Loki is using a lot of storage (~8GB per week).

gitlab-pages uses the API source by default now[2] but DNS resolution is
broken[3] so we need to use the disk config source.
Reported upstream here[4].

[1] https://docs.gitlab.com/ee/administration/pages/#gitlab-pages-doesnt-work-after-upgrading-to-gitlab-140-or-above
[2] https://gitlab.com/gitlab-org/gitlab-pages/-/commit/9a30f40a785ffe586a79a75ebebabda5f513b76f
[3] https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/4243
[4] https://gitlab.com/gitlab-org/gitlab/-/issues/331699#note_608473496

Keycloak doesn't support Java 16 (yet)[1].

[1] https://issues.redhat.com/browse/KEYCLOAK-18307

flyspray: Add redirect for archlinux-keyring migrated tasks[1]

Closes #320

See merge request !419

[1] archlinux-keyring#9

To be used as we begin migrating Flyspray tasks to GitLab.

Fix #320

aurweb: Use a different db password for aur and aur-dev

Closes #325

See merge request !420

Fix #325

Add webhook when creating read-only GH mirrors which closes PRs

Closes #80

See merge request !423

Fix #80

Create a redirect for the CoC

Closes #354

See merge request !421

Fix #354

keycloak: Re-sync with version 13.0.0 changes

See merge request !374

Leonidas Spyropoulos authored 3 years ago and Jelle van der Waa committed 3 years ago

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

Update archmanweb to v1.2

See merge request !426

Jakub Klinkovský authored 3 years ago and Kristian Klausen committed 3 years ago

Co-authored-by: Kristian Klausen <kristian@klausen.dk>

fail2ban: Add nginx_limit_req to all dicts

See merge request !422

Ansible complains if the fail2ban_jails dictionary is missing the
nginx_limit_req key. Adding this as default failse.

Bugfix from: e5773374

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

gitlab_runner: Check runner configuration into git

Closes #193

See merge request !417

Fix #193

gitlab_runner: Add service to cleanup docker artifacts produced by the runner

See merge request !387

Fix spoofable X-Forwarded-For header for some proxied services

Closes #292

See merge request !416

Kristian Klausen authored 3 years ago and Jelle van der Waa committed 3 years ago

X-Forwarded-For is defined as X-Forwarded-For: <client>, <proxy1>,
<proxy2>, and it was set to $proxy_add_x_forwarded_for which is
basically $http_x_forwarded_for,$remote_addr and headers from the client
can't be trusted!

Fix #292

Without hostname the role does not run.

common: Replace deprecated systemd-swap[1] with zram-generator

See merge request !381

Kristian Klausen authored 3 years ago and Jelle van der Waa committed 3 years ago

zram-generator defaults to 50% of the ram where systemd-swap defaults to
25% of the ram.

[1] https://lists.archlinux.org/pipermail/arch-dev-public/2021-May/030429.html