1
1
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-05-21 15:16:15 +02:00
Commit Graph

8 Commits

Author SHA1 Message Date
Evangelos Foutras 68534b7f0f
Remove the three dashes from all vaulted YAML files
Extend the removal of the dashes from unencrypted YAML documents to
encrypted ones as well.

Fixes: a9e0790f53 ("Remove the three dashes from all YAML documents")
2022-06-13 01:34:52 +03:00
Evangelos Foutras 375a781611
Re-encrypt all default vaults with a new password 2022-05-07 17:45:19 +03:00
Leonidas Spyropoulos ecd08fb7e8 networking: Remove support for specifying DNS servers
Redundant since this commit:
bdd538ec ("Use unbound for rspamd DNS resolving")

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>
2021-07-30 20:18:18 +02:00
Kristian Klausen 664deb67ab WireGuard all hosts
This is meant as a internal authenticated and encrypted network which we
can use for internal services, we don't want to expose to the internet
or when encryption is desired but not easily implementable.
2021-07-06 20:58:15 +00:00
Leonidas Spyropoulos 43f0b53206 fail2ban: Add nginx_limit_req to all dicts
Ansible complains if the fail2ban_jails dictionary is missing the
nginx_limit_req key. Adding this as default failse.

Bugfix from: e5773374

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>
2021-06-10 19:14:35 +01:00
Kristian Klausen 65b6d7ba3c Ensure unbound is used for mail.archlinux.org
For spam checking it is recommend to use our own recursive resolver[1]
to avoid rate limiting by using a public resolver.

unbound is already installed but the system wasn't configured to use it.

[1] https://rspamd.com/doc/faq.html#resolver-setup
2021-04-07 20:01:39 +00:00
Jelle van der Waa f601124fc5
Change archwiki bouncehandling API whitelist
Allow bounce handling from mail.archlinux.org, the new email server
2020-10-24 18:09:25 +02:00
Jelle van der Waa 636983b842
Add mail.archlinux.org playbook 2020-10-24 18:09:25 +02:00