1
1
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-09-21 21:31:55 +02:00
Commit Graph

17 Commits

Author SHA1 Message Date
Evangelos Foutras
ed19221404
keycloak: remove /auth from all Keycloak endpoints
From [1]: "By default, the new Quarkus distribution removes /auth from
           the context-path."

[1] https://www.keycloak.org/migration/migrating-to-quarkus
2022-11-12 17:33:36 +02:00
Evangelos Foutras
578b781966
Capitalize the handler name in handler invocations
Fixes: 26f289b72b ("Capitalize the first letter of all task names")
2022-08-29 21:46:39 +03:00
Evangelos Foutras
26f289b72b
Capitalize the first letter of all task names
ansible-lint 6.5.0 complains about:

  name: All names should start with an
        uppercase letter. (name[casing])
2022-08-23 06:57:13 +03:00
Evangelos Foutras
a9e0790f53
Remove the three dashes from all YAML documents
These are used to signal the start of the document in a stream of many
documents. As Ansible only supports one YAML document per file this is
unnecessary. About a third of our YAML documents already lacked these.
2022-06-08 14:35:45 +03:00
Jelle van der Waa
7d806b94f6
Enable new CSP options for hedgedoc 2021-09-14 08:31:19 +02:00
Kristian Klausen
1838416633 Fix spoofable X-Forwarded-For header for some proxied services
X-Forwarded-For is defined as X-Forwarded-For: <client>, <proxy1>,
<proxy2>, and it was set to $proxy_add_x_forwarded_for which is
basically $http_x_forwarded_for,$remote_addr and headers from the client
can't be trusted!

Fix #292
2021-06-06 20:01:59 +00:00
Kristian Klausen
9360faf75d Put all /metrics endpoints behind auth 2021-06-06 14:52:10 +02:00
Kristian Klausen
316b85170b Add missing "create ssl cert" tasks 2021-05-13 22:03:39 +00:00
Jelle van der Waa
5289fa6bbd
Remove obsolete sequelizerc configuration file
In hedgedoc 1.8.0 sequelizerc is no longer required to as the
config.json file is used to read out the database settings.
2021-05-04 20:17:13 +02:00
Leonidas Spyropoulos
22cfac4420 Avoid needless regex on 301 rewrites
Closes: #278

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>
2021-04-12 20:03:24 +01:00
Sven-Hendrik Haase
ef314dea73
hedgedoc: Increase session time to 30d
I found it a bit short earlier.
2021-04-08 23:44:03 +02:00
Sven-Hendrik Haase
02879a6c8a
hedgedoc: Lint config file
It was somewhat broken before and even had a duplicate key.
2021-04-08 23:17:05 +02:00
Kristian Klausen
b70d04fa5c
Send the nginx logs to Loki
A extra access_log entry was added with the following commands:
$ cd roles
$ grep -lr access_log | xargs -P 1 -n 1 sed -i '/access_log/ s/\(.*\)\( \)\(\(reduced\|main\);$\)/\1 \3\n\1.json json_\3/'
2021-04-08 20:33:43 +02:00
Jelle van der Waa
6554168bd1
Add missing configuration for hedgedoc websocket support
The websocket support always 400'd as upgrade headers where missing for
/socket.io
2021-03-02 22:09:55 +01:00
Jelle van der Waa
6348b06b17
Set uploadPath for hedgedoc 2021-03-02 22:02:51 +01:00
Kristian Klausen
4112bdf9fd Make ansible-lint happy
yaml: truthy value should be one of [false, true] (truthy)
yaml: wrong indentation: expected 4 but found 2 (indentation)
yaml: too few spaces before comment (comments)
yaml: missing starting space in comment (comments)
yaml: too many blank lines (1 > 0) (empty-lines)
yaml: too many spaces after colon (colons)
yaml: comment not indented like content (comments-indentation)
yaml: no new line character at the end of file (new-line-at-end-of-file)
load-failure: Failed to load or parse file
parser-error: couldn't resolve module/action 'hosts'. This often indicates a misspelling, missing collection, or incorrect module path.
2021-02-14 14:22:05 +01:00
Jelle van der Waa
3124cfd933
Add hedgedoc as new service
This adds a collaborative markdown editor as newly offered service which
is available via login for all Arch Linux Staff with an option to allow
anonymous edits by users (not default). Users are managed via keycloak
and require the Staff role to be allowed in, non staff keycloak users
currently will receive an internal server error due to an upstream
issue.
2021-02-01 21:59:30 +01:00