opendev/system-config
Code Issues Proposed changes
system-config/playbooks/roles
History
Jeremy Stanley fa0c1b495c Generate HTTPS certs for Mailman sites 
We're going to want Mailman 3 served over HTTPS for security
reasons, so start by generating certificates for each of the sites
we have in v2. Also collect the acme.sh logs for verification.

Change-Id: I261ae55c6bc0a414beb473abcb30f9a86c63db85
2021-12-17 22:25:22 +00:00
..
accessbot
Update accessbot config to use OFTC
2021-05-28 18:37:33 +00:00
afs-release
Serve meetings.opendev.org
2021-06-02 13:56:19 +10:00
afsmon
afsmon: install python3-pip
2020-02-12 16:39:11 +11:00
apache-ua-filter
Block restricted user agents for the tarballs site
2020-10-16 17:45:12 +00:00
base
Lower UID/GID range max to make way for containers
2021-11-05 18:06:55 +00:00
borg-backup
borg-backup: randomise time on a per-server basis
2021-08-18 05:24:57 +10:00
borg-backup-server
borg-backup: skip .checkpoint archives
2021-11-03 12:39:10 +11:00
codesearch
codesearch: Add robots.txt
2020-11-20 19:13:32 +11:00
configure-kubectl
Configure .kube/config on bridge
2019-02-06 15:43:19 -08:00
configure-openstacksdk
Add inmotion cloud to cloud launcher
2021-04-21 11:18:40 -07:00
disable-puppet-agent
Stop running mcollective
2020-05-05 15:00:04 -05:00
dstat-logger
dstat-logger: redirect stdout to /dev/null
2021-03-24 22:23:13 +00:00
edit-secrets-script
Add edit-secrets script to bridge.o.o
2019-02-27 08:45:11 -08:00
etherpad
Upgrade etherpad to 1.8.14
2021-08-12 08:31:54 -07:00
gerrit
No lookups in Gerrit's log4j2 message formatting
2021-12-10 20:07:36 +00:00
gerritbot
Run gerritbot with a user that will be shared with matrix-gerritbot
2021-11-05 11:24:05 -07:00
gitea
Merge "Upgrade gitea to 1.15.3"
2021-10-06 22:47:20 +00:00
gitea-git-repos
Always update gitea repo meta data
2021-10-18 08:56:57 -07:00
gitea-lb
Make haproxy role more generic
2021-12-01 09:55:45 +11:00
grafana
grafana: update to 7.4.2
2021-02-19 09:54:31 +11:00
graphite
Use fullchain.cer on graphite for nginx
2021-09-29 15:18:10 -07:00
haproxy
haproxy: map in config as ro
2021-12-01 09:57:05 +11:00
import-gpg-key
reprepro: convert to Ansible
2020-10-19 14:06:57 +11:00
install-ansible
Generate HTTPS certs for Mailman sites
2021-12-17 22:25:22 +00:00
install-ansible-roles
puppet: don't run module install steps multiple times
2020-09-03 09:23:05 +10:00
install-apt-repo
Vendor the apt repo gpg keys used for Zuul
2020-05-20 13:17:09 -07:00
install-borg
borg-backup: add fuse
2020-11-05 11:56:46 +11:00
install-certcheck
Generate ssl check list directly from letsencrypt variables
2020-05-20 14:27:14 +10:00
install-docker
install-docker: install build-essential for cffi on Xenial
2021-07-12 14:49:17 +10:00
install-kubectl
Remove snap cleanup tasks
2020-04-16 12:45:36 -05:00
install-osc-container
Use openstackclient from container
2020-04-23 07:46:28 -05:00
install-podman
Run a gerrit container on review-dev01
2019-10-29 08:29:17 +09:00
iptables
Block outbound SMTP connections from test jobs
2021-12-09 18:46:38 +00:00
jitsi-meet
Revert "Enable jitsi-meet xmpp websockets"
2021-03-18 15:33:20 -07:00
kerberos-kdc
Merge "kerberos-kdc: quote some integers to avoid string/int confusion"
2021-03-22 22:56:26 +00:00
keycloak
Correct keycloak proxy config
2021-12-04 10:49:11 -08:00
letsencrypt-acme-sh-install
Retry acme.sh cloning
2021-10-13 18:31:46 +00:00
letsencrypt-config-certcheck
Generate ssl check list directly from letsencrypt variables
2020-05-20 14:27:14 +10:00
letsencrypt-create-certs
Generate HTTPS certs for Mailman sites
2021-12-17 22:25:22 +00:00
letsencrypt-install-txt-record
Remove some unnecessary debug: statements
