infra - The PyDis DevOps boiler house, the engine room, where the magic happens.

	Commit message (Collapse)	Author	Age	Lines
...
*	Stop running pydis-users role on netcup hosts	Joe Banks	2024-08-27	-1/+0
\|
*	Delete pydis-users role	Joe Banks	2024-08-27	-204/+0
\|
*	Add HBA rule for grafana -> pinnwand	Joe Banks	2024-08-27	-2/+6
\|
*	Update script to use `cd -` instead of pushd/popd for sh compatibility	Joe Banks	2024-08-26	-3/+1
\|
*	Amendments to mirrors cron script for reliability	Joe Banks	2024-08-26	-1/+5
\|
*	Use variables for cronjob file naming	Joe Banks	2024-08-26	-3/+5
\|
*	Rename NGINX variables in git-mirrors role	Joe Banks	2024-08-26	-5/+6
\|
*	Explicitly install moreutils for chronic utility	Joe Banks	2024-08-26	-0/+8
\|
*	Harden security permissions on git-mirrors owned files	Joe Banks	2024-08-26	-4/+4
\|
*	Improve formatting of git clone command for mirrors	Joe Banks	2024-08-26	-3/+7
\|
*	Make git-mirrors a system user	Joe Banks	2024-08-26	-0/+1
\|
*	Update indentation of new postfix prometheus rules	Joe Banks	2024-08-26	-21/+21
\|
*	Install prometheus-postfix-exporter	Johannes Christ	2024-08-26	-0/+21
\| \| \| \| \| \| \| \|	As a data-obsessed administrator I want to have more data such that I can widen my sense of power. This also installs rsyslog, because prometheus-postfix-exporter doesn't work with journald's binary log format.
*	Install prometheus-postfix-exporter	Johannes Christ	2024-08-26	-0/+18
\| \| \| \| \| \| \| \|	As a data-obsessed administrator I want to have more data such that I can widen my sense of power. This also installs rsyslog, because prometheus-postfix-exporter doesn't work with journald's binary log format.
*	Stop installing libsasl2-modules-ldap	Johannes Christ	2024-08-26	-2/+0
\| \| \| \| \|	This caused problems in postfix's logfile, our most holy daemon. We must not disturb it, and as an aside, everything works fine.
*	Prune branhes that are deleted upstream	Joe Banks	2024-08-25	-2/+2
\|
*	Add cgit customisation values to git-mirrors vars	Joe Banks	2024-08-25	-0/+4
\|
*	Add dependencies for formatting	Joe Banks	2024-08-25	-0/+10
\|
*	Deploy git-mirrors role to NGINX hosts	Joe Banks	2024-08-25	-0/+5
\|
*	Add template NGINX service for cgit deployment	Joe Banks	2024-08-25	-0/+25
\|
*	Add script for updating mirrors in a cronjob	Joe Banks	2024-08-25	-0/+19
\|
*	Add dependency on NGINX to git-mirrors role for handlers	Joe Banks	2024-08-25	-0/+3
\|
*	Add cgitrc config template	Joe Banks	2024-08-25	-0/+36
\|
*	Add variables for cgit and git mirrors	Joe Banks	2024-08-25	-0/+66
\|
*	Add new tasks for installing cgit and git mirroring cronjob	Joe Banks	2024-08-25	-0/+140
\|
*	Add myself to some email aliases	Joe Banks	2024-08-25	-2/+2
\|
*	Configure alertmanager to send e-mails	Johannes Christ	2024-08-25	-0/+1
\|
*	Bind NGINX hosts on IPv6 as well	Johannes Christ	2024-08-25	-0/+3
\| \| \| \|	Previously only Jitsi would answer when requesting on IPv6.
*	Kill remaining turing host variables	Johannes Christ	2024-08-25	-6/+0
\|
*	Fix incorrect module causing crash when copying	Johannes Christ	2024-08-25	-1/+1
\|
*	Correct old handler name	Johannes Christ	2024-08-25	-2/+1
\|
*	Correct sieve user log location	Joe Banks	2024-08-24	-1/+1
\|
*	Run spamassassin as debian-spamd instead of spamd	Joe Banks	2024-08-24	-10/+2
\|
*	Explicitly run spamc hooks as debian-spamd	Joe Banks	2024-08-24	-2/+2
\|
*	More progress on Dovecot ham/spam marking	Joe Banks	2024-08-24	-2/+109
\|
*	Enable spamc ham and spam learning	Joe Banks	2024-08-24	-4/+105
\|
*	Add sieve script to move spam to folder	Joe Banks	2024-08-24	-0/+45
\|
*	Run inbound mail through spamassassin	Joe Banks	2024-08-24	-0/+15
\|
*	Run spamassassin role on mail hosts	Joe Banks	2024-08-24	-0/+1
\|
*	Add role for spamassassin	Joe Banks	2024-08-24	-0/+177
\|
*	Address horrible inefficiencies in SSH handlers	Johannes Christ	2024-08-24	-11/+2
\|
*	Run saslauthd under the "sasl" user & group	Mark	2024-08-24	-1/+26
\| \| \| \| \| \| \| \| \| \| \|	To improve security, run it as a new "sasl" user rather than as root. The existing "sasl" group is re-used. Note that Ansible does not provide an agnostic way to configure the user and group for a service. This change couples the configuration to systemd. Resolves #478
*	Add Dovecot to fail2ban config	Joe Banks	2024-08-24	-0/+8
\|
*	Clean up SASL logic from postfix	Johannes Christ	2024-08-23	-19/+16
\| \| \| \| \| \|	Per Joe's comment here [1]. [1]: https://github.com/python-discord/infra/issues/478#issuecomment-2306107672
*	Configure Postfix to reject mail on the sender blocklist	Joe Banks	2024-08-23	-0/+16
\|
*	Add sender blocklist	Joe Banks	2024-08-23	-0/+3
\|
*	Fix pcre rewriting for postfix headers	Joe Banks	2024-08-23	-3/+7
\|
*	Preserve privacy in e-mail headers	Johannes Christ	2024-08-23	-0/+38
\| \| \| \| \| \| \|	Similar to how the big e-mail providers do it, strip out some personally identifying information from e-mails. I have used this on my own e-mail server for a while and it works fine.
*	Update neomutt folders	Joe Banks	2024-08-23	-1/+1
\|
*	Use variable for vmail user ID	Joe Banks	2024-08-23	-5/+4
\|