1
1
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-05-29 15:46:03 +02:00
infrastructure/roles
Kristian Klausen cf20697629
hedgedoc: Move the client secret to the config file for security
The systemd environment variables can be read by anyone, so move the
secret to the configuration file, which can only be read by root and the
hedgedoc user.

Fix #562
2024-02-19 00:26:53 +01:00
..
alertmanager Capitalize the handler name in handler invocations 2022-08-29 21:46:39 +03:00
arch_boxes_sync arch_boxes_sync: Trigger immediately mirror sync by updating lastupdate 2022-09-18 13:25:52 +02:00
archbuild archbuild: Adapt the sudoers file to the new group structure 2024-01-06 20:24:14 +01:00
archive archive: fix creates= argument to ia configure task 2023-03-20 22:09:01 +02:00
archive_web ansible-lint: Forbidden implicit octal value 'xxxx' 2023-02-18 20:15:54 +02:00
archmanweb ansible-lint: address no-changed-when fatal errors 2023-02-18 20:15:55 +02:00
archusers Fix lint warning about non-FQCN ansible.builtin.user 2022-09-19 00:47:07 +03:00
archweb archweb: update to latest version 2024-02-10 16:21:18 +01:00
archwiki archwiki: update the repository URL 2024-02-15 19:13:00 +01:00
aurweb aurweb: release 6.2.9 2023-11-25 20:43:11 +01:00
borg_client ansible-lint: address no-changed-when fatal errors 2023-02-18 20:15:55 +02:00
borg_server/tasks ansible-lint: Forbidden implicit octal value 'xxxx' 2023-02-18 20:15:54 +02:00
bugbot bugbot: drop old owners from bugbot 2023-08-31 19:37:50 +02:00
bugbuddy bugbuddy: fix download script for sq 0.33.0 2024-02-15 20:55:26 +01:00
certbot acme_dns_challenge: turn into more generic dyn_dns 2023-08-18 19:30:52 +03:00
certificate Capitalize the first letter of all task names 2022-08-23 06:57:13 +03:00
common common: include "less" as an essential tool 2023-08-22 00:19:53 +03:00
dbscripts dbscripts: bump version to latest commit 2024-02-13 01:21:26 +01:00
debuginfod debuginfod: drop svn-community pool scanning 2023-05-22 15:20:16 +02:00
dovecot dovecot: disable pam_faillock lockout mechanism 2023-07-21 11:44:50 +03:00
dyn_dns acme_dns_challenge: turn into more generic dyn_dns 2023-08-18 19:30:52 +03:00
fail2ban fail2ban: Use a managed firewalld ipset 2024-02-18 22:57:42 +01:00
fetchmail Capitalize the handler name in handler invocations 2022-08-29 21:46:39 +03:00
firewalld firewalld: add missing sections to firewalld.conf 2024-01-20 22:21:11 +02:00
fluxbb fluxbb: remove casing inconsistency in menu 2023-11-27 00:31:48 +01:00
geo_dns dyn_dns: Enable EDNS subnet processing for more accurate geodns 2023-09-28 19:42:44 +02:00
geoipupdate Capitalize the first letter of all task names 2022-08-23 06:57:13 +03:00
gitlab gitlab: Enable domain-level redirects feature flag for Pages 2024-02-10 17:38:32 +01:00
gitlab_runner gitlab_runner: Update concurreny math to reflect the new VM size 2024-02-18 18:20:09 +01:00
gluebuddy gluebuddy: fix download script for sq 0.33.0 2024-02-15 20:55:25 +01:00
grafana Decommission bugs.archlinux.org and replace it with a static copy[1] 2024-02-10 17:07:38 +01:00
hardening hardening: reject authentication with empty passwd 2023-09-24 20:16:35 +03:00
hedgedoc hedgedoc: Move the client secret to the config file for security 2024-02-19 00:26:53 +01:00
hetzner_storagebox ansible-lint: Forbidden implicit octal value 'xxxx' 2023-02-18 20:15:54 +02:00
install_arch install_arch: allow for UEFI system bootstrap 2024-01-19 23:16:55 +01:00
keycloak keycloak: Enable account console v3 for its custom field support[1] 2023-12-10 02:15:48 +01:00
