To monitor our archive mirrors and the archive size itself a new
textcollector has been added. This will allow us to monitor the archive
growth and the sync rate to mirrors.

Add a new issue template for adding an Archive Mirror

See merge request archlinux/infrastructure!183

add dnswl secrets

See merge request archlinux/infrastructure!184

gitlab: use implicit ssl instead of STARTTLS for imap connections

See merge request archlinux/infrastructure!180

Gitlab uses IMAP to fetch incoming mails. IMAP used to run on port 143
until the recent migration which disabled that port. This change makes
gitlab use port 993 and implicit TLS.

Make GitLab use host-mode networking

See merge request archlinux/infrastructure!179

This cuts some complexity while also getting rid of the Docker userspace proxy which is slow compared
to kernelspace routing.
It also allows us to make GitLab consume a second IP for GitLab Pages without too much fuckery.

fix network of runner1.archlinux.org

See merge request archlinux/infrastructure!178

Do not use asterisk on network devices to prevent IP address collisions
on networks. Also use the right network mask for the assigned network.
For runner1 we need to ignore RAs since those routes don't work.

Security tracker lower dns

See merge request archlinux/infrastructure!176

The security tracker will be migrated to a new CX11 server.

As python-tensorflow-* kills our rebuilderd-workers as they are usually
queue at the same time.

limit port 25 on apollo to mail.archlinux.org only

See merge request archlinux/infrastructure!162

Frederik Schwan authored 4 years ago and Jelle van der Waa committed 4 years ago

While apollo hosts patchwork it needs to receive mail for
patchwork@archlinux.org. Those mails are forwarded from
mail.archlinux.org. This implies apollo being configures for the
archlinux.org domain. Since Patchwork is not maintained anymore,
this is a quick fix to prevent sending of forged mails via
apollo.

Split archive role into archive_web for archive-mirrors

See merge request archlinux/infrastructure!175

Jelle van der Waa authored 4 years ago and Jelle van der Waa committed 4 years ago

To simplify the archive role, split it up in the web serving part for
the archive-mirrors, gemini and keep the archive role for only the
archive operation. This simplifies the new role as only two lines are
required to setup the the archive mirror website.

Add ipv6 addresses to archive mirrors for sync whitelisting

See merge request archlinux/infrastructure!177

Add archive mirror DNS entries

See merge request archlinux/infrastructure!174

As we want to serve mirros and the archive add a new domain for the
archive so the mirror and archive can be hosted.

Remove old repro2 hostvars

See merge request archlinux/infrastructure!172

Create archlinux.org server

See merge request archlinux/infrastructure!165

Giancarlo Razzolini authored 4 years ago and Sven-Hendrik Haase committed 4 years ago

Lower the ttl of master-key, dev, packages and ipxe

Giancarlo Razzolini authored 4 years ago and Sven-Hendrik Haase committed 4 years ago

tf-stage1/archlinux.tf: Lower TTL for archlinux.org and www.archlinux.org and create a new server for archlinux.org

For the archweb migration, we need to lower the TTL and create a new archlinux.org server to host the site.

Seems we run at about 5GB of cache. Let postgres assume it gets 4GB.

Element uses a statically configured list of homeservers with disabled
presence. Without hosting our own Element this makes for pretty poor UI.

This reverts commit 82ac30f9.

Only changes to comments.

postgres: Set `jit = off` on matrix.archlinux.org

See merge request archlinux/infrastructure!169

Bump the mem settings higher again, now that we know they're not the
cause. Also increase the maximum connection count.

This seems to be the cause for our memory leak.

https://www.postgresql.org/message-id/flat/16707-f5df308978a55bf8%40postgresql.org

Mostly changes to comments.

Add Kape server IPv6 addresses (fixes #230)

Closes #230

See merge request archlinux/infrastructure!173