]> git.openstreetmap.org Git - chef.git/shortlog
chef.git
2023-03-07 Tom HughesFix icmp echo rate limiting
2023-03-07 Tom HughesReintroduce helper support and implement it
2023-03-07 Tom HughesPort custom firewall rule to nftables
2023-03-07 Tom HughesSimplify rate limit and connection limit configuration
2023-03-07 Tom HughesDrop unused support for conntrack helpers
2023-03-07 Tom HughesDrop tcp vs tcp:syn distinction
2023-03-07 Tom HughesMerge http and https rules
2023-03-07 Tom HughesSimpligy configuration of port numbers in firewall...
2023-03-07 Tom HughesUse interval sets for blocklists
2023-03-07 Tom HughesRename firewall tables to avoid any clash with iptables
2023-03-07 Grant Slaterfoundation: add pptx to dwg
2023-03-06 Tom HughesDrop test override that is no longer needed
2023-03-06 Tom HughesDrop support for shorewall
2023-03-06 Tom HughesAdd alert for failing discourse jobs
2023-03-06 Tom HughesFix statuscake alerts
2023-03-05 Tom HughesDon't expire connection limit sets
2023-03-05 Tom HughesExpire rate limit sets
2023-03-05 Tom HughesRemove size limits on firewall sets
2023-03-05 Tom HughesEnable rate limits
2023-03-05 Tom HughesUpdate networking tests for nftables switch
2023-03-05 Tom HughesEnable connections limits on a per-source basis
2023-03-05 Tom HughesDisable rate and connection limits
2023-03-05 Tom HughesAllow AWS DNS queries through the firewall
2023-03-05 Tom HughesSwitch remaining servers to nftables
2023-03-05 Tom HughesSwitch machines in Amsterdam to use nftables
2023-03-05 Tom HughesMatch interfaces by name so we can start nftables befor...
2023-03-05 Tom HughesLimit NAT to IPv4 interfaces
2023-03-05 Tom HughesSwitch machines in Dublin to use nftables
2023-03-04 Tom HughesFix typo
2023-03-04 Tom HughesFix flag matches to work on 20.04
2023-03-04 Tom HughesHandle machines with no external interface
2023-03-04 Tom HughesSwitch all machines at UCL to use nftables
2023-03-04 Tom HughesBlock unspecified and multicast addresses on the outside
2023-03-04 Tom HughesLimit echo on a per source basis
2023-03-04 Tom HughesMake nftables block various invalid TCP flag combinations
2023-03-04 Tom HughesDon't log rate limited echo request packets
2023-03-04 Tom HughesAvoid dropping third party tables when stopping an...
2023-03-04 Tom HughesEliminate need for dummy addresses in when running...
2023-03-04 Tom HughesRevert "Only flush our table to avoid disrupting other...
2023-03-04 Tom HughesOnly flush our table to avoid disrupting other nftables...
2023-03-04 Tom HughesUse named sets for OSM IP addresses
2023-03-04 Tom HughesLimit mail connections from smarthosts by address
2023-03-04 Tom HughesAllow all mail relays to relay from any host
2023-03-04 Tom HughesFix port range syntax for nftables
2023-03-04 Tom HughesDon't bother disabling shorewall before we remove it
2023-03-04 Tom HughesFix typo
2023-03-04 Tom HughesUse strings for network families
2023-03-04 Tom HughesSwitch noquiklos to use an nftables firewall
2023-03-04 Tom HughesAdd support for using an nftables based firewall
2023-03-02 Grant Slaterdns: fix dnscontrol dpkg install
2023-03-02 Grant Slaterdns: Upgrade dnscontrol to 3.27.1
2023-02-28 Tom HughesFix alerting for failed chef runs
2023-02-27 Tom HughesFix alerting for failed chef runs
2023-02-26 Tom HughesMerge remote-tracking branch 'github/pull/584'
2023-02-25 Paul Normantile: Serve a tilejson pointing at the correct tile...
2023-02-24 Tom HughesRun collectors as oneshot services
2023-02-24 Tom HughesAdd an alert for RAID controller battery failures
2023-02-24 Tom HughesAllow CAP_SYS_RAWIO for the ohai collector
2023-02-24 Tom HughesMonitor battery/capacitor status for HP RAID controller
2023-02-23 Tom HughesMerge remote-tracking branch 'github/pull/582'
2023-02-23 Paul Normantile: clean up old static files
2023-02-23 Grant Slatercommunity: use sudo to install plugins
2023-02-20 Tom HughesMove remaining planet serving work to norbert
2023-02-19 Tom HughesMove planetdump role to norbert
2023-02-19 Tom HughesRemove backup role from ironbelly
2023-02-18 Tom HughesAdd backup role to norbert
2023-02-18 Sarah Hoffmannnominatim: add static files to serve in production
2023-02-17 Tom HughesRemove cleanup code
2023-02-17 Grant Slaterfoundation: use noreply wiki sender
2023-02-17 Grant Slaterhardware: Do not scale CPU frequency for niced processes
2023-02-16 Tom HughesReduce sensitivity of postgres replication alarms
2023-02-16 Tom HughesMerge remote-tracking branch 'github/pull/572'
2023-02-16 dependabot... build(deps): bump serverspec from 2.42.1 to 2.42.2
2023-02-15 Grant Slaterserverinfo: fix run order
2023-02-15 Grant Slaterserverinfo: fix vendor folder
2023-02-15 Grant Slaterserverinfo: Do not install gems as root
2023-02-15 Tom HughesFix name of stateofthemap site
2023-02-15 Tom HughesMerge remote-tracking branch 'github/pull/580'
2023-02-15 Paul NormanRemove tile per IP rate limiting
2023-02-15 Grant Slaterhardware: Change CPU energy_perf_bias performance ...
2023-02-14 Tom HughesSwitch containerised sites to use podman_site
2023-02-14 Tom HughesAdd podman_site resource
2023-02-14 Tom HughesMerge remote-tracking branch 'github/pull/579'
2023-02-13 Grant Slaterstateofthemap: Move Chooser to container
2023-02-13 Grant Slatersvn: Move to container
2023-02-13 Grant Slatertrac: Move to container
2023-02-13 Tom HughesFix rubocop rule name
2023-02-13 Tom HughesFix reloading of timers
2023-02-13 Tom HughesDon't require description for timers
2023-02-13 Tom HughesModify existing podman update timer instead of creating...
2023-02-13 Tom HughesAdd dropin support for systemd timers
2023-02-13 Grant Slaterpodman: Increase podman-auto-update.service frequency
2023-02-12 Tom HughesMerge remote-tracking branch 'github/pull/578'
2023-02-12 Grant SlaterMove switch2osm role from ridley -> naga
2023-02-12 Grant Slaterswitch2osm: Use container
2023-02-12 Grant Slatersotm: increase docker_external_port offset
2023-02-12 Tom HughesMerge remote-tracking branch 'github/pull/573'
2023-02-12 Tom HughesMerge remote-tracking branch 'github/pull/577'
2023-02-12 Tom HughesMerge remote-tracking branch 'github/pull/575'
2023-02-12 Grant Slaterirc: Use container
next