]>
git.openstreetmap.org Git - chef.git/log
Grant Slater [Tue, 23 Apr 2024 14:54:16 +0000 (15:54 +0100)]
enable mikel on fume
Grant Slater [Mon, 22 Apr 2024 16:52:49 +0000 (17:52 +0100)]
devices: add initramfs-tools dependency
Grant Slater [Mon, 22 Apr 2024 14:09:40 +0000 (15:09 +0100)]
wordpress: add additional required packages
Requirements are listed here: https://make.wordpress.org/hosting/handbook/server-environment/
Grant Slater [Mon, 22 Apr 2024 13:42:09 +0000 (14:42 +0100)]
blog: add staging clone
Grant Slater [Mon, 22 Apr 2024 12:57:27 +0000 (13:57 +0100)]
devices: fix style issue
Tom Hughes [Sun, 21 Apr 2024 06:39:52 +0000 (07:39 +0100)]
Drop roundingPeriod from cloudwatch exporter configuration
Grant Slater [Fri, 19 Apr 2024 14:11:41 +0000 (15:11 +0100)]
devices: enable nvme.poll_queues if supported
Sarah Hoffmann [Thu, 18 Apr 2024 08:00:52 +0000 (10:00 +0200)]
nominatim: UI forwarding should take precedence to blocking
Grant Slater [Thu, 18 Apr 2024 03:40:41 +0000 (04:40 +0100)]
remove fragments of old civicrm-staging
Grant Slater [Thu, 18 Apr 2024 03:37:46 +0000 (04:37 +0100)]
apt: enable backports on debian
Sarah Hoffmann [Wed, 17 Apr 2024 19:07:02 +0000 (21:07 +0200)]
nominatim: update Python dependencies
Grant Slater [Wed, 10 Apr 2024 17:04:27 +0000 (18:04 +0100)]
osqa: remove search, replaced with duckduckgo iframe
Grant Slater [Wed, 10 Apr 2024 16:07:45 +0000 (17:07 +0100)]
osqa: disable contact form
Tom Hughes [Tue, 9 Apr 2024 12:23:17 +0000 (13:23 +0100)]
Merge remote-tracking branch 'github/pull/656'
dependabot[bot] [Tue, 9 Apr 2024 11:20:19 +0000 (11:20 +0000)]
build(deps): bump kitchen-dokken from 2.20.3 to 2.20.4
Bumps [kitchen-dokken](https://github.com/test-kitchen/kitchen-dokken) from 2.20.3 to 2.20.4.
- [Release notes](https://github.com/test-kitchen/kitchen-dokken/releases)
- [Changelog](https://github.com/test-kitchen/kitchen-dokken/blob/main/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/kitchen-dokken/compare/v2.20.3...v2.20.4)
---
updated-dependencies:
- dependency-name: kitchen-dokken
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Tom Hughes [Sun, 7 Apr 2024 14:17:03 +0000 (15:17 +0100)]
Update configuration of nodesource repo
Tom Hughes [Sun, 7 Apr 2024 13:38:43 +0000 (14:38 +0100)]
Update Node.js to the 20.x branch
Tom Hughes [Fri, 5 Apr 2024 15:43:53 +0000 (16:43 +0100)]
Modernise mod_perl installation
Grant Slater [Fri, 5 Apr 2024 15:36:45 +0000 (16:36 +0100)]
otrs: ensure SetPermissions.pl and daemon restart happen in correct order
Grant Slater [Fri, 5 Apr 2024 14:56:25 +0000 (15:56 +0100)]
otrs: enable all required apache modules
Grant Slater [Fri, 5 Apr 2024 14:55:12 +0000 (15:55 +0100)]
otrs: Add additional packages as required by deb
Tom Hughes [Thu, 4 Apr 2024 17:13:21 +0000 (18:13 +0100)]
Drop cleanup code
Tom Hughes [Thu, 4 Apr 2024 17:03:42 +0000 (18:03 +0100)]
Merge remote-tracking branch 'github/pull/655'
Grant Slater [Wed, 3 Apr 2024 21:27:38 +0000 (22:27 +0100)]
otrs: upgrade to latest znuny 6.0.x release
znuny only supports upgrading one minor version at a time.
