source: server/fedora/config

Revision Log Mode:


Legend:

Added
Modified
Copied or renamed
Diff Rev Age Author Log Message
(edit) @1114   15 years geofft change docroot for next.mit.edu
(edit) @1101   15 years presbrey turn off ProxyPreserveHost to distinguish Host from X-Forwarded-Host
(edit) @1092   15 years geofft okay, maybe ajp was a bad idea
(edit) @1089   15 years presbrey httpd: add mod_proxy module and friends
(edit) @1088   15 years mitchb bc.mit.edu certificate and reified vhost
(edit) @1086   15 years quentin Test your changes! Port 444 was serving axo.mit.edu all day!
(edit) @1085   15 years mitchb scripts.mit.edu CSR defaults
(edit) @1084   15 years mitchb Add openssl.cnf file, so we can track our standard CSR fields
(edit) @1082   15 years geofft Allow reified vhosts to override *.scripts
(edit) @1081   15 years geofft reify cycling-club.scripts.mit.edu to pick up the cert
(edit) @1080   15 years geofft cycling-club.scripts 30 day cert from Comodo
(edit) @1078   15 years mitchb Add a CellServDB.local so we can pull in changes without rebuilding.
(edit) @1073   15 years quentin Don't let people lock all our memory (use the Ubuntu default of 64KB ...
(edit) @1072   15 years quentin Don't apply resource limits to root's processes, and clean up ...
(edit) @1071   15 years quentin Set sane memory resource limits
(edit) @1068   15 years quentin Disallow root keyboard-interactive logins
(edit) @1067   15 years quentin tibetforum.mit.edu vhost + cert
(edit) @1059   15 years geofft We don't need mDNS
(edit) @1043   15 years geofft contrib.scripts moved
(edit) @1040   15 years mitchb Use the django media directory from the RPM, not the egg. Silly me... ...
(edit) @1039   15 years mitchb Provide autoinstalled Djangos with /__scripts/django/media for admin CSS
(edit) @1032   15 years mitchb Change CPU time limit for Apache-spawned processes from 3min to 5min. ...
(edit) @1020   15 years geofft /etc/sysconfig/openafs: for great awesome
(edit) @1019   15 years mitchb Increase CPU time limit for processes spawned by Apache. This should ...
(edit) @1018   15 years quentin Allow hostbased authentication over the backend network (Yay!)
(edit) @1017   15 years quentin Route to b-k over the backend network
(edit) @1016   15 years quentin Allow FastCGIs to take up to 5 minutes to respond
(edit) @1010   15 years quentin ACPI event handler so you can't shut down with the power button
(edit) @1006   15 years quentin Reboot on OOM
(edit) @1001   15 years mitchb We need subversion-devel from testing as well, so that we can build a ...
(edit) @1000   15 years andersk Change the core file limit from hard to soft.
(edit) @999   15 years geofft Install Subversion (1.5) from the updates-testing-newkey repo.
(edit) @998   15 years geofft cert and vhost for schuh.mit.edu
(edit) @996   15 years mitchb i386_linux3 isn't actually twice as good just because we listed it ...
(edit) @994   15 years geofft i386_deb40 is better than i386_linux1
(edit) @992   15 years mitchb Don't let cron send mail if it can't touch the cron status file. ...
(edit) @988   15 years mitchb I should start reading root's mail. I will probably regret this.
(edit) @986   15 years quentin Add reverse-resolution for the backend IPs
(edit) @985   15 years quentin Map to local usernames, instead of to @scripts.mit.edu addresses (both ...
(edit) @984   15 years quentin Allow local part to contain @
(edit) @983   15 years quentin Support mail to foo@bar.scripts.mit.edu
(edit) @982   15 years quentin Check that cron can actually run things as users
(edit) @979   15 years geofft er, Fedora has a nontrivial vimrc
(edit) @978   15 years geofft undo miscommit
(edit) @977   15 years geofft Suppress writing .viminfo file
(edit) @975   15 years geofft eastgate.mit.edu SSL cert and conf [help.mit.edu #792732]
(edit) @974   15 years andersk Change sipb.mit.edu DocumentRoot to web_scripts/sipb.
(edit) @973   15 years geofft Change default cert to *.scripts except for 18.181.0.43.
