GitLab

Closes: #166

We want to periodically update it, not when we deploy the role :)

The idea is to make sure people don't blindly add cleanup tasks.

Sometimes we'd get failures if files changed while backing them up.
See https://docs.gitlab.com/ee/raketasks/backup_restore.html#backup-strategy-option
for documentation on the fix.
This fixes #200.

Not sure if this is relevant, but postfix only listens on IPv4. This is
what I just tested as working, so keep it this way.

Allow bounce handling from mail.archlinux.org, the new email server

Kristian Klausen authored Oct 21, 2020 and Sven-Hendrik Haase committed Oct 22, 2020

Fix #155

Jelle van der Waa authored Oct 16, 2020 and Sven-Hendrik Haase committed Oct 17, 2020

All our node_exporter's have an instance label already which shows the
hostname of the machine. The instance label is also used in our
prometheus alerts making host obsolete.

certbot by default sleep 1-480 seconds before renewing, to avoid all
people renewing at :00. In our case the logic is is unnecessary as
systemd is handling it (RandomizedDelaySec=24h).

Ansible's hostname supports setting the hostname with hostnamectl, which
makes our systems after the removal of inetutils legacy free.

We actually don't want to set any other permissions here and trust the bootstrap image to be correct.

rmdir of subvolumes is supported since 4.18

Start monitoring prometheus to keep check of the database growth rate
and retain data for a longer preriod in prometheus.

To monitor if reproducible builds are going in the right direction,
record the good/bad/unknown metrics from rebuilderd with a Prometheus
textcollector for a Grafana dashboard to display a long term trend.

A Python script is required to handle data collection as obtaining the
status with jq/bash is non trivial and cannot easily dnyamically collect
suites and statuses.

Closes: #146

Ansible doesn't understand provides.

Instead of doing a manual query, Ansible now supports setting
MAX_USER_CONNECTIONS for a MySQL user.

Jan Alexander Steffens (heftig) authored Aug 19, 2020 and Jelle van der Waa committed Oct 03, 2020

Required to get .well-known working with web clients.

The site now includes some foreign scripts and we need a more lax CSP in order for that to even work.

Morten Linderud authored Sep 27, 2020 and Giancarlo Razzolini committed Sep 27, 2020

Signed-off-by: Morten Linderud <morten@linderud.pw>

See https://docs.ansible.com/ansible/devel/porting_guides/porting_guide_2.10.html#id3