Commits · 24840e1ac2e5af29cc9efe846f21fac6f5e7ca07 · hashworks / infrastructure

This project is mirrored from https://gitlab.archlinux.org/archlinux/infrastructure.git. Pull mirroring updated Feb 01, 2023.

25 Nov, 2018 1 commit
- Add orion to nginx group for zabbix monitoring · 24840e1a
  Florian Pritz authored Nov 23, 2018
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  24840e1a
24 Nov, 2018 3 commits
- nymeria: enable mirrorresolv service · c17a91e7
  Jelle van der Waa authored Nov 22, 2018
  
  c17a91e7
- archweb: harden mirrorresolv service · db0a2bd0
  Jelle van der Waa authored Nov 22, 2018
  
  db0a2bd0
- archweb: MaxRunTimeSec has no effect with oneshot · 025a8ce6
  Jelle van der Waa authored Nov 22, 2018
```
Use TimeoutStopSec instead.
```
  025a8ce6
23 Nov, 2018 6 commits
- hosts: update reproducible dns names · 64415ec6
  Jelle van der Waa authored Nov 23, 2018
  
  64415ec6
- archweb update to 2018-11-23 release · 46cf0547
  Jelle van der Waa authored Nov 23, 2018
  
  46cf0547
- upgrade_pg.sh: Copy SSL cert files · 5756e8a1
  Florian Pritz authored Nov 23, 2018
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  5756e8a1
- upgrade_pg.sh: Disable after-upgrade removal · 4346bc30
  Florian Pritz authored Nov 23, 2018
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  4346bc30
- upgrade_pg.sh: Add safety check to prevent multiple runs · 2456e8fa
  Florian Pritz authored Nov 23, 2018
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  2456e8fa
- upgrade_pg.sh: Document what to do when major version error happens · 73da9760
  Florian Pritz authored Nov 23, 2018
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  73da9760
21 Nov, 2018 4 commits
- archweb: harden mirrorcheck service · c8c361f6
  Jelle van der Waa authored Nov 21, 2018
```
Disallow changing of kernel options, reading home/tmp and disallow the
service from seeing our /dev.
```
  c8c361f6
- archweb: harden memcached service further · 4489a97c
  Jelle van der Waa authored Nov 21, 2018
```
Don't allow new priviliges, disallow changing kernel tunables/loading
modules and setting cgroups.
```
  4489a97c
- postgres: add upgrade postgres script · af1bff90
  Jelle van der Waa authored Nov 21, 2018
  
  af1bff90
- Add new TU - Brett Cornwall · 65cca332
  Bartłomiej Piotrowski authored Nov 21, 2018
  
  65cca332
20 Nov, 2018 9 commits
- Add new TU - Maxim Baz · c5a14a00
  Florian Pritz authored Nov 20, 2018
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  c5a14a00
- postgres: Merge upstream config locale changes · 8a60a8ae
  Florian Pritz authored Nov 20, 2018
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  8a60a8ae
- postgres: Merge upstream config WAL size changes · 99c02ad9
  Florian Pritz authored Nov 20, 2018
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  99c02ad9
- postgres: Merge upstream configuration changes to SSL section · 8f5a96e6
  Florian Pritz authored Nov 20, 2018
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  8f5a96e6
- postgres: Move TCP/SSL comments around to match new upstream config · a96c5689
  Florian Pritz authored Nov 20, 2018
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  a96c5689
- postgres: Move comments around to match new upstream config · 638b5af5
  Florian Pritz authored Nov 20, 2018
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  638b5af5
- common: Merge systemd upstream configuration changes · d6df5a95
  Florian Pritz authored Nov 20, 2018
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  d6df5a95
- php: Merge upstream configuration changes · bfd8d3a8
  Florian Pritz authored Nov 20, 2018
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  bfd8d3a8
- grafana: Merge upstream configuration changes · 41bd3312
  Florian Pritz authored Nov 20, 2018
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  41bd3312
19 Nov, 2018 1 commit

zabbix-server: Check the exit code when checking if the db is populated · fd8f3299

Florian Pritz authored Nov 19, 2018

Without this the condition is always true and the first task may cause
the playbook to fail when the db is not populated. This should fix it.

Introduced in 6b9d0b04



Signed-off-by: Florian Pritz <bluewind@xinu.at>

fd8f3299

18 Nov, 2018 1 commit

nginx: Raise worker NOFILE limits · d724f8cd

Florian Pritz authored Nov 18, 2018



This is mostly to resolve issues on luna where nginx is hitting the
limit, but the higher limit won't hurt other machines so I'm not putting
it in a variable for now.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

d724f8cd

17 Nov, 2018 1 commit

archweb: RuntimeMaxSec of one hour · c00ac587

Jelle van der Waa authored Nov 17, 2018

Add a maximum runtime of one hour for a situation in where the
mirrorcheck job hangs due to rsync issues.

c00ac587

16 Nov, 2018 1 commit
- zabbix-server: Check if DB table is populated before installing schema · 6b9d0b04
  Florian Pritz authored Nov 16, 2018
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  6b9d0b04
13 Nov, 2018 2 commits
- roles/patchwork: Updated patchwork to the latest release, 2.1.1 · 7715c00e
  Giancarlo Razzolini authored Nov 13, 2018
```
Updated the patchwork version to 2.1.1 and ran the playbook against apollo.
```
  7715c00e
- Add new TU - Konstantin Gizdov · 7c11caa5
  Bartłomiej Piotrowski authored Nov 13, 2018
  
  7c11caa5
11 Nov, 2018 1 commit
- archwiki: Update to 1.31.1-3 · 4072c352
  Florian Pritz authored Nov 11, 2018
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  4072c352
10 Nov, 2018 2 commits
- nymeria: update archweb version · b9ce833b
  Jelle van der Waa authored Nov 10, 2018
  
  b9ce833b
- Add nginx role to luna · b331f342
  Florian Pritz authored Nov 10, 2018
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  b331f342
08 Nov, 2018 1 commit

nginx: Randomize delay for certbot · fff3c2b8

Florian Pritz authored Nov 08, 2018



Running it too close to 00:00 UTC just leads to errors all the time.
Running it at other times work fine so let's randomize things.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

fff3c2b8

07 Nov, 2018 3 commits
- docs/email: Explain forwarding addresses · 1e4c6cbf
  Florian Pritz authored Nov 07, 2018
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  1e4c6cbf
- Add new user documentation · 6cc45297
  Florian Pritz authored Nov 07, 2018
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  6cc45297
- Add new TU - Daniel Bermond · f944db48
  Florian Pritz authored Nov 07, 2018
```
Signed-off-by: Florian Pritz <bluewind@xinu.at>
```
  f944db48
05 Nov, 2018 2 commits
- roles/matrix: Sync config with generated default one · 5a1700eb
  Jan Alexander Steffens (heftig) authored Nov 05, 2018
  
  5a1700eb
- use unbound dns for mail servers · 19b0514b
  Jelle van der Waa authored Nov 05, 2018
  
  19b0514b
29 Oct, 2018 2 commits
- misc: Add pypi password · 8429772f
  Jelle van der Waa authored Oct 29, 2018
  
  8429772f
- docs: Add email documentation · d1c8c9e5
  Jelle van der Waa authored Oct 29, 2018
  
  d1c8c9e5