Commit graph

122 commits

Author SHA1 Message Date
Patrick Uiterwijk
aa377b10e3 Make smtp-mm accept email for lists.fh.o and forward
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2015-12-23 07:07:05 +00:00
Stephen Smoogen
b3d1236fff when adding a new proxy.. always remember to sync its httpd logs or they go byby 2015-12-18 00:07:50 +00:00
Kevin Fenzi
c779582362 Set sshd Protocol here to 2, this makes rkhunter happy hopefully. 2015-12-11 04:11:38 +00:00
Kevin Fenzi
a5007ba910 Move ntp to a template. In phx2 non bastion01/02 hosts will use bastion01/02 and those will use the normal rhel pools. 2015-12-08 19:33:29 +00:00
Patrick Uiterwijk
10ec5b518f Add temporary digicert hotfix
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2015-12-03 14:59:57 +00:00
Kevin Fenzi
dcfc795f4e Hey look. Some new ntp servers. 2015-12-02 21:13:57 +00:00
Kevin Fenzi
5585dacf50 Add ceylon-lang.org to transports so it delivers correctly. 2015-12-02 00:17:27 +00:00
Kevin Fenzi
17d96e5da9 Add a conditional-reload script and use it so we can not fail on hosts with no httpd installed. 2015-11-13 23:49:38 +00:00
edc4b7067d watchdog-ify staging, hopefully
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
2015-11-10 20:11:11 +00:00
Kevin Fenzi
f6722659e5 Switch sshd config for f22/f23 to explicitly say only v2 protocol, adjust rkhunter for this. 2015-10-09 19:32:51 +00:00
Kevin Fenzi
96d1784001 Adjust rkhunter and sshd config for releng so they stop alerting. 2015-10-08 16:42:13 +00:00
Kevin Fenzi
b03b871080 Drop *.info on the mirrorlist servers as that causes a ton of traffic to log01 2015-10-07 15:30:26 +00:00
Kevin Fenzi
981f1906a1 Add f22 and f23 sshd configs 2015-09-27 16:04:35 +00:00
Kevin Fenzi
1dd79c9801 Remove mentions of lockbox01. 2015-09-25 18:49:17 +00:00
Stephen Smoogen
b74a402571 and we remove proxy09 2015-09-01 22:13:09 +00:00
Kevin Fenzi
096a7204a2 Fix out ntp setup to use 5 ip's from the rhel.pool.ntp.org pool. 2015-08-31 16:32:10 +00:00
Mikolaj Izdebski
80a2b5c6bb Remove configuration for old jenkins 2015-08-26 16:51:39 +00:00
Mikolaj Izdebski
11840759fa Add custom resolv.conf for jenknis in new cloud 2015-08-26 16:49:26 +00:00
Kevin Fenzi
eb61b06a56 Fix resolv.conf on s390 koji for good hopefully. 2015-08-23 19:33:49 +00:00
Kevin Fenzi
237a7113fd Take out releng04/relepel01/bodhi01/bodhi02. 2015-08-21 19:17:59 +00:00
Aurélien Bompard
278c215cce Rollback migration of lists.fedorahosted.org 2015-08-21 15:48:50 +00:00
Aurélien Bompard
5b5c83d4de Update the Mailman role after addition of fedorahosted 2015-08-21 10:43:32 +00:00
Kevin Fenzi
4d72631446 Make sure all hosts have at least 2 nameservers and rotate with 1 sec timeout. 2015-08-19 18:52:51 +00:00
Aurélien Bompard
bdff5cf7bf Set the postfix main.cf file for the new lists-dev 2015-07-31 08:33:12 +00:00
Mikolaj Izdebski
d3af309a12 Jenkins: don't try to relay mail through bastion 2015-07-30 15:06:17 +00:00
Kevin Fenzi
b6cd81c40b Good bye bapp02. You served long and well. 2015-07-28 03:26:40 +00:00
Kevin Fenzi
81f09d2e00 Drop some more app01.stg stuff 2015-07-27 18:35:39 +00:00
Kevin Fenzi
8fdf8ef319 Fix up sync http logs cron job 2015-07-20 15:30:28 +00:00
Patrick Uiterwijk
0a113b2993 Seems the other NTP servers are unreachable 2015-07-18 10:56:40 +00:00
8a344cc106 properly rename sshd config for qa-stg 2015-07-17 22:42:43 +00:00
12659b2361 more renaming stuff for migration from qadevel-stg to qa-stg 2015-07-17 22:37:04 +00:00
Kevin Fenzi
856c3b9e31 Switch out which unbound server cloud uses.
