Rewrite get_key.py to use click instead of typer

See merge request archlinux/infrastructure!405

Typer doesn't work with Click 8[1].

[1] https://github.com/tiangolo/typer/issues/280

Give more memory to the apps and less to postgres.

postfix: Don't allow TLS on localhost:smtp

See merge request archlinux/infrastructure!403

The certificate won't be valid, anyway. Synapse actually fails to send
if the server allows STARTTLS but presents an invalid certificate.

Use `default_type` instead of `add_header Content-Type`

See merge request archlinux/infrastructure!401

The latter can cause duplicate Content-Type headers. Thanks to strcat
for notifying me of the issue.

Add link to Staff Services page for onboarding

See merge request archlinux/infrastructure!399

Document our Gitlab Servicedesk aliases

See merge request archlinux/infrastructure!398

To negate high cpu spikes from abusers/bots who scan our services, we
now fail2ban them.

fail2ban: Ban IPs based on nginx request abuse

See merge request archlinux/infrastructure!392

Leonidas Spyropoulos authored May 16, 2021 and Jelle van der Waa committed May 23, 2021

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

prometheus: Add monitoring and alert for orphan and foreign packages

Closes #332

See merge request archlinux/infrastructure!389

Leonidas Spyropoulos authored May 16, 2021 and Jelle van der Waa committed May 23, 2021

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

Leonidas Spyropoulos authored May 15, 2021 and Jelle van der Waa committed May 23, 2021

Closes: #332

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

improve onboarding documentation

Closes #226

See merge request archlinux/infrastructure!397

implements #226

make diabonas dev

Closes #346

See merge request archlinux/infrastructure!396

implements #346

Terraform uptimerobot monitors

See merge request archlinux/infrastructure!388

Add our uptimerobot to terraform so it's managed in code and we can
easily extend it. This currently only adds our to be monitored sites and
leaves the status page as is now.

Deleting resources on uptimerobot will cause terraform unable to run
see: https://github.com/louy/terraform-provider-uptimerobot/issues/82

References: #209

archmanweb: fix path to favicon.ico

Closes archmanweb#33

See merge request archlinux/infrastructure!393

Rate limit man.archlinux.org

See merge request archlinux/infrastructure!390

Limit man.archlinux.org to reduce the impact of one potential abuser on
the availability. This returns too many request when running oha with 10
connections. This does not fully negate the issue, later the abuser
should be automatically fail2ban'd.

arch_boxes_sync: Fix old releases cleanup not working due to NUL character

See merge request archlinux/infrastructure!391

Kristian Klausen authored May 15, 2021 and Jelle van der Waa committed May 16, 2021

--output-delimiter="" apparently means use the NUL character[1].

[1] https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=0e46753d7c9519d7378cd3a4e0951a36ac32ffe7