- 18 Dec, 2020 12 commits
-
-
Jelle van der Waa authored
Rebuilderd-workers are expected to have a high cpu load. Closes: #240
-
Jelle van der Waa authored
Add Archive specific dashboard See merge request !192
-
Jelle van der Waa authored
This new dashboard shows the archive size and total amount of packages over time.
-
Jelle van der Waa authored
Make nginx be able to read the security tracker assets See merge request archlinux/infrastructure!189
-
Jelle van der Waa authored
Allow http group to read the security tracker directory for web assets.
-
Jelle van der Waa authored
Add rgacogne as new TU See merge request archlinux/infrastructure!188
-
Jelle van der Waa authored
Application results: https://lists.archlinux.org/pipermail/aur-general/2020-December/036034.html
-
Sven-Hendrik Haase authored
Move the "Servers" section from the readme to docs/servers.md See merge request archlinux/infrastructure!200
-
Kristian Klausen authored
-
Sven-Hendrik Haase authored
Add TOC to readme See merge request archlinux/infrastructure!197
-
Kristian Klausen authored
-
Sven-Hendrik Haase authored
Mention the archive mirrors in our README as offered services See merge request archlinux/infrastructure!195
-
- 17 Dec, 2020 8 commits
-
-
Jelle van der Waa authored
-
Jelle van der Waa authored
Improve the maintenance role and create an archweb custom maintenance nginx template See merge request archlinux/infrastructure!190
-
Giancarlo Razzolini authored
Added some documentation regarding the service_nginx_template variable and the implications of using it.
-
Giancarlo Razzolini authored
Added the missing break; parameter to allow the maintenace remote machine in.
-
Giancarlo Razzolini authored
-
Giancarlo Razzolini authored
This template is very similar to the regular archweb nginx one with a few notable differences: - Regardless of the domain, everything will go to the main domain - It allows the network manager check to pass - It will use the ip address of the person running the role, and exempt only that ip address from hitting the maintenance page. Everybody else should see the maintenance page.
-
Giancarlo Razzolini authored
Configured the variable for the custom nginx template used on maintenance mode. It is important that this template handles the maintenance on it's own. Also, the maintenance mode was running on gemini, even though archweb_site is false there. Add a check for archweb_site, to make sure the maintenance mode only runs on the machine hosting the site.
-
Giancarlo Razzolini authored
Added a task that sets a custom nginx maintenance mode template, if the calling role sets the service_nginx_template variable. This allows for much greater flexibility, while putting the responsibility of actually setting the maintenance mode on the calling role.
-
- 16 Dec, 2020 2 commits
-
-
Frederik Schwan authored
stop prometheus from gathering bogus security update informations See merge request !187
-
Frederik Schwan authored
-
- 15 Dec, 2020 4 commits
-
-
Jelle van der Waa authored
Create archlinux.org playbook and host_vars See merge request !186
-
Giancarlo Razzolini authored
Add the ip addresses for mirror.pkgbuild.com, otherwise the apollo and archlinux.org playbooks won't run
-
Giancarlo Razzolini authored
Added a host_var file for archlinux.org as well as the playbook for archlinux.org machine. It it's a stripped down version of apollo's playbook, only containing the roles pertaining archweb.
-
Sven-Hendrik Haase authored
-
- 14 Dec, 2020 5 commits
-
-
Sven-Hendrik Haase authored
Add archive specific monitoring See merge request !182
-
Jelle van der Waa authored
To monitor our archive mirrors and the archive size itself a new textcollector has been added. This will allow us to monitor the archive growth and the sync rate to mirrors.
-
Sven-Hendrik Haase authored
Add a new issue template for adding an Archive Mirror See merge request !183
-
-
Sven-Hendrik Haase authored
add dnswl secrets See merge request !184
-
- 13 Dec, 2020 3 commits
-
-
Frederik Schwan authored
-
Sven-Hendrik Haase authored
gitlab: use implicit ssl instead of STARTTLS for imap connections See merge request !180
-
Frederik Schwan authored
Gitlab uses IMAP to fetch incoming mails. IMAP used to run on port 143 until the recent migration which disabled that port. This change makes gitlab use port 993 and implicit TLS.
-
- 12 Dec, 2020 6 commits
-
-
Sven-Hendrik Haase authored
Make GitLab use host-mode networking See merge request !179
-
Sven-Hendrik Haase authored
-
Sven-Hendrik Haase authored
This cuts some complexity while also getting rid of the Docker userspace proxy which is slow compared to kernelspace routing. It also allows us to make GitLab consume a second IP for GitLab Pages without too much fuckery.
-
Sven-Hendrik Haase authored
fix network of runner1.archlinux.org See merge request !178
-
Frederik Schwan authored
Do not use asterisk on network devices to prevent IP address collisions on networks. Also use the right network mask for the assigned network. For runner1 we need to ignore RAs since those routes don't work.
-
Jelle van der Waa authored
Security tracker lower dns See merge request !176
-