source: server/fedora/config

Revision Log Mode:


Legend:

Added
Modified
Copied or renamed
Diff Rev Age Author Log Message
(edit) @1072   15 years quentin Don't apply resource limits to root's processes, and clean up ...
(edit) @1071   15 years quentin Set sane memory resource limits
(edit) @1068   15 years quentin Disallow root keyboard-interactive logins
(edit) @1067   15 years quentin tibetforum.mit.edu vhost + cert
(edit) @1059   15 years geofft We don't need mDNS
(edit) @1043   15 years geofft contrib.scripts moved
(edit) @1040   15 years mitchb Use the django media directory from the RPM, not the egg. Silly me... ...
(edit) @1039   15 years mitchb Provide autoinstalled Djangos with /__scripts/django/media for admin CSS
(edit) @1032   15 years mitchb Change CPU time limit for Apache-spawned processes from 3min to 5min. ...
(edit) @1020   15 years geofft /etc/sysconfig/openafs: for great awesome
(edit) @1019   15 years mitchb Increase CPU time limit for processes spawned by Apache. This should ...
(edit) @1018   15 years quentin Allow hostbased authentication over the backend network (Yay!)
(edit) @1017   15 years quentin Route to b-k over the backend network
(edit) @1016   15 years quentin Allow FastCGIs to take up to 5 minutes to respond
(edit) @1010   15 years quentin ACPI event handler so you can't shut down with the power button
(edit) @1006   15 years quentin Reboot on OOM
(edit) @1001   15 years mitchb We need subversion-devel from testing as well, so that we can build a ...
(edit) @1000   15 years andersk Change the core file limit from hard to soft.
(edit) @999   15 years geofft Install Subversion (1.5) from the updates-testing-newkey repo.
(edit) @998   15 years geofft cert and vhost for schuh.mit.edu
(edit) @996   15 years mitchb i386_linux3 isn't actually twice as good just because we listed it ...
(edit) @994   15 years geofft i386_deb40 is better than i386_linux1
(edit) @992   15 years mitchb Don't let cron send mail if it can't touch the cron status file. ...
(edit) @988   15 years mitchb I should start reading root's mail. I will probably regret this.
(edit) @986   15 years quentin Add reverse-resolution for the backend IPs
(edit) @985   15 years quentin Map to local usernames, instead of to @scripts.mit.edu addresses (both ...
(edit) @984   15 years quentin Allow local part to contain @
(edit) @983   15 years quentin Support mail to foo@bar.scripts.mit.edu
(edit) @982   15 years quentin Check that cron can actually run things as users
(edit) @979   15 years geofft er, Fedora has a nontrivial vimrc
(edit) @978   15 years geofft undo miscommit
(edit) @977   15 years geofft Suppress writing .viminfo file
(edit) @975   15 years geofft eastgate.mit.edu SSL cert and conf [help.mit.edu #792732]
(edit) @974   15 years andersk Change sipb.mit.edu DocumentRoot to web_scripts/sipb.
(edit) @973   15 years geofft Change default cert to *.scripts except for 18.181.0.43.
(edit) @972   15 years geofft Uncommitted changes to httpd.conf. These seem to involve performance ...
(edit) @971   15 years andersk Get rid of the custom sipb.mit.edu aliases.
(edit) @970   15 years andersk Change the IP for scripts.mit.edu and add scripts-vhosts.mit.edu.
(edit) @969   15 years andersk Add scripts-vhosts.
(edit) @968   15 years andersk Add 18.181.0.43 and scripts-vhosts.mit.edu.
(edit) @967   15 years geofft oops
(edit) @966   15 years geofft Add new scripts.mit.edu IP address
(edit) @963   15 years quentin Add vhost entry for picker.mit.edu so it picks up its cert
(edit) @962   15 years geofft SSL cert for picker.mit.edu
(edit) @961   15 years quentin Add scripts LDAP schema to the repo
(edit) @953   15 years andersk Revert r952.
(edit) @952   15 years quentin Serve sipb.mit.edu wiki content directly via Apache
(edit) @948   16 years quentin Try hostbased authentication in the client