The ibiblio one doesn't allow 53/udp.
2015-07-17 14:14:47 +00:00
Kevin Fenzi
aaaca2101c Drop hosted04 and collab04.
These were warm spares we haven't used in the last 2.5 years even once.
Backups used to use them, but now backup from the main/prod instances.
Also sort our parents on ibiblio hosts for vms we have moved.
2015-07-16 19:13:36 +00:00
Patrick Uiterwijk
4c5f650962 Also grab ipsilon http logs 2015-07-15 09:49:36 +00:00
Mikolaj Izdebski
40ae74811a Remove koschei.cloud.fedoraproject.org host
Koschei has been moved to producion.  The old cloud instance
(koschei.cloud.fedoraproject.org) is used only for serving HTTP 301
redirect.  It hasn't been terminated yet, but this can happen at any
time - we don't need to maintain persistent Ansible configuration.
2015-07-14 14:30:36 +00:00
Kevin Fenzi
68bcc9bff7 Switch from people03 to people01.
Switch backups
Change fasClient runs to run on people01 instead of people03.
Change sync logs to get from people01
Change nagios to monitor people01 instead of people03
Change quota limits some to work better.
Enable planet cron jobs on people01.
2015-07-08 21:08:47 +00:00
Kevin Fenzi
e6cf850eb9 Add a resolv.conf for fedorainfracloud and re-add base to jenkins-dev to test. 2015-06-26 19:58:24 +00:00
Kevin Fenzi
76a1c60e66 Add nameserver and bastion02 to /etc/hosts on serverbeach boxes. 2015-06-22 17:30:52 +00:00
Kevin Fenzi
c2e1a61476 Adjust the cloud resolv.conf. 2015-06-01 13:30:37 +00:00
Pierre-Yves Chibon
9b7a100a9c Add in the list of destination for the pagure's postfix 2015-05-19 17:47:39 +02:00
Pierre-Yves Chibon
7b58ae4dbd Add a dedicated postgix group and a main.cf for this group for pagure-stg 2015-05-19 08:48:12 +02:00
Pierre-Yves Chibon
fb374fce05 Drop the main.cf.pagure01 and main.cf.pagure-stg01 files 2015-05-19 08:46:28 +02:00
Pierre-Yves Chibon
2b2c4577cf Fix the origin and domain on main.cf.vpn.pagure 2015-05-19 08:45:58 +02:00
Pierre-Yves Chibon
7c360c7a5f Add main.cf for the pagure hosts 2015-05-19 08:41:29 +02:00
90bfbace5a adding sshd config for qadevel-stg so that it uses port 222 for ssh 2015-05-13 17:51:56 +00:00
Kevin Fenzi
6241c3f7a5 Set postfix on cloud nodes to not use a relayhost. 2015-05-11 18:25:01 +00:00
Kevin Fenzi
f059414354 Always search vpn first. This breaks proxies if they try non vpn first. 2015-05-06 15:21:03 +00:00
359e71fbb8 putting qadevel sshd back on port 222 2015-05-06 00:58:36 +00:00
0309289a8c switching qadevel sshd back to port 22 for debug 2015-05-05 22:28:00 +00:00
Aurélien Bompard
18bccd797f Update the mailman role for Mailman 3 2015-04-29 16:10:26 +00:00