]>
git.openstreetmap.org Git - chef.git/log
Tom Hughes [Sat, 18 Mar 2023 07:36:53 +0000 (07:36 +0000)]
Suppress file changed warnings during discourse backup
Tom Hughes [Sat, 18 Mar 2023 07:35:40 +0000 (07:35 +0000)]
Install libjson-xs-perl on dev for rails asset cleanup
Grant Slater [Fri, 17 Mar 2023 13:59:12 +0000 (13:59 +0000)]
dev: add aria2 to required packages
Grant Slater [Fri, 17 Mar 2023 13:55:37 +0000 (13:55 +0000)]
quote groups with dash
Grant Slater [Fri, 17 Mar 2023 13:54:03 +0000 (13:54 +0000)]
Enable za-imagery user and role
Grant Slater [Fri, 17 Mar 2023 09:51:39 +0000 (09:51 +0000)]
Add extra dev users. ZA Imagery
Grant Slater [Wed, 15 Mar 2023 14:56:01 +0000 (14:56 +0000)]
bind: add missing networking dependency
Grant Slater [Wed, 15 Mar 2023 14:03:35 +0000 (14:03 +0000)]
wordpress: Allow access to robots.txt and similar files
Grant Slater [Wed, 15 Mar 2023 14:02:55 +0000 (14:02 +0000)]
wordpress: Remove duplicate memory limit. Add ENV type
Grant Slater [Wed, 15 Mar 2023 13:10:52 +0000 (13:10 +0000)]
wordpress: Increase memory limit to allow large image resizes
Grant Slater [Wed, 15 Mar 2023 12:37:33 +0000 (12:37 +0000)]
wordpress: Disable fail2ban health filter check
Grant Slater [Wed, 15 Mar 2023 12:03:18 +0000 (12:03 +0000)]
wordpress: update RewriteRule to recommendation
Grant Slater [Wed, 15 Mar 2023 12:02:27 +0000 (12:02 +0000)]
wordpress: enable CGIPassAuth
Grant Slater [Tue, 14 Mar 2023 17:51:37 +0000 (17:51 +0000)]
wordpress: add php-imagick
Grant Slater [Tue, 14 Mar 2023 13:26:45 +0000 (13:26 +0000)]
wordpress: install wordpress cli
Tom Hughes [Mon, 13 Mar 2023 20:57:10 +0000 (20:57 +0000)]
Simplify generation of ACLs for munin and logstash
Tom Hughes [Mon, 13 Mar 2023 20:20:02 +0000 (20:20 +0000)]
Simplify named configuration
Tom Hughes [Sun, 12 Mar 2023 11:41:21 +0000 (11:41 +0000)]
Add tools to block and unblock addresses
Tom Hughes [Sun, 12 Mar 2023 11:07:07 +0000 (11:07 +0000)]
Preserve blocklists over firewall restarts
Tom Hughes [Sun, 12 Mar 2023 11:01:59 +0000 (11:01 +0000)]
Remove unused template
Tom Hughes [Sat, 11 Mar 2023 14:45:43 +0000 (14:45 +0000)]
Generalise configuration of firewall sets
Tom Hughes [Sat, 11 Mar 2023 14:45:11 +0000 (14:45 +0000)]
Fix newline suppression in ERB template
Tom Hughes [Sat, 11 Mar 2023 14:34:10 +0000 (14:34 +0000)]
Fix munin node configuration
Tom Hughes [Thu, 9 Mar 2023 18:26:46 +0000 (18:26 +0000)]
Refactor firewall rules to simplify IPv4/IPv6 handling
Tom Hughes [Sat, 11 Mar 2023 07:51:44 +0000 (07:51 +0000)]
Make sure database backups abort on error
Tom Hughes [Fri, 10 Mar 2023 12:20:27 +0000 (12:20 +0000)]
Drop role for pummelzacken
Tom Hughes [Fri, 10 Mar 2023 07:05:25 +0000 (07:05 +0000)]
Drop role for noquiklos
Tom Hughes [Thu, 9 Mar 2023 21:54:21 +0000 (21:54 +0000)]
Reorder authorization matches
Tom Hughes [Thu, 9 Mar 2023 21:49:23 +0000 (21:49 +0000)]
Improve error handling in API statistics daemon
Tom Hughes [Thu, 9 Mar 2023 21:34:56 +0000 (21:34 +0000)]
Add a metric to track usage of API authentication methods
Tom Hughes [Thu, 9 Mar 2023 13:47:48 +0000 (13:47 +0000)]
Restart smokeping exporter when the configuration changes
Tom Hughes [Thu, 9 Mar 2023 12:49:47 +0000 (12:49 +0000)]
Drop roles for clifford and sarel
Tom Hughes [Thu, 9 Mar 2023 08:26:59 +0000 (08:26 +0000)]
Relax thresholds for packet loss reporting
Grant Slater [Thu, 9 Mar 2023 07:15:47 +0000 (07:15 +0000)]
