Skip to content
Snippets Groups Projects

Compare revisions

Changes are shown as if the source revision was being merged into the target revision. Learn more about comparing revisions.

Source

Select target project
No results found

Target

Select target project
  • antiz/infrastructure
  • okabe/infrastructure
  • eworm/infrastructure
  • polyzen/infrastructure
  • pitastrudl/infrastructure
  • sjon/infrastructure
  • torxed/infrastructure
  • jinmiaoluo/infrastructure
  • moson/infrastructure
  • serebit/infrastructure
  • ivabus/infrastructure
  • lb-wilson/infrastructure
  • gromit/infrastructure
  • matt-1-2-3/infrastructure
  • jocke-l/infrastructure
  • alucryd/infrastructure
  • maximbaz/infrastructure
  • ainola/infrastructure
  • segaja/infrastructure
  • nl6720/infrastructure
  • peanutduck/infrastructure
  • aminvakil/infrastructure
  • xenrox/infrastructure
  • felixonmars/infrastructure
  • denisse/infrastructure
  • artafinde/infrastructure
  • jleclanche/infrastructure
  • kpcyrd/infrastructure
  • metalmatze/infrastructure
  • kevr/infrastructure
  • dvzrv/infrastructure
  • dhoppe/infrastructure
  • ekkelett/infrastructure
  • seblu/infrastructure
  • lahwaacz/infrastructure
  • klausenbusk/infrastructure
  • alerque/infrastructure
  • hashworks/infrastructure
  • foxboron/infrastructure
  • shibumi/infrastructure
  • lambdaclan/infrastructure
  • ffy00/infrastructure
  • freswa/infrastructure
  • archlinux/infrastructure
44 results
Show changes
Commits on Source (6)
......@@ -12,11 +12,6 @@ arch_users:
accounts:
name: ""
groups: []
aginiewicz:
name: "Andrzej Giniewicz"
ssh_key: aginiewicz.pub
groups:
- tu
ainola:
name: "Brett Cornwall"
ssh_key: ainola.pub
......@@ -478,6 +473,11 @@ arch_users:
- dev
- tu
- multilib
serebit:
name: "Campbell Jones"
ssh_key: serebit.pub
groups:
- tu
shibumi:
name: "Christian Rebischke"
ssh_key: shibumi.pub
......@@ -530,11 +530,6 @@ arch_users:
- dev
- tu
- multilib
tensor5:
name: "Nicola Squartini"
ssh_key: tensor5.pub
groups:
- tu
torxed:
name: "Anton Hvornum"
ssh_key: torxed.pub
......
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnWeaxKzhumh6bRVaB9gy9Sy3XPlDa9dy1v3lwQQ+3dEHtmukirk1DX4jzLdpJcwwxFL0y1OLdH0/qbDdz1Dqdk8JvjogPQf82QflV14NyLiIilLsA6gETkiuQ7Y/r+7edzqS+bzZJqucw8BSqv7jxoXOL3nJ3G12dkqSW2HUGIQobRolOH1JcXkJg86UIs1Plli48/ptjsd8WiLYWVJsW0538KVsoHHSvOfNv1bjYVLTdYdegdpfwebPOkDj6V4wfhoGZDSCwhXJtLYaXXi41m50seMpelQn2puCwntfPIlcIKv2/5UT9TOnGoVE5LmBtJRCgqKS9EQTQo+392Y4fQ== giniu@raven3
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDF32tlSDr0Ze6owld0p8LCwFT4ttwy99qfDERX/Ntlqobtr9AsZx4FMHToLwhehJuhpj3hzmlmHtRyqF1HnTd6Jrxk8jTmqYej7QpOIZSEmkYwUZK8optnWFIQ/Ce+t5InkJG/FoexXTXEOCegVdZmCyS7Rxr2Nt6v9EDAhYXb9strKROVYy0G5rNisu9aLPqTLEcpbHWnOwHjFuIzivsCq7klqiYYjNruFtH53QEHRKWJhwrrW1AHGQQz3N3nZ/9bV/CvOfC4OZw5CQB4ewDEnYOoMwsQBhlflY2gNDqwcFlC42XIVe+ZD/vL0XNtK+2EK0wmihwEyhieZ8CmoOl/PLxdez9Ipc+Bu5yVDqkIAl4F58Ct55l+21aRVeQEoCxR/3+TJQicwHIurpCftL/g0WF16qnrJ1kcZwSyUi1UO0krBeczrkpjz2gG+Cf/NunLYCn5aXDJ+fJ8QOP8JrG9zQfLMsXiszZv4ICxI5iQDOCAz6r3cHtZCThJJy53FQc=
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCQM94mC1F77g9DB1wqmbqSpgKpk8x53e2lowqMQEWkOT4LhzSI96QY9Jbrt8AA0RjzckLPtbNTRkivWrKdghFCKsFGk4+xI+g3i7BxXpYMKrpgE6euPEFIQlcjlIQodFUu8YSBWgJKprp7exD0dBs008NzgSam6ImLrQn9iZPB6++FiNQiTNnCfHhqtiXNbTbIxjzQTG1nFRWqc47I0Fwa8hRwU7nUAunS7W+Y2pBE3bVf2q+r0l1RjkUBBt7UsP9EHkJ1SajrFmKrGs8f+t0LxupaW3tfjAnAQOQS1+/oxqI+GLVkXSXbwSi+8J9txd69gXRTGDNJ5bffLPUbGcb Trusted User
[Service]
ExecStartPost=+-/usr/bin/pdns_control reload
......@@ -8,6 +8,12 @@
- {src: geo.yml.j2, dest: geo.yml}
notify: restart powerdns
- name: create drop-in directory for geoipupdate
file: path=/etc/systemd/system/geoipupdate.service.d state=directory owner=root group=root mode=0755
- name: install drop-in snippet for geoipupdate
copy: src=geoipupdate-pdns-reload.conf dest=/etc/systemd/system/geoipupdate.service.d/pdns-reload.conf owner=root group=root mode=0644
- name: open powerdns ipv4 port for monitoring.archlinux.org
ansible.posix.firewalld: zone=wireguard state=enabled permanent=true immediate=yes
rich_rule="rule family=ipv4 source address={{ hostvars['monitoring.archlinux.org']['wireguard_address'] }} port protocol=tcp port=8081 accept"
......
......@@ -209,7 +209,7 @@ reporting_enabled = false
# for new versions of grafana. The check is used
# in some UI views to notify that a grafana update exists.
# This option does not cause any auto updates, nor send any information
# only a GET request to http://grafana.com to get latest versions
# only a GET request to https://raw.githubusercontent.com/grafana/grafana/main/latest.json to get the latest version.
check_for_updates = false