Future upgrades will be 6.0.x -> 6.1.x -> 6.2.x etc
Signed-off-by: Grant Slater <github@firefishy.com>
Grant Slater [Wed, 3 Apr 2024 16:08:49 +0000 (17:08 +0100)]
imagery: retry proxy errors
Grant Slater [Wed, 3 Apr 2024 15:45:07 +0000 (16:45 +0100)]
imagery: fix url typo
Grant Slater [Wed, 3 Apr 2024 15:44:05 +0000 (16:44 +0100)]
imagery: switch to file:// based mosaic for ZA
Grant Slater [Tue, 2 Apr 2024 16:57:35 +0000 (17:57 +0100)]
imagery: increase nginx keepalive again
Grant Slater [Tue, 2 Apr 2024 16:55:41 +0000 (17:55 +0100)]
imagery: switch to volume mount for imagery
Grant Slater [Tue, 2 Apr 2024 16:54:01 +0000 (17:54 +0100)]
podman: add volume support
Grant Slater [Tue, 2 Apr 2024 13:36:20 +0000 (14:36 +0100)]
imagery: use gz mosaic directly
Grant Slater [Tue, 2 Apr 2024 13:31:52 +0000 (14:31 +0100)]
imager: tune timeout and lower titiler workers
Grant Slater [Tue, 2 Apr 2024 13:12:20 +0000 (14:12 +0100)]
imagery: attempt to make tile serving more resilient to errors
Sarah Hoffmann [Tue, 2 Apr 2024 09:59:43 +0000 (11:59 +0200)]
Revert "nominatim: improve IP query block expression"
This reverts commit
6beb17e095d006393405d9882fb762837df78588 .
Sarah Hoffmann [Tue, 2 Apr 2024 09:52:04 +0000 (11:52 +0200)]
nominatim: improve IP query block expression
Sarah Hoffmann [Mon, 1 Apr 2024 13:10:52 +0000 (15:10 +0200)]
nominatim: update taginfo description
Tom Hughes [Fri, 29 Mar 2024 00:05:16 +0000 (00:05 +0000)]
Don't look for md arrays if the driver isn't loaded
Grant Slater [Thu, 28 Mar 2024 22:11:20 +0000 (22:11 +0000)]
remove ftp role from angor
Grant Slater [Thu, 28 Mar 2024 12:27:24 +0000 (12:27 +0000)]
remove draco
Grant Slater [Wed, 27 Mar 2024 19:34:25 +0000 (19:34 +0000)]
imagery: increase http2 max concurrent streams
Grant Slater [Wed, 27 Mar 2024 17:58:19 +0000 (17:58 +0000)]
imagery: fix regex to only match os_sv png formats
Grant Slater [Wed, 27 Mar 2024 17:50:10 +0000 (17:50 +0000)]
Revert "imagery: workaround OS imagery custom formats"
This reverts commit
b0bf79fd8052f90360efd8e093c83cc03c38696a .
Grant Slater [Wed, 27 Mar 2024 17:44:39 +0000 (17:44 +0000)]
imagery: workaround OS imagery custom formats
Tom Hughes [Wed, 27 Mar 2024 17:38:18 +0000 (17:38 +0000)]
Drop role for draco
Grant Slater [Wed, 27 Mar 2024 17:25:09 +0000 (17:25 +0000)]
imagery: escape layer name in js
Grant Slater [Wed, 27 Mar 2024 17:13:06 +0000 (17:13 +0000)]
imagery: enable nginx cache correctly
Grant Slater [Wed, 27 Mar 2024 17:06:21 +0000 (17:06 +0000)]
imager: fix string quote
Grant Slater [Wed, 27 Mar 2024 16:17:30 +0000 (16:17 +0000)]
imagery: add za_ngi_aerial using tiler
Sarah Hoffmann [Wed, 27 Mar 2024 13:13:25 +0000 (14:13 +0100)]
nominatim: remove referer block on details again
Sarah Hoffmann [Wed, 27 Mar 2024 10:32:23 +0000 (11:32 +0100)]
nominatim: refuse to geocode IP addresses
Grant Slater [Wed, 27 Mar 2024 12:47:01 +0000 (12:47 +0000)]
account: update ligfietser ssh key
Close: https://github.com/openstreetmap/operations/issues/1044
Signed-off-by: Grant Slater <github@firefishy.com>
Grant Slater [Tue, 26 Mar 2024 20:56:17 +0000 (20:56 +0000)]
imagery: improve tiler caching and keepalive
Grant Slater [Tue, 26 Mar 2024 20:48:04 +0000 (20:48 +0000)]
podman: revert to using default slirp4netns mtu
Grant Slater [Tue, 26 Mar 2024 20:40:11 +0000 (20:40 +0000)]
tests: move imagery-tiler to only test on debian
podman on ubuntu 22.04 unresolved race condition start up bugs.
