mirror/ infrastructure
1
1
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-05-26 06:06:04 +02:00
Code Issues
4,418 Commits 20 Branches 0 Tags 17 MiB
Commit Graph

4418 Commits

Author SHA1 Message Date
Evangelos Foutras 733ad7cb24
grafana: rebase grafana.ini to grafana 9.3.0-1 2022-12-04 18:42:52 +02:00
Evangelos Foutras afed8d12ff
Onboard tpkessler as TU 
Ref #485
 2022-11-30 11:41:59 +02:00
Leonidas Spyropoulos 7202d15c21 Merge branch 'master' into 'master' 
aurweb: bump to v6.1.9

See merge request archlinux/infrastructure!661
 2022-11-27 11:16:33 +00:00
Leonidas Spyropoulos 52f815ebaa
aurweb: bump to v6.1.9 
Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>
 2022-11-27 11:14:28 +00:00
Jan Alexander Steffens (heftig) 409e7880c3
matrix: Update mjolnir to v1.6.1 2022-11-23 23:50:45 +01:00
Jan Alexander Steffens (heftig) 927f1b6d4c
matrix: Update synapse to 1.72.0 2022-11-23 19:11:38 +01:00
Jan Alexander Steffens (heftig) 2c1c174169
grafana: Update synapse dashboard 
Copy the latest dashboard from upstream, fixing the graphs.
 2022-11-19 12:40:27 +01:00
Jelle van der Waa ecc3074330
archweb: add mastodon verification url 2022-11-18 20:42:50 +01:00
Jelle van der Waa cb5f8128fd
Bump archweb to the latest release 2022-11-18 20:39:06 +01:00
Evangelos Foutras 0f8ef2c479
Add GitLab Pages for "rfc" 
Ref: https://gitlab.archlinux.org/archlinux/rfcs/-/merge_requests/15
 2022-11-17 22:29:27 +02:00
Evangelos Foutras 9bdb6a8e9d
find-arch-on-crt.sh: skip riscv.mirror.pkgbuild.com 
Similarly to geo.mirror.pkgbuild.com, this is monitored elsewhere.
 2022-11-17 22:19:55 +02:00
Leonidas Spyropoulos 591431b707
keycloak: use email templates from archlinux-theme 
Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>
 2022-11-15 19:15:09 +00:00
Evangelos Foutras 228419b83e
tf-stage2: alphabetically sort uptimerobot monitors 2022-11-14 22:21:11 +02:00
Kristian Klausen d93baf67ea
tf-stage2: Monitor accounts with UptimeRobot 
Fix #475
 2022-11-13 19:21:27 +01:00
Evangelos Foutras 9d8146c844
prometheus: restore conf.d/prometheus default perm 
No reason this should be 0600 as it doesn't contain any sensitive data;
switch it back to the package's default permissions of 0644.
 2022-11-12 20:40:54 +02:00
Evangelos Foutras dba7a2a950
Merge branch 'fold-syncrepo-script-into-mirrorsync' into 'master' 
syncrepo: let mirrorsync perform the repo syncing

See merge request archlinux/infrastructure!652
 2022-11-12 20:23:13 +02:00
Evangelos Foutras a782c6953f
syncrepo: let mirrorsync perform the repo syncing 
This role will still handle setting up nginx and rsyncd, due to specific
configuration requirements these services have.

We're also effectively relieving build.archlinux.org of rsyncd duties as
it is not something it should be doing anyway.
 2022-11-12 20:22:08 +02:00
Evangelos Foutras ef1f5c81b6
Merge branch 'update-mkinitcpio-project-URL' into 'master' 
mailman: update mkinitcpio URL in arch-projects mailing list description

See merge request archlinux/infrastructure!654
 2022-11-12 20:13:19 +02:00
nl6720 ee84eb063c
mailman: update mkinitcpio URL in arch-projects mailing list description 
mkinitcpio moved from GitHub to gitlab.archlinux.org.
See https://gitlab.archlinux.org/archlinux/infrastructure/-/issues/474.
 2022-11-12 20:10:12 +02:00
Evangelos Foutras 046efd7fb2
kcadm_wrapper.sh: call kcadm.sh instead of kcadm 
I think this was renamed when Keycloak switched to Quarkus.
 2022-11-12 18:58:15 +02:00
Evangelos Foutras 26b27b1d53
Merge branch 'keycloak-drop-auth-prefix' into 'master' 
keycloak: remove /auth from all Keycloak endpoints

See merge request archlinux/infrastructure!655
 2022-11-12 18:56:30 +02:00
Evangelos Foutras ed19221404
keycloak: remove /auth from all Keycloak endpoints 
From [1]: "By default, the new Quarkus distribution removes /auth from
           the context-path."

[1] https://www.keycloak.org/migration/migrating-to-quarkus
 2022-11-12 17:33:36 +02:00
Evangelos Foutras 20c0df7a7b
Merge branch 'synapse-backchannel-logouts' into 'master' 
matrix: Enable backchannel logouts from keycloak to synapse

See merge request archlinux/infrastructure!653
 2022-11-12 17:33:04 +02:00
Jan Alexander Steffens (heftig) a7cc74f489
matrix: Enable backchannel logouts from keycloak to synapse 2022-11-12 17:32:33 +02:00
Evangelos Foutras c6cfff7756
mailman: use postgresql:// engine URL in mailman.cfg 
SQLAlchemy 1.4 no longer accepts engine URLs of the form postgres://.

https://docs.sqlalchemy.org/en/20/changelog/changelog_14.html#change-3687655465c25a39b968b4f5f6e9170b
 2022-11-12 01:05:50 +02:00
Jan Alexander Steffens (heftig) 0868a07a6d
matrix: Update synapse to 1.71.0 2022-11-08 20:50:13 +01:00
Evangelos Foutras f9e239e85d
syncrepo: remove redundant CacheDir configuration 
CacheDir, as configured by common's pacman.conf task, already includes
the local package mirror when available (on mirrors, gemini and build).
 2022-11-06 20:53:34 +02:00
Evangelos Foutras 10edbd1647
mirrorsync: fix hardcoded nginx root directory 
This worked because riscv was the only nginx-enabled mirror.