2021-05-07 11:11:56 +10:00
letsencrypt-request-certs
Update letsencrypt role docs to suggest a specific order
2021-12-03 14:24:13 -08:00
limnoria
Update HTML channel logs every 15 minutes
2021-06-28 14:32:35 +00:00
lodgeit
Switch lodgeit to run under a dedicated user
2021-11-19 09:11:38 -08:00
logrotate
reprepro: convert to Ansible
2020-10-19 14:06:57 +11:00
mailman
Add a domain aliases mechanism to lists.o.o
2021-12-16 19:22:11 +00:00
mailman-list
Use newlist's automate option
2021-12-15 17:42:58 +00:00
mailman-site
Add support for Ubuntu Focal to our mailman ansible
2021-09-13 09:10:00 -07:00
master-nameserver
Don't log the public loop on master-nameserver
2020-04-08 16:38:15 -05:00
matrix-eavesdrop
Move #zuul from OFTC to Matrix
2021-08-20 14:44:44 -07:00
matrix-gerritbot
Update the gerritbot-matrix image to support arbitrary uid with docker
2021-12-06 20:36:11 +00:00
mirror
Set CacheMaxExpire to 1h
2021-12-17 11:40:51 +01:00
mirror-update
Enable mirroring of 9-stream
2021-11-15 17:54:54 +11:00
nameserver
nameserver: Allow master server to notify via ipv6
2020-10-28 09:26:14 +00:00
nodepool-base
nodepool-base: prefer ZK IPv6 addresses
2021-04-21 16:56:07 +10:00
nodepool-base-legacy
Add initial Ansible for nodepool hosts
2020-03-06 14:02:52 +11:00
nodepool-builder
Run daily backups of nodepool zk image data
2021-09-16 14:12:08 -07:00
nodepool-launcher
Add pull tasks for nodepool/zuul
2021-02-19 15:42:40 -08:00
openafs-db-server
openafs-<db|file>-server: fix role name
2021-02-10 13:49:12 +11:00
openafs-file-server
openafs-<db|file>-server: fix role name
2021-02-10 13:49:12 +11:00
openafs-server-config
openafs-server-config: install UserList
2021-03-30 09:49:53 +11:00
pip3
Install pbr in pip3 role to fix issue xenial
2021-05-27 12:35:25 +02:00
ptgbot
Add ptgbot serveralias for redirecting PTG site
2021-10-07 19:34:16 +00:00
puppet-run
puppet: don't run module install steps multiple times
2020-09-03 09:23:05 +10:00
puppet-setup-ansible
install-ansible: move install_modules.sh to puppet-setup-ansible
2020-09-03 09:28:16 +10:00
rax-dns-backup
rax-dns-backup : fix cron output capture
2021-04-15 07:15:09 +10:00
refstack
refstack: don't chown db directory
2021-11-05 09:39:29 +11:00
registry
Install docker-compose from pypi
2020-04-16 12:08:00 -07:00
reprepro
reprepro: stop mirroring Debian stretch
2021-11-10 15:11:52 +11:00
root-keys
roles: Add README.rst and lint
2018-08-23 21:34:42 +10:00
run-selenium
run-selenium: run selenium on a node
2021-01-18 07:58:23 -08:00
static
Serve gating.dev static website
2021-07-29 17:15:38 -07:00
statusbot
statusbot: don't use opendevstatus name in testing
2021-06-11 22:59:24 +10:00
sync-project-config
Stop logging the rsync of puppet
2020-04-30 16:11:42 -05:00
vos-release
Add missing newline in vos_release.sudo
2019-11-21 19:08:30 +00:00
zk-ca
Zookeeper: listen on plain and TLS ports
2020-06-17 10:38:59 -07:00
zookeeper
Purge ZK snapshots more frequently
2021-11-08 07:34:46 -08:00
zuul
Add keycloak auth config to Zuul
2021-12-07 14:19:37 -08:00
zuul-executor
zuul-*: use multiline formatter
2021-12-13 14:54:16 +11:00
zuul-merger
zuul-*: use multiline formatter
2021-12-13 14:54:16 +11:00
zuul-preview
Install docker-compose from pypi
2020-04-16 12:08:00 -07:00
zuul-scheduler
zuul-*: use multiline formatter
2021-12-13 14:54:16 +11:00
zuul-status-backup
Add --fail flag to zuul status backup curl
2020-04-28 08:33:05 -05:00
zuul-user
Split eavesdrop into its own playbook
2020-04-23 14:34:28 -05:00
zuul-web
zuul-*: use multiline formatter
2021-12-13 14:54:16 +11:00
set-hostname
Split eavesdrop into its own playbook
2020-04-23 14:34:28 -05:00