aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeLines
* Remove hugo-book submoduleGravatar Johannes Christ2024-07-29-3/+0
|
* Add DNS entry for propagandaGravatar Johannes Christ2024-07-29-0/+8
| | | | | | | | This commit adds a new DNS entry, used for storing Python Discord-related propaganda, including, but not limited to, Soviet propaganda, including, but not limited to, pictures of Joe Banks wearing Ushankas and fan articles about Ivan Drago, as well as propaganda displaying Joe Banks in various heroic settings.
* Update dependency pre-commit to v3.8.0 (#434)Gravatar renovate[bot]2024-07-29-5/+5
| | | | | | | | datasource | package | from | to | | ---------- | ---------- | ----- | ----- | | pypi | pre-commit | 3.7.1 | 3.8.0 | Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
* Also reflect ghcr pull secret to modmail namespaceGravatar Chris Lovering2024-07-26-0/+0
|
* Move ghcr-pull-secret to use reflection, rather than duplicating the secretGravatar Chris Lovering2024-07-26-0/+0
|
* Add LDAP secrets to King ArthurGravatar Joe Banks2024-07-26-0/+0
|
* Mount IPA CA to King ArthurGravatar Joe Banks2024-07-26-18/+23
|
* Reflect IPA CA to bots namespaceGravatar Joe Banks2024-07-26-2/+2
|
* Mount new config for LDAP to Grafana and add IPA CA certGravatar Joe Banks2024-07-26-2/+14
|
* Add LDAP bind user password for GrafanaGravatar Joe Banks2024-07-26-0/+0
|
* Add new Grafana LDAP config and ldap.toml configGravatar Joe Banks2024-07-26-0/+65
|
* Move IPA CA to be a cluster-wide configmap (with Reflector)Gravatar Joe Banks2024-07-26-34/+39
|
* Add new modmail secretsGravatar Chris Lovering2024-07-26-0/+0
|
* Add polonium db and user/passwordGravatar Chris Lovering2024-07-26-49/+70
|
* Don't deploy pydis-users role to RockyGravatar Joe Banks2024-07-26-1/+1
|
* Redirect requests to root to account config pageGravatar Joe Banks2024-07-25-13/+17
|
* Install epel-release and tools on Rocky hostsGravatar Joe Banks2024-07-25-0/+10
|
* Pleasure the style dictatorGravatar Johannes Christ2024-07-25-2/+1
|
* Build new pageGravatar Johannes Christ2024-07-25-0/+0
|
* Prettify sidebarGravatar Johannes Christ2024-07-25-3/+28
|
* Move meeting notes to the bottomGravatar Johannes Christ2024-07-25-1/+1
|
* Update document titlesGravatar Johannes Christ2024-07-25-61/+61
|
* Fix index page formattingGravatar Johannes Christ2024-07-25-0/+4
|
* Stop including template in meeting notesGravatar Johannes Christ2024-07-25-1/+3
|
* Add draft of new documentationGravatar Johannes Christ2024-07-25-0/+48
|
* fix(deps): update dependency ruff to v0.5.5Gravatar renovate[bot]2024-07-25-21/+21
| | | | | | | datasource | package | from | to | | ---------- | ------- | ----- | ----- | | pypi | ruff | 0.5.4 | 0.5.5 |
* Improve documentationGravatar Johannes Christ2024-07-25-2312/+2926
| | | | | | | | | | This commit ports our documentation to Sphinx. The reason for this is straightforward. We need to improve both the quality and the accessibility of our documentation. Hugo is not capable of doing this, as its primary output format is HTML. Sphinx builds plenty of high-quality output formats out of the box, and incentivizes writing good documentation.
* Add link to DevOps Kanban board in meeting template (#420)Gravatar jchristgit2024-07-25-0/+2
|
* Update split_extension in OctoDNS to `.zone`Gravatar Joe Banks2024-07-24-1/+1
|
* Move trailing dot directory to .zone suffixed directory for DNSGravatar Joe Banks2024-07-24-0/+0
| | | | | Apparently directories ending with trailing dots are not supported on Michaelsoft Winblows
* chore(deps): update registry.k8s.io/kube-state-metrics/kube-state-metrics ↵Gravatar renovate[bot]2024-07-24-1/+1
| | | | | | | | | docker tag to v2.13.0 (#412) | datasource | package | from | to | | ---------- | ----------------------------------------------------- | ------- | ------- | | docker | registry.k8s.io/kube-state-metrics/kube-state-metrics | v2.12.0 | v2.13.0 | Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
* chore(deps): update dependency community.crypto to v2.21.1 (#405)Gravatar renovate[bot]2024-07-24-1/+1
| | | | | | | | datasource | package | from | to | | ----------------- | ---------------- | ------ | ------ | | galaxy-collection | community.crypto | 2.21.0 | 2.21.1 | Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
* Remove meta processor, it will actually only make noiseGravatar Joe Banks2024-07-23-4/+0
|
* Migrate to wildcard record for lovelace.box.pydis.wtf subdomainsGravatar Joe Banks2024-07-23-9/+8
|
* Add meta processor to OctoDNSGravatar Joe Banks2024-07-23-0/+4
|
* Remove Turing from fail2banGravatar Joe Banks2024-07-23-1/+1
|
* Migrate pythondiscord.com to using CNAMEsGravatar Joe Banks2024-07-23-49/+49
|
* Migrate all pydis.wtf services to using CNAMEsGravatar Joe Banks2024-07-23-44/+39
|
* Split pydis.wtf into multiple zone filesGravatar Joe Banks2024-07-23-23/+32
|
* Allow zone files to be split across multiple YAML filesGravatar Joe Banks2024-07-23-1/+2
|
* Remove Turing from Ansible InventoryGravatar Joe Banks2024-07-23-1/+0
|
* Always force when dry-running DNS to generate changesGravatar Joe Banks2024-07-23-0/+1
|
* Update certificate issuance to group together related certificatesGravatar Joe Banks2024-07-23-4/+5
| | | | | | | | | | | | | | We now can use CSV values to group different (but related) SANs into one issued certificate. As an example, when it was migrated in #402, certificates were configured in such a way that certbot attempted to issue one certificate for pydis.wtf and another for *.pydis.wtf, which is obviously not desirable. This restores previous behaviour to group together certificates served from the same NGINX vhost, using some Ansible filters to ensure the `creates` option of the task matches the certbot generated directory.
* Remove deployments on turingGravatar Johannes Christ2024-07-22-52/+13
| | | | Files of the webserver have been migrated over.
* Disable DNS proxying via CFGravatar Chris Lovering2024-07-22-2/+1
|
* Remove ghost blogGravatar Chris Lovering2024-07-22-99/+0
|
* Point blog DNS to netlifyGravatar Chris Lovering2024-07-22-2/+2
|
* chore(deps): update ghost docker tag to v5.88Gravatar renovate[bot]2024-07-22-1/+1
| | | | | | | datasource | package | from | to | | ---------- | ------- | ---- | ---- | | docker | ghost | 5.87 | 5.88 |
* Run the LDAP role on the LDAP host in AnsibleGravatar Joe Banks2024-07-21-0/+5
| | | | Signed-off-by: Joe Banks <[email protected]>
* Add a trust store to Keycloak for the IPA generated CAGravatar Joe Banks2024-07-21-1/+44
| | | | | | | This allows us to authenticate requests to LDAP with LDAPS and ensure a) authenticity and b) security of the transmission. Signed-off-by: Joe Banks <[email protected]>