openstack/fuel-library
Code Issues Proposed changes
703167a6ae
fuel-library/deployment/puppet/nailgun/templates
History
Stanislaw Bogatkin 0f232a678b Tighten frontend nginx and haproxy TLS ciphersuites 
To get rid from last VUWACONA vulnerabilities, add tight protocol
and ciphersuite requisitions on UI HTTPS nginx and TLS-aware HAProxy
instances.

Also create new Diffie-Hellmann parameters for frontend nginx.

Closes-Bug: #1532778
Change-Id: Ib851038b883a84f4d59c3e4db8cc25608e215821
2016-01-20 12:46:18 +03:00
..
cobbler Fix fence_ssh python script 2015-12-03 22:59:39 +02:00
supervisor Fix supervisord start with stale pidfile 2014-08-28 14:14:13 +04:00
systemd Systemd syslog settings for astute, nailgun and ostf 2015-12-03 19:57:28 +00:00
astute.sysconfig.erb Setup correct log path and debug level for Astute 2015-12-14 20:57:35 +00:00
astuted.conf.erb nailgun::astute: set the bootstrap profile in astuted.conf 2015-07-31 11:11:13 +03:00
astuted.erb Use a new ruby 2.1 in the master node as a single ruby version. 2014-04-08 12:18:26 +04:00
cron_daily_capacity.erb Add daily cron job for capacity audit 2013-10-07 18:47:30 +03:00
dhclient.conf.erb Create dhclient.conf, set priority for nailgun DNS 2014-07-01 15:57:46 +00:00
dhcp-enter-hooks.erb Move resolv.conf to nailgun host role, dnsmasq.upstream to cobbler 2014-04-29 13:35:27 +04:00
dnsmasq.dhcp-range.erb Use tags in the dnsmasq for HTTP boot 2015-12-22 15:17:29 +03:00
free_disk_check.yaml.erb Free disk check cron job for host monitoring 2015-03-02 14:37:15 +00:00
fuel_client.yaml.erb Put fuelclient configuration file in root's $HOME 2015-11-03 09:35:28 +00:00
logrotate.conf.erb [FUEL-777] move nailgun,osnailfacter to FUEL 2013-07-22 19:18:41 +04:00
nginx_nailgun_repo.conf.erb Deny access to diagnostic snapshots without auth 2015-09-03 12:41:50 +03:00
nginx_nailgun.conf.erb Tighten frontend nginx and haproxy TLS ciphersuites 2016-01-20 12:46:18 +03:00
nginx.conf.erb Fix clickjacking attack vulnerability in nginx 2015-11-16 20:45:23 +02:00
ostf.conf.erb Remove usage of admin_token 2014-10-28 09:37:39 +00:00
resolv.conf.erb Make DNS on the master node work even when cobbler is not running 2015-07-18 10:19:46 +03:00
root_ssh_config.erb Refactor root ssh config, add admin net and domain to list of host nets 2015-09-04 19:54:37 +03:00
rsyncd_xinetd.erb Add file logging for rsync xinetd service 2015-03-26 12:04:58 +00:00
rsyncd.conf.erb Add fuel plugins folder to rsync 2014-10-21 13:37:33 +00:00
settings.yaml.erb Add feature_groups to nailgun settings.yaml 2015-11-10 15:46:52 +03:00
supervisord.conf.astute.erb Fix supervisord start with stale pidfile 2014-08-28 14:14:13 +04:00
supervisord.conf.base.erb Deploy fuel-dockerctl tools via puppet 2014-04-28 16:22:03 +04:00
supervisord.conf.erb Fix supervisord start with stale pidfile 2014-08-28 14:14:13 +04:00
supervisord.conf.nailgun.erb Add collectors daemons for set of OSWL resources 2015-03-10 15:55:25 +00:00
uwsgi_nailgun.yaml.erb Fix site-packages path for python 2.7 2015-12-02 16:56:27 +03:00