Fixes: 43eb814bcf ("Combine sync{archive,debug,riscv} into mirrorsync")
 2022-11-06 19:57:31 +02:00
Evangelos Foutras 095a7d76e7
grafana: add dashboard w/ geo mirror traffic stats 2022-11-06 17:53:34 +02:00
Evangelos Foutras 27f1d4c7c4
grafana: rebase grafana.ini to grafana 9.2.3-1 2022-11-06 15:06:24 +02:00
Evangelos Foutras 1626a663f7
Merge branch 'sshd-dir-perms' into 'master' 
sshd: adjust /etc/ssh and includes dir permissions

See merge request archlinux/infrastructure!651
 2022-11-06 07:29:23 +02:00
Evangelos Foutras 8fd41b3b86
sshd: adjust /etc/ssh and includes dir permissions 
There is no reason these should have such restrictive permissions, and
missing the execute bit appears to be a mistake. Let /etc/ssh keep the
mode from the package (0755). Use the same for the includes directory.
 2022-11-06 07:21:38 +02:00
Evangelos Foutras 5c38ef929c Merge branch 'archmanweb-v1.5' into 'master' 
Update archmanweb to v1.5

See merge request archlinux/infrastructure!650
 2022-11-05 00:32:08 +00:00
Jakub Klinkovský 5c9b09fd70
Update archmanweb to v1.5 2022-11-03 21:46:56 +01:00
Leonidas Spyropoulos 10cb858293 Merge branch 'aurweb_oct_release' into 'master' 
aurweb: new release

See merge request archlinux/infrastructure!649
 2022-11-02 23:27:05 +00:00
Leonidas Spyropoulos 1cef59599d
aurweb: release v6.1.8, fix git config setup 
Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>
 2022-11-02 23:26:24 +00:00
Leonidas Spyropoulos cc5440eda8
aurweb: remove kevr and allow artafinde to tag releases on aurweb 
Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>
 2022-11-02 23:26:24 +00:00
Leonidas Spyropoulos 8c0f468684
aurweb: use specific prod logging on gunicorn 
Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>
 2022-11-02 23:26:24 +00:00
Leonidas Spyropoulos ba9786a35e
aurweb: goaurrpc disable admin api with 1.2.0 release 
Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>
 2022-11-02 23:26:24 +00:00
Kristian Klausen f1de7104d7
Merge branch 'postgres-C.UTF-8' into 'master' 
Migrate PostgreSQL to C.UTF-8

Closes #470

See merge request archlinux/infrastructure!643
 2022-11-03 00:14:21 +01:00
Kristian Klausen e9e44d445c
Migrate PostgreSQL to C.UTF-8 
C.UTF-8 is installed by default, so we can avoid messing with locale-gen
by using that.

All the postgres servers (excluding matrix due to[1]) have been migrated
with the following commands:
# sudo -u postgres pg_dumpall > d
# sed "s/LOCALE = 'C'/LOCALE = 'C.UTF-8'/" -i d
# systemctl stop postgresql.service
# mv /var/lib/postgres/data{,.old}
$ ansible-playbook --diff -t postgres playbooks/<host>.yml
# sudo -u postgres psql < d

[1] 19a57f4a37/docs/postgres.md (fixing-incorrect-collate-or-ctype)

Fix #470
 2022-11-03 00:11:36 +01:00
Jan Alexander Steffens (heftig) 3e2fdfce00
matrix: Update bridge to 0.36.0 2022-10-30 21:57:02 +01:00
Jan Alexander Steffens (heftig) 1018823f82
matrix: Update synapse to 1.70.1 2022-10-30 20:43:28 +01:00
Evangelos Foutras cd29b68d72
tf-stage2: update keycloak provider to 4.0.1 
Set the base_path provider attribute to "/auth" until we move the /auth
endpoint to be served from the root of https://accounts.archlinux.org/.
 2022-10-29 16:01:43 +03:00
Evangelos Foutras 39bcf629f0
tf-stage1: version bump of terraform providers 
- hcloud: 1.34.3 -> 1.35.2
- hetznerdns: 2.1.0 -> 2.2.0
 2022-10-29 15:36:25 +03:00
Evangelos Foutras ba846bacb1 Merge branch 'archwiki-1.38.4-1' into 'master' 
archwiki: upgrade to 1.38.4-1

See merge request archlinux/infrastructure!647
 2022-10-25 11:20:47 +00:00
nl6720 fa5d55b1a4
archwiki: upgrade to 1.38.4-1 2022-10-25 14:13:04 +03:00
Levente Polyak 62cfdcbb93 Merge branch 'sec-tracker-0.14.1' into 'master' 
security-tracker: bump version to 0.14.1

See merge request archlinux/infrastructure!646
 2022-10-24 23:02:08 +00:00
Levente Polyak 93f92ab082
security-tracker: bump version to 0.14.1 2022-10-25 00:59:16 +02:00
Evangelos Foutras 927b8111c2
grafana: add blank line after auth.anonymous.enabled 
Using an inline statement eats the blank line after it; to overcome this
switch to an inline expression, which also happens to be easier to read.
 2022-10-24 16:28:36 +03:00