Syncarchive service depends and wants network

See merge request !364

Leonidas Spyropoulos authored 3 years ago and Jelle van der Waa committed 3 years ago

For real now, not like the 798a2d3d which did syncrepo

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

archwiki: Implement short URLs

See merge request !335

Kristian Klausen authored 4 years ago and Jelle van der Waa committed 3 years ago

The wiki people has been wanting this for some time[1], so let's
implement it.

This change the url from:
https://wiki.archlinux.org/index.php/Main_page
to:
https://wiki.archlinux.org/title/Main_page

[1] https://wiki.archlinux.org/index.php?title=ArchWiki_talk:Requests&oldid=648459#index.php_in_url_address

Enable systemd-oomd to all servers.

Closes #306

See merge request !345

Leonidas Spyropoulos authored 3 years ago and Jelle van der Waa committed 3 years ago

Kernel's OOM killer is often too slow, as a result system ends up
thrashing heavily. Have a user-space oom killer helps.

Using default settings as described in
https://www.freedesktop.org/software/systemd/man/oomd.conf.html



Closes: #306

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

Fixes: 49091634 ("loki: Bump the retention period to 3 months")

Syncarchive service depends and wants network

Closes #286

See merge request !362

Leonidas Spyropoulos authored 3 years ago and Jelle van der Waa committed 3 years ago

Closes #286

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

The WKD setup for master-key.archlinux.org requires this domain to
obtain the master keys via WKD. As WKD falls back to archlinux.org which
contains no .well-known/openpgpkey entry.

Retain permissions as how they are on the live system, setting 750 will
make nginx unable to read the flyspray directory. Fix when: condition.

Stop uncontrolled requests early.

Closes #276

See merge request !356

Leonidas Spyropoulos authored 3 years ago and Jelle van der Waa committed 3 years ago

Stop uncontrolled requests before reach php backend

Closes: #276

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

We want to be able to look at trends and past incidents.

add docs/testing.md

See merge request !360

The default is very restrictive.

Be explicit about the ports used and enable packet fingerprinting
(checksumming). Both for better compatibility.

Disable unneeded project features when creating a new official project

See merge request !358

To not run into rate-limits when resolving DNS records from rspamd, use
our own local recursive resolver.

Fix asknot domain

See merge request !349

Eg. https://whatcanidoforfedora.org/ and
https://whatcanidoformozilla.org/. Mea culpa.

Gitlab can show our alertmanager alerts only for > reporter and create
issues from alerts on gitlab.

This adds Last-Modified header support so we should have less cpu spikes
for the archweb-rebuilderd service.

Now that login is restricted to staff members.

Synapse only inspects the userinfo.