Issues · Arch Linux / infrastructure · GitLab

review new secure runner setup

#74 · opened Jul 25, 2020 by Sven-Hendrik Haase review security
- 4
updated Aug 04, 2020
Modernize mail server setup 1 of 11 tasks completed

#50 · opened Jun 29, 2020 by Sven-Hendrik Haase migration security
- 10
updated Aug 04, 2020
Configure gitlab.com as identity provider for Keycloak

#40 · opened May 26, 2020 by Sven-Hendrik Haase
- 0
updated Jun 17, 2020
Research fine grade permissions for external users to prevent abuse

#9 · opened May 09, 2020 by Jelle van der Waa
- 0
updated May 09, 2020
Document how to update our Gitlab instance

#12 · opened May 09, 2020 by Jelle van der Waa
- 0
updated May 24, 2020
Move Grafana to a seperate box with keycloak 2 of 4 tasks completed

#13 · opened May 09, 2020 by Jelle van der Waa
- 0
updated Aug 05, 2020
Use Prometheus to monitor Gitlab

#14 · opened May 09, 2020 by Jelle van der Waa
- 0
updated Jul 20, 2020
Clean up docker images periodically on gitlab.archlinux.org

#24 · opened May 10, 2020 by Jelle van der Waa
- 0
updated May 24, 2020
Announce stopping providing the kanboard for the selected projects; Archweb, Conf, Infrastructure, Reproducible Builds, Security Team

#15 · opened May 09, 2020 by Jelle van der Waa
- 0
updated Jul 27, 2020
Update documentation about mirroring to use the Arch Github 1 of 2 tasks completed

#77 · opened Jul 26, 2020 by Jelle van der Waa documentation in progress
- 0
updated Jul 27, 2020
nginx rules to redirect from git.archlinux.org repos to gitlab

#5 · opened May 09, 2020 by Jelle van der Waa in progress
- 0
updated Jul 21, 2020
Migrate from kanboard tickets to Gitlab 5 of 10 tasks completed

#16 · opened May 09, 2020 by Jelle van der Waa in progress migration
- 5
updated Jul 27, 2020
Add custom Keycloak theme

#37 · opened May 24, 2020 by Sven-Hendrik Haase good first issue help wanted in progress
- 1
- 6
updated Jul 10, 2020
Write "New Staff Handbook"

#22 · opened May 10, 2020 by Jelle van der Waa in progress
- 1
- 1
updated Jul 27, 2020
Investigate giving out SSH access via Keycloak

#17 · opened May 09, 2020 by Jelle van der Waa security
- 0
updated May 27, 2020
Migrate the wiki to a VPS

#19 · opened May 09, 2020 by Jelle van der Waa migration
- 0
updated May 09, 2020
Migrate archweb to a separate VPS

#20 · opened May 09, 2020 by Jelle van der Waa migration
- 0
updated May 09, 2020
Setup monitoring for keycloak 0 of 4 tasks completed

#23 · opened May 10, 2020 by Jelle van der Waa migration
- 0
updated Aug 06, 2020
Migrate archweb to Keycloak

#25 · opened May 10, 2020 by Jelle van der Waa migration
- 0
updated Aug 06, 2020
Migrate arch-security-tracker to keycloak

#26 · opened May 10, 2020 by Jelle van der Waa migration
- 0
updated Jul 27, 2020
Consider enabling webauthn support in Keycloak

#28 · opened May 12, 2020 by Jelle van der Waa security
- 1
- 1
- 5
updated Jul 31, 2020
Use hetzner dns api for certbot certificate renewal

#30 · opened May 16, 2020 by Jelle van der Waa
- 0
updated Jul 13, 2020
Setup a prometheus box with alertmanager 1 of 7 tasks completed

#31 · opened May 16, 2020 by Jelle van der Waa in progress
- 2
updated Jul 31, 2020
Move all active git.archlinux.org and Github hosted projects to the Arch Linux namespace 11 of 38 tasks completed

#6 · opened May 09, 2020 by Jelle van der Waa in progress migration
- 2
updated Jul 30, 2020
Move utilities out of infrastructure.git

#34 · opened May 19, 2020 by Jelle van der Waa migration
- 0
updated May 24, 2020
Open up account registrations to the public 10 of 15 tasks completed

#39 · opened May 26, 2020 by Sven-Hendrik Haase help wanted in progress security
- 1
- 5
updated Jul 31, 2020
Migrate the wiki to keycloak

#38 · opened May 25, 2020 by Jelle van der Waa migration security
- 1
updated Jul 27, 2020
Create a GitLab bot

#33 · opened May 19, 2020 by Sven-Hendrik Haase in progress migration
- 1
updated Jun 29, 2020
archweb role can't be deployed on a new box

#47 · opened Jun 25, 2020 by Jelle van der Waa help wanted
- 0
updated Jun 25, 2020
Improve disk monitoring to detect broken disks

#48 · opened Jun 27, 2020 by Jelle van der Waa
- 0
updated Jun 27, 2020
use irker to post notifications to IRC channels

#49 · opened Jun 29, 2020 by David Runge enhancement
- 1
updated Aug 04, 2020
Consider raid1c4 on gemini

