| Commit message (Collapse) | Author | Lines | ||
|---|---|---|---|---|
| 2024-07-29 | Add DNS entry for propaganda |  Johannes Christ | -0/+8 | |
| This commit adds a new DNS entry, used for storing Python Discord-related propaganda, including, but not limited to, Soviet propaganda, including, but not limited to, pictures of Joe Banks wearing Ushankas and fan articles about Ivan Drago, as well as propaganda displaying Joe Banks in various heroic settings. | ||||
| 2024-07-29 | Update dependency pre-commit to v3.8.0 (#434) |  renovate[bot] | -5/+5 | |
| | datasource | package | from | to | | ---------- | ---------- | ----- | ----- | | pypi | pre-commit | 3.7.1 | 3.8.0 | Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> | ||||
| 2024-07-26 | Also reflect ghcr pull secret to modmail namespace |  Chris Lovering | -0/+0 | |
| 2024-07-26 | Move ghcr-pull-secret to use reflection, rather than duplicating the secret | Chris Lovering | -0/+0 | |
| 2024-07-26 | Add LDAP secrets to King Arthur |  Joe Banks | -0/+0 | |
| 2024-07-26 | Mount IPA CA to King Arthur | Joe Banks | -18/+23 | |
| 2024-07-26 | Reflect IPA CA to bots namespace | Joe Banks | -2/+2 | |
| 2024-07-26 | Mount new config for LDAP to Grafana and add IPA CA cert | Joe Banks | -2/+14 | |
| 2024-07-26 | Add LDAP bind user password for Grafana | Joe Banks | -0/+0 | |
| 2024-07-26 | Add new Grafana LDAP config and ldap.toml config | Joe Banks | -0/+65 | |
| 2024-07-26 | Move IPA CA to be a cluster-wide configmap (with Reflector) | Joe Banks | -34/+39 | |
| 2024-07-26 | Add new modmail secrets | Chris Lovering | -0/+0 | |
| 2024-07-26 | Add polonium db and user/password | Chris Lovering | -49/+70 | |
| 2024-07-26 | Don't deploy pydis-users role to Rocky | Joe Banks | -1/+1 | |
| 2024-07-25 | Redirect requests to root to account config page | Joe Banks | -13/+17 | |
| 2024-07-25 | Install epel-release and tools on Rocky hosts | Joe Banks | -0/+10 | |
| 2024-07-25 | Pleasure the style dictator | Johannes Christ | -2/+1 | |
| 2024-07-25 | Prettify sidebar | Johannes Christ | -3/+28 | |
| 2024-07-25 | Move meeting notes to the bottom | Johannes Christ | -1/+1 | |
| 2024-07-25 | Update document titles | Johannes Christ | -61/+61 | |
| 2024-07-25 | Fix index page formatting | Johannes Christ | -0/+4 | |
| 2024-07-25 | Stop including template in meeting notes | Johannes Christ | -1/+3 | |
| 2024-07-25 | Add draft of new documentation | Johannes Christ | -0/+48 | |
| 2024-07-25 | fix(deps): update dependency ruff to v0.5.5 | renovate[bot] | -21/+21 | |
| | datasource | package | from | to | | ---------- | ------- | ----- | ----- | | pypi | ruff | 0.5.4 | 0.5.5 | | ||||
| 2024-07-25 | Improve documentation | Johannes Christ | -2312/+2926 | |
| This commit ports our documentation to Sphinx. The reason for this is straightforward. We need to improve both the quality and the accessibility of our documentation. Hugo is not capable of doing this, as its primary output format is HTML. Sphinx builds plenty of high-quality output formats out of the box, and incentivizes writing good documentation. | ||||
| 2024-07-25 | Add link to DevOps Kanban board in meeting template (#420) | jchristgit | -0/+2 | |
| 2024-07-24 | Update split_extension in OctoDNS to `.zone` | Joe Banks | -1/+1 | |
| 2024-07-24 | Move trailing dot directory to .zone suffixed directory for DNS | Joe Banks | -0/+0 | |
| Apparently directories ending with trailing dots are not supported on Michaelsoft Winblows | ||||
| 2024-07-24 | chore(deps): update registry.k8s.io/kube-state-metrics/kube-state-metrics ↵ | renovate[bot] | -1/+1 | |