libvirt/tasks libvirt: add QEMU packages needed for virtio video 2023-08-24 22:07:58 +03:00
loki Capitalize the handler name in handler invocations 2022-08-29 21:46:39 +03:00
mailman mailman: Bump maximum message size for arch-commits to 1000KB 2023-11-11 21:05:43 +01:00
maintenance ansible-lint: Forbidden implicit octal value 'xxxx' 2023-02-18 20:15:54 +02:00
mariadb Capitalize the handler name in handler invocations 2022-08-29 21:46:39 +03:00
matrix matrix: Update synapse to 1.99.0 2024-01-26 23:28:42 +01:00
memcached ansible-lint: address no-changed-when fatal errors 2023-02-18 20:15:55 +02:00
mirrorsync syncrepo: let mirrorsync perform the repo syncing 2022-11-12 20:22:08 +02:00
mta_sts Capitalize the handler name in handler invocations 2022-08-29 21:46:39 +03:00
networking networking: support additional addresses on networking role 2023-05-06 21:23:28 +01:00
nginx Capitalize the handler name in handler invocations 2022-08-29 21:46:39 +03:00
opensearch Setup OpenSearch server for GitLab's advanced search feature[1] 2023-05-24 19:04:26 +02:00
php_fpm php_fpm: rebase php.ini to php 8.3.2-1 2024-01-20 22:29:06 +02:00
phrik Capitalize the first letter of all task names 2022-08-23 06:57:13 +03:00
ping Capitalize the handler name in handler invocations 2022-08-29 21:46:39 +03:00
postfix ansible-lint: address no-changed-when fatal errors 2023-03-26 16:57:00 +03:00
postfix_null Fix lint warning about non-FQCN ansible.builtin.user 2022-09-19 00:47:07 +03:00
postfwd postfwd: Disable the email limits for gitlab 2024-01-27 20:48:06 +01:00
postgres postgres: rebase config to postgresql 16.1-1 2023-12-08 20:22:36 +01:00
prometheus Add GitHub Pages for archinstall[1] 2023-11-22 20:46:56 +01:00
prometheus_exporters prometheus_exporters: drop flyspray-textcollector 2024-02-14 20:22:27 +01:00
promtail Replace ansible.builtin.service with ansible.builtin.systemd 2023-02-13 12:08:47 +00:00
public_html Capitalize the handler name in handler invocations 2022-08-29 21:46:39 +03:00
quassel Add ansible.builtin qualification to become_method 2023-09-22 23:38:23 +03:00
rebuilderd rebuilderd: update test suites to post git migration 2023-05-22 15:18:46 +02:00
rebuilderd_worker Capitalize the handler name in handler invocations 2022-08-29 21:46:39 +03:00
redirects Rename tu-bylaws.aur.a.o to package-maintainer-bylaws.aur.a.o 2023-10-16 00:33:20 +02:00
redis/tasks Capitalize the first letter of all task names 2022-08-23 06:57:13 +03:00
root_ssh root_ssh: Add variable to define additional keys 2023-08-21 22:07:50 +02:00
rspamd Fix lint warnings about missing galaxy_info in meta 2022-09-19 00:40:48 +03:00
rsync_net Fix template-instead-of-copy lint failures 2022-09-18 23:49:50 +03:00
security_tracker security_tracker: update the navbar to show Gitlab instead of Bugs 2023-11-24 18:01:13 +01:00
sources Capitalize the handler name in handler invocations 2022-08-29 21:46:39 +03:00
sshd add the new build server 2024-01-19 23:16:55 +01:00
sudo sudo: update regex for %wheel line 2023-07-20 21:47:15 +03:00
syncrepo syncrepo: let mirrorsync perform the repo syncing 2022-11-12 20:22:08 +02:00
terraform_state Add ansible.builtin qualification to become_method 2023-09-22 23:38:23 +03:00
tools/tasks Capitalize the first letter of all task names 2022-08-23 06:57:13 +03:00
unbound Capitalize the handler name in handler invocations 2022-08-29 21:46:39 +03:00
uwsgi Capitalize the handler name in handler invocations 2022-08-29 21:46:39 +03:00
wireguard ansible-lint: address no-changed-when fatal errors 2023-03-26 16:57:00 +03:00