|
|
@740
|
16 years |
andersk |
Update SSL configuration directives from Fedora's ssl.conf. Notably, ...
|
|
|
@739
|
16 years |
andersk |
spew--
|
|
|
@738
|
16 years |
andersk |
SHUT. THE. FUCK. UP.
|
|
|
@734
|
16 years |
andersk |
Turn on KeepAlive for SSL and increase timeouts, to avoid pathological ...
|
|
|
@715
|
16 years |
quentin |
Allow syn to access nrpe through iptables
|
|
|
@712
|
16 years |
quentin |
Allow syn to monitor scripts
|
|
|
@708
|
16 years |
geofft |
Add rebecca to sudoers.
|
|
|
@707
|
16 years |
andersk |
This sucker has had it coming for a long time.
|
|
|
@690
|
16 years |
quentin |
Ignore more syslog messages
|
|
|
@687
|
16 years |
andersk |
We might as well present the *.scripts.mit.edu certificate for ...
|
|
|
@682
|
16 years |
andersk |
Revert r681; this doesn't actually work.
|
|
|
@681
|
16 years |
andersk |
Drop to nobody in case of a terrible mod_vhost_ldap disaster.
|
|
|
@677
|
16 years |
andersk |
Remove hacks-old.
|
|
|
@671
|
17 years |
quentin |
Remove broken configuration for deprecated mime_magic module, as we ...
|
|
|
@669
|
17 years |
geofft |
disable X11 forwarding; allow forwarding $EDITOR and $VISUAL because ...
|
|
|
@668
|
17 years |
quentin |
Ignore more meaningless sshd logs
|
|
|
@667
|
17 years |
quentin |
Don't log logins from non-root users
|
|
|
@666
|
17 years |
quentin |
Change syslog zephyring to coalesce messages
|
|
|
@665
|
17 years |
quentin |
Make Zephyrs more useful and move to -c scripts-auto
|
|
|
@664
|
17 years |
andersk |
-c scripts -> -c scripts-auto.
|
|
|
@662
|
17 years |
quentin |
Save log and pid in the right places
|
|
|
@661
|
17 years |
quentin |
Run whoisd on startup
|
|
|
@657
|
17 years |
quentin |
Run if_ plugin as root so it can determine the interface speed
|
|
|
@656
|
17 years |
andersk |
And finally the vhosts directory is unused.
|
|
|
@653
|
17 years |
andersk |
Convert framewrapper vhosts to real vhosts in LDAP.
|
|
|
@649
|
17 years |
presbrey |
httpd.conf: configure SNI support for *:444
|
|
|
@648
|
17 years |
presbrey |
httpd.conf: configure SNI support
|
|
|
@646
|
17 years |
quentin |
Send to host-specific instance, and send for both root and logview
|
|
|
@645
|
17 years |
quentin |
syslog-ng configuration for zephyring when root logs in
|
|
|
@644
|
17 years |
quentin |
Remove overrides of session.save_path and include_path (old ...
|
|
|
@643
|
17 years |
quentin |
Commit outstanding change allowing ldap backups
|
|
|
@642
|
17 years |
andersk |
Only check .htaccess files inside web_scripts, thus eliminating a past ...
|
|
|
@635
|
17 years |
andersk |
Enable mod_expires.
|
|
|
@624
|
17 years |
quentin |
Allow monitoring by syn.mit.edu
|
|
|
@623
|
17 years |
quentin |
Move the heartbeat script to /__scripts/heartbeat so we can serve it ...
|
|
|
@607
|
17 years |
quentin |
Add a second NTP server, for good measure.
|
|
|
@605
|
17 years |
andersk |
blah blah APACHE HAS NO GODDAMN ABSTRACTION BARRIERS blah blah blah.
|
|
|
@604
|
17 years |
andersk |
Prevent vhost access controls from applying to /__scripts.
|
|
|
@603
|
17 years |
andersk |
Modularize the redirect-to-certs kludge so that users just need to say ...
|
|
|
@602
|
17 years |
andersk |
/icons -> /__scripts/icons to avoid shadowing vhost namespace.
|
|
|
@584
|
17 years |
quentin |
Support hacks.mit.edu
|
|
|
@583
|
17 years |
geofft |
oops, webmaster@szs is a special case
|
|
|
@566
|
17 years |
geofft |
webzephyr IP address
|
|
|
@556
|
17 years |
geofft |
Postfix changes for webzephyr
|
|
|
@548
|
17 years |
geofft |
i can has root@scripts?
|
|
|
@520
|
17 years |
andersk |
Enable mod_negotiation.
|
|
|
@512
|
17 years |
andersk |
Use ldapi:// url.
|
|
|
@511
|
17 years |
andersk |
Re-enable sendfile now that it works.
|
|
|
@509
|
17 years |
andersk |
Apparently sendfile() breaks with kernel 2.6.23 and openafs 1.4.5.