#52 · opened Jun 30, 2020 by Sven-Hendrik Haase
- 2
updated Jul 02, 2020
Migrate archlinux-docker 23 of 23 tasks completed

#78 · opened Jul 27, 2020 by Sven-Hendrik Haase migration review
- 0
updated Jul 28, 2020
Consider removing firewall rules and re-applying them for postgresql

#55 · opened Jul 03, 2020 by Jelle van der Waa security
- 1
updated Jul 20, 2020
Write onboarding/offboarding guidelines/checklists for various roles 0 of 8 tasks completed

#53 · opened Jul 02, 2020 by Sven-Hendrik Haase documentation help wanted in progress security
- 5
updated Jul 27, 2020
Add docs how to do borg operations while not on machine

#56 · opened Jul 07, 2020 by Sven-Hendrik Haase
- 0
updated Jul 07, 2020
Apply more kernel hardening 0 of 3 tasks completed

#57 · opened Jul 08, 2020 by Jelle van der Waa
- 0
updated Jul 08, 2020
Disable btrfs COW for mariadb

#58 · opened Jul 08, 2020 by Jelle van der Waa
- 0
updated Jul 08, 2020
Research pacman development requirements

#27 · opened May 11, 2020 by Jelle van der Waa
- 1
- 2
updated Jul 27, 2020
Migrate security.archlinux.org to a CX11 VPS

#60 · opened Jul 09, 2020 by Jelle van der Waa migration
- 0
updated Jul 09, 2020
Migrate conf.archlinux.org to a new VPS with deployment automation

#61 · opened Jul 09, 2020 by Jelle van der Waa migration
- 0
updated Jul 09, 2020
Migrate archwiki to a new VPS 0 of 2 tasks completed

#62 · opened Jul 09, 2020 by Jelle van der Waa migration
- 0
updated Jul 26, 2020
Fix dbscripts role to symlink the dbscripts config.local for community and packages repository.

#63 · opened Jul 12, 2020 by Jelle van der Waa
- 0
updated Jul 12, 2020
Think about finely grained secret access

#64 · opened Jul 15, 2020 by Sven-Hendrik Haase security
- 8
updated Jul 16, 2020
Migrate to mailman 3

#59 · opened Jul 09, 2020 by Jelle van der Waa migration
- 0
updated Jul 30, 2020
Decide on a password manager

#65 · opened Jul 16, 2020 by Giancarlo Razzolini security
- 1
- 2
updated Jul 22, 2020
Investigate using Tower/AWX

#66 · opened Jul 16, 2020 by Giancarlo Razzolini enhancement security
- 0
updated Jul 16, 2020
Keycloak shortcomings

#67 · opened Jul 17, 2020 by Sven-Hendrik Haase security
- 1
- 2
updated Jul 31, 2020
Notes for GitLab + Keycloak announcement

#69 · opened Jul 17, 2020 by Sven-Hendrik Haase documentation security
- 3
updated Jul 30, 2020
Harden AUR systemd services and fpm configuration 0 of 7 tasks completed

#72 · opened Jul 23, 2020 by Jelle van der Waa security
- 0
updated Jul 23, 2020
Improve mysqld server configuration 0 of 9 tasks completed

#73 · opened Jul 23, 2020 by Jelle van der Waa
- 1
updated Jul 31, 2020
Disable 2FA options in Gitlab

#79 · opened Jul 27, 2020 by Caleb Maclennan
- 7
updated Aug 01, 2020
Provide a bot to close GitHub PRs of read-only mirrors

#80 · opened Jul 27, 2020 by hashworks enhancement
- 6
updated Jul 29, 2020
Follow-up from "Add description templates for user onboarding and offboarding" 0 of 6 tasks completed

#82 · opened Jul 27, 2020 by Sven-Hendrik Haase documentation
- 0
updated Jul 27, 2020
Document keycloak debugging

#83 · opened Jul 28, 2020 by Sven-Hendrik Haase documentation
- 0
updated Jul 28, 2020
Move away from orion 0 of 3 tasks completed

#85 · opened Jul 28, 2020 by Jelle van der Waa
- 0
updated Jul 28, 2020
Move away from luna 0 of 2 tasks completed

#86 · opened Jul 28, 2020 by Jelle van der Waa
- 0
updated Jul 30, 2020
Manage DNS with Terraform

#87 · opened Jul 29, 2020 by Kristian Klausen
- 8
updated Aug 01, 2020
Find a way to make sure admin user creation is only attempted once in Keycloak

#88 · opened Jul 30, 2020 by Sven-Hendrik Haase good first issue help wanted
- 2
updated Aug 01, 2020
Create template for adding external contributor 0 of 2 tasks completed

#91 · opened Jul 31, 2020 by Sven-Hendrik Haase
- 0
updated Jul 31, 2020
Mail server migration checklist 0 of 19 tasks completed

#92 · opened Jul 31, 2020 by Giancarlo Razzolini
- 1
updated Aug 02, 2020
Switch matrix authentication to Keycloak 0 of 2 tasks completed

#94 · opened Aug 02, 2020 by Jelle van der Waa
- 0
updated Aug 02, 2020