infrastructure merge requestshttps://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests2021-05-01T18:47:56Zhttps://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/345Enable systemd-oomd to all servers.2021-05-01T18:47:56ZLeonidas SpyropoulosEnable systemd-oomd to all servers.Use default settings as per described in
https://www.freedesktop.org/software/systemd/man/oomd.conf.html
Closes: #306
Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>Use default settings as per described in
https://www.freedesktop.org/software/systemd/man/oomd.conf.html
Closes: #306
Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>https://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/353Avoid needless regex on 301 rewrites2021-04-12T19:31:32ZLeonidas SpyropoulosAvoid needless regex on 301 rewritesCloses: #278
Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>Closes: #278
Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>https://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/355New networking role shared.2021-07-30T18:21:26ZLeonidas SpyropoulosNew networking role shared.This is shared between common and install_arch roles
Closed: #288
Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>This is shared between common and install_arch roles
Closed: #288
Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>https://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/356Stop uncontrolled requests early.2021-04-27T20:24:35ZLeonidas SpyropoulosStop uncontrolled requests early.Stop uncontrolled requests before reach php backend
Closes: #276
Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>Stop uncontrolled requests before reach php backend
Closes: #276
Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>https://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/359Draft: Implement nginx rate limit certain endpoints.2022-07-04T21:33:53ZLeonidas SpyropoulosDraft: Implement nginx rate limit certain endpoints.Different dynamic and static rate limits for wiki, aurweb, bbs, and
al.org
Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>Different dynamic and static rate limits for wiki, aurweb, bbs, and
al.org
Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>https://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/362Syncarchive service depends and wants network2021-04-27T20:52:13ZLeonidas SpyropoulosSyncarchive service depends and wants networkCloses #286
Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>Closes #286
Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>https://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/364Syncarchive service depends and wants network2021-05-03T19:58:01ZLeonidas SpyropoulosSyncarchive service depends and wants networkFor real now, not like the 798a2d3d which did syncrepo
Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>For real now, not like the 798a2d3d which did syncrepo
Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>https://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/372aurweb: Don't call PHP for serving static content2021-05-14T20:20:19ZLeonidas Spyropoulosaurweb: Don't call PHP for serving static contentCloses: #318
Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>Closes: #318
Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>https://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/374keycloak: Re-sync with version 13.0.0 changes2021-06-16T20:37:22ZLeonidas Spyropouloskeycloak: Re-sync with version 13.0.0 changesChanges from https://github.com/keycloak/keycloak/commit/3b80eee5bfdf2b80c47465c0f2eaf70074808741
Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>Changes from https://github.com/keycloak/keycloak/commit/3b80eee5bfdf2b80c47465c0f2eaf70074808741
Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>https://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/389prometheus: Add monitoring and alert for orphan and foreign packages2021-05-23T11:56:19ZLeonidas Spyropoulosprometheus: Add monitoring and alert for orphan and foreign packagesCloses: #332
Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>Closes: #332
Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>https://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/392fail2ban: Ban IPs based on nginx request abuse2021-05-23T19:55:01ZLeonidas Spyropoulosfail2ban: Ban IPs based on nginx request abuseSigned-off-by: Leonidas Spyropoulos <artafinde@gmail.com>Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>https://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/400keycloak: Update standalone.xml config2021-06-06T14:35:51ZLeonidas Spyropouloskeycloak: Update standalone.xml configUpdate standalone.xml configuration based on documentation
https://www.keycloak.org/docs/latest/upgrading/#_install_new_version
Closes: #347
Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>Update standalone.xml configuration based on documentation
https://www.keycloak.org/docs/latest/upgrading/#_install_new_version
Closes: #347
Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>https://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/422fail2ban: Add nginx_limit_req to all dicts2021-06-11T07:58:58ZLeonidas Spyropoulosfail2ban: Add nginx_limit_req to all dictsAnsible complains if the fail2ban_jails dictionary is missing the
nginx_limit_req key. Adding this as default failse.
Bugfix from: e5773374
Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>Ansible complains if the fail2ban_jails dictionary is missing the
nginx_limit_req key. Adding this as default failse.
Bugfix from: e5773374
Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>https://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/473prometheus: add matrix metrics and dashboard2021-07-31T11:15:39ZLeonidas Spyropoulosprometheus: add matrix metrics and dashboardCloses: #290
Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>Closes: #290
Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>https://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/515keycloak: Update configuration for keycloak 162022-01-31T20:36:55ZLeonidas Spyropouloskeycloak: Update configuration for keycloak 16Keycloak inconveniently reorders the XML entries on releases so the diff seems weird.
The changed made on the shipped `standalone.xml` from keycloak 16 package are shown in this patch:
https://gist.github.com/inglor/1b9d9ea956867a3c8dcb...Keycloak inconveniently reorders the XML entries on releases so the diff seems weird.
The changed made on the shipped `standalone.xml` from keycloak 16 package are shown in this patch:
https://gist.github.com/inglor/1b9d9ea956867a3c8dcbc3b4d38752b5https://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/566gitlab-exporter: add gitlab-exporter to monitoring2022-05-09T16:02:37ZLeonidas Spyropoulosgitlab-exporter: add gitlab-exporter to monitoringhttps://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/570Draft: Add systemd-exporter role2023-10-01T21:34:31ZLeonidas SpyropoulosDraft: Add systemd-exporter roleThis adds the systemd-exporter role which can monitor and report metrics for systemd units
Fixes: #414This adds the systemd-exporter role which can monitor and report metrics for systemd units
Fixes: #414https://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/584gluebuddy: externalize bot users in env variable2022-06-06T14:45:59ZLeonidas Spyropoulosgluebuddy: externalize bot users in env variableLeonidas SpyropoulosLeonidas Spyropouloshttps://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/590Add top 15 prometheus metrics for gitlab exporter2022-06-16T17:04:40ZLeonidas SpyropoulosAdd top 15 prometheus metrics for gitlab exporterSigned-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>Leonidas SpyropoulosLeonidas Spyropouloshttps://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/614Filter http request for aur on host2022-08-10T16:08:00ZLeonidas SpyropoulosFilter http request for aur on hosthttp_request contains requests from debuginfo.al.org host as well
as from aur.al.org so filter them per host
Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>http_request contains requests from debuginfo.al.org host as well
as from aur.al.org so filter them per host
Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>Leonidas SpyropoulosLeonidas Spyropoulos