Sven-Hendrik Haase authored 3 years ago and Kristian Klausen committed 3 years ago

Co-authored-by: Kristian Klausen <kristian@klausen.dk>

Set the aurweb_location configuration so aur-dev emails have the correct
links in the registration url. Add new dependencies to the aurweb role
for the aurweb-notify script to be able to run on the pu branch.

install_arch: Use the root_ssh role for adding authorized_key

See merge request !365

Kristian Klausen authored 3 years ago and Jelle van der Waa committed 3 years ago

The root_ssh_keys variable was changed in:
ea9f114d ("root_ssh: Support giving root access to only some hosts")
so let's just use the root_ssh role instead of maintaining the logic in
two places.

Rate limit mediawiki API endpoint

See merge request !378

Our API endpoint was being abused by a malicious user which send about
20 req/s, as php-fpm uses a pool of workers this easily over burdens
them and also gives the server a constant 100% CPU load.

Applying a rate limit succesfully negates this issue.

Give klausenbusk root access to runner{1,2}.al.org

See merge request !383

Remove tubylaws deployment

See merge request !379

The TU-Bylaws page is now deployed as gitlab page, making all of this
unrequired, the permanent redirect can stay for a while but the wiki is
already updated.

archwiki: Preserve query parameters when redirecting to the new short URL

See merge request !380

Ex: https://wiki.archlinux.org/index.php/Special:Search?search=systemd

issue templates: require to disable 'users can request access'

See merge request !361

Levente Polyak authored 3 years ago and Jelle van der Waa committed 3 years ago

This shouldn't be possible as it may lead to accidentally allowing
external users to be added to a project.
We should only add members to a project or group on staff request to
devops.

The arch wiki box previously had plenty of ram to play around with, but
the current box is significantly smaller. Memcached seems to cache ~ 600
MB on average so 1024 should suit us fine.

The TU Bylaws is currently deployed as part of the aurweb role which
makes it more work for devops and with gitlab pages TU's can deploy it
themself.

postfix: Remove special "fast-path" smtpd + Remove unneeded smtpd service that was used by SpamAssassin

Closes #321

See merge request !373

Kristian Klausen authored 3 years ago and Jelle van der Waa committed 3 years ago

Fix #321

Kristian Klausen authored 3 years ago and Jelle van der Waa committed 3 years ago

With the switch to Rspamd from SpamAssassin it isn't faster anymore,
because Rspamd is configured as a global milter where SA was configured
as a smtpd_proxy_filter/content_filter for smtp/submission.

Remove termite-terminfo on all machines

See merge request !377

Jelle van der Waa authored 3 years ago and Sven-Hendrik Haase committed 3 years ago

termite is now officially dead.

Onboard grawlinson as new TU

See merge request !376

In hedgedoc 1.8.0 sequelizerc is no longer required to as the
config.json file is used to read out the database settings.

archwiki: Make the /index.php/ -> /title/ redirect permanent (301)

See merge request !370

Kristian Klausen authored 3 years ago and Jelle van der Waa committed 3 years ago

It seems to work, so we can make the redirect permanent now.

Remove obsolete NGINX directives to use http2_max_field_size defaults.

Closes #317

See merge request !363

Andrea Denisse Gómez Martínez authored 3 years ago and Jelle van der Waa committed 3 years ago

Closes #317.

Syncarchive service depends and wants network

See merge request !364

Leonidas Spyropoulos authored 3 years ago and Jelle van der Waa committed 3 years ago

For real now, not like the 798a2d3d which did syncrepo

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

archwiki: Implement short URLs

See merge request !335

Kristian Klausen authored 4 years ago and Jelle van der Waa committed 3 years ago

The wiki people has been wanting this for some time[1], so let's
implement it.

This change the url from:
https://wiki.archlinux.org/index.php/Main_page
to:
https://wiki.archlinux.org/title/Main_page

[1] https://wiki.archlinux.org/index.php?title=ArchWiki_talk:Requests&oldid=648459#index.php_in_url_address

Enable systemd-oomd to all servers.

Closes #306

See merge request !345

Leonidas Spyropoulos authored 3 years ago and Jelle van der Waa committed 3 years ago

Kernel's OOM killer is often too slow, as a result system ends up
thrashing heavily. Have a user-space oom killer helps.

Using default settings as described in
https://www.freedesktop.org/software/systemd/man/oomd.conf.html



Closes: #306

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>