archbuild: Add systemd conf for devtools resource control

See merge request archlinux/infrastructure!745

Leveraging devtools 1.0.4, install systemd snippets which
  - distribute CPU and IO equally between users,
  - distribute CPU and IO equally between build containers of a user,
  - prefer distributing CPU and IO to things that are not build
    containers, and
  - copy our user oomd config for users to apply to build containers.

Gluebuddy does not keep state so there is no reason for backing up the
server.

Fixes: d88c0b95 ("Initialize gluebuddy host")

Fixes: ae53da35 ("Setup OpenSearch server for GitLab's advanced search feature[1]")
Fixes: b892c0e8 ("geomirror: new uk based mirror sponsored from jump.net.uk")

faillock has often been locking me out of my mailbox because it counts
failed authentication attempts against my user; turn this off and rely
on fail2ban to block instances of account password brute-forcing by IP.

Its php7 package can easily break from library upgrades like ICU.

hedgedoc: Enable named pads

See merge request archlinux/infrastructure!742

This allows the pads to be named nicely instead of having just a random string as URL.

For example the draft of the monthly report in july could be located at "https://md.archlinux.org/2023-07_monthly-report" instead of "https://md.archlinux.org/UF9Y235qTRe8XS3qxUVeJA".

https://docs.hedgedoc.org/references/url-scheme/#freeurl-mode



Signed-off-by: Christian Heusel <christian@heusel.eu>

The HTTP code must be 2xx for probe_success to indicate that the probe
succeeded, if not an alert will be sent.

Fixes: 653f8011 ("Add GitLab Pages for alpm-types[1]")

dbscripts: allow everyone access to multilib

See merge request archlinux/infrastructure!723

Onboard moson as Support Staff

See merge request archlinux/infrastructure!737

Relates to: #521

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

gitlab: enable custom pages root dir

See merge request archlinux/infrastructure!741

As per docs: https://docs.gitlab.com/ee/user/project/pages/introduction.html#customize-the-default-folder

[1] archlinux/alpm/alpm-types#36

Rate limit aurweb as archweb

See merge request archlinux/infrastructure!732

Jelle van der Waa authored 1 year ago and Leonidas Spyropoulos committed 1 year ago

Apply the same rate limitting and fail2ban rules for aur.archlinux.org

Boxy seems to randomly restart after running out of memory. We do not
yet know the reason behind the increased memory usage, but zram might
help a bit.

grafana: update AUR dashboard (search requests)

See merge request !739

* Remove API Requests panel (no values; replaced by goaurrpc dashboard)
* Add panel to visualize new metrics for search requests
* Set default timespan to 1 day (from 30d)

Ref: archlinux/aurweb@814ccf6b
Signed-off-by: moson <moson@archlinux.org>

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

gitlab: Bypass rate limiting for gemini

See merge request archlinux/infrastructure!724

We do not want our packagers on gemini to hit the rate-limit.

grafana: add Gitlab metrics dashboard

See merge request archlinux/infrastructure!735

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

Redirect status to the non CNAME version for now

See merge request archlinux/infrastructure!736

Until we get our situation with uptimerobot fixed, we are redirecting
status.archlinux.org to the standard uptimerobot URL, that is provided
with their free plan. Once/if we re-gain our premium access, we can
simply revert this MR.

To match Matrix.org. The limit also applies to files we need to retrieve
from other servers.

grafana: update goaurrpc dashboard (rate-limit chart)

See merge request archlinux/infrastructure!734

Add panel to visualize how many requests end up being rate-limited

Signed-off-by: moson-mo <mo-son@mailbox.org>

Collect flyspray open issues

See merge request archlinux/infrastructure!725