Commit message (Collapse) | Author | Age | Lines | ||
---|---|---|---|---|---|
... | |||||
* | Create new sender canonical map template for SRS | 2024-09-03 | -0/+5 | ||
| | | | | | | This template returns the address verbatim if it's a local domain else it returns nothing. Based on this, we can use these addresses for SRS, it will either use the verbatim address or pass onto SRSd for a rewrite. | ||||
* | Clean up mail script after feeding it to at | 2024-09-03 | -0/+1 | ||
| | |||||
* | Send raw date to Fredrick vacation script | 2024-09-03 | -2/+4 | ||
| | | | | | | Allows to add the timezone to it to properly determine local sender time and Fredrick's current time (if he's travelling within his home country, that is). | ||||
* | Fix Jitsi SASL authentication | 2024-09-03 | -4/+4 | ||
| | | | | | | | | | | | | | | Why doesn't it support quotes? Why doesn't it support quotes? Why doesn't it support quotes? Why doesn't it support quotes? Why doesn't it support quotes? Why doesn't it support quotes? | ||||
* | More cgitrc modifications | 2024-09-03 | -0/+3 | ||
| | | | | THERE ARE SO MANY OPTIONS! I LOVE CGIT!!!! | ||||
* | Correct handler names in Dovecot role | 2024-09-03 | -2/+2 | ||
| | |||||
* | Change all templates to use {{ ansible_managed }} | 2024-09-03 | -38/+38 | ||
| | |||||
* | Set ansible_managed for use in templates | 2024-09-03 | -0/+2 | ||
| | |||||
* | Delay Fredrick vacation script replies by 10 minutes | 2024-09-03 | -1/+21 | ||
| | | | | | | Untested. We should expand this (later) such that when an e-mail is sent outside of Fredrick's regular working hours, the script (like Fredrick) needs more time to get back to you, since he needs to practice his Qi. | ||||
* | Include sender date as a unix timestamp | 2024-09-03 | -1/+5 | ||
| | |||||
* | Add top posting to vacation script | 2024-09-03 | -0/+9 | ||
| | |||||
* | Add tag for rolling out service scripts | 2024-09-03 | -0/+2 | ||
| | |||||
* | Update variable reference for Fredrick vacation script | 2024-09-03 | -1/+1 | ||
| | |||||
* | Have Fredrick's vacation tool CC in DevOps | 2024-09-03 | -2/+1 | ||
| | |||||
* | Add transport rules for Fredrick | 2024-09-03 | -0/+5 | ||
| | |||||
* | Add Fredrick API handler script | 2024-09-03 | -0/+54 | ||
| | |||||
* | Add variables for Fredrick API | 2024-09-03 | -7/+12 | ||
| | |||||
* | Migrate service scripts from files to templates | 2024-09-03 | -5/+17 | ||
| | |||||
* | Treat NGINX responses as UTF-8 | 2024-09-02 | -0/+19 | ||
| | | | | | | | | | Some sites that had non-ASCII characters rendered weirdly because our NGINX configuration was not returning a default charset and so rendering was being left up to browser/standards defaults. This change adds a new config file to /etc/nginx/conf.d/ which forces responses to be interpreted as/transformed to UTF-8. | ||||
* | Raise time threshold for 4xx alerts | 2024-09-01 | -1/+1 | ||
| | | | | | | At present we get plenty of unactionable, flapping alarms. So far, they have shown us nothing of value. Raise the time consecutive errors need to be seen before we alert. | ||||
* | Pleasure the style dictator | 2024-09-01 | -1/+2 | ||
| | | | | | See https://github.com/python-discord/infra/pull/524#issuecomment-2323385510. | ||||
* | Install Galaxy dependencies in CI with cache | 2024-09-01 | -1/+11 | ||
| | |||||
* | Update Ansible lint config to ignore Jinja spacing rule | 2024-09-01 | -0/+2 | ||
