Keeps us from having to deal with .pacnew files.

Fixes these display counters which were tied to aur.archlinux.org:

- Uptime
- RootFS Total
- RAM Total
- SWAP Total

Also add a decimal point to the latter two fields.

No changes made to it; this is to reduce noise in future modifications.

Kind of sensitive information that doesn't need to be available to all
hosts.

Kristian Klausen authored 3 years ago and Jelle van der Waa committed 3 years ago

https://github.com/jenkins-x-charts/grafana-dashboard/pull/5
Kristian Klausen (2):
      loki: Use rate() for both loki_distributor_ingester_{appends,failure}_total
      loki: Fix panel title not starting with a capital letter

Jelle van der Waa authored 3 years ago and Jelle van der Waa committed 3 years ago

Make nginx serve static assets to offload gunicorn as for example
loading the home page is making 7 static requests out of 8 requests in
total. Set caching headers for now for 7 days, so browsers don't request
ideally this would be 30 days but let's keep it 7 days for now.

We don't have any state for dashboards.archlinux.org we want to persist,
so to avoid any stale data in the database, start with a new empty
in-memory database every time Grafana starts.

It has been on dashboards.archlinux.org for a few weeks.

We are running short on storage and don't really need 3 months of log,
so reduce it to 2 months instead of expanding the disk.

commit 100dbb8781d780d35ad0569222bcda3ef85bbe0a upstream.

Without this fix all the Prometheus dashboards failed loading data with:
"Error updating options: origin not allowed".

[1] https://github.com/grafana/grafana/issues/45117#issuecomment-1033842787

Kevin Morris authored 3 years ago and Evangelos Foutras committed 3 years ago

[foutrelis: add vault variables described in !532]

Signed-off-by: Kevin Morris <kevr@0cost.org>
Signed-off-by: Evangelos Foutras <evangelos@foutrelis.com>

No need to duplicate the logs from /srv/gitlab/logs/.

Making 'kernel.yama.ptrace_scope' more strict by setting it to '2'
causes failures in elfutils' test suite. While tentatively helpful
on other servers, it seems kind of unnecessary for a build server.

Fixes: #424 (to be reopened though, if more restrictions are found)

It previously used mountpoint="/rootfs" which didn't match any mounts.

Also fix HostOutOfInodes and tweak HostDiskWillFillIn24Hours slightly.

The two secrets: vault_aurweb_{secret,postmaster}

Kevin Morris authored 3 years ago and Kristian Klausen committed 3 years ago

Signed-off-by: Kevin Morris <kevr@0cost.org>

Kevin Morris authored 3 years ago and Kristian Klausen committed 3 years ago

To call these externally, poetry run must be used. This
patch brings in some wrappers that call `poetry run`
within `{{ aurweb_dir }}`.

Signed-off-by: Kevin Morris <kevr@0cost.org>

Kevin Morris authored 3 years ago and Kristian Klausen committed 3 years ago

Signed-off-by: Kevin Morris <kevr@0cost.org>

Change storage box size from 10000 to 10240 GiB.