Kristian Klausen authored 3 years ago and Jelle van der Waa committed 3 years ago

zram-generator defaults to 50% of the ram where systemd-swap defaults to
25% of the ram.

[1] https://lists.archlinux.org/pipermail/arch-dev-public/2021-May/030429.html

keycloak: Update standalone.xml config

Closes #347

See merge request !400

This make it much easier to compare it to upstream's version:
diff -u standalone.xml.j2 /opt/keycloak/standalone/configuration/standalone.xml

Leonidas Spyropoulos authored 3 years ago and Kristian Klausen committed 3 years ago

Update standalone.xml configuration based on documentation

https://www.keycloak.org/docs/latest/upgrading/#_install_new_version



Closes: #347

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

gitlab_runner: Cap Docker's memory to 95% of system memory

See merge request !415

The arch-iso project uses QEMU for building and it uses a lot of memory
(they have crashed runner2 twice), so let's see if we can avoid that by
capping Docker's memory.

Revert "Revert "Remove NM connectivity check file from al.org""

See merge request !347

We did the revert to help a small business, but they had some time to
fix their setup, so we can revert the revert.

This reverts commit a842fbe7.

Put all /metrics endpoints behind auth + Scrap Hedgedoc + Grafana

See merge request !414

archwiki: update to 1.35.2-2

See merge request !366

mirrorauth: Ensure archweb is queried only once per cache TTL

See merge request archlinux/infrastructure!413

- Set "proxy_cache_lock on" to avoid sending more than one auth request
  to archweb when a cache entry doesn't exist for the credentials.
- Set "proxy_cache_use_stale updating" to prevent nginx sending multiple
  auth requests to archweb while the cache is being refreshed. [1]

[1] http://mailman.nginx.org/pipermail/nginx/2016-January/049734.html

Use $uri instead of $request_uri in proxy_cache_key to avoid caching
based on the original URI which is different for each pacman request.

The cache keys are now in the following format:

  httpsarchlinux.org/devel/mirrorauth/Basic <credentials>

Change IRC network to Libera Chat[1]

See merge request !412

Kristian Klausen authored 3 years ago and Jelle van der Waa committed 3 years ago

[1] https://archlinux.org/news/move-of-official-irc-channels-to-liberachat/

This implements authentication to our repos.archlinux.org tier 0 mirror
via archweb.

Extend onboarding information for signing keys

See merge request !411

.gitlab/issue_templates/Onboarding.md:
Extend the information for onboarding of packager signing keys and new
main signing keys, including comments on who is supposed to create the
tickets towards the archlinux-keyring project.

archweb: Fix incorrect "domains" variable for creating SSL certificate

See merge request !404

Fixes: 316b8517 ("Add missing "create ssl cert" tasks")

root_ssh: Support multiple SSH keys for the same user + root_ssh: Add additional SSH key for klausenbusk

See merge request !409

He has too many smartcards!

Ex: in case the user has multiple smartcards.

Fix offsite backup ansible playbooks

See merge request !408

Make offboarding info for developers more specific

See merge request !410

.gitlab/issue_templates/Offboarding.md:
Add more specific information for developer offboarding (e.g. also
remove from arch-dev mailing list).
Add more specific information on which templates to choose and where to
open a ticket for signing key removal.

Give Kristian full DevOps access

See merge request !407