github.com/ooni/sysadmin commits | Ecosyste.ms: OpenCollective

Fix issues with nginx config

e6caed482292609ff6e9a6d513109be0ba4aa5f6 authored almost 6 years ago

Set prometheus_multiproc_dir

8ebdbd33aee1136ddde90d464061567f0517b322 authored almost 6 years ago

Add support for metrics collection with prometheus to ooni-api

ae2a6f322592a0a34dd056357b17b71e37158bfb authored almost 6 years ago

Merge pull request #310 from ooni/api-cache

Add caching for legacy Explorer API endpoints

fe495592e92da3226f476e1db68e13fa46b9f89e authored almost 6 years ago

Add caching for legacy Explorer API endpoints

2145f151c5dff210166e59892bdbd58905639807 authored almost 6 years ago

Next production API

a0a89b71ae4f1f948e8b5faef331fca79b744623 authored almost 6 years ago

Bump explorer tag

5c52fa82b7d5255bee7ee1a0c54a5fed168a1b96 authored almost 6 years ago

Merge pull request #286 from ooni/api-test

Api test

41d1724d918e70a06455c967d1bc6b4508521b61 authored almost 6 years ago

Bump OONI API on testing and production

535ed7bfbe954f610b911f974a1176656e2fe34e authored almost 6 years ago

Text on `docker-trampoline` script purpose, #268

dbdf1c6ab972fb6a9a9ef167f3c0779c32dbd207 authored almost 6 years ago

Hopefully, improve #272 replica restartability

d66b69a779142263005bebb6401a74b328054cc0 authored almost 6 years ago

Prefer `scrape_timeout` in blackbox_exporter, see 36f0d85

93e7aec85e7576db1ca7a4c90651ce61b1f21d18 authored almost 6 years ago

Add `stop_signal: SIGINT` to dockerized database

c58935fb02cd151e75f86de6a01fe18869d8fb5b authored almost 6 years ago

Merge pull request #299 from metadb-share

0b9ab06bf90f727251325edf2d1f254ff90f64bd authored almost 6 years ago

prometheus: bump `scrape_interval` and `scrape_timeout` for *.onion endpoints

36f0d85aeaa5b45b5d3db146be21839fb2ba5edd authored almost 6 years ago

Merge pull request #308 from ooni/uncrutch

Drop crutch.py from pipeline

069b0a7deb2b941450fbfb987decd6fbdec31de6 authored almost 6 years ago

Drop crutch.py related files

5ddd4a2c1c9fc40f651d5d112d2545ae8aa75f1f authored almost 6 years ago

Drop crutch.py from pipeline

591304876e1a4e4e8c253de403451d319880d681 authored almost 6 years ago

READM: href metadb-sharing.md

89237979b9f0ea4c96ea0763801f02c1b824b8e8 authored almost 6 years ago

Merge pull request #307 from drop-chameleon

1ccc03b6cf04574e29713b460a6d0e5bf3963631 authored almost 6 years ago

Stamp inventory

8faafd5c313ad44f86c52c52f0ef5acf9ef5a4ba authored almost 6 years ago

Current external inventory state

2a4b538be15a798fcd9ae99456e6671470fea2de authored almost 6 years ago

Drop chameleon.infra.ooni.io

abff32825d66ec8254fecf6e5285f61bfd04c701 authored almost 6 years ago

Merge pull request #306 from ooni/update-shovel

Bump the shovel

4defab8e92a2e53e2679a17214162ed058089e7f authored almost 6 years ago

Bump the shovel

xref: https://github.com/ooni/pipeline/pull/151

08dea7c88d6f36e8e3c33b929b28fd3809837713 authored almost 6 years ago

orchestra_nginx.conf.j2: unbreak lets encrypt

The issue at #304 is an instance of missing hooks for LE's certbot
to be able to renew because:
...

