Cyber/infrastructure
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
3675 commits 23 branches 0 tags 13 MiB
Commit graph

3675 commits

This branch
This branch
All branches
Author SHA1 Message Date
Levente Polyak a052610274 Merge branch 'sync-configs' into 'master' 
sync sshd and grafana configs

See merge request archlinux/infrastructure!514
 2022-01-11 22:21:02 +00:00
Levente Polyak 8ce033b2dd
grafana: disable version number for unauthenticated users 2022-01-11 23:19:41 +01:00
Levente Polyak f11a6c590f
grafana: write conditional default values for easier vanilla config diff 2022-01-11 23:19:41 +01:00
Levente Polyak 6f90b24ee9
grafana: sync grafana.ini with latest package version 2022-01-11 23:19:41 +01:00
Levente Polyak 3a6fa3088f
ssh: sync sshd_config template with latest package version 2022-01-11 23:19:36 +01:00
Jelle van der Waa 4ac89ea9ed
Update to latest release 
Django security update
 2022-01-09 19:58:04 +01:00
Jelle van der Waa 24241af183 Merge branch 'prevent-svntogit-starting-before-reboot' into 'master' 
tasks: stop arch-svntogit.timer before rebooting

See merge request archlinux/infrastructure!520
 2022-01-09 17:39:51 +00:00
Evangelos Foutras b6972fda76
tasks: stop arch-svntogit.timer before rebooting 
In a recent execution of the server upgrade task, svntogit was started
shortly before the reboot command was issued. Therefore, it was killed
two seconds into its run, leaving behind a lock file that prevented it
from starting again after gemini was rebooted.

Avoid the above timing issue by stopping the timer before rebooting.
 2022-01-09 19:28:07 +02:00
Jelle van der Waa 201b1c243c
Add Grafana dashboard / alert for SMART errors 2022-01-04 21:25:41 +01:00
Jelle van der Waa bf173e61cb
common: configure smartd to run self tests 
Run a self test every day at 02:00/03:00 and a long tests every
saturday.
 2022-01-04 21:25:41 +01:00
Jelle van der Waa bf5a165303
Add smart monitoring using a textcollector 
Collects the smart data using smartctl and outputs them in the
textcollector dir. This expects smartd to be configured to regularly
self tests on a regular interval to detect if a disk is broken.
 2022-01-04 21:25:41 +01:00
Jelle van der Waa 14f2a83aa9 Merge branch 'borg_backup_upgrade_cancel' into 'master' 
tasks: skip reboot when borg-backup{,-offsite} is running

See merge request archlinux/infrastructure!518
 2022-01-03 07:56:38 +00:00
Jelle van der Waa 3d079f7952
tasks: skip reboot when borg-backup{,-offsite} is running 2022-01-02 19:29:27 +01:00
Kristian Klausen 9e7441efe5 Merge branch 'archwiki-1.37.1-4' into 'master' 
archwiki: Update to 1.37.1-4

See merge request archlinux/infrastructure!517
 2021-12-23 14:10:56 +00:00
nl6720 90cb0b18ba
archwiki: Update to 1.37.1-4 2021-12-23 15:22:23 +02:00
Jan Alexander Steffens (heftig) 10a5c430bd
matrix: Update synapse to 1.49.2 2021-12-23 08:33:00 +01:00
Kristian Klausen c19e3031df
archwiki: workaround hard-coded wgScriptPath in the new Vector theme[1] 
Without this change, search suggestions don't work.

[1] https://phabricator.wikimedia.org/T288686
 2021-12-22 18:58:20 +01:00
Jelle van der Waa 6d1d1969dd
update archwiki to 1.37.1-3 2021-12-21 12:17:32 +01:00
Jelle van der Waa f33b22c9b5
Update archwiki to latest version 2021-12-21 08:49:37 +01:00
Jelle van der Waa feca81ef79
Onboard Segaja 
Issue: #442
 2021-12-20 22:44:03 +01:00
Jelle van der Waa 12322ca61b
Update archweb to latest version 2021-12-20 22:21:19 +01:00
Jan Alexander Steffens (heftig) 212f2020b8
matrix: Start services after enabling 2021-12-17 20:25:49 +01:00
Jan Alexander Steffens (heftig) cf77b5678e
matrix: Update synapse to 1.49.0 2021-12-17 19:59:46 +01:00
Jelle van der Waa 9b0d626ec6
Add unzip for diffoscope 
The firefox diffoscope output requires unzip for making the diff
readable.
 2021-12-17 17:56:30 +01:00
Jelle van der Waa 87bbf86824
Do not output gitlab logs to journald 
The gitlab logs are enormous, spammy and are half a terabyte per month.
 2021-12-17 17:25:58 +01:00
Jelle van der Waa 78a92f48b3
Update dbscripts to debug packages support 2021-12-16 20:48:03 +01:00
Jelle van der Waa f408dcc235
Set correct repository permissions for debug repos/pool 2021-12-16 19:22:51 +01:00
Jan Alexander Steffens (heftig) c0771b57ff
Remove _matrix._tcp.archlinux.org SRV record 
The `https://archlinux.org/.well-known/matrix/server` response is used
over the SRV record in all cases. We haven't been listening on 8448
since e9e4c11444 (June 2019).
 2021-12-10 18:23:23 +01:00
Jelle van der Waa ed57b919d1 Merge branch 'debug_repos' into 'master' 
dbscripts: Create debug repository directories