dns: upgrade dnscontrol to 3.27.2
Signed-off-by: Grant Slater <github@firefishy.com>
Tom Hughes [Wed, 8 Mar 2023 22:44:29 +0000 (22:44 +0000)]
Scale some percentage values correctly in alerts
Tom Hughes [Wed, 8 Mar 2023 20:28:06 +0000 (20:28 +0000)]
Add a packet loss alert
Tom Hughes [Wed, 8 Mar 2023 19:25:41 +0000 (19:25 +0000)]
Fix sandboxing of smokeping exporter
Tom Hughes [Wed, 8 Mar 2023 18:51:43 +0000 (18:51 +0000)]
Fix typo
Tom Hughes [Wed, 8 Mar 2023 18:35:40 +0000 (18:35 +0000)]
Sort ping targets
Tom Hughes [Wed, 8 Mar 2023 18:33:24 +0000 (18:33 +0000)]
Run smokeping exporter on gateways
Grant Slater [Wed, 8 Mar 2023 14:34:28 +0000 (14:34 +0000)]
community: minor feed url fix
Grant Slater [Wed, 8 Mar 2023 14:16:39 +0000 (14:16 +0000)]
community: add workaround method to add custom feed
Grant Slater [Wed, 8 Mar 2023 13:54:12 +0000 (13:54 +0000)]
community: disable feed for moment
Grant Slater [Wed, 8 Mar 2023 09:15:30 +0000 (09:15 +0000)]
Remove old forum code. Add cert to discourse
Grant Slater [Wed, 8 Mar 2023 09:12:39 +0000 (09:12 +0000)]
community: Add missing atom file
Tom Hughes [Wed, 8 Mar 2023 08:59:26 +0000 (08:59 +0000)]
Don't filter outgoing multicast packets
Grant Slater [Wed, 8 Mar 2023 08:48:19 +0000 (08:48 +0000)]
community: Add custom static atom feed
Signed-off-by: Grant Slater <github@firefishy.com>
Tom Hughes [Tue, 7 Mar 2023 21:25:18 +0000 (21:25 +0000)]
Fix test failures
Tom Hughes [Tue, 7 Mar 2023 20:27:37 +0000 (20:27 +0000)]
Fix icmp echo rate limiting
Tom Hughes [Tue, 7 Mar 2023 19:55:11 +0000 (19:55 +0000)]
Reintroduce helper support and implement it
Tom Hughes [Tue, 7 Mar 2023 19:19:14 +0000 (19:19 +0000)]
Port custom firewall rule to nftables
Tom Hughes [Tue, 7 Mar 2023 19:16:42 +0000 (19:16 +0000)]
Simplify rate limit and connection limit configuration
Tom Hughes [Tue, 7 Mar 2023 19:14:35 +0000 (19:14 +0000)]
Drop unused support for conntrack helpers
Tom Hughes [Tue, 7 Mar 2023 19:13:38 +0000 (19:13 +0000)]
Drop tcp vs tcp:syn distinction
Tom Hughes [Tue, 7 Mar 2023 19:07:36 +0000 (19:07 +0000)]
Merge http and https rules
Tom Hughes [Tue, 7 Mar 2023 19:06:00 +0000 (19:06 +0000)]
Simpligy configuration of port numbers in firewall rules
Tom Hughes [Tue, 7 Mar 2023 18:04:34 +0000 (18:04 +0000)]
Use interval sets for blocklists
Tom Hughes [Tue, 7 Mar 2023 18:00:02 +0000 (18:00 +0000)]
Rename firewall tables to avoid any clash with iptables
Grant Slater [Tue, 7 Mar 2023 08:47:59 +0000 (08:47 +0000)]
foundation: add pptx to dwg
Signed-off-by: Grant Slater <github@firefishy.com>
Tom Hughes [Sun, 5 Mar 2023 19:38:13 +0000 (19:38 +0000)]
Drop test override that is no longer needed
Tom Hughes [Sun, 5 Mar 2023 19:19:12 +0000 (19:19 +0000)]
Drop support for shorewall
Tom Hughes [Mon, 6 Mar 2023 14:39:13 +0000 (14:39 +0000)]
Add alert for failing discourse jobs
Tom Hughes [Mon, 6 Mar 2023 00:21:06 +0000 (00:21 +0000)]
Fix statuscake alerts
Tom Hughes [Sun, 5 Mar 2023 20:39:23 +0000 (20:39 +0000)]
Don't expire connection limit sets
Tom Hughes [Sun, 5 Mar 2023 20:33:41 +0000 (20:33 +0000)]
Expire rate limit sets
Tom Hughes [Sun, 5 Mar 2023 19:45:59 +0000 (19:45 +0000)]
Remove size limits on firewall sets
Tom Hughes [Sun, 5 Mar 2023 17:28:14 +0000 (17:28 +0000)]
Enable rate limits
Tom Hughes [Sun, 5 Mar 2023 16:20:59 +0000 (16:20 +0000)]
Update networking tests for nftables switch
