Rewrite get_key.py to use click instead of typer

See merge request !405

Typer doesn't work with Click 8[1].

[1] https://github.com/tiangolo/typer/issues/280

Give more memory to the apps and less to postgres.

postfix: Don't allow TLS on localhost:smtp

See merge request !403

The certificate won't be valid, anyway. Synapse actually fails to send
if the server allows STARTTLS but presents an invalid certificate.

Use `default_type` instead of `add_header Content-Type`

See merge request !401

The latter can cause duplicate Content-Type headers. Thanks to strcat
for notifying me of the issue.

Add link to Staff Services page for onboarding

See merge request !399

Document our Gitlab Servicedesk aliases

See merge request !398

To negate high cpu spikes from abusers/bots who scan our services, we
now fail2ban them.

fail2ban: Ban IPs based on nginx request abuse

See merge request !392

Leonidas Spyropoulos authored 3 years ago and Jelle van der Waa committed 3 years ago

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

prometheus: Add monitoring and alert for orphan and foreign packages

Closes #332

See merge request !389

Leonidas Spyropoulos authored 3 years ago and Jelle van der Waa committed 3 years ago

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

Leonidas Spyropoulos authored 3 years ago and Jelle van der Waa committed 3 years ago

Closes: #332

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

improve onboarding documentation

Closes #226

See merge request !397

implements #226

make diabonas dev

Closes #346

See merge request !396

implements #346

Terraform uptimerobot monitors

See merge request !388

Add our uptimerobot to terraform so it's managed in code and we can
easily extend it. This currently only adds our to be monitored sites and
leaves the status page as is now.

Deleting resources on uptimerobot will cause terraform unable to run
see: https://github.com/louy/terraform-provider-uptimerobot/issues/82

References: #209

archmanweb: fix path to favicon.ico

Closes archmanweb#33

See merge request !393

Rate limit man.archlinux.org

See merge request !390

Limit man.archlinux.org to reduce the impact of one potential abuser on
the availability. This returns too many request when running oha with 10
connections. This does not fully negate the issue, later the abuser
should be automatically fail2ban'd.

arch_boxes_sync: Fix old releases cleanup not working due to NUL character

See merge request !391

Kristian Klausen authored 3 years ago and Jelle van der Waa committed 3 years ago

--output-delimiter="" apparently means use the NUL character[1].

[1] https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=0e46753d7c9519d7378cd3a4e0951a36ac32ffe7