This rate limits the endpoint which does things (ie. uwsgi). 10 requests
per second was already a lot, so 5 should be fine, realistically it can
go lower as we have a burst.

See: #600

Missed this earlier for the upgrade to Loki 3.0.

Loki 3.0 requires this to be set when retention is enabled.

This is needed to upgrade to Loki 3.0.

[1] https://gitlab.archlinux.org/archlinux/nvchecker-poc

This contains fixes to the ArchLinux extension for MediaWiki 1.42.

This will used to increase the level of automation.

Signed-off-by: Christian Heusel <christian@heusel.eu>

We're leaking pending EDUs in the federation writer since about
2023-10-28.

See: https://github.com/matrix-org/synapse/issues/13901

related to archlinux/infrastructure#531



Fixes: c31dd330 ("prepare the split of repo and archive server")
Signed-off-by: Christian Heusel <christian@heusel.eu>

There is no need to split up partitioning into per-partition tasks.
Use long options for readability.

Use an uppercase LABEL to avoid a warning from mkfs.fat:

    mkfs.fat: Warning: lowercase labels might not work properly on some systems

Use something other than "efi" as the label since some firmware do not
like it. While this is not really an issue for Arch infrastructure, since
there is zero change that this will be run on any MSI hardware with its
broken firmware, it is best to simply folow the wiki anyway. See
https://wiki.archlinux.org/title/EFI_system_partition#Firmware_does_not_see_the_EFI_directory

sgdisk does not align the partition size/end by default. The
`-I`/`--align-end` option needs to be used to enable alignment. See
https://wiki.archlinux.org/title/Advanced_Format#Partition_alignment

Additionally use the partition names (PARTLABELs) that gdisk and cgdisk
set (but sgdisk doesn't) and follow the Discoverable Partitions
Specification by useing the appropriate partition for the root partition.
See https://wiki.archlinux.org/title/Partitioning#Single_root_partition

It is unclear why this was added, as we can just use the default lock
file path (/var/run/rsyncd.lock). Using a non-default path was not added
in the offending commit, but remove it in this revert commit
nevertheless, so the commit can be reverted.

This reverts commit e4e07516.

[1] c55b448c ("Add GitLab Pages for pacman")

Fixes: c55b448c ("Add GitLab Pages for pacman")

This is by far our most popular endpoint and some folks hit us with one
request per 5 seconds which leads to 6GB of daily traffic. Rate limit
them the same as broken RSS readers.

In reality the uwsgi endpoint gets hit with only 1 request on a normal
page load so 20 requests is way to lenient.

Robin Candau authored 9 months ago and Robin Candau committed 9 months ago

> 2024/06/02 11:05:53 \[warn\] 30324#30324: the "listen ... http2" directive is deprecated, use the "http2" directive instead

Fixes #589

Signed-off-by: Christian Heusel <christian@heusel.eu>

Robin Candau authored 10 months ago and Christian Heusel committed 9 months ago

Trusted Users have been renamed to Package Maintainers (rfcs!7 (diffs))

pacman-contrib recently moved fakeroot to optional dependencies.

Install pantalaimon with `--no-deps` so that we can upgrade matrix-nio
for compatibility with Python 3.12, even though pantalaimon specifies
`<0.21`. This requires listing all packages to be installed, gathered
via `pip freeze`.