(edit) @972   15 years geofft Uncommitted changes to httpd.conf. These seem to involve performance ...
(edit) @971   15 years andersk Get rid of the custom sipb.mit.edu aliases.
(edit) @970   15 years andersk Change the IP for scripts.mit.edu and add scripts-vhosts.mit.edu.
(edit) @969   15 years andersk Add scripts-vhosts.
(edit) @968   15 years andersk Add 18.181.0.43 and scripts-vhosts.mit.edu.
(edit) @967   15 years geofft oops
(edit) @966   15 years geofft Add new scripts.mit.edu IP address
(edit) @963   15 years quentin Add vhost entry for picker.mit.edu so it picks up its cert
(edit) @962   15 years geofft SSL cert for picker.mit.edu
(edit) @961   15 years quentin Add scripts LDAP schema to the repo
(edit) @953   15 years andersk Revert r952.
(edit) @952   15 years quentin Serve sipb.mit.edu wiki content directly via Apache
(edit) @948   15 years quentin Try hostbased authentication in the client
(edit) @947   15 years quentin Add shosts.equiv for allowing logins
(edit) @946   15 years quentin Allow ssh hostbased authentication
(edit) @943   15 years geofft Hacks because Apache makes things hard at the .htaccess level.
(edit) @942   15 years geofft debathena.mit.edu vhost
(edit) @941   15 years geofft cert for debathena.mit.edu
(edit) @940   15 years geofft Whoops, forgot to reify-vhost.py sipb.mit.edu
(edit) @939   15 years geofft Setting tty modes failed: Invalid argument
(edit) @938   15 years andersk d_zroot.pl: Read .ssh/authorized_keys, not just authorized_keys2. ...
(edit) @915   15 years quentin Support mDNS on scripts
(edit) @914   15 years quentin Add if_err_eth2 to allowed munin commands (wtf?)
(edit) @910   15 years quentin configuration for nss-ldapd
(edit) @891   15 years quentin Add reuter to blocked mail accounts list, and prevent outbound mail
(edit) @890   15 years geofft I think this works better
(edit) @889   15 years quentin Fix geofft's typo
(edit) @888   15 years geofft Display failed root logins from off campus only at 10+10k attempts.
(edit) @887   15 years quentin Ignore non-fatal authentication failures
(edit) @886   15 years geofft sipb.mit.edu certificate
(edit) @885   15 years geofft and the vhosts they rode in on
(edit) @884   15 years geofft More noms.
(edit) @883   15 years geofft Re r882, make the resulting log zephyr public. (Thanks to price for ...
(edit) @879   15 years quentin Update nscd configuration to cache smarter
(edit) @878   15 years quentin Enable sshd verbose mode, so we can identify the public key used for login
(edit) @877   15 years quentin Provide commented-out non-nss_nonlocal region in nsswitch
(edit) @876   15 years quentin Uncommitted changes on b-k
(edit) @872   15 years geofft forgot to fix SSLVerifyclient on familynet
(edit) @870   15 years geofft yay SSL vhosts yay
(edit) @869   15 years geofft SSLVerifyClient optional on port 444. Oops. ^_^;;
(edit) @868   15 years quentin Ignore all partitions mounted under /mnt
(edit) @867   15 years quentin Update postfix configuration for version 2.5.1
(edit) @866   15 years quentin Use scripts yum repository (yay!)
(edit) @865   15 years quentin Use sudo to monitor hardware sensors for munin
(edit) @864   15 years quentin Ignore f7root partitions when checking disk space
(edit) @857   15 years quentin User is named scripts-build...
(edit) @856   15 years quentin Add .rpmmacros file for configuring the rpmbuild user
(edit) @854   15 years geofft Add a script to convert LDAP vhosts into <VirtualHost> blocks, so it's ...
(edit) @853   15 years andersk Put the children out of their misery.
(edit) @847   15 years andersk Run munin as an unprivileged user with sudo for root access when necessary
(edit) @845   15 years andersk Use the local LDAP server (as is already the case on both servers).
(edit) @842   16 years andersk Run php directly from suexec, so php scripts don’t need to be executable.
Note: See TracRevisionLog for help on using the revision log.