Kristian Klausen authored 4 years ago and Jelle van der Waa committed 3 years ago

[1] https://github.com/yandex/gixy/blob/641060d6355fbb5bd71695928a2bf14a9bcb8bf2/docs/en/plugins/aliastraversal.md

Fix #291

Re introduce the arch-audit rule as arch-audit no longer reports false
positives from [testing]. Lax the high cpu alert as our mediawiki
instance is perfectly fine running on 85% CPU for some time, and lax our
disk will fill within X alert as our borg backups generate enough data
in a short time to trigger the 4 hour alarm.

Remove NM connectivity check file from al.org

See merge request !312

With the ping.al.org domain added in[1] and a updated networkmanager
package shipped[2], we can now remove the file from the main domain.

[1] 498d5304 ("Merge branch 'ping' into 'master'")
    fabccd0f (""Move" NM connectivity check file to a subdomain")
[2] https://github.com/archlinux/svntogit-packages/commit/fb573170fc63c18f64eb4f155ed64a966a61b037

Setup Pages for new bugs.archlinux.org snapshot service[1]

Closes #303

See merge request !343

Fix #303

[1] https://gitlab.archlinux.org/archlinux/archlinux-bugs-snapshotter

Fix off-/onboarding inconsistent and add #archlinux-staff instructions

See merge request !341

This allows us to get proper certificates for loki which will run on logging.archlinux.org
on the same machine as monitoring.archlinux.org.

Add klausenbusk's SSH key

See merge request !340

Levente Polyak authored 4 years ago and Sven-Hendrik Haase committed 3 years ago

Strictly speaking this is not a devops duty, but I believe this is
currently the best place to ensure we won't ever forget to create a
keyring revocation ticket for an offboarded former staff.

Our qemu TCG builds generate plenty of cpu usage over time to be
excluded from warnings.

Our dbscripts role expects the default ssh key to be username + '.pub'.

Add additional ssh key for hashworks, set prefered shell

See merge request !336

To use a key as backup key to be deployed on all hosts.

dbscripts: Issue a certificate for rsync.archlinux.org

See merge request !338

Put man.archlinux.org into node_exporters group

See merge request !337

I think this is all that is missing to actually start monitoring
man.archlinux.org.

Bump pacman version

See merge request !333

Monitor remaning (mta-sts +  openpgpkey + repos + static.conf) and recently added services (ping + md)

See merge request !324

Kristian Klausen authored 4 years ago and Frederik Schwan committed 4 years ago

This is a partial "revert" of: 01b2b5b2 ("Remove non 200-399 status code domains")

role(postfix): remove export-grade dh params

See merge request !332

George Rawlinson authored 4 years ago and Frederik Schwan committed 4 years ago

According to upstream documentation[0], the configuration parameter
smtpd_tls_dh512_param_file will be ignored from the next release of
Postfix (3.6).

[0]: http://www.postfix.org/postconf.5.html#smtpd_tls_dh512_param_file

It was getting very cramped with only a few MBs left. It appears currently we only get about 6 months worth of data out of 20G
so 100G seems reasonable.