Docker is now build in Gitlab CI

See merge request !144

Jelle van der Waa authored Nov 19, 2020 and Jelle van der Waa committed Nov 21, 2020

We no longer need this role as Gitlab handles it now.

roles/archwiki: purge the nginx cache after pulling from the archwiki git repo

See merge request !125

This basically reverts back freswa's work on this as we need the manual control here.

It used to be Debian pfff

rebuilderd-worker now supports an diffoscope output limit allowing us to
define how much data will be POST'ed to rebuilderd via nginx.

As we have no archive_mirrors at this time.

Rebuilderd since 0.6.0 supports the X-Real-IP header to show what
builder is working on a task.

enhance project creation/migration docs

See merge request !142

Add Junior DevOps text

See merge request !138

Give freswa full DevOps access

See merge request !141

add dovecot cleanup timer to purge mdbox files

See merge request !135

While mbox and maildir files get deleted by dovecot right away, that's
not the case for mdbox files. Since they contain multiple mails at once
in a proprietary format rewriting is expensive. That's why this step
is done in a separate step outside the dovecot process.

Replace SpamAssassin with Rspamd

See merge request !42

Kristian Klausen authored Aug 02, 2020 and Sven-Hendrik Haase committed Nov 15, 2020

Switching to Rspamd has some advantages:
* It is probably faster than SA[1] (C + Lua vs Perl)
* We can reduce the number of moving parts. Rspamd has built-in DKIM
  signing, greylisting, DMARC checking to name a few
* It doesn't just mark the mail as spam/not-spam, it gives every mail a
  score and depending on the score it does either: nothing, greylist it,
  mark it as spam or reject it[2] (more actions is available and it can
  be tweaked)
* Replies whitelisting[3]
* It supports ARC signing, which can be useful
* A cool looking WebUi :)
* ... and more[4]...

[1] https://rspamd.com/doc/tutorials/migrate_sa.html#why-migrate-to-rspamd
[2] https://rspamd.com/doc/faq.html#what-are-rspamd-actions
[3] https://rspamd.com/doc/modules/replies.html
[4] https://rspamd.com/comparison.html

rebuilderd-worker can now post diffoscope html output to rebuilderd
whcih requires raising our POST size.

We need to match the tmpfiles.d/turnserver.conf settings.

Less work_mem because this explodes easily. It's per-operation, which a
query can have multiple of, and also across multiple worker threads.

More shared_buffers and effective_cache_size as these are global.

Add server decommissioning template

See merge request !136

fix mx record for aur. and master-key.

See merge request !137

In coordination with Foxboron, the box has fulfilled its use and has been deleted.

Creation of admin user should be idempotent

Closes #88

See merge request !134

It ran out of memory, with Postgres using a lot of RSS.

Extend TU/Dev/DevOps and Staff on/offboarding guidelines

See merge request !99

Jelle van der Waa authored Sep 29, 2020 and Jelle van der Waa committed Nov 09, 2020

Add the relevant mailing list subscriptions for all, Devops, TU and
Developer specific mailing lists.

Offboard dreisner as TU/Dev

See merge request !132