prometheus_exporters: Add AUR exporter

Closes #323

See merge request !375

Also send the metrics to dashboards.archlinux.org.

Fix #323

Add missing "create ssl cert" tasks

See merge request !369

Add dashboards.archlinux.org for public Grafana dashboards

Closes #172

See merge request !368

Sven-Hendrik Haase authored 3 years ago and Kristian Klausen committed 3 years ago

Co-authored-by: Kristian Klausen <kristian@klausen.dk>

Set the aurweb_location configuration so aur-dev emails have the correct
links in the registration url. Add new dependencies to the aurweb role
for the aurweb-notify script to be able to run on the pu branch.

install_arch: Use the root_ssh role for adding authorized_key

See merge request !365

Kristian Klausen authored 3 years ago and Jelle van der Waa committed 3 years ago

The root_ssh_keys variable was changed in:
ea9f114d ("root_ssh: Support giving root access to only some hosts")
so let's just use the root_ssh role instead of maintaining the logic in
two places.

Rate limit mediawiki API endpoint

See merge request !378

Our API endpoint was being abused by a malicious user which send about
20 req/s, as php-fpm uses a pool of workers this easily over burdens
them and also gives the server a constant 100% CPU load.

Applying a rate limit succesfully negates this issue.

Give klausenbusk root access to runner{1,2}.al.org

See merge request !383

Remove tubylaws deployment

See merge request !379

The TU-Bylaws page is now deployed as gitlab page, making all of this
unrequired, the permanent redirect can stay for a while but the wiki is
already updated.

archwiki: Preserve query parameters when redirecting to the new short URL

See merge request !380

Ex: https://wiki.archlinux.org/index.php/Special:Search?search=systemd

issue templates: require to disable 'users can request access'

See merge request !361

Levente Polyak authored 3 years ago and Jelle van der Waa committed 3 years ago

This shouldn't be possible as it may lead to accidentally allowing
external users to be added to a project.
We should only add members to a project or group on staff request to
devops.

The arch wiki box previously had plenty of ram to play around with, but
the current box is significantly smaller. Memcached seems to cache ~ 600
MB on average so 1024 should suit us fine.

The TU Bylaws is currently deployed as part of the aurweb role which
makes it more work for devops and with gitlab pages TU's can deploy it
themself.

postfix: Remove special "fast-path" smtpd + Remove unneeded smtpd service that was used by SpamAssassin

Closes #321

See merge request !373

Kristian Klausen authored 3 years ago and Jelle van der Waa committed 3 years ago

Fix #321

Kristian Klausen authored 3 years ago and Jelle van der Waa committed 3 years ago

With the switch to Rspamd from SpamAssassin it isn't faster anymore,
because Rspamd is configured as a global milter where SA was configured
as a smtpd_proxy_filter/content_filter for smtp/submission.

Remove termite-terminfo on all machines

See merge request !377

Jelle van der Waa authored 3 years ago and Sven-Hendrik Haase committed 3 years ago

termite is now officially dead.

Onboard grawlinson as new TU

See merge request !376

In hedgedoc 1.8.0 sequelizerc is no longer required to as the
config.json file is used to read out the database settings.

archwiki: Make the /index.php/ -> /title/ redirect permanent (301)

See merge request !370