1
1
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-05-21 18:46:03 +02:00
Commit Graph

8 Commits

Author SHA1 Message Date
Evangelos Foutras 7ffb4d6b6a
Bump zram-fraction to 2.0 for reproducible.archlinux.org
This box is very sussy and really likes to fill up its zram swap:

  [root@reproducible ~]# zramctl
  NAME       ALGORITHM DISKSIZE  DATA  COMPR TOTAL STREAMS MOUNTPOINT
  /dev/zram0 lzo-rle       1.9G  1.5G 183.4M  196M       1 [SWAP]

  [root@reproducible ~]# free -m
                 total        used        free      shared  buff/cache   available
  Mem:            1928         529          73           5        1325        1236
  Swap:           1927        1543         384

Fixes: 4a5748eaa6 ("Bump zram-fraction to 1.0 for reproducible.archlinux.org")
2022-09-02 12:07:04 +03:00
Evangelos Foutras 4a5748eaa6
Bump zram-fraction to 1.0 for reproducible.archlinux.org
This box somehow gets a compression ratio of over 12; bump its zram
fraction accordingly, to stop getting alerts about high swap usage.
2022-06-22 14:24:29 +03:00
Evangelos Foutras a9e0790f53
Remove the three dashes from all YAML documents
These are used to signal the start of the document in a stream of many
documents. As Ansible only supports one YAML document per file this is
unnecessary. About a third of our YAML documents already lacked these.
2022-06-08 14:35:45 +03:00
Evangelos Foutras 375a781611
Re-encrypt all default vaults with a new password 2022-05-07 17:45:19 +03:00
Kristian Klausen 664deb67ab WireGuard all hosts
This is meant as a internal authenticated and encrypted network which we
can use for internal services, we don't want to expose to the internet
or when encryption is desired but not easily implementable.
2021-07-06 20:58:15 +00:00
Jelle van der Waa 4bc660d6be
Remove zabbix-agent, zabbix roles
Zabbix has been replaced by Prometheus for monitoring our services.
2020-11-21 22:14:20 +01:00
Jelle van der Waa 992f81d766
By default enable the sshd jail for fail2ban
For all hosts we want to have a working fail2ban for sshd brute force
attempts through a group_vars/all. For some hosts an override is
required to enable postfix or dovecot jails.
2020-11-02 17:58:18 +01:00
Jelle van der Waa f9e3e52063 Add reproducible.archlinux.org instance
Create a new VPS for running the master rebuilderd daemon which
coordinates the rebuild tasks to rebuilderd ndoes.

Signed-off-by: Jelle van der Waa <jelle@vdwaa.nl>
2020-04-26 01:10:44 +02:00