infra - The PyDis DevOps boiler house, the engine room, where the magic happens.

	Commit message (Collapse)	Author	Lines
2024-06-06	Switch to using designated placeholder IPv4 for originless records	Joe Banks	-3/+3
	We currently used something like 1.2.3.4 or 1.1.1.1 as placeholder IP addresses for DNS records where we ran in "originless" mode (the request is always answered by a Cloudflare Worker or a redirect). This changes that so we use designated reserved IPv4 addresses (192.0.2.0) to capture that traffic instead, ensuring that in no circumstance would we leak traffic to an address like 1.1.1.1 or 1.2.3.4 if there was a Cloudflare misconfiguration. Despite the potential risk vectors here being very small, it's a minor change and also helps us ensure configuration works correctly in the future.
2024-06-06	Set proxied to true for paste record	Joe Banks	-1/+1

2024-06-06	Add paste.pydis.wtf record for forwarding	Joe Banks	-0/+8

2024-06-05	Add tmpfs to King Arthur	Joe Banks	-0/+9

2024-06-04	Add automatic HBA rules for all users to connect via mTLS	Joe Banks	-3/+9

2024-06-04	Add devops user account	Joe Banks	-42/+69

2024-06-04	Add CA file to postgresql.conf	Joe Banks	-0/+2

2024-06-04	Add pg_ident.conf file	Joe Banks	-1/+18

2024-06-04	Install PostgreSQL documentation package	Johannes Christ	-0/+1

2024-06-03	Bump ruff from 0.4.5 to 0.4.7 (#342)	dependabot[bot]	-21/+22
	Bumps [ruff](https://github.com/astral-sh/ruff) from 0.4.5 to 0.4.7. - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ruff/compare/v0.4.5...v0.4.7) --- updated-dependencies: - dependency-name: ruff dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>