Relax conf.archlinux.org content security

See merge request !96

The site now includes some foreign scripts and we need a more lax CSP in order for that to even work.

Updated conference page

See merge request !95

Morten Linderud authored 4 years ago and Giancarlo Razzolini committed 4 years ago

Signed-off-by: Morten Linderud <morten@linderud.pw>

See https://docs.ansible.com/ansible/devel/porting_guides/porting_guide_2.10.html#id3

Fix deprecated ansible variables

See merge request !92

From 2.0[0] onwards, all `ansible_ssh_*` variables are deprecated.

[0]: https://docs.ansible.com/ansible/2.3/intro_inventory.html

Add MFA form warnings and revise authenticator app list

Closes #141

See merge request !88

This is now possible because of terraform-provider-keycloak 2.0.0 :D

keycloak: Add WebAuthn policy and register "required action" webauthn-register

Closes #120

See merge request archlinux/infrastructure!85

Kristian Klausen authored 4 years ago and Sven-Hendrik Haase committed 4 years ago

Fix #120

Implement new Keycloak group structure

Closes #143

See merge request archlinux/infrastructure!86

aurweb: fixes for deployment in local containers

See merge request !77

Jakub Klinkovský authored 4 years ago and Sven-Hendrik Haase committed 4 years ago

The original command does not work due to an import error.

Add prometheus-memcached-exporter

See merge request !90

Extend the memcached service for the AUR to allow the memcached group to
read the socket to obtain statistics.

Document Prometheus monitoring

See merge request !89

Remove configuration and entries for retired PIA boxes

See merge request !87

Jelle van der Waa authored 4 years ago and Sven-Hendrik Haase committed 4 years ago

The PIA boxes are retired.

Warn 25 days before certificate expires instead of 3 days before

See merge request !84

Kristian Klausen authored 4 years ago and Sven-Hendrik Haase committed 4 years ago

3 days is a bit too late. Certbot renews the certificate 30 days before,
so 25 days should be safe and shouldn't cause any "false positives" due
to transient errors.