1
1
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2025-01-18 08:06:16 +01:00

Commit Graph

  • 57d62ca88a
    Fix permissions of nginx log dirs, CVE-2016-1247 Florian Pritz 2017-02-05 19:15:46 +0100
  • 83fff4647e
    common: Create /root/.zsh directory for history file Florian Pritz 2017-02-05 16:11:25 +0100
  • d779f8ee1c
    common: Keep zsh history Florian Pritz 2017-02-05 16:02:11 +0100
  • fff2950d6b
    common: Add zsh config Florian Pritz 2017-02-05 15:52:52 +0100
  • 9eefc24e22
    tools: Add pv Florian Pritz 2017-02-05 14:46:55 +0100
  • e8b1b5b621
    Use dedicated log files in nginx vhosts Florian Pritz 2017-02-05 14:37:42 +0100
  • f511f29e8d
    nginx: Add logrotate config Florian Pritz 2017-02-05 14:37:32 +0100
  • 3c31054cee
    archbuild: Cleanup files starting with a dash Jan Alexander Steffens (heftig) 2017-01-30 01:21:33 +0100
  • 3ca8a1fba5
    Remove dicebot Florian Pritz 2017-01-29 20:23:17 +0100
  • 4677412eea
    dbscripts: Add module for staging directory creation Florian Pritz 2017-01-29 18:48:41 +0100
  • b1cf08b98b
    common: Remove pacman cache update Florian Pritz 2017-01-29 14:48:08 +0100
  • bc1cffbd08
    roles/nginx: Use a map to only include the STS header on https Giancarlo Razzolini 2017-01-29 10:40:27 -0200
  • 9beccb72d1
    roles/nginx: Add preload to the STS header Giancarlo Razzolini 2017-01-26 16:38:43 -0200
  • 0e7a6da302
    roles/archweb: Restore packages behavior Giancarlo Razzolini 2017-01-26 00:05:27 -0200
  • 5ff49de2af
    roles/archweb: Properly template the archweb_admins variable to put the ADMINS when they are configured. Giancarlo Razzolini 2017-01-23 15:19:00 -0200
  • 24f79db67c
    roles/archweb: Create a new archweb_admins variable. Giancarlo Razzolini 2017-01-23 15:18:38 -0200
  • faa152533a
    Add new TU, Bruno Pagani Florian Pritz 2017-01-21 20:06:48 +0100
  • b68271b8dd
    roles/quassel: Speed up cleaning and increase verbosity Jan Alexander Steffens (heftig) 2017-01-18 15:59:08 +0100
  • fdd0857191
    roles/php-fpm: Removed the requirement of naming php-fpm users with php- prefix. Now the user is the same as the file containing the configuration. Giancarlo Razzolini 2017-01-17 19:52:56 -0200
  • b5a0b0ffde
    roles/security_tracker: Fix insecure socket permissions on the uwsgi app Giancarlo Razzolini 2017-01-17 15:53:33 -0200
  • 653beb93de
    roles/archweb: Fix insecure socket permissions on the uwsgi app Giancarlo Razzolini 2017-01-17 15:53:12 -0200
  • 53f94e440d
    roles/archweb: Change the git clone url to https. Giancarlo Razzolini 2017-01-17 15:37:52 -0200
  • 4e34b5d564
    roles/php-fpm: Change the InaccessibleDirectories directive to InaccessiblePaths, remove the /srv/vmail folder from it and make /var/lib/mysql optional. Giancarlo Razzolini 2017-01-17 15:20:38 -0200
  • 2c08f2f0a8
    sshd: Enable StreamLocalBindUnlink to delete forwarded sockets Florian Pritz 2017-01-17 10:47:56 +0100
  • 20b8c3e0ae
    security_tracker: Add google site verification code for anthraxx Florian Pritz 2017-01-16 19:24:19 +0100
  • 0a4622cac2
    tools: Add socat Florian Pritz 2017-01-16 17:23:58 +0100
  • 29af21c754
    roles/archweb: Fix empty line on the nginx template. Giancarlo Razzolini 2017-01-13 16:13:20 -0200
  • 9800d0239b
    roles/archweb: Create domain redirects for the domains that point to specific archweb sub urls. Giancarlo Razzolini 2017-01-13 15:41:25 -0200
  • 187bb1583f
    roles/archweb: Block downloads of the boostrap tar.gz files and airootfs.sfs files. Giancarlo Razzolini 2017-01-11 13:12:58 -0200
  • 237f88e211 Add Jelle to dev group BartÅ‚omiej Piotrowski 2017-01-10 08:47:42 +0100
  • 0ef1b43df2
    roles/nginx: Reload nginx on snippets changes. Giancarlo Razzolini 2017-01-09 14:45:03 -0200
  • e677394a3d
    roles/nginx: Removed the extra semicolon. Giancarlo Razzolini 2017-01-09 14:13:17 -0200
  • 6abfd83f0c
    roles/archweb: Make the nginx config able to support preload by redirecting alternate domains to their https version before redirecting then to the main domain. Giancarlo Razzolini 2017-01-09 14:03:26 -0200
  • cfd34e5e86 dbscripts: Add rsync.archlinux.org domain to nginx Florian Pritz 2017-01-03 23:06:38 +0100
  • f8eea883f0
    roles/archweb: Deny iso downloads on the /iso url. All the other downloads are allowed. Also change the location to use the configuration. Giancarlo Razzolini 2017-01-03 13:19:25 -0200