The version in debian 12 is reliable. In production the container starts
up successfully after a few tries, but this behaviour breaks tests.
Signed-off-by: Grant Slater <github@firefishy.com>
Grant Slater [Tue, 26 Mar 2024 20:24:24 +0000 (20:24 +0000)]
dev: sort users list
Grant Slater [Tue, 26 Mar 2024 20:22:17 +0000 (20:22 +0000)]
dev: activate ligfietser
Sarah Hoffmann [Tue, 26 Mar 2024 19:47:44 +0000 (20:47 +0100)]
nominatim: disallow details requests without referer
Tom Hughes [Mon, 25 Mar 2024 21:47:40 +0000 (21:47 +0000)]
Install libbrotli-dev on the dev server
Tom Hughes [Wed, 20 Mar 2024 18:36:20 +0000 (18:36 +0000)]
Update bundle
Tom Hughes [Wed, 20 Mar 2024 17:43:10 +0000 (17:43 +0000)]
Try and detaint messages.openstreetmap.org deliveries
Tom Hughes [Wed, 20 Mar 2024 12:45:49 +0000 (12:45 +0000)]
Validate local parts for messages.openstreetmap.org to untaint them
Grant Slater [Wed, 20 Mar 2024 10:32:54 +0000 (10:32 +0000)]
networking: ensure nftables script checks input
Ensure the nftables script does not prematurely exit on any invalid input.
eg: If unblocking a set of IPs skip any not currently blocked instead of premature exit.
Signed-off-by: Grant Slater <github@firefishy.com>
Grant Slater [Tue, 19 Mar 2024 23:41:02 +0000 (23:41 +0000)]
apache: increase mod_evasive page_count to reduce iD false positives
Tom Hughes [Tue, 19 Mar 2024 21:20:03 +0000 (21:20 +0000)]
Fix fail2ban evasive filter
Grant Slater [Tue, 19 Mar 2024 11:15:05 +0000 (11:15 +0000)]
networking: add flush command to nftables script
Grant Slater [Mon, 18 Mar 2024 17:50:31 +0000 (17:50 +0000)]
podman: fix typo in param
Grant Slater [Mon, 18 Mar 2024 17:33:01 +0000 (17:33 +0000)]
podman: increase default pid limit.
Workaround 2048 pid limit. Extremely low, causing issues with titiler.
Ideally should be set using a paramater.
