Fixes: 49091634 ("loki: Bump the retention period to 3 months")

Syncarchive service depends and wants network

Closes #286

See merge request !362

Leonidas Spyropoulos authored 3 years ago and Jelle van der Waa committed 3 years ago

Closes #286

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

The WKD setup for master-key.archlinux.org requires this domain to
obtain the master keys via WKD. As WKD falls back to archlinux.org which
contains no .well-known/openpgpkey entry.

Retain permissions as how they are on the live system, setting 750 will
make nginx unable to read the flyspray directory. Fix when: condition.

Stop uncontrolled requests early.

Closes #276

See merge request !356

Leonidas Spyropoulos authored 3 years ago and Jelle van der Waa committed 3 years ago

Stop uncontrolled requests before reach php backend

Closes: #276

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

We want to be able to look at trends and past incidents.

add docs/testing.md

See merge request !360

The default is very restrictive.

Be explicit about the ports used and enable packet fingerprinting
(checksumming). Both for better compatibility.

Disable unneeded project features when creating a new official project

See merge request !358

To not run into rate-limits when resolving DNS records from rspamd, use
our own local recursive resolver.

Fix asknot domain

See merge request !349

Eg. https://whatcanidoforfedora.org/ and
https://whatcanidoformozilla.org/. Mea culpa.

Gitlab can show our alertmanager alerts only for > reporter and create
issues from alerts on gitlab.

This adds Last-Modified header support so we should have less cpu spikes
for the archweb-rebuilderd service.

Now that login is restricted to staff members.

Synapse only inspects the userinfo.

matrix: Integrate with Keycloak

Closes #94

See merge request !348

Closes #94

grafana: Add Loki dashboard

See merge request !354

From [1] with the jenkins-x tag removed.

[1] https://github.com/jenkins-x-charts/grafana-dashboard/blob/451e05780b06dc59f8d689c0b64dada315380740/charts/grafana-dashboard/dashboards/loki.json

Avoid needless regex on 301 rewrites

Closes #278

See merge request !353

Closes: #278

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

The redirects are now done by the `redirects` role.

Remove arch32 mirror role

See merge request !352

We no longer mirror arch32 on our servers and this role is currently
broken.

Now that logs are gathered centrally, the team is complaining about the
volume of logs from this server.