(edit) @947   16 years quentin Add shosts.equiv for allowing logins
(edit) @946   16 years quentin Allow ssh hostbased authentication
(edit) @943   16 years geofft Hacks because Apache makes things hard at the .htaccess level.
(edit) @942   16 years geofft debathena.mit.edu vhost
(edit) @941   16 years geofft cert for debathena.mit.edu
(edit) @940   16 years geofft Whoops, forgot to reify-vhost.py sipb.mit.edu
(edit) @939   16 years geofft Setting tty modes failed: Invalid argument
(edit) @938   16 years andersk d_zroot.pl: Read .ssh/authorized_keys, not just authorized_keys2. ...
(edit) @915   16 years quentin Support mDNS on scripts
(edit) @914   16 years quentin Add if_err_eth2 to allowed munin commands (wtf?)
(edit) @910   16 years quentin configuration for nss-ldapd
(edit) @891   16 years quentin Add reuter to blocked mail accounts list, and prevent outbound mail
(edit) @890   16 years geofft I think this works better
(edit) @889   16 years quentin Fix geofft's typo
(edit) @888   16 years geofft Display failed root logins from off campus only at 10+10k attempts.
(edit) @887   16 years quentin Ignore non-fatal authentication failures
(edit) @886   16 years geofft sipb.mit.edu certificate
(edit) @885   16 years geofft and the vhosts they rode in on
(edit) @884   16 years geofft More noms.
(edit) @883   16 years geofft Re r882, make the resulting log zephyr public. (Thanks to price for ...
(edit) @879   16 years quentin Update nscd configuration to cache smarter
(edit) @878   16 years quentin Enable sshd verbose mode, so we can identify the public key used for login
(edit) @877   16 years quentin Provide commented-out non-nss_nonlocal region in nsswitch
(edit) @876   16 years quentin Uncommitted changes on b-k
(edit) @872   16 years geofft forgot to fix SSLVerifyclient on familynet
(edit) @870   16 years geofft yay SSL vhosts yay
(edit) @869   16 years geofft SSLVerifyClient optional on port 444. Oops. ^_^;;
(edit) @868   16 years quentin Ignore all partitions mounted under /mnt
(edit) @867   16 years quentin Update postfix configuration for version 2.5.1
(edit) @866   16 years quentin Use scripts yum repository (yay!)
(edit) @865   16 years quentin Use sudo to monitor hardware sensors for munin
(edit) @864   16 years quentin Ignore f7root partitions when checking disk space
(edit) @857   16 years quentin User is named scripts-build...
(edit) @856   16 years quentin Add .rpmmacros file for configuring the rpmbuild user
(edit) @854   16 years geofft Add a script to convert LDAP vhosts into <VirtualHost> blocks, so it's ...
(edit) @853   16 years andersk Put the children out of their misery.
(edit) @847   16 years andersk Run munin as an unprivileged user with sudo for root access when necessary
(edit) @845   16 years andersk Use the local LDAP server (as is already the case on both servers).
(edit) @842   16 years andersk Run php directly from suexec, so php scripts don’t need to be executable.
(edit) @841   16 years geofft [help.mit.edu #694790]
(edit) @831   16 years andersk MaxRequestsPerChild < Ridiculous
(edit) @829   16 years geofft Debathena's reasoning seems sound enough. Add fuse_allow_other, which ...
(edit) @822   16 years geofft OM NOM NOM NOM CERTIFICATES
(edit) @821   16 years geofft I'm stupid.
(edit) @820   16 years geofft Add server certS for random-hall.mit.edu and mitsoc.mit.edu
(edit) @817   16 years geofft Added code to zephyr on OOM kills. Also commented out a change by ...
(edit) @814   16 years geofft As Anders would say...
(edit) @813   16 years geofft This looks useful too
(edit) @811   16 years quentin Add localhost to the list of scripts names
(edit) @808   16 years geofft Probably a useful file to have.
(edit) @807   16 years quentin Add routes for sql via eth1
(edit) @804   16 years andersk We don't actually have a deb.gif.
Note: See TracRevisionLog for help on using the revision log.