Signed-off-by: Grant Slater <github@firefishy.com>
Tom Hughes [Mon, 18 Mar 2024 17:28:05 +0000 (17:28 +0000)]
Add alert for node exporter text file scrape errors
Grant Slater [Mon, 18 Mar 2024 14:49:38 +0000 (14:49 +0000)]
imagery: use https for tiler
Grant Slater [Mon, 18 Mar 2024 14:08:27 +0000 (14:08 +0000)]
imagery: add ngi-aerial code
Tom Hughes [Fri, 15 Mar 2024 15:56:57 +0000 (15:56 +0000)]
Revet accidental commit
Grant Slater [Fri, 15 Mar 2024 12:18:39 +0000 (12:18 +0000)]
community: security bump version
Tom Hughes [Fri, 15 Mar 2024 10:02:27 +0000 (10:02 +0000)]
Disable exim paniclog watcher
Tom Hughes [Fri, 15 Mar 2024 10:01:26 +0000 (10:01 +0000)]
Fix exim daemon options for Ubuntu
Tom Hughes [Thu, 14 Mar 2024 11:19:04 +0000 (11:19 +0000)]
Drop attempt at SPF checking
Tom Hughes [Thu, 14 Mar 2024 10:52:05 +0000 (10:52 +0000)]
Accept any mail that passes an osmfoundation.org SPF check
Tom Hughes [Thu, 14 Mar 2024 09:42:26 +0000 (09:42 +0000)]
Reject incoming mail which fails SPF checks
Grant Slater [Wed, 13 Mar 2024 14:48:11 +0000 (14:48 +0000)]
Add munin web redirects to prometheus
Grant Slater [Wed, 13 Mar 2024 14:39:59 +0000 (14:39 +0000)]
Scrub last munin traces
Signed-off-by: Grant Slater <github@firefishy.com>
Grant Slater [Wed, 13 Mar 2024 14:31:29 +0000 (14:31 +0000)]
Remove munin-server GHA test
Grant Slater [Wed, 13 Mar 2024 14:29:13 +0000 (14:29 +0000)]
Remove munin server role
Grant Slater [Tue, 12 Mar 2024 20:45:46 +0000 (20:45 +0000)]
Remove munin
Fixed: https://github.com/openstreetmap/operations/issues/501
Signed-off-by: Grant Slater <github@firefishy.com>
Grant Slater [Tue, 12 Mar 2024 21:15:16 +0000 (21:15 +0000)]
hardware: do not fail if node[:hardware][:pci] is undefined (tests)
Grant Slater [Tue, 12 Mar 2024 14:05:05 +0000 (14:05 +0000)]
git: use extended combined_extended
Tom Hughes [Tue, 12 Mar 2024 13:19:13 +0000 (13:19 +0000)]
Restore comment
Grant Slater [Tue, 12 Mar 2024 13:14:03 +0000 (13:14 +0000)]
apache: remove unneeded combined_extended hack for 20.04
Tom Hughes [Tue, 12 Mar 2024 12:57:46 +0000 (12:57 +0000)]
Tidy up mod_evasive configuration
Grant Slater [Tue, 12 Mar 2024 12:56:59 +0000 (12:56 +0000)]
wordpress: use combined_extended logging
Grant Slater [Tue, 12 Mar 2024 12:42:06 +0000 (12:42 +0000)]
mediawiki: add back missing param
Grant Slater [Tue, 12 Mar 2024 12:39:55 +0000 (12:39 +0000)]
mediawiki: disable Extension:LocalisationUpdate
Grant Slater [Tue, 12 Mar 2024 12:36:38 +0000 (12:36 +0000)]
mediawiki: add RewriteCond for server-info
Grant Slater [Tue, 12 Mar 2024 12:31:14 +0000 (12:31 +0000)]
apache: set our correct defaults for mod_evasive
Grant Slater [Tue, 12 Mar 2024 12:17:31 +0000 (12:17 +0000)]
apache: relax mod_evasive further
Grant Slater [Tue, 12 Mar 2024 12:08:59 +0000 (12:08 +0000)]
apache: parameterise mod_evasive
Sarah Hoffmann [Tue, 12 Mar 2024 11:02:09 +0000 (12:02 +0100)]
nominatim: migrate versions before installing the software
Avoids disruptions where the migration is needed for the frontend
to function properly (e.g. when creating new indexes).
Sarah Hoffmann [Tue, 12 Mar 2024 11:01:24 +0000 (12:01 +0100)]
overpass: remove last traces of timer for area processor
Tom Hughes [Tue, 12 Mar 2024 09:00:20 +0000 (09:00 +0000)]
Adjust trigger for evasive jail
Tom Hughes [Tue, 12 Mar 2024 08:52:58 +0000 (08:52 +0000)]
Restrict fail2ban to evasive blocks instead of all 403 errors
Tom Hughes [Mon, 11 Mar 2024 21:27:37 +0000 (21:27 +0000)]
Relax evasive limits some more
Tom Hughes [Mon, 11 Mar 2024 20:13:00 +0000 (20:13 +0000)]
Make evasive configuration work