| Commit message (Collapse) | Author | Age | Lines | ||
|---|---|---|---|---|---|
| ... | |||||
| * | Update munin-node config template to allow scraping from any host |  Joe Banks | 2024-08-30 | -1/+8 | |
| | | |||||
| * | Add scraping config to munin master against all Ansible hosts | Joe Banks | 2024-08-30 | -4/+8 | |
| | | |||||
| * | Create a new firewalld zone for Wireguard interface on Rocky hosts | Joe Banks | 2024-08-30 | -0/+19 | |
| | | |||||
| * | Setup firewall rule for Rocky hosts in munin-node | Joe Banks | 2024-08-30 | -0/+12 | |
| | | |||||
| * | Add Munin port 4949 to wireguard allow list for nftables hosts | Joe Banks | 2024-08-30 | -0/+3 | |
| | | |||||
| * | Add new firewalld role for shared reload handler | Joe Banks | 2024-08-30 | -0/+6 | |
| | | |||||
| * | Add standalone munin-node role |  Johannes Christ | 2024-08-30 | -90/+105 | |
| | | |||||
| * | Update templated WireGuard config | Joe Banks | 2024-08-30 | -1/+2 | |
| | | | | | | Include a missing PreDown task to remove the local routes we add as well as including all hosts in the inventory instead of just netcup hosts. | ||||
| * | Set packages to install for Wireguard by distribution | Joe Banks | 2024-08-30 | -7/+11 | |
| | | |||||
| * | Move wireguard role to run on all hosts | Joe Banks | 2024-08-30 | -1/+1 | |
| | | |||||
| * | Add Wireguard subnet to ldap01 | Joe Banks | 2024-08-30 | -0/+1 | |
| | | |||||
| * | Implement dovecot mail plugin, configure limits | Johannes Christ | 2024-08-30 | -73/+165 | |
| | | | | | | | | | | This also moves custom plugins into the `roles/munin/templates/plugins` directory, which should hopefully be easier to maintain than the existing inline dictionary. The only issue is that now it is a bit harder to deal with the filepaths. This change has already been deployed. | ||||
| * | Update dependency ruff to v0.6.3 |  renovate[bot] | 2024-08-30 | -21/+21 | |
| | | | | | | | | datasource | package | from | to | | ---------- | ------- | ----- | ----- | | pypi | ruff | 0.6.2 | 0.6.3 | | ||||
| * | Feed Dovecot maildir stats into Prometheus | Johannes Christ | 2024-08-30 | -1/+95 | |
| | | | | | | | | | | | | | | | | | Already deployed on lovelace. I was going to leave out script deployment and just write it inline, but YAML folding of long lines (and unreadability of 200 column-wide AWk scripts, to be honest) made it a bit bad. The e-mail for DevOps cron failure reports is updated to include `+cron` to allow for client-side filtering, if necessary. To test: `ssh -L localhost:9090:localhost:9090 lovelace.box.pydis.wtf`, then check out the `dovecot_` variables in the UI. We might want to further check out Dovecot's built-in statistics support, see https://doc.dovecot.org/2.3/configuration_manual/stats/. | ||||
| * | Recommend CLI & GUI sieve clients | Johannes Christ | 2024-08-30 | -5/+5 | |
| | | | | | As suggested by Joe. | ||||
| * | Remove unnecessary & faulty LDAP user attribute mapping | Joe Banks | 2024-08-30 | -1/+1 | |
| | | |||||
| * | Change templating of user mail_home | Joe Banks | 2024-08-30 | -1/+1 | |
| | | |||||
| * | Make spam learning pipe scripts world readable/executable | Joe Banks | 2024-08-30 | -1/+1 | |
| | | |||||
| * | Separate mail users by their UID | Johannes Christ | 2024-08-30 | -3/+10 | |
| | | | | | | Directories under /var/vmail are no longer all owned by `vmail`, but instead `$ldap_uid:vmail`. | ||||
| * | ManageSieve for Everyone | Johannes Christ | 2024-08-30 | -15/+10 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | A spectre is haunting Python Discord -- the spectre of proprietary mail filtering programs. All the Powers of Big Mail have entered into a holy alliance to exorcise this spectre: Outlook and GMail, Yahoo and Zoho, AOL adn iCloud. Where is the open protocol in opposition that has not been decried as unprofessional, free and open source by its opponents in power? Where is the Opposition that has not hurled back the branding reproach of Internet Standards, against the more advanced opposition protocols, as well as against its reactionary adversaries? Two things result from this fact. I. Sieve is already standardized as a protocol via the IETF. II. It is high time that Python Discord users should openly, in the face of the TLS-encrypted internet, filter their notifications, their love letters, their mailing lists, and meet this nursery tale of the Spectre of ManageSieve with a Manifesto of Python Discord Devops itself. To this end, ManageSieve users of various nationalities have assembled on jitsi.pydis.wtf, and sketched the following commit, to be published on the lovelace Python Discord e-mail service. | ||||