| docker tag to v2.13.0 (#412) | datasource | package | from | to | | ---------- | ----------------------------------------------------- | ------- | ------- | | docker | registry.k8s.io/kube-state-metrics/kube-state-metrics | v2.12.0 | v2.13.0 | Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> | ||||
| 2024-07-24 | chore(deps): update dependency community.crypto to v2.21.1 (#405) | renovate[bot] | -1/+1 | |
| | datasource | package | from | to | | ----------------- | ---------------- | ------ | ------ | | galaxy-collection | community.crypto | 2.21.0 | 2.21.1 | Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> | ||||
| 2024-07-23 | Remove meta processor, it will actually only make noise | Joe Banks | -4/+0 | |
| 2024-07-23 | Migrate to wildcard record for lovelace.box.pydis.wtf subdomains | Joe Banks | -9/+8 | |
| 2024-07-23 | Add meta processor to OctoDNS | Joe Banks | -0/+4 | |
| 2024-07-23 | Remove Turing from fail2ban | Joe Banks | -1/+1 | |
| 2024-07-23 | Migrate pythondiscord.com to using CNAMEs | Joe Banks | -49/+49 | |
| 2024-07-23 | Migrate all pydis.wtf services to using CNAMEs | Joe Banks | -44/+39 | |
| 2024-07-23 | Split pydis.wtf into multiple zone files | Joe Banks | -23/+32 | |
| 2024-07-23 | Allow zone files to be split across multiple YAML files | Joe Banks | -1/+2 | |
| 2024-07-23 | Remove Turing from Ansible Inventory | Joe Banks | -1/+0 | |
| 2024-07-23 | Always force when dry-running DNS to generate changes | Joe Banks | -0/+1 | |
| 2024-07-23 | Update certificate issuance to group together related certificates | Joe Banks | -4/+5 | |
| We now can use CSV values to group different (but related) SANs into one issued certificate. As an example, when it was migrated in #402, certificates were configured in such a way that certbot attempted to issue one certificate for pydis.wtf and another for *.pydis.wtf, which is obviously not desirable. This restores previous behaviour to group together certificates served from the same NGINX vhost, using some Ansible filters to ensure the `creates` option of the task matches the certbot generated directory. | ||||
| 2024-07-22 | Remove deployments on turing | Johannes Christ | -52/+13 | |
| Files of the webserver have been migrated over. | ||||
| 2024-07-22 | Disable DNS proxying via CF | Chris Lovering | -2/+1 | |
| 2024-07-22 | Remove ghost blog | Chris Lovering | -99/+0 | |
| 2024-07-22 | Point blog DNS to netlify | Chris Lovering | -2/+2 | |
| 2024-07-22 | chore(deps): update ghost docker tag to v5.88 | renovate[bot] | -1/+1 | |
| | datasource | package | from | to | | ---------- | ------- | ---- | ---- | | docker | ghost | 5.87 | 5.88 | | ||||
| 2024-07-21 | Run the LDAP role on the LDAP host in Ansible | Joe Banks | -0/+5 | |
| Signed-off-by: Joe Banks <[email protected]> | ||||
| 2024-07-21 | Add a trust store to Keycloak for the IPA generated CA | Joe Banks | -1/+44 | |
| This allows us to authenticate requests to LDAP with LDAPS and ensure a) authenticity and b) security of the transmission. Signed-off-by: Joe Banks <[email protected]> | ||||
| 2024-07-21 | Add LDAP role | Joe Banks | -0/+39 | |
| This does not configure the LDAP server but configures the environment and installs the necessary packages, as well as configuring the firewall. Signed-off-by: Joe Banks <[email protected]> | ||||
| 2024-07-21 | Template hostname in Alloy to the inventory hostname | Joe Banks | -1/+1 | |
| This maintains previous behaviour in which the hostname would have just been the inventory hostname, but as the hostname is being updated to the FQDN we should explicitly set the inventory_hostname to ensure continuity of logs. Signed-off-by: Joe Banks <[email protected]> | ||||
 |
index : infra | |
| The PyDis DevOps boiler house, the engine room, where the magic happens. |
| aboutsummaryrefslogtreecommitdiffstats |