Leonidas Spyropoulos authored 3 years ago and Jelle van der Waa committed 3 years ago

Kernel's OOM killer is often too slow, as a result system ends up
thrashing heavily. Have a user-space oom killer helps.

Using default settings as described in
https://www.freedesktop.org/software/systemd/man/oomd.conf.html



Closes: #306

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

Fixes: 49091634 ("loki: Bump the retention period to 3 months")

Syncarchive service depends and wants network

Closes #286

See merge request !362

Leonidas Spyropoulos authored 3 years ago and Jelle van der Waa committed 3 years ago

Closes #286

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

The WKD setup for master-key.archlinux.org requires this domain to
obtain the master keys via WKD. As WKD falls back to archlinux.org which
contains no .well-known/openpgpkey entry.

Retain permissions as how they are on the live system, setting 750 will
make nginx unable to read the flyspray directory. Fix when: condition.

Stop uncontrolled requests early.

Closes #276

See merge request !356

Leonidas Spyropoulos authored 3 years ago and Jelle van der Waa committed 3 years ago

Stop uncontrolled requests before reach php backend

Closes: #276

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

We want to be able to look at trends and past incidents.

add docs/testing.md

See merge request !360

The default is very restrictive.

Be explicit about the ports used and enable packet fingerprinting
(checksumming). Both for better compatibility.

Disable unneeded project features when creating a new official project

See merge request !358

To not run into rate-limits when resolving DNS records from rspamd, use
our own local recursive resolver.

Fix asknot domain

See merge request !349

Eg. https://whatcanidoforfedora.org/ and
https://whatcanidoformozilla.org/. Mea culpa.

Gitlab can show our alertmanager alerts only for > reporter and create
issues from alerts on gitlab.

This adds Last-Modified header support so we should have less cpu spikes
for the archweb-rebuilderd service.

Now that login is restricted to staff members.

Synapse only inspects the userinfo.

matrix: Integrate with Keycloak

Closes #94

See merge request !348

Closes #94

grafana: Add Loki dashboard

See merge request !354

From [1] with the jenkins-x tag removed.

[1] https://github.com/jenkins-x-charts/grafana-dashboard/blob/451e05780b06dc59f8d689c0b64dada315380740/charts/grafana-dashboard/dashboards/loki.json

Avoid needless regex on 301 rewrites

Closes #278

See merge request !353

Closes: #278

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

The redirects are now done by the `redirects` role.