See merge request archlinux/infrastructure!513
 2021-12-08 20:46:41 +00:00
Jelle van der Waa ab829b076e
dbscripts: Create debug repository directories 2021-12-08 20:57:23 +01:00
Sven-Hendrik Haase d0de4aa30a
Resize aur-dev as it was apparently too small before 2021-12-05 02:02:17 +01:00
Jelle van der Waa 6c49f0445d
Use our own mirrors for rebuilderd-workers 2021-12-04 17:46:21 +01:00
Jan Alexander Steffens (heftig) 0d1363253d
matrix: Use node --dns-result-order=ipv4first to work around bug 
Node's address lookup strips the scope ID from link-local IPv6
addresses, making them invalid and unable to be connected to.

We're getting hit with this since Node 17 because it now defaults to the
`verbatim` dns-result-order and this happens to return the link-local
IPv6 address for `matrix.archlinux.org` first.

Specify `ipv4first` so we return to Node 16's behavior.
 2021-12-04 15:09:28 +01:00
Jelle van der Waa 69bb5a94d2
Remove aur-dev from mysql/memcached 
We sadly run all that stuff in docker now.
 2021-12-04 11:22:49 +01:00
Jelle van der Waa 9e95563a97
Bump CPU highload to 10 minutes 2021-12-04 11:07:11 +01:00
Jelle van der Waa 671f01e24b
Use a token for matrix synapse prometheus auth 2021-12-04 11:06:58 +01:00
Jelle van der Waa 06dc748a49
prometheus: exclude runner1 from high cpu warnings 2021-12-04 10:49:40 +01:00
Jan Alexander Steffens (heftig) f7915fcec4
matrix: Update synapse to 1.48.0 2021-12-04 02:08:29 +01:00
Jelle van der Waa cff430ecc8
Onboard artafinde as new TU 
Issue: #420
 2021-12-03 13:08:01 +01:00
Jan Alexander Steffens (heftig) 60c3bac0b6
gitpkg: Improve ver_sed 2021-12-03 11:35:47 +01:00
Jelle van der Waa 171467657c
JGC resigned 
https://lists.archlinux.org/private/arch-dev/2021-October/016798.html
 2021-12-03 08:49:02 +01:00
Jelle van der Waa 83025e6de7
docs: document passwd -d for mail.archlinux.org 2021-12-01 13:17:03 +01:00
Jelle van der Waa 973be163c2
Add Gitlab groups to onboarding instructions 2021-12-01 11:49:12 +01:00
Jelle van der Waa d7e5d76dd4
.gitlab: Fix archusers playbook selection 
Only run it for te required playbooks, exclude the phrik playbook as we
only need it to give demize access to phrik and only running archusers
removes demize from the phrik group. Seperate bug which should be
fixed...
 2021-12-01 11:23:29 +01:00
Jelle van der Waa d5f2a59fd3
Add Group contacts for IRC Cloaks. 2021-12-01 11:12:46 +01:00
Jelle van der Waa bef329a463 Merge branch 'remove_eschwartz' into 'master' 
Eschwartz resigned as TU, Staff

See merge request archlinux/infrastructure!505
 2021-12-01 09:56:33 +00:00
Jelle van der Waa 462b767ac2 Eschwartz resigned as TU, Staff 2021-12-01 09:55:47 +00:00
Jan Alexander Steffens (heftig) 0eb8565a59
matrix: Update synapse to 1.47.1 2021-11-23 18:17:27 +01:00
Evangelos Foutras fde00e89d7 Merge branch 'hetzner-falkenstein' into 'master' 
Create Hetzner cloud servers in Falkenstein (Germany)

See merge request archlinux/infrastructure!511
 2021-11-20 21:34:17 +00:00
Evangelos Foutras 1872310ace
Create Hetzner cloud servers in Falkenstein (Germany) 
Sven considers this location to have higher capacity and reliability.
 2021-11-20 23:30:11 +02:00