 +00:00
Kevin Fenzi
ba0af98867 Add osuosl03 2014-07-09 21:26:28 +00:00
Kevin Fenzi
97889ca566 ok, try this longer way 2014-07-09 16:47:10 +00:00
Kevin Fenzi
ce4a22cf64 Tweak rootpw for composer hosts with different one. 2014-07-09 16:45:29 +00:00
Kevin Fenzi
2032b6396a Narrow this forward to only valid ips at site. 2014-07-05 21:33:31 +00:00
Kevin Fenzi
a326c9e867 Just add this for now to get rid of ssh noise at coloamer01 2014-07-05 21:11:59 +00:00
Kevin Fenzi
7113f43507 Add datacenter and resolv.conf for coloamer 2014-07-03 21:29:56 +00:00
Kevin Fenzi
ecc3926fad Try this for hostname 2014-06-30 22:05:36 +00:00
Kevin Fenzi
401ac631b2 This is inventory_hostname. 2014-06-30 21:52:40 +00:00
Kevin Fenzi
4331dd3d90 Give this a try for rhel7 hosts. 2014-06-30 20:56:10 +00:00
Kevin Fenzi
bc5e431cb6 This should be internal bastion also. 2014-06-27 17:50:47 +00:00
Kevin Fenzi
3c84f16e31 Work around ansible issue 6109 2014-06-25 22:05:26 +00:00
Kevin Fenzi
bd04c17890 Switch this back 2014-06-25 21:57:51 +00:00
Kevin Fenzi
2959a10def See if this is a template bug. 2014-06-25 21:55:37 +00:00
Kevin Fenzi
6f40c0701b Does this work? 2014-06-25 21:44:51 +00:00
Kevin Fenzi
32e2d0f324 Add a datacenter main.cf for phx2 hosts. 2014-06-25 03:26:55 +00:00
Kevin Fenzi
92e0239c16 On new rhel7 virthosts allow forwarding. 2014-06-24 18:09:58 +00:00
Kevin Fenzi
1ebbc5ffce Stay newline 2014-06-23 03:21:11 +00:00
Kevin Fenzi
3b40f9c1ab Initial sshd_config for rhel7 2014-06-21 01:20:35 +00:00
Kevin Fenzi
1aacd08ec5 Paren 2014-06-12 21:35:23 +00:00
Kevin Fenzi
cb7c5c456a Once again with less aaaaa 2014-06-12 21:07:35 +00:00
Kevin Fenzi
411a2778b6 Lets try and go back 2014-06-12 21:06:42 +00:00
Kevin Fenzi
549c077b4e Shot to the heart and you're to blame... 2014-06-12 20:59:48 +00:00
Kevin Fenzi
0108c26ca9 I just don't get it 2014-06-12 20:54:37 +00:00