  • 29682789ec
    roles/archweb: Added missing defaults and also added a rsync service to sync the isos from orion. Giancarlo Razzolini 2017-01-02 19:04:59 -0200
  • f9c3e76ac4
    roles/archweb: Fix some typos Giancarlo Razzolini 2017-01-02 18:51:03 -0200
  • 51101cd12c
    roles/archweb: Added the populate_signoffs service running once every 20 minutes. Giancarlo Razzolini 2017-01-02 18:34:24 -0200
  • 0db17398f6
    roles/archweb: Enable the mirrorresolv timer. Giancarlo Razzolini 2017-01-02 17:41:29 -0200
  • 1cddad7aaf
    roles/archweb: Add mirrorresolv service and timer running twice a day. Giancarlo Razzolini 2017-01-02 17:38:07 -0200
  • 8b192edcae
    roles/archweb: Added a task to restart reporead when there are changes to the code. Giancarlo Razzolini 2017-01-02 13:57:10 -0200
  • 310f7446ff
    Remove duplicate ssh keys of bgyorgy Florian Pritz 2017-01-02 15:55:04 +0100
  • 11ad970032
    dbscripts: Simplify creation of combined authorized_keys Florian Pritz 2017-01-02 15:53:10 +0100
  • 319ed05022
    roles/nginx: Add a handler for reloading nginx and change all the roles to use it, instead of restarting nginx. Giancarlo Razzolini 2017-01-02 09:31:53 -0200
  • 3eaa00afc1
    roles/archweb: Added python2-psycopg2 to archweb package list because orion does not have postgres. Giancarlo Razzolini 2017-01-01 22:26:54 -0200
  • 3832263d71
    playbooks/orion: Added the postgres_ssl setting to the playbook, since orion does not have postgres role Giancarlo Razzolini 2017-01-01 22:25:25 -0200
  • 686a7c8bc6
    roles/tools: Add bash-completion to misc tools. Giancarlo Razzolini 2017-01-01 20:52:31 -0200
  • 6f4dc82c9e
    roles/archweb: Add a forced_deploy variable to trigger a deploy even when nothing seems to have changed. Also restart memcached on deploys. Giancarlo Razzolini 2017-01-01 20:15:00 -0200
  • 1011223c1c postfix: Add missing access_recipient file Florian Pritz 2017-01-01 22:55:35 +0100
  • 2f30f00535
    roles/dbscripts: Remove the file rsync.conf.proto, since it is a template Giancarlo Razzolini 2017-01-01 19:18:50 -0200
  • febfc56322
    roles/dbscripts: Template rsyncd.conf.proto to allow apollo to kitchesink. Also change gen_rsyncd.conf.pl to use ssl only when enabled. Giancarlo Razzolini 2017-01-01 19:15:34 -0200
  • 6cdb06165c
    playbooks/apollo: Change to use the new netmask variable Giancarlo Razzolini 2017-01-01 18:13:54 -0200
  • 207aa3cc81
    roles/common: Change network configuration to reflect the host_vars change regarding the netmask Giancarlo Razzolini 2017-01-01 17:53:38 -0200
  • 7423b21e12
    host_vars/*: Split the netmask into a separate variable Giancarlo Razzolini 2017-01-01 17:52:31 -0200
  • 50c82c03e4
    roles/archweb: Added missing locations from gudrun Giancarlo Razzolini 2017-01-01 16:58:12 -0200
  • fba4bf72b9
    roles/archweb: Add missing permission to the dbscripts user. Giancarlo Razzolini 2017-01-01 15:14:54 -0200
  • 987472d17b
    roles/archweb: Added a register for virtualenv changes and to deploy archweb in this case. Also changed nginx template to use the main domain. Giancarlo Razzolini 2017-01-01 14:43:36 -0200
  • 3fe02b4845
    roles/archweb: Fix position of the conditional server block Giancarlo Razzolini 2016-12-31 01:16:53 -0200
  • abf19d97a8
    roles/archweb: Deploy archweb on config changes too. Also, add a check to add ssl_require mode when connecting to remote hosts. Giancarlo Razzolini 2016-12-31 01:08:15 -0200
  • 1f11360059
    roles/archweb: Add an alternate domains variable, with the proper templating, redirecting even tls requests to the main domain Giancarlo Razzolini 2016-12-31 01:07:25 -0200
  • 11379fe2e3
    roles/archweb: Add Giancarlo Razzolini e-mail to archweb ADMINS so he can receive errors Giancarlo Razzolini 2016-12-30 21:08:59 -0200
  • c9c9230290
    playbooks/apollo: Fix the mask on orion ipv4 address passed to postgres role Giancarlo Razzolini 2016-12-30 19:33:50 -0200
  • d4ed924d84
    roles/postgres: New letsencrypt hook to install renewed certs and also created tasks to copy them Giancarlo Razzolini 2016-12-30 19:32:40 -0200
  • 0b9f68aba3
    playbooks/apollo: Add ssl to postgres and give orion permission to login. Also add memcached role Giancarlo Razzolini 2016-12-30 17:15:36 -0200