Cyber/infrastructure
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
959 commits 23 branches 0 tags 13 MiB
Commit graph

959 commits

This branch
This branch
All branches
Author SHA1 Message Date
Christian Rebischke
7b6ec205f4 fixed various bugs with the docker-image role 2018-08-07 18:03:56 +02:00
Santiago Torres
37ca74b8c0 WIP: add base role for building the docker image 2018-08-07 18:03:56 +02:00
Florian Pritz
46b62f6a78
unbound: Merge package config changes: Disable forking in config 
Disabled in package config.

https://git.archlinux.org/svntogit/community.git/commit/trunk?h=packages/unbound&id=9ef5a6f873f0025f048d8bc5ec322aa914556f65

Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-08-07 15:23:55 +02:00
Florian Pritz
0f0ea32304
Add new TU - Santiago Torres-Arias 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-08-07 14:50:51 +02:00
Florian Pritz
b7ab03fa4c
postfix: Add missing transport.pcre 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-08-05 13:17:07 +02:00
Florian Pritz
2fdee527ab
archwiki: Remove - from VERP prefix 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-08-05 13:16:44 +02:00
Florian Pritz
87dc6a864d
archwiki: Enable debug logging for bounce handler 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-08-05 12:31:19 +02:00
Florian Pritz
d5d968b771 postfix: Implement authentication in wiki bounce handler 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-08-05 11:34:37 +02:00
Florian Pritz
b8845b0c28 Move orion hostvars to subdirectory 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-08-05 11:34:37 +02:00
Jan Alexander Steffens (heftig)
bda67d8b9a
roles/archbuild: Make srcdest world-writable. 
The container buildusers need to be able to write to SRCDEST, so we need
world-writeability. Argh.
 2018-08-05 10:41:27 +02:00
Jan Alexander Steffens (heftig)
a1fb9721ab
roles/archbuild: Remove restricted deletion from srcdest 2018-08-04 17:32:36 +02:00
Jan Alexander Steffens (heftig)
7ef4c65866
roles/matrix: Update irc-bridge config file 2018-08-02 22:02:25 +02:00
Jelle van der Waa
4520684ee7 Django Security release 
Update to 1.11.15 for CVE-2018-14574
 2018-08-01 21:33:43 +02:00
Florian Pritz
99f113c108 tools: Add fish for FFY00 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-08-01 20:55:57 +02:00
Bartłomiej Piotrowski
05cb80d613 Remove Pierre Neidhart's account 2018-07-31 12:47:43 +02:00
Florian Pritz
14536ac92d Update archwiki registration challenge 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-07-29 16:20:47 +02:00
Jan Alexander Steffens (heftig)
b69a2519df
roles/common: Refresh pacman.conf (no functional change) 2018-07-29 00:43:19 +02:00
Florian Pritz
e3355a2527
Add new TU - Filipe Laíns 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-07-28 10:26:59 +02:00
Jelle van der Waa
5979007db7 Add donor import systemd services/timer 2018-07-25 22:53:44 +02:00
Jelle van der Waa
906cab7757 Update archweb to 2018-07-2 2018-07-25 21:45:02 +02:00
Bartłomiej Piotrowski
0eaa557ff8 zabbix-agent: ignore user@ and user-runtime-dir@ units 2018-07-24 07:23:18 +02:00
Bartłomiej Piotrowski
96fad709d8 zabbix-agent: format systemd-units-failed.py with black 2018-07-24 07:23:13 +02:00
Jelle van der Waa
a7d683d8b1 Update to pre-release 2018-07-23 22:53:13 +02:00
Jelle van der Waa
42920de032 Update archweb staging 2018-07-20 23:35:50 +02:00
Jan Alexander Steffens (heftig)
3ca32af8ef
gitpkg: Tweak check syntax 2018-07-20 16:58:55 +02:00
Jan Alexander Steffens (heftig)
910cbbf8d6
quassel: Upgrade to 0.13-rc1 
Again, with a package not in the repos.

oidentd can use forwarding now.
 2018-07-19 00:31:09 +02:00
Florian Pritz
951c5db251
Add note about ipmi firewall to credentials 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-07-16 10:17:23 +02:00
Florian Pritz
ccc53796f9 Add IPMI credentials for luna 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-07-13 22:32:38 +02:00
Jan Alexander Steffens (heftig)
106413b6a9
gitpkg: Update meson install (0.47.0) 2018-07-11 00:54:30 +02:00
Jelle van der Waa
bd39f71100 Add mirrorstatus check to archweb staging 2018-07-06 23:16:44 +02:00
Florian Pritz
b7dda1386e
systemd-discover: Remove unused unit properties 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-07-05 17:47:26 +02:00
Florian Pritz
24012d3a6a dbscripts: Use reduced nginx log format and log to file 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-07-05 17:26:53 +02:00
Florian Pritz
714956bf42
Remove rsyncd.secrets from ansible 
It's now generated automatically from the database.

Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-07-05 17:13:00 +02:00
Florian Pritz
3e6a843224
dbscripts: Generate rsyncd.secrets from DB 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-07-05 17:11:00 +02:00
Florian Pritz
2e0cd7f894 Add playbook to upload new pacman website 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-07-04 20:10:27 +02:00
Florian Pritz
8a89b4dd65
Update dbscripts to 20180603 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-07-04 09:28:46 +02:00
Florian Pritz
e8360c76f5 Add network settings for remaining pia servers 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-07-03 20:35:36 +02:00
Florian Pritz
8fd819c63f common: Add default dns servers 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-07-03 20:35:36 +02:00
Florian Pritz
54d3e3ecd1 Add network settings for remaining mirrors 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-07-02 13:29:08 +02:00
Florian Pritz
6595fe7fef common: Use stub-resolv.conf 
Manpage recommands it and Jan wants it.

Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-07-02 13:29:08 +02:00
Florian Pritz
53dd4d6891 Configure network/dns on PIA machines 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-07-02 13:29:08 +02:00
Florian Pritz
ce5d2377a2
zabbix: Remove debug level again 
Way too much noise

Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-06-30 15:54:01 +02:00
Florian Pritz
8f2cb31fc8
zabbix: Raise debug level on ind.mirror.pkgbuild.com 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-06-30 15:52:39 +02:00
Florian Pritz
76054595a5
borg: Set borg-restore cache path for service 
Neither $XDG_CACHE_HOME nor $HOME are defined when this is run via the
systemd service so just hardcode the path in the config.

Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-06-28 11:55:43 +02:00
Florian Pritz
43faf2d3d5
borg: Use full path to borg-restore.pl 
$PATH doesn't include that directory.

Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-06-28 11:19:33 +02:00
Florian Pritz
1e9ddd6f2f borg: Create borg-restore.pl index/cache 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-06-27 21:51:23 +02:00
Florian Pritz
9ba4f10eb7
Unify mirrorlist changes into template 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-06-25 15:05:58 +02:00
Florian Pritz
13078f8651
Enable cpu/memory accounting by default 
The discovery script now uses a regex and no longer cares where exactly
accounting is enabled. Follow systemd upstream by enabling it by
default.

Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-06-25 14:50:58 +02:00
Florian Pritz
d2911ed1c7
zabbix: Add additional services to accounting whitelist 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-06-25 14:47:54 +02:00
Florian Pritz
86a1d41be6
zabbix: Simplify php-fpm regex 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-06-25 14:33:55 +02:00