- 09 Nov, 2020 5 commits
-
-
Jelle van der Waa authored
Extend TU/Dev/DevOps and Staff on/offboarding guidelines See merge request archlinux/infrastructure!99
-
Add the relevant mailing list subscriptions for all, Devops, TU and Developer specific mailing lists.
-
Jelle van der Waa authored
Offboard dreisner as TU/Dev See merge request archlinux/infrastructure!132
-
-
Sven-Hendrik Haase authored
Earlier, Terraform would always show a diff because Hetzner DNS API will tranform our entries after submitting them. This commit ensures that the entries are in the same format the API expects them to be in from the start.
-
- 08 Nov, 2020 2 commits
-
-
Jelle van der Waa authored
Remove old task to symlink checkservices to /usr/local/bin See merge request archlinux/infrastructure!133
-
Jakub Klinkovský authored
-
- 07 Nov, 2020 2 commits
-
-
Jan Alexander Steffens (heftig) authored
-
Jan Alexander Steffens (heftig) authored
-
- 06 Nov, 2020 3 commits
-
-
Jelle van der Waa authored
-
Jelle van der Waa authored
conf.archlinux.org: Updated revision See merge request archlinux/infrastructure!131
-
Morten Linderud authored
Signed-off-by:
Morten Linderud <morten@linderud.pw>
-
- 03 Nov, 2020 3 commits
-
-
Sven-Hendrik Haase authored
add dkim key removed by previous commit See merge request archlinux/infrastructure!130
-
Frederik Schwan authored
-
Frederik Schwan authored
-
- 02 Nov, 2020 11 commits
-
-
Jelle van der Waa authored
Setup SPF record for HELO name See merge request archlinux/infrastructure!122
-
Kristian Klausen authored
The RFC[1] recommends it and it seems to be best-pratice these days. [1] https://tools.ietf.org/html/rfc7208
-
Jelle van der Waa authored
Document our fail2ban setup See merge request archlinux/infrastructure!94
-
Jelle van der Waa authored
For all hosts we want to have a working fail2ban for sshd brute force attempts through a group_vars/all. For some hosts an override is required to enable postfix or dovecot jails.
-
Jelle van der Waa authored
-
Jelle van der Waa authored
Remove secure-runner2 See merge request archlinux/infrastructure!128
-
Sven-Hendrik Haase authored
As it turns out, secure-runner2 isn't fast enough to serve as CI/CD and if we keep rescaling it to be large enough, it'll be more expensive than secure-runner1 which is a lot faster. So, it'd be most useful to just get rid of this VPS.
-
Sven-Hendrik Haase authored
The idea is to cancel secure-runner1 and use secure-runner2 as the sole secure-runner as it should be fast enough. We originally had secure-runner1 in hardware as we thought we needed KVM but as it turns out, qemu software emulation via tcg is actually fast enough so that's what we're using now. That also menas that we can now use a cheap cloud runner for everything.
-
Sven-Hendrik Haase authored
-
Sven-Hendrik Haase authored
We decommissioned kanboard in favor of GitLab.
-
The WKD webservice ran on orion, but as we want to retire it, we will move it to it's own CX11 VPS. As it's just a simple web page.
-
- 01 Nov, 2020 1 commit
-
-
Jelle van der Waa authored
Since rebuilderd-website now does cache busting by appending the version in it's js/css file we can apply cache headers. Also remove the invalid Feature-Policy header entry.
-
- 30 Oct, 2020 3 commits
-
-
Jelle van der Waa authored
archweb: change keyserver to keyserver.ubuntu.com See merge request archlinux/infrastructure!107
-
pgp.mit.edu is very slow and is often unreachable, keyserver.ubuntu.com seems to be the only responsive server out there and is pretty complete, let's use it instead. Signed-off-by:
Filipe Laíns <lains@archlinux.org>
-
Sven-Hendrik Haase authored
Apparently our earlier permissions weren't enough.
-
- 29 Oct, 2020 4 commits
-
-
Jelle van der Waa authored
Closes: #166
-
Jelle van der Waa authored
-
Sven-Hendrik Haase authored
This personal access token is for automatically creating official Docker images and will be used via GitLab CI.
-
Jan Alexander Steffens (heftig) authored
-
- 27 Oct, 2020 1 commit
-
-
Jelle van der Waa authored
We want to periodically update it, not when we deploy the role :)
-
- 26 Oct, 2020 5 commits
-
-
Sven-Hendrik Haase authored
Add some recommended GitLab cleanup tasks (fixes #110) Closes #110 See merge request archlinux/infrastructure!123
-
Sven-Hendrik Haase authored
The idea is to make sure people don't blindly add cleanup tasks.
-
Sven-Hendrik Haase authored
-
Jelle van der Waa authored
Update the ssh-known_hosts with the sorting fix applied, so the next time it shouldn't change anymore.
-
Jelle van der Waa authored
Fix non-deterministic behavior of sync-ssh-hostkeys.yml Closes #196 See merge request archlinux/infrastructure!124
-