Commit graph

17676 commits

Author SHA1 Message Date
Kevin Fenzi
a0727e3fd2 do not apply iptables to any fed-cloud machine now 2017-04-07 19:23:42 +00:00
Kevin Fenzi
0d0421e9de only try and set this on x86_64 2017-04-07 18:34:38 +00:00
Ralph Bean
7114ae6eeb Revert "Nagios checks for the mbs-backend fedmsg-hub."
Nevermind.  I'll get back to this in an hour or so.

This reverts commit 57251d154c.
2017-04-07 17:10:50 +00:00
Ralph Bean
57251d154c Nagios checks for the mbs-backend fedmsg-hub. 2017-04-07 17:09:09 +00:00
Ralph Bean
2243de07a6 Note to future self. 2017-04-07 16:50:46 +00:00
Stephen Smoogen
61fe776735 Merge branch 'master' of /git/ansible 2017-04-07 15:06:11 +00:00
Ralph Bean
abdc3271d5 Re-enable pdc-web01 in staging only. 2017-04-07 12:47:07 +00:00
Adrian Reber
0b2e306561 mirrormanager: adapt statistics script to new logfiles
Signed-off-by: Adrian Reber <adrian@lisas.de>
2017-04-07 12:16:14 +00:00
clime
6dd2d7a2bc copr-backend: employ cleanup_vm_nova only on production machine 2017-04-07 09:23:53 +02:00
Kevin Fenzi
8c2d3b5a9d this now fails when undefined 2017-04-07 01:54:59 +00:00
Stephen Smoogen
dfd088ab5e put in many changes for new nagios server 2017-04-06 23:50:44 +00:00
Kevin Fenzi
8cd3f46eb2 add quotes 2017-04-06 23:39:15 +00:00
Kevin Fenzi
df4c5c511c some more fpaste.org cert cleanup 2017-04-06 21:12:39 +00:00
Kevin Fenzi
60fd63e9df set up intermediate cert 2017-04-06 21:09:48 +00:00
Kevin Fenzi
bd105e0cb6 spellin is hard 2017-04-06 20:48:29 +00:00
Kevin Fenzi
db6aa0ce95 too many files 2017-04-06 20:45:23 +00:00
Kevin Fenzi
96aa29dc26 fix certbot to use package so it works on rhel and fedora 2017-04-06 20:34:35 +00:00
Kevin Fenzi
38884a1b7c first cut at using letsencrypt cert for fpaste.org. ticket 5784 2017-04-06 20:31:39 +00:00
Kevin Fenzi
170270f1cb this check needs to be https now 2017-04-06 19:59:12 +00:00
Kevin Fenzi
477f21edea koji no longer has external ip mapping, instead use the proxy01 mapping as thats what is now being used in production 2017-04-06 19:42:29 +00:00
Kevin Fenzi
f59a705675 fix mirrorlist-container logrotate to work with stats 2017-04-06 19:26:43 +00:00
Ralph Bean
242067b390 Tell haproxy to use pdc-web02 instead of pdc-web01. 2017-04-06 17:54:14 +00:00
Kevin Fenzi
bc57bfd1f3 add download-ib01 as an alias so it picks up the right ssl cert. ticket 5956 2017-04-06 17:40:30 +00:00
Kevin Fenzi
dd7f39e4ce adjust modernpaste syntax highlight languages. ticket 5952 2017-04-06 17:15:50 +00:00
Martin Krizek
e6bbafb7ae Fix pruning old buildmaster logs 2017-04-06 14:25:25 +00:00
Miroslav Suchý
73726c7602 retrace: update faf role 2017-04-06 15:50:01 +02:00
Miroslav Suchý
47a2d4d557 retrace: download retrace role from github 2017-04-06 15:40:38 +02:00
Miroslav Suchý
82fb723e2e retrace: document where we get from retrace role 2017-04-06 15:39:38 +02:00
Miroslav Suchý
8c00f895d2 retrace: always use correct path in hub.wsgi 2017-04-06 15:30:02 +02:00
Miroslav Suchý
d9a359e446 retrace: always use correct path in hub.wsgi 2017-04-06 15:23:05 +02:00
Miroslav Suchý
679ab41ee8 retrace: try this 2017-04-06 15:00:30 +02:00
Miroslav Suchý
2a1905bfce retrace: use variable for defining private.git 2017-04-06 12:02:18 +02:00
Miroslav Suchý
a7557b9248 try this 2017-04-06 11:57:34 +02:00
e727850587 changing branch var for distgit builder for trigger update 2017-04-06 03:54:40 +00:00
Kevin Fenzi
7437d0fa81 switch kojipkg01 to varnish too 2017-04-06 00:22:36 +00:00
Patrick Uiterwijk
483c774e5c We need to typecast this. String != IP
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-04-06 00:17:28 +00:00
Patrick Uiterwijk
3c12da859e Normalize the X-Forwarded-For header
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-04-05 23:57:30 +00:00
Patrick Uiterwijk
0a7e1e0c03 Client.ip is unusable due to proxies, look at forwarded-for
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-04-05 23:51:12 +00:00
Kevin Fenzi
ac41432c7c re-add 02 2017-04-05 23:08:35 +00:00
Kevin Fenzi
86307b7147 take kojipkgs02 back out 2017-04-05 22:56:07 +00:00
Kevin Fenzi
331fd4b512 ok, fingers crossed, lets put kojipkgs02 back in 2017-04-05 22:49:06 +00:00
Kevin Fenzi
47dfdb7792 we are not using these acls anymore 2017-04-05 22:39:39 +00:00
Kevin Fenzi
9b0ebffd55 cannot use a dash in a backend name 2017-04-05 22:13:52 +00:00
Kevin Fenzi
24d4dea8fb apparently varnish 5.0 still uses vcl 4.0 2017-04-05 22:12:42 +00:00
Kevin Fenzi
7686e28971 make varnish role not care about yum 2017-04-05 22:08:05 +00:00
Kevin Fenzi
78de8cadbc syntax issues 2017-04-05 22:06:03 +00:00
Kevin Fenzi
6c6218d221 switch kojipkgs02 to use varnish instead of squid, leave 01 alone for now 2017-04-05 22:03:39 +00:00
Kevin Fenzi
fc0a6e176f take kojipkgs02 out to test it with varnish 2017-04-05 21:55:21 +00:00
Patrick Uiterwijk
69c3e7174b Some improvements to kojipkgs vcl
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-04-05 21:49:10 +00:00
Kevin Fenzi
ee90934d26 some default settings for varnish on fedora 2017-04-05 19:15:14 +00:00