Kristian Klausen authored 3 years ago and Jelle van der Waa committed 3 years ago

With the switch to Rspamd from SpamAssassin it isn't faster anymore,
because Rspamd is configured as a global milter where SA was configured
as a smtpd_proxy_filter/content_filter for smtp/submission.

Remove termite-terminfo on all machines

See merge request !377

Jelle van der Waa authored 3 years ago and Sven-Hendrik Haase committed 3 years ago

termite is now officially dead.

Onboard grawlinson as new TU

See merge request !376

In hedgedoc 1.8.0 sequelizerc is no longer required to as the
config.json file is used to read out the database settings.

archwiki: Make the /index.php/ -> /title/ redirect permanent (301)

See merge request !370

Kristian Klausen authored 3 years ago and Jelle van der Waa committed 3 years ago

It seems to work, so we can make the redirect permanent now.

Remove obsolete NGINX directives to use http2_max_field_size defaults.

Closes #317

See merge request !363

Andrea Denisse Gómez Martínez authored 3 years ago and Jelle van der Waa committed 3 years ago

Closes #317.

Syncarchive service depends and wants network

See merge request !364

Leonidas Spyropoulos authored 3 years ago and Jelle van der Waa committed 3 years ago

For real now, not like the 798a2d3d which did syncrepo

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

archwiki: Implement short URLs

See merge request !335

Kristian Klausen authored 4 years ago and Jelle van der Waa committed 3 years ago

The wiki people has been wanting this for some time[1], so let's
implement it.

This change the url from:
https://wiki.archlinux.org/index.php/Main_page
to:
https://wiki.archlinux.org/title/Main_page

[1] https://wiki.archlinux.org/index.php?title=ArchWiki_talk:Requests&oldid=648459#index.php_in_url_address

Enable systemd-oomd to all servers.

Closes #306

See merge request !345

Leonidas Spyropoulos authored 3 years ago and Jelle van der Waa committed 3 years ago

Kernel's OOM killer is often too slow, as a result system ends up
thrashing heavily. Have a user-space oom killer helps.

Using default settings as described in
https://www.freedesktop.org/software/systemd/man/oomd.conf.html



Closes: #306

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

Fixes: 49091634 ("loki: Bump the retention period to 3 months")

Syncarchive service depends and wants network

Closes #286

See merge request !362

Leonidas Spyropoulos authored 3 years ago and Jelle van der Waa committed 3 years ago

Closes #286

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

The WKD setup for master-key.archlinux.org requires this domain to
obtain the master keys via WKD. As WKD falls back to archlinux.org which
contains no .well-known/openpgpkey entry.

Retain permissions as how they are on the live system, setting 750 will
make nginx unable to read the flyspray directory. Fix when: condition.

Stop uncontrolled requests early.

Closes #276

See merge request !356

Leonidas Spyropoulos authored 3 years ago and Jelle van der Waa committed 3 years ago

Stop uncontrolled requests before reach php backend

Closes: #276

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

We want to be able to look at trends and past incidents.

add docs/testing.md

See merge request !360

The default is very restrictive.

Be explicit about the ports used and enable packet fingerprinting
(checksumming). Both for better compatibility.

Disable unneeded project features when creating a new official project

See merge request !358