6ceeee7ef2a691428756330eba30833ae0ba8760 authored almost 6 years ago

dom0: add tag to just remove broken repos

I just run this as:

```
./play -l registry.proteus.test.ooni.io -t remove-jessie dom0-bootstrap...

54841f1221999b9a4b9a68747076b870232acc5e authored almost 6 years ago

prometheus: drop @darkk from email alerting

1c0452ecd47302151bdec410d3e79dec73620336 authored almost 6 years ago

Merge pull request #302 from onion

fac3d91ae418fb51162b11316016133b60db6f35 authored almost 6 years ago

Add http-pings to public OONI *.onion endpoints, see #239

Also, replace hard-coded IP addresses with resolve-DNS-on-template.

269ca97d7d0d0080650e6c4e2ac2ca2b87ec081e authored almost 6 years ago

Merge pull request #301 from flush-wal

Flush WAL

6bc5a3763c66b9e7d8d3107c3d1dbeaa965a1ac0 authored almost 6 years ago

Fix typo

52c7581ecb47a48b550486d643290b897f214c9d authored almost 6 years ago

airflow: do `pg_switch_xlog()` after `meta_pg` task, see #272

324fdd240bff9374fe7e1b880daadb81c792adf9 authored almost 6 years ago

Add info on how to estimate disk size

Mention that the 404 error in the logs are fine

9b7ae7f9a507586f04d7f47372fc5ef5532ed646 authored almost 6 years ago

Add docs for metadb-sharing

4308243cacdac259415473939444f8f67d5a2cc6 authored almost 6 years ago

Add backup script to Dockerfile

572779cb540326a280b51279bcf8252b4a578733 authored almost 6 years ago

Bump explorer tag

1d7951ade63c8a0e6d3e1242a7bf05cd72fa8e20 authored almost 6 years ago

Skip `core` while doing metadb backup

a7bce33e3d3a729388d9e74970030a91310b75fe authored almost 6 years ago

metadb_s3_tarx: fetch public OONI metadb backup from AWS S3 Open Data bucket

da5b011573be326659cf307bb26ca7ef8ea10427 authored almost 6 years ago

Bump explorer tag

5ff67fbd58524de900c0e0a2f2455a30e573383d authored almost 6 years ago

Merge pull request #300 from onion-http-ping

System-wide *.onion support for Prometheus VM

2807a093128680a30386f1b8e0b09e1fe6709627 authored almost 6 years ago

Bump explorer tag

324cbd05d95fda64b70ddb1dd3906bac3ddb30d5 authored almost 6 years ago

Some more comments on IPv6 ULA & tor TransPort

954572512b18427780cd310b35f266c891c30d1f authored almost 6 years ago

prometheus: add tor TransPort to firewall

27dcf97680e80ae908d9c2646d4a8c0729f35de1 authored almost 6 years ago

prometheus: add tor & coredns to handle *.onion for #239 (without iptables yet)

daa8a9a7e7d8d22bf88fe9848c662102476b2106 authored almost 6 years ago

Bump explorer and API tags

a83f6ba71802154d950e20e1354f77c57517766e authored almost 6 years ago

Extract `tor-bin` role

59cd37e4c18ffa57b1a80c7fd1b5524994d36994 authored almost 6 years ago

Bump API tag

b92df77ebbd13fcf668fae8294f7c0b8ecaa6c92 authored almost 6 years ago

Hotfix for #287: drop more broken jessie repos

fca7827da687708504d54536041c935a329a613f authored almost 6 years ago

Hotfix for #287: drop broken jessie repos

40b362570d2a4b5fb0cd96f126286a1e2263d9f1 authored almost 6 years ago

metadb_s3_tarz: reduce entropy a bit

072410ea4c360983923daf5ed09cc53e5784cdd0 authored almost 6 years ago

PostgreSQL `metadb` backup

75e43bed8cb5c4f403b9c80eb20c170de1d4aabd authored almost 6 years ago

Merge pull request #298 from dead-vms-cleanup

32605b868c271d883c7ca8aba4318f73e6df684e authored almost 6 years ago

Fix typo

4b689666824b152cdd1c5c26dbf9d3c6db88d7b3 authored almost 6 years ago

Update inventory-check

44a4bcc9e08472872a773d114b4d8b2cfdb3af33 authored almost 6 years ago

Drop `brie.darkk.net.ru` from inventory as well

9cc47698d14f2becc917f0d232e7496480ef9d31 authored almost 6 years ago

Kill obsolete VMs

8d9972483e273a555fbe7a311f1f737dac7dd71f authored almost 6 years ago

Current external inventory state

1559fd702de33f7ac688506dd6f94f2cf5cd27af authored almost 6 years ago

Current external inventory state

67958d6497e13891ac3f70462466981e7063dfc8 authored almost 6 years ago

Merge pull request #297 from ooni/feature/monooni_password

mon.ooni.nu: give myself acces to grafana

162ea112518833f25d0aa9f82b6cc742cb0be794 authored almost 6 years ago

mon.ooni.nu: give myself acces to grafana

31622f42cec5e3cfa981665aebdb25ca73b4f121 authored almost 6 years ago

Merge pull request #296 from ooni/deploy/bouncer

bouncer: deploy openobservatory/backend@20190415-65197d29

5f80e7a84512993b67d39374d5d0404620f9be2b authored almost 6 years ago

Update iptables rule for amsmetadb