# Set to false to disable all checks to https://grafana.com
......@@ -312,6 +312,12 @@ strict_transport_security_max_age_seconds = 86400
# Controls if old angular plugins are supported or not. This will be disabled by default in future release
;angular_support_enabled = true
# List of additional allowed URLs to pass by the CSRF check, separated by spaces. Suggested when authentication comes from an IdP.
;csrf_trusted_origins = example.com
# List of allowed headers to be set by the user, separated by spaces. Suggested to use for if authentication lives behind reverse proxies.
;csrf_additional_headers =
[security.encryption]
# Defines the time-to-live (TTL) for decrypted data encryption keys stored in memory (cache).
# Please note that small values may cause performance issues due to a high frequency decryption operations.
......@@ -378,8 +384,11 @@ allow_sign_up = false
# Default UI theme ("dark" or "light")
;default_theme = dark
# Default locale (supported IETF language tag, such as en-US)
;default_locale = en-US
# Path to a custom home page. Users are only redirected to this if the default home dashboard is used. It should match a frontend route and contain a leading slash.
; home_page =
;home_page =
# External user management, these options affect the organization users view
;external_manage_link_url =
......@@ -439,6 +448,9 @@ oauth_auto_login = true
# Set to true to enable verbose logging of SigV4 request signing
;sigv4_verbose_logging = false
# Set to true to enable Azure authentication option for HTTP-based datasources.
;azure_auth_enabled = false
#################################### Anonymous Auth ######################
[auth.anonymous]
# enable anonymous access
......@@ -563,6 +575,7 @@ role_attribute_strict = true
;tls_client_key =
;tls_client_ca =
;use_pkce = false
;auth_style =
{% endif %}
#################################### Basic Auth ##########################
......@@ -635,8 +648,6 @@ role_attribute_strict = true
#################################### Role-based Access Control ###########
[rbac]
;enabled = true
# If enabled, cache permissions in a in memory cache (Enterprise only)
;permission_cache = true
#################################### SMTP / Emailing ##########################
[smtp]
......@@ -721,6 +732,9 @@ mode = syslog
# Should Sentry javascript agent be initialized
;enabled = false
# Defines which provider to use, default is Sentry
;provider = sentry
# Sentry DSN if you want to send events to Sentry.
;sentry_dsn =
......@@ -736,6 +750,18 @@ mode = syslog
# Max requests accepted per short interval of time for Grafana backend log ingestion endpoint (/log).
;log_endpoint_burst_limit = 15
# Should error instrumentation be enabled, only affects Grafana Javascript Agent
;instrumentations_errors_enabled = true
# Should console instrumentation be enabled, only affects Grafana Javascript Agent
;instrumentations_console_enabled = false
# Should webvitals instrumentation be enabled, only affects Grafana Javascript Agent
;instrumentations_webvitals_enabled = false
# Api Key, only applies to Grafana Javascript Agent provider
;api_key = testApiKey
#################################### Usage Quotas ########################
[quota]
; enabled = false
......@@ -780,7 +806,7 @@ mode = syslog
#################################### Unified Alerting ####################
[unified_alerting]
#Enable the Unified Alerting sub-system and interface. When enabled we'll migrate all of your alert rules and notification channels to the new system. New alert rules will be created and your notification channels will be converted into an Alertmanager configuration. Previous data is preserved to enable backwards compatibility but new data is removed.```
enabled = true
;enabled = true
# Comma-separated list of organization IDs for which to disable unified alerting. Only supported if unified alerting is enabled.
;disabled_orgs =
......@@ -832,10 +858,15 @@ enabled = true
# The interval string is a possibly signed sequence of decimal numbers, followed by a unit suffix (ms, s, m, h, d), e.g. 30s or 1m.
;min_interval = 10s
[unified_alerting.reserved_labels]
# Comma-separated list of reserved labels added by the Grafana Alerting engine that should be disabled.
# For example: `disabled_labels=grafana_folder`
;disabled_labels =
#################################### Alerting ############################
[alerting]
# Disable legacy alerting engine & UI features
enabled = false
;enabled = false
# Makes it possible to turn off alert execution but alerting UI is visible
;execute_alerts = true
......