|
|
|
@503
|
17 years |
quentin |
Add smart monitoring to munin
|
|
|
@500
|
17 years |
andersk |
Add b-m and o-f aliases.
|
|
|
@493
|
17 years |
andersk |
Make 127.0.0.1 work, for Munin monitoring.
|
|
|
@487
|
17 years |
andersk |
Not used anymore.
|
|
|
@486
|
17 years |
andersk |
Oops, clean up a few things from r484.
|
|
|
@484
|
17 years |
andersk |
/etc/ldap.conf.
|
|
|
@482
|
17 years |
andersk |
ou=vhosts -> ou=VirtualHosts.
|
|
|
@478
|
17 years |
geofft |
more ldap chocolatey goodness
|
|
|
@477
|
17 years |
andersk |
Don't IndexIgnore HEADER* README*.
|
|
|
@471
|
17 years |
andersk |
ifcfg-lo_0 -> ifcfg-lo:0 so it comes up on boot.
|
|
|
@455
|
17 years |
geofft |
prelim ldap stuff
|
|
|
@454
|
17 years |
geofft |
prelim ldap stuff
|
|
|
@426
|
17 years |
andersk |
Add more users to aliases.
|
|
|
@425
|
17 years |
andersk |
Not sure what this is, but it's on both servers.
|
|
|
@424
|
17 years |
andersk |
Kerberos config from o-f.
|
|
|
@423
|
17 years |
quentin |
Tell users when they don't have tickets or don't exist
|
|
|
@422
|
17 years |
quentin |
Update root mail recipients
|
|
|
@421
|
17 years |
quentin |
Enabling magic sysrq
|
|
|
@420
|
17 years |
quentin |
Removing arbitrary limits (to sync repository to actual state)
|
|
|
@419
|
17 years |
quentin |
Committing live hosts file (was same on both servers)
|
|
|
@418
|
17 years |
quentin |
Committing unknown change (rpm upgrade?); it's true on both servers.
|
|
|
@417
|
17 years |
quentin |
Enable munin apache graphing by turning on server-status
|
|
|
@416
|
17 years |
quentin |
Added munin configuration for monitoring apache
|
|
|
@409
|
17 years |
andersk |
Remove SSLUserName, because mod_auth_sslcert is better and having the ...
|
|
|
@408
|
17 years |
andersk |
SSLVerifyClient optional.
|
|
|
@399
|
17 years |
andersk |
Add www.* names for non-mit.edu fake vhosts.
|
|
|
@395
|
17 years |
andersk |
Make lombana a real vhost.
|
|
|
@391
|
17 years |
andersk |
Enable mod_auth_optional.
|
|
|
@384
|
17 years |
andersk |
Allow mod_auth_sslcert configuration to be overridden in .htaccess.
|
|
|
@370
|
17 years |
andersk |
Move localhost.key to scripts.key.
|
|
|
@369
|
17 years |
andersk |
More useful certificate location.
|
|
|
@365
|
17 years |
presbrey |
provide header directives available to .htaccess files
|
|
|
@364
|
17 years |
geofft |
Replace the huge SSH banner with a reference to the FAQ that contains ...
|
|
|
@358
|
17 years |
quentin |
made scripts.mit.edu the default vhost instead of vhosts.mit.edu; ...
|
|
|
@356
|
17 years |
quentin |
add -t to cause temporary rather than permanent failures when ...
|
|
|
@340
|
17 years |
presbrey |
renaming for svn clients that can't support colon pathnames
|
|
|
@336
|
17 years |
andersk |
I was going to move SSLVerifyDepth 1 to vhosts-common-ssl.conf so ...
|
|
|
@335
|
17 years |
andersk |
Remove authn_dbd_module.
|
|
|
@332
|
17 years |
andersk |
Accept certificates on port 444.
|
|
|
@330
|
17 years |
andersk |
Modularize scripts.mit.edu main vhost, and fix favicon.ico and ...
|
|
|
@325
|
17 years |
andersk |
net.ipv4.tcp_keepalive_time = 825.
|
|
|
@305
|
17 years |
andersk |
Add heartbeat to scripts-cert.
|
|
|
@301
|
17 years |
presbrey |
raised RLimitMEM
|
|
|
@288
|
17 years |
presbrey |
|
|
|
@284
|
17 years |
andersk |
Add myself to root@scripts mail. (Should this maybe be the ...
|
|
|
@283
|
17 years |
presbrey |
main server heartbeat configuration
|
|
|
@281
|
17 years |
presbrey |
syslog.conf
|
|
|
@278
|
17 years |
geofft |
Debugging an HTTPS problem...
|
|
|
@270
|
17 years |
andersk |
* Complete alias list for main SSL vhost.
* /heartbeat should only be ...
|
|
|
@263
|
17 years |
geofft |
Include file to enable certificate authentication
|
|
|
@257
|
17 years |
presbrey |
Default charset directive removed.
Minor cosmetic changes.
|
|
|