| | | | | | Also ignore the promethues-postgres-exporter which is a submodule and is not subject to our lint rules | ||||
* | Update git checkouts in Ansible lint CI stage | 2024-09-01 | -1/+8 | ||
| | |||||
* | Override runtime directory permissions | 2024-09-01 | -0/+23 | ||
| | |||||
* | Swap saslauthd to mount outside of postfix | 2024-09-01 | -2/+5 | ||
| | | | | Closes #474. | ||||
* | Add missing task for sasl role | 2024-09-01 | -0/+10 | ||
| | |||||
* | Update dependency mkdocs-material to v9.5.34 | 2024-09-01 | -3/+3 | ||
| | | | | | | | datasource | package | from | to | | ---------- | --------------- | ------ | ------ | | pypi | mkdocs-material | 9.5.33 | 9.5.34 | | ||||
* | noqa variable naming on dmarc_metrics_exporter task | 2024-08-31 | -8/+7 | ||
| | |||||
* | Skip ansible lint on DMARC metrics exporter role | 2024-08-31 | -0/+1 | ||
| | |||||
* | Explicitly set become: true on DMARC sieve compilation handler | 2024-08-31 | -0/+1 | ||
| | |||||
* | Use --unsafe in check-yaml pre-commit filter | 2024-08-31 | -1/+1 | ||
| | | | | | This performs a syntax check instead of attempting a load to prevent unresolvable tags (i.e. Ansible's `!vault`) from kicking up errors. | ||||
* | Add DMARC exporter to Prometheus scrape targets | 2024-08-31 | -0/+7 | ||
| | |||||
* | Run DMARC inbox setup and dmarc_metrics_exporter role on mail hosts | 2024-08-31 | -0/+25 | ||
| | |||||
* | Add tasks to template and enable DMARC inbox sieve filter | 2024-08-31 | -0/+39 | ||
| | |||||
* | Add new DMARC inbox sieve filter | 2024-08-31 | -0/+7 | ||
| | |||||
* | Add dmarc_metrics_exporter role requirement | 2024-08-31 | -0/+4 | ||
| | |||||
* | Update munin-node config template to allow scraping from any host | 2024-08-30 | -1/+8 | ||
| | |||||
* | Add scraping config to munin master against all Ansible hosts | 2024-08-30 | -4/+8 | ||
| | |||||
* | Create a new firewalld zone for Wireguard interface on Rocky hosts | 2024-08-30 | -0/+19 | ||
| | |||||
* | Setup firewall rule for Rocky hosts in munin-node | 2024-08-30 | -0/+12 | ||
| | |||||
* | Add Munin port 4949 to wireguard allow list for nftables hosts | 2024-08-30 | -0/+3 | ||
| | |||||
* | Add new firewalld role for shared reload handler | 2024-08-30 | -0/+6 | ||
| | |||||
* | Add standalone munin-node role | 2024-08-30 | -90/+105 | ||
| | |||||
* | Update templated WireGuard config | 2024-08-30 | -1/+2 | ||
| | | | | | Include a missing PreDown task to remove the local routes we add as well as including all hosts in the inventory instead of just netcup hosts. | ||||
* | Set packages to install for Wireguard by distribution | 2024-08-30 | -7/+11 | ||
| | |||||
* | Move wireguard role to run on all hosts | 2024-08-30 | -1/+1 | ||
| | |||||
* | Add Wireguard subnet to ldap01 | 2024-08-30 | -0/+1 | ||
| | |||||
* | Implement dovecot mail plugin, configure limits | 2024-08-30 | -73/+165 | ||
| | | | | | | | | | This also moves custom plugins into the `roles/munin/templates/plugins` directory, which should hopefully be easier to maintain than the existing inline dictionary. The only issue is that now it is a bit harder to deal with the filepaths. This change has already been deployed. | ||||
* | Update dependency ruff to v0.6.3 | 2024-08-30 | -21/+21 | ||
| | | | | | | | datasource | package | from | to | | ---------- | ------- | ----- | ----- | | pypi | ruff | 0.6.2 | 0.6.3 | |