aboutsummaryrefslogtreecommitdiffstats
path: root/kubernetes/scripts (unfollow)
Commit message (Collapse)AuthorLines
2024-05-01Harden SSH security and prevent some misconfigurationsGravatar Johannes Christ-8/+45
Disable agent forwarding and X11 forwarding in the default configuration. Users can still forward this if they really want to by installing a custom forwarder and utilizing their shell access to spawn it, but with this, we're making it impossible for people to accidentally forward their agent or their X socket to the remote server. Additionally, change the SSH configuration such that only the Python Discord users are allowed to log in.
2024-05-01Depend on ansible-core instead of AnsibleGravatar Johannes Christ-22/+83
Allow for faster local installation by only installing what we need.
2024-05-01ignore pycharm's idea filesGravatar shtlrs-0/+1
2024-05-01update the readme file to be more user friendlyGravatar shtlrs-14/+51
2024-05-01Install dependencies using poetryGravatar shtlrs-8/+14
2024-05-01bump the debian version usedGravatar shtlrs-4/+3
This also explicitly specifies the sync type to rsync
2024-04-29Stop alerting for slow GitHub webhook filter endpoint calls (#235)Gravatar jchristgit-2/+2
These are directly forwarded to GitHub with no time-consuming processing done on the site. We would therefore be alerting for GitHub's slowness, which is rather useless.
2024-04-29Whitelist possible LKE addresses to PostgreSQL on lovelaceGravatar Johannes Christ-8/+26
This allows us to connect to PostgreSQL on lovelace from any possible LKE node location, whilst not opening up our PostgreSQL instances to the world. This has already been rolled out.