This allows us to get proper certificates for loki which will run on logging.archlinux.org
on the same machine as monitoring.archlinux.org.

Add klausenbusk's SSH key

See merge request !340

Levente Polyak authored 4 years ago and Sven-Hendrik Haase committed 3 years ago

Strictly speaking this is not a devops duty, but I believe this is
currently the best place to ensure we won't ever forget to create a
keyring revocation ticket for an offboarded former staff.

Our qemu TCG builds generate plenty of cpu usage over time to be
excluded from warnings.

Our dbscripts role expects the default ssh key to be username + '.pub'.

Add additional ssh key for hashworks, set prefered shell

See merge request !336

To use a key as backup key to be deployed on all hosts.

dbscripts: Issue a certificate for rsync.archlinux.org

See merge request !338

Put man.archlinux.org into node_exporters group

See merge request !337

I think this is all that is missing to actually start monitoring
man.archlinux.org.

Bump pacman version

See merge request !333

Monitor remaning (mta-sts +  openpgpkey + repos + static.conf) and recently added services (ping + md)

See merge request !324

Kristian Klausen authored 4 years ago and Frederik Schwan committed 4 years ago

This is a partial "revert" of: 01b2b5b2 ("Remove non 200-399 status code domains")

role(postfix): remove export-grade dh params

See merge request !332

George Rawlinson authored 4 years ago and Frederik Schwan committed 4 years ago

According to upstream documentation[0], the configuration parameter
smtpd_tls_dh512_param_file will be ignored from the next release of
Postfix (3.6).

[0]: http://www.postfix.org/postconf.5.html#smtpd_tls_dh512_param_file

It was getting very cramped with only a few MBs left. It appears currently we only get about 6 months worth of data out of 20G
so 100G seems reasonable.

arch_boxes_sync: Handle delay between release and artifacts being ready gracefully

See merge request !330

The releases are released/tagged and then built, so there is a delay
between releasing a release and the artifcats being ready, we should
handle that gracefully.

prometheus_exporters: fix permissions of blackbox.yml

See merge request !329

Yaml is not executable.

ci: Install ansible so ansible-lint can resolve the modules

See merge request !331

ansible-lint no longer depends on ansible[1][2] which causes it to fail
with: syntax-check: couldn't resolve module/action 'pacman', as the
modules is part of ansible and not ansible-base.

[1] https://bugs.archlinux.org/task/69920
[2] https://github.com/archlinux/svntogit-community/commit/a3ccb42b8dc104a4616a64fac4a1f6dd44ffedca