43a2e8f6f5fa96f0563b378911908098cc1c2a61 authored almost 6 years ago

bouncer: deploy openobservatory/backend@20190415-65197d29

3234b79fc69e8d5dbe3c2a4124815b56a6e4dffb authored almost 6 years ago

Use AMS metadb

ee56bb2fcd26dacc34ab2165506f7568d4977e37 authored almost 6 years ago

Merge pull request #294 from ooni/ooexpl-pipeline

Bump pipeline-shovel version

e0b1b870f20a163134a0a58168f26a8f56b25e01 authored almost 6 years ago

Bump API tag

eff0ae8abc47a9cf0e0a0d534071019ccc0f3207 authored almost 6 years ago

Merge pull request #295 from ooni/feature/docs

README.md: document that we need dnspython

3d72208e5a721e55555b549a958794951dbc8b1e authored almost 6 years ago

README.md: document that we need dnspython

I'm unsure whether we need to apply strict checks like we do for
ansible or we're just fine with...

acc0fe79a6bb4524d0a3a153d5c64de2256d988c authored almost 6 years ago

Bump tag

61525e1145ade0426b266a64a9f831fdcd04f67b authored almost 6 years ago

Merge pull request #288 from ooni/fix/sbs_keys

Make sure @bassosimone keys are current

b3475153f415d59d446886d473392f67bda0d100 authored almost 6 years ago

Bump pipeline-shovel version

081d9dd438d8f0d40a4f242e418442575fa26f47 authored almost 6 years ago

Bump version

879b57ca72a5b55840b6a18d4a32749572151ba5 authored almost 6 years ago

Monitor `metadb_s3_archive` WAL shipping.

8f54a160a9902f0336f6f6dde1cb8215c9b1f2db authored almost 6 years ago

Merge pull request #293 from pg-s3-wal

9a91f6bd6027733dcd25140293be21d0ebe1d0f8 authored almost 6 years ago

Bump openobservatory/sysadmin-postgres-metadb

04fc641940b42b1781fe43e1ed24ac6224558a4b authored almost 6 years ago

Fix newline handling

010f6f70ae8cd8cac8cf0727c4621ab4614c4b36 authored almost 6 years ago

Bump openobservatory/sysadmin-postgres-metadb

b020da132b3aaf5d854caf367636c84cb24b39b7 authored almost 6 years ago

Fix mawk/gawk compatibility, silence awscli progressbar

753cc93ea92c7ef96172500f84366ab36efcba93 authored almost 6 years ago

Ship OONI Pipeline MetaDB WAL to S3

c28409e3b4f17bcdaa9e5fbd089f98ed91ec4166 authored almost 6 years ago

Pin exact postgresql version for sysadmin-postgres-metadb

a3efb6a39510b167b37b9deb24f8fc9a362efcfd authored almost 6 years ago

Build openobservatory/postgres-metadb with awscli

f6d802b9581812d48448a79d414900349feee976 authored almost 6 years ago

Add IP-based 2FA to `OU=Prometheus Scraper`

012907c617933f2a663fa48c499f0ad7080d9fb8 authored almost 6 years ago

GreenHost S3-like object store creds for #273

918a0f88085838287fa2f6c90e46db460e39e84b authored almost 6 years ago

Drop vasilis@ from prometheus (after 0c5cd36)

e75d72f75baa85f9d60ed1b44ce87895ba242372 authored almost 6 years ago

Current external inventory state

bfa708be6093f3777c32f626039ca955e48dcdb0 authored almost 6 years ago

Merge pull request #291 from ooni/ssh-root-keys

f7c6466cdba74a3f3cdb860d28df27d6d6cea652 authored almost 6 years ago

Make empty /root/.ssh/authorized_keys a bit nicer

2d8e1c6f77cd8446c2bf446991578e3a143518af authored almost 6 years ago

Enforce /root/.ssh/authorized_keys in addition to authorized_keys2

It included various keys of OONI Weasel, @willscott, @joelanders and
some others.

6cd4601d35175bf6d70fee68774cde5cbfa17ac2 authored almost 6 years ago

Merge pull request #290 from ooni/ssh-allowusers

d2726bdeb7874fb4fe640a27175e28e97d3952cd authored almost 6 years ago

Update `root` password for virtual VNC

0c5cd3600e09c027412d009246776b0b5d51830c authored almost 6 years ago

Drop `OONI Weasel` from sshd/AllowUsers

f9cedc476429642ae739309094b7e6821e8272d8 authored almost 6 years ago

sshd: use AllowUsers safeguard (with `root`)

d6e7638f46f97c3a38a386983f8298a5a2e95457 authored almost 6 years ago

Update lvextend.md

de1ba3cd82bed8b1001147353afa55f4c3b7cfd7 authored almost 6 years ago

Add note on volume group

14b1803a6de602c9837657502726bdaa51cd1371 authored almost 6 years ago

lvextend docs -vv

22e5528822f8d59e7618b2ba99c932019b9e4d34 authored almost 6 years ago

Add docs/lvextend

57778d2b7bff41df01faee4e7285246acda0d51b authored almost 6 years ago

Make sure @bassosimone keys are current

fef3b3ba46c682fcddcacff0ed8493d15e873c35 authored almost 6 years ago

Add one more key for @bassosimone

ec498003b5807b64c400a999d37acd07dde61cc7 authored almost 6 years ago

Drop explorer next tag from playbook

f7e406e278a609ab9cd88f6f9f37323ef3340623 authored almost 6 years ago