| * | Show status code in nginx alerts | Johannes Christ | 2024-08-29 | -4/+4 | |
| | | |||||
| * | Compile prevent-duplicates.sieve script to sieve-after filter directory | Joe Banks | 2024-08-29 | -0/+16 | |
| | | |||||
| * | Add duplicate prevention sieve script | Joe Banks | 2024-08-29 | -0/+9 | |
| | | |||||
| * | Bad Bank Working Day | Johannes Christ | 2024-08-29 | -2/+2 | |
| | | |||||
| * | Calculate the Lovering Inheritance | Johannes Christ | 2024-08-28 | -2/+68 | |
| | | |||||
| * | Support custom plugins for munin | Johannes Christ | 2024-08-28 | -0/+15 | |
| | | |||||
| * | Configure PostgreSQL plugins for Munin | Johannes Christ | 2024-08-28 | -6/+27 | |
| | | |||||
| * | Include Uncle Christ's Assorted Works in mirror | Johannes Christ | 2024-08-28 | -1/+8 | |
| | | | | | | | | Uncle Christ would like to mirror this item on the Python Discord git mirror to ensure the security of Python Discord DevOps poetry dependencies is included. Uncle Christ stands hopeful that this change contributes to a better society. | ||||
| * | Bind munin-node locally | Joe Banks | 2024-08-28 | -2/+2 | |
| | | |||||
| * | Remove unnecessary handler for munin restarting | Joe Banks | 2024-08-28 | -7/+0 | |
| | | |||||
| * | Enable some plugins for mail, spam and NGINX | Joe Banks | 2024-08-28 | -0/+32 | |
| | | | | | | | Also, disable some wrongly autodetected radio related plugins, I think this seems to automatically enable based off a port being open but all the logs were obviously just invalid responses. | ||||
| * | Add nginx status stub listener | Joe Banks | 2024-08-28 | -0/+14 | |
| | | |||||
| * | Add munin NGINX configuration | Joe Banks | 2024-08-28 | -0/+43 | |
| | | |||||
| * | Rudimentary pass at a munin role | Joe Banks | 2024-08-28 | -0/+260 | |
| | | |||||
| * | Add munin to monitoring in playbook | Joe Banks | 2024-08-28 | -0/+1 | |
| | | |||||
| * | Add munin DNS record | Joe Banks | 2024-08-28 | -0/+8 | |
| | | |||||
| * | Update spam address list | Joe Banks | 2024-08-28 | -1/+3 | |
| | | |||||
| * | Do not rewrite inbound mail headers | Johannes Christ | 2024-08-28 | -1/+0 | |
| | | | | | This is wrong on so many levels. | ||||
| * | Remove documentation and tooling references to pydis-users role | Joe Banks | 2024-08-27 | -3/+2 | |
| | | |||||
| * | Stop running pydis-users role on netcup hosts | Joe Banks | 2024-08-27 | -1/+0 | |
| | | |||||
| * | Delete pydis-users role | Joe Banks | 2024-08-27 | -204/+0 | |
| | | |||||
| * | Add HBA rule for grafana -> pinnwand | Joe Banks | 2024-08-27 | -2/+6 | |
| | | |||||
| * | Update script to use `cd -` instead of pushd/popd for sh compatibility | Joe Banks | 2024-08-26 | -3/+1 | |
| | | |||||
| * | Amendments to mirrors cron script for reliability | Joe Banks | 2024-08-26 | -1/+5 | |
| | | |||||
| * | Use variables for cronjob file naming | Joe Banks | 2024-08-26 | -3/+5 | |
| | | |||||
| * | Rename NGINX variables in git-mirrors role | Joe Banks | 2024-08-26 | -5/+6 | |
| | | |||||
| * | Explicitly install moreutils for chronic utility | Joe Banks | 2024-08-26 | -0/+8 | |
| | | |||||
| * | Harden security permissions on git-mirrors owned files | Joe Banks | 2024-08-26 | -4/+4 | |
| | | |||||
| * | Improve formatting of git clone command for mirrors | Joe Banks | 2024-08-26 | -3/+7 | |
| | | |||||
| * | Make git-mirrors a system user | Joe Banks | 2024-08-26 | -0/+1 | |
| | | |||||
 |
index : infra | |
| The PyDis DevOps boiler house, the engine room, where the magic happens. |
| aboutsummaryrefslogtreecommitdiffstats |