1
1
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-09-20 09:33:15 +02:00
Commit Graph

682 Commits

Author SHA1 Message Date
Bartłomiej Piotrowski
cfda2ad72f hosts: explicitly set addresses of ind and jpn mirrors 2017-12-07 08:56:57 +01:00
Bartłomiej Piotrowski
c64454c9df hosts: add fixed PIA server 2017-12-06 19:42:53 +01:00
Bartłomiej Piotrowski
64515a6389 hosts: sort IP addresses 2017-12-06 19:42:53 +01:00
Florian Pritz
cbf3572734
kanboard: Remove composer usage
composer dependencies are part of the git repo since kanboard 1.1.0

Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-12-02 17:49:34 +01:00
Florian Pritz
d225a33637
Store postgres passwords encrypted on server
Seems to be required with postgres 10 now.

Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-12-02 17:44:12 +01:00
Florian Pritz
dcf737a25a
kanboard: Update to 1.1.0
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-12-02 17:42:13 +01:00
Bartłomiej Piotrowski
725cb2d0cc archweb: allow to specify ref to checkout 2017-12-01 21:30:17 +01:00
Florian Pritz
e2aa651df2
Remove retired TU - Daniel Micay
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-12-01 10:50:08 +01:00
Florian Pritz
d38e8cd09f
Add new TU - Andrew Crerar
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-30 22:06:31 +01:00
Jan Alexander Steffens (heftig)
f81c6c48ae
gitpkg: Make default meson funcs a bit more compact 2017-11-26 16:18:02 +01:00
Florian Pritz
43b47094f9
borg-client: Configure prefix map for hosts with btrfs
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-26 11:28:22 +01:00
Florian Pritz
03b39f90fc
archweb: Deliver mail via port 10027
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-25 23:23:24 +01:00
Florian Pritz
2d5bd20c8c
postfix: Add server name to reject footer
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-25 18:02:40 +01:00
Florian Pritz
db9cd7c42a
postfix: Add dkim injecton port 10027
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-25 17:52:17 +01:00
Florian Pritz
031ac20be3
postfix: Pass internal mails through filters so they get signed by opendkim
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-25 17:26:07 +01:00
Florian Pritz
b5d5e3c48e
root_ssh: Add dragon's key to nymeria/luna
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-25 10:37:09 +01:00
Florian Pritz
82baf629c3
root_ssh: Use template for more flexibility
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-25 10:27:44 +01:00
Florian Pritz
8604be9f8c dbscripts: Add temporary archive endpoint
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-25 10:11:39 +01:00
Bartłomiej Piotrowski
7d11ef7a08 arch32_mirror: serve pool.mirror.archlinux32.org 2017-11-23 21:45:43 +01:00
Bartłomiej Piotrowski
a9c47fee38 borg-client: use is-active for checking service state
Also add mariadb support
2017-11-22 14:37:40 +01:00
Bartłomiej Piotrowski
66fe99e042 borg-client: replace mysqldump with xtrabackup 2017-11-22 14:35:43 +01:00
Florian Pritz
6eccd3332f borg: Add borg-restore.pl config
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-21 20:30:27 +01:00
Florian Pritz
425f4263d8 Deploy basic config on nymeria and dragon
Mostly interesting for root_ssh.

Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-20 21:32:02 +01:00
Jelle van der Waa
e0f895832b pubkeys: Update jelle's key 2017-11-19 16:49:18 +01:00
Florian Pritz
9e54c881a9 postfix: Fix certificate domain name for non-primary mail servers
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-18 16:18:56 +01:00
Bartłomiej Piotrowski
ce4d17109c Revert "arch32_mirror: rely solely on lastupdate"
This reverts commit a2c61b56ad.
2017-11-15 21:29:41 +01:00
Bartłomiej Piotrowski
a2c61b56ad arch32_mirror: rely solely on lastupdate 2017-11-15 15:36:04 +01:00
Bartłomiej Piotrowski
e5b461e31a Add role for mirroring archlinux32 2017-11-15 12:50:32 +01:00
Jan Alexander Steffens (heftig)
6136bd2b0b
roles: Remove various references to i686 2017-11-08 22:58:30 +01:00
Florian Pritz
69de3d10fa Update README regarding installation and certbot
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-06 09:52:22 +01:00
Florian Pritz
769e6af84c Add archusers tag to sudo and phrik roles
Running archusers resets the groups of the users so these also need to
run afterwards.

Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-06 09:34:32 +01:00
Florian Pritz
8140f80c76
spamassassin: Fix parcel delivery rule
Should check for both words, not just one

Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-05 21:50:43 +01:00
Florian Pritz
d739ed5173
journald: Raise max files limit
Not strictly necessary yet, but we don't care about a bunch more files
so better safe than without logs.

Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-05 11:28:17 +01:00
Florian Pritz
ee74b3652c
journald: Raise burst rate limit
Sending many mails at once put us over that limit quite quickly and then
we are missing logs. This default is way too low for server usage.

Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-05 11:27:15 +01:00
Florian Pritz
8607c19a28
Add new TU - David Runge
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-11-02 13:51:58 +01:00
Florian Pritz
db2db99d96
spampd: Check SA config before restarting things
This will leave the config broken on the machine, but it's an easy check
to add.

Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-10-30 21:12:12 +01:00
Florian Pritz
32f74b4c16
spamassassin: Add rule for arabic spam mails
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-10-30 21:11:51 +01:00
Florian Pritz
fa84916503 spamasassin: Merge my own config
Mostly score adjustments and 5.0 is a safer cutoff now because my own config also
uses that. 2.5 would most likely reject too much with the stricter
scores.

Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-10-30 20:26:59 +01:00
Bartłomiej Piotrowski
124e537f2c common: update journald.conf template 2017-10-23 09:36:40 +02:00
Bartłomiej Piotrowski
ba7439c14c common: add kernel packages to IgnorePkg 2017-10-23 09:36:30 +02:00
Bartłomiej Piotrowski
aa41f34dd8 luna: disable network configuration 2017-10-23 09:35:45 +02:00
Bartłomiej Piotrowski
d12fc9c61a borg-client: use xtrabackup for additional mysql backups 2017-10-22 18:40:28 +02:00
Bartłomiej Piotrowski
5ddd81ae8a Use more idiomatic way of checking for variable presence 2017-10-22 18:40:28 +02:00
Florian Pritz
cf9352504a
motd: Remove configuration warning
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-10-20 23:09:09 +02:00
Florian Pritz
599cdf69af
motd: Fix coloring of backup warning
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-10-20 22:43:23 +02:00
Florian Pritz
b0fe6a3a2c
Add missing tags to vostok playbook
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-10-20 22:43:05 +02:00
Florian Pritz
c9f245a325
Add borg-client role to all-hosts-basic playbook
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-10-20 22:40:46 +02:00
Florian Pritz
b3de7489d5
sshd: Add motd
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-10-20 22:33:19 +02:00
Florian Pritz
a9100c3d3b Fix typo in ssl cert creation
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-10-20 21:28:22 +02:00
Florian Pritz
8614708627 Create SSL certificates automatically for nginx configs
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-10-20 21:26:55 +02:00