Rate limit man.archlinux.org

See merge request !390

Limit man.archlinux.org to reduce the impact of one potential abuser on
the availability. This returns too many request when running oha with 10
connections. This does not fully negate the issue, later the abuser
should be automatically fail2ban'd.

arch_boxes_sync: Fix old releases cleanup not working due to NUL character

See merge request !391

Kristian Klausen authored 3 years ago and Jelle van der Waa committed 3 years ago

--output-delimiter="" apparently means use the NUL character[1].

[1] https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=0e46753d7c9519d7378cd3a4e0951a36ac32ffe7

Document how to whitelist some metrics for the public Grafana instance.

Closes: #334

The repository has been migrated to Gitlab as cgit will be removed in
due time.

aurweb: Don't call PHP for serving static content

Closes #318

See merge request !372

Leonidas Spyropoulos authored 3 years ago and Jelle van der Waa committed 3 years ago

Closes: #318

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

monitoring: add pie chart and multi suite select to rebuilderd

See merge request !386

Allow multiple suites to be selected as variables and respect those in
the percentage and status queries.

prometheus_exporters: Add AUR exporter

Closes #323

See merge request !375

Also send the metrics to dashboards.archlinux.org.

Fix #323

Add missing "create ssl cert" tasks

See merge request !369

Add dashboards.archlinux.org for public Grafana dashboards

Closes #172

See merge request !368

Sven-Hendrik Haase authored 3 years ago and Kristian Klausen committed 3 years ago

Co-authored-by: Kristian Klausen <kristian@klausen.dk>

Set the aurweb_location configuration so aur-dev emails have the correct
links in the registration url. Add new dependencies to the aurweb role
for the aurweb-notify script to be able to run on the pu branch.

install_arch: Use the root_ssh role for adding authorized_key

See merge request !365

Kristian Klausen authored 3 years ago and Jelle van der Waa committed 3 years ago

The root_ssh_keys variable was changed in:
ea9f114d ("root_ssh: Support giving root access to only some hosts")
so let's just use the root_ssh role instead of maintaining the logic in
two places.

Rate limit mediawiki API endpoint

See merge request !378

Our API endpoint was being abused by a malicious user which send about
20 req/s, as php-fpm uses a pool of workers this easily over burdens
them and also gives the server a constant 100% CPU load.

Applying a rate limit succesfully negates this issue.

Give klausenbusk root access to runner{1,2}.al.org

See merge request !383