Jelle van der Waa authored 1 year ago and Leonidas Spyropoulos committed 1 year ago

Apply the same rate limitting and fail2ban rules for aur.archlinux.org

Boxy seems to randomly restart after running out of memory. We do not
yet know the reason behind the increased memory usage, but zram might
help a bit.

grafana: update AUR dashboard (search requests)

See merge request !739

* Remove API Requests panel (no values; replaced by goaurrpc dashboard)
* Add panel to visualize new metrics for search requests
* Set default timespan to 1 day (from 30d)

Ref: aurweb@814ccf6b
Signed-off-by: moson <moson@archlinux.org>

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

gitlab: Bypass rate limiting for gemini

See merge request !724

We do not want our packagers on gemini to hit the rate-limit.

grafana: add Gitlab metrics dashboard

See merge request !735

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

Redirect status to the non CNAME version for now

See merge request !736

Until we get our situation with uptimerobot fixed, we are redirecting
status.archlinux.org to the standard uptimerobot URL, that is provided
with their free plan. Once/if we re-gain our premium access, we can
simply revert this MR.

To match Matrix.org. The limit also applies to files we need to retrieve
from other servers.

grafana: update goaurrpc dashboard (rate-limit chart)

See merge request !734

Add panel to visualize how many requests end up being rate-limited

Signed-off-by: moson-mo <mo-son@mailbox.org>

Collect flyspray open issues

See merge request !725

fix: run aurweb ssh commands and git scripts in virtualenv

See merge request !733

Adjust bash wrapper scripts to activate our python virtualenv:
Script execution is triggered from ssh / git.
These wrapper scripts then call python scripts created by poetry.

We should make sure that this happens within our venv.

Previously this was done by using "poetry run...".
However, using poetry is costly and adds some delay.
Instead of using poetry, we can just activate our venv
and then execute our scripts.

Fixes: b15ac838 ("aurweb: Make SSH faster by avoiding slow Poetry (~2,5 sec faster)")

Signed-off-by: moson-mo <mo-son@mailbox.org>

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

geomirror: new uk based mirror sponsored from jump.net.uk

See merge request archlinux/infrastructure!731

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

Initial setup bootstrapped from arch-boxes repo [1], default user 'arch'
removed after.

https://gitlab.archlinux.org/archlinux/arch-boxes/-/jobs/157024/artifacts/browse/output



Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

tf-stage2: Add an arch specific question for signing up to reduce spam

See merge request archlinux/infrastructure!729

Ref #518

Deprecate unused SSH key of dvzrv

See merge request archlinux/infrastructure!727

David Runge authored 1 year ago and Sven-Hendrik Haase committed 1 year ago

Since the file based SSH key is no longer used (and unsafe), remove it.

Add hCaptcha to Keycloak registration forms

See merge request archlinux/infrastructure!728