Closes #207

Fixes: a9ee7e5d ("Send prometheus metrics and scrap its metrics over WireGuard")

Send promtail logs and scrap its metrics over WireGuard

See merge request !445

keycloak: Remove obsolete configuration

See merge request !444

Thorben Günther authored 3 years ago and Kristian Klausen committed 3 years ago

account2 and account_api are enabled by default since keycloak 13
(https://www.keycloak.org/docs/13.0/server_installation/#profiles)

WireGuard all hosts

See merge request !442

This is meant as a internal authenticated and encrypted network which we
can use for internal services, we don't want to expose to the internet
or when encryption is desired but not easily implementable.

This is initial to be used for communicating between
{lists,mailman3}.archlinux.org as mailman{2,3} can't run on the same
server.

grafana: Use builtin functionality to restrict access

See merge request !443

Thorben Günther authored 3 years ago and Kristian Klausen committed 3 years ago

This reverts commit 649568e7 ("Restrict Grafana access to Arch Linux
Staff group on Keycloak (fixes #151)").

install_arch: Fix cleanup of pacman cache

See merge request !441

noconfirm does not work because the default answer to the first check is
`No`.

This should have been amended to the original commit.

Fixes: 5fba4d5b ("rspamd: Lower spam threshold on misaligned Reply-To/To fields")

rspamd: Lower spam threshold on misaligned Reply-To/To fields

See merge request archlinux/infrastructure!395

Morten Linderud authored 3 years ago and Kristian Klausen committed 3 years ago

When people send patches to pacman-dev, either with the wrong list
address or a perceived wrong email header it would most likely be
default marked as spam and stuffed into Junk for people using our email
server.

This attempts at lowering the score to something we can live with until
a gitlab migration.

Signed-off-by: Morten Linderud <morten@linderud.pw>

Goodbye luna

Closes #86

See merge request !436

https://lists.archlinux.org/pipermail/arch-dev-public/2021-July/030471.html

Fix #86

Support creating support-staff accounts on mail.al.org for mail + create user for klausenbusk and denisse

See merge request !430

Primarily to be used for mail accounts on mail.archlinux.org.

Update the firewalld configuration as of 0.9.4.
MinimalMark/AutomaticHelpers options are deprecated and ignored. New
otions added.

Use sub-accounts for backups to Hetzner Storage Box

Closes #362

See merge request !434

This offers improved separation between the server backups and should
avoid bumping against the storage box 10 concurrent connection limit.

Fixes: archlinux/infrastructure#362

As it turns out, the total size does not include the snapshots (feature
which we recently enabled). Record the free space so we can have a more
accurate picture of the usable space remaining.

Now that we have enabled snapshots, summing all Borg repository sizes
has become a bad approximation of the total space used on the storage
box.

Migrate lists.al.org to a VPS

Closes #356

See merge request !424

Fix #356

The DNS is still pointing to luna.