Tom Hughes [Sun, 5 Mar 2023 15:33:44 +0000 (15:33 +0000)]
Enable connections limits on a per-source basis
Tom Hughes [Sun, 5 Mar 2023 14:00:05 +0000 (14:00 +0000)]
Disable rate and connection limits
Tom Hughes [Sun, 5 Mar 2023 12:40:05 +0000 (12:40 +0000)]
Allow AWS DNS queries through the firewall
Tom Hughes [Sun, 5 Mar 2023 12:21:34 +0000 (12:21 +0000)]
Switch remaining servers to nftables
Tom Hughes [Sun, 5 Mar 2023 11:09:30 +0000 (11:09 +0000)]
Switch machines in Amsterdam to use nftables
Tom Hughes [Sun, 5 Mar 2023 10:33:30 +0000 (10:33 +0000)]
Match interfaces by name so we can start nftables before they exist
Tom Hughes [Sun, 5 Mar 2023 09:35:57 +0000 (09:35 +0000)]
Limit NAT to IPv4 interfaces
Tom Hughes [Sun, 5 Mar 2023 09:33:32 +0000 (09:33 +0000)]
Switch machines in Dublin to use nftables
Tom Hughes [Sat, 4 Mar 2023 15:55:20 +0000 (15:55 +0000)]
Fix typo
Tom Hughes [Sat, 4 Mar 2023 15:53:25 +0000 (15:53 +0000)]
Fix flag matches to work on 20.04
Tom Hughes [Sat, 4 Mar 2023 15:50:22 +0000 (15:50 +0000)]
Handle machines with no external interface
Tom Hughes [Sat, 4 Mar 2023 15:47:15 +0000 (15:47 +0000)]
Switch all machines at UCL to use nftables
Tom Hughes [Sat, 4 Mar 2023 15:38:58 +0000 (15:38 +0000)]
Block unspecified and multicast addresses on the outside
Tom Hughes [Sat, 4 Mar 2023 15:32:38 +0000 (15:32 +0000)]
Limit echo on a per source basis
Tom Hughes [Sat, 4 Mar 2023 15:27:15 +0000 (15:27 +0000)]
Make nftables block various invalid TCP flag combinations
Tom Hughes [Sat, 4 Mar 2023 15:16:45 +0000 (15:16 +0000)]
Don't log rate limited echo request packets
Tom Hughes [Sat, 4 Mar 2023 14:58:19 +0000 (14:58 +0000)]
Avoid dropping third party tables when stopping an nftables firewall
Tom Hughes [Sat, 4 Mar 2023 14:44:05 +0000 (14:44 +0000)]
Eliminate need for dummy addresses in when running under test
Tom Hughes [Sat, 4 Mar 2023 13:00:40 +0000 (13:00 +0000)]
Revert "Only flush our table to avoid disrupting other nftables users"
This reverts commit
400fc6d71c476dba84aa52c5bf694caa8c4346dd.
Tom Hughes [Sat, 4 Mar 2023 12:57:20 +0000 (12:57 +0000)]
Only flush our table to avoid disrupting other nftables users
Tom Hughes [Sat, 4 Mar 2023 12:46:14 +0000 (12:46 +0000)]
Use named sets for OSM IP addresses
Tom Hughes [Sat, 4 Mar 2023 12:32:41 +0000 (12:32 +0000)]
Limit mail connections from smarthosts by address
Tom Hughes [Sat, 4 Mar 2023 12:26:20 +0000 (12:26 +0000)]
Allow all mail relays to relay from any host
Tom Hughes [Sat, 4 Mar 2023 12:03:53 +0000 (12:03 +0000)]
Fix port range syntax for nftables
Tom Hughes [Sat, 4 Mar 2023 11:53:34 +0000 (11:53 +0000)]
Don't bother disabling shorewall before we remove it
Tom Hughes [Sat, 4 Mar 2023 11:51:16 +0000 (11:51 +0000)]
Fix typo
Tom Hughes [Sat, 4 Mar 2023 11:49:05 +0000 (11:49 +0000)]
Use strings for network families
Tom Hughes [Sat, 4 Mar 2023 11:45:53 +0000 (11:45 +0000)]
Switch noquiklos to use an nftables firewall
Tom Hughes [Fri, 3 Mar 2023 18:07:47 +0000 (18:07 +0000)]
Add support for using an nftables based firewall
Grant Slater [Thu, 2 Mar 2023 17:44:19 +0000 (17:44 +0000)]
dns: fix dnscontrol dpkg install
Grant Slater [Thu, 2 Mar 2023 05:56:17 +0000 (05:56 +0000)]
dns: Upgrade dnscontrol to 3.27.1
Signed-off-by: Grant Slater <github@firefishy.com>
Tom Hughes [Tue, 28 Feb 2023 08:26:55 +0000 (08:26 +0000)]
Fix alerting for failed chef runs
projects / chef.git / log