Patrick Uiterwijk
aa377b10e3
Make smtp-mm accept email for lists.fh.o and forward
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2015-12-23 07:07:05 +00:00
Stephen Smoogen
b3d1236fff
when adding a new proxy.. always remember to sync its httpd logs or they go byby
2015-12-18 00:07:50 +00:00
Kevin Fenzi
c779582362
Set sshd Protocol here to 2, this makes rkhunter happy hopefully.
2015-12-11 04:11:38 +00:00
Kevin Fenzi
a5007ba910
Move ntp to a template. In phx2 non bastion01/02 hosts will use bastion01/02 and those will use the normal rhel pools.
2015-12-08 19:33:29 +00:00
Patrick Uiterwijk
10ec5b518f
Add temporary digicert hotfix
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2015-12-03 14:59:57 +00:00
Kevin Fenzi
dcfc795f4e
Hey look. Some new ntp servers.
2015-12-02 21:13:57 +00:00
Kevin Fenzi
5585dacf50
Add ceylon-lang.org to transports so it delivers correctly.
2015-12-02 00:17:27 +00:00
Kevin Fenzi
17d96e5da9
Add a conditional-reload script and use it so we can not fail on hosts with no httpd installed.
2015-11-13 23:49:38 +00:00
edc4b7067d
watchdog-ify staging, hopefully
...
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
2015-11-10 20:11:11 +00:00
Kevin Fenzi
f6722659e5
Switch sshd config for f22/f23 to explicitly say only v2 protocol, adjust rkhunter for this.
2015-10-09 19:32:51 +00:00
Kevin Fenzi
96d1784001
Adjust rkhunter and sshd config for releng so they stop alerting.
2015-10-08 16:42:13 +00:00
Kevin Fenzi
b03b871080
Drop *.info on the mirrorlist servers as that causes a ton of traffic to log01
2015-10-07 15:30:26 +00:00
Kevin Fenzi
981f1906a1
Add f22 and f23 sshd configs
2015-09-27 16:04:35 +00:00
Kevin Fenzi
1dd79c9801
Remove mentions of lockbox01.
2015-09-25 18:49:17 +00:00
Stephen Smoogen
b74a402571
and we remove proxy09
2015-09-01 22:13:09 +00:00
Kevin Fenzi
096a7204a2
Fix out ntp setup to use 5 ip's from the rhel.pool.ntp.org pool.
2015-08-31 16:32:10 +00:00
Mikolaj Izdebski
80a2b5c6bb
Remove configuration for old jenkins
2015-08-26 16:51:39 +00:00
Mikolaj Izdebski
11840759fa
Add custom resolv.conf for jenknis in new cloud
2015-08-26 16:49:26 +00:00
Kevin Fenzi
eb61b06a56
Fix resolv.conf on s390 koji for good hopefully.
2015-08-23 19:33:49 +00:00
Kevin Fenzi
237a7113fd
Take out releng04/relepel01/bodhi01/bodhi02.
2015-08-21 19:17:59 +00:00
Aurélien Bompard
278c215cce
Rollback migration of lists.fedorahosted.org
2015-08-21 15:48:50 +00:00
Aurélien Bompard
5b5c83d4de
Update the Mailman role after addition of fedorahosted
2015-08-21 10:43:32 +00:00
Kevin Fenzi
4d72631446
Make sure all hosts have at least 2 nameservers and rotate with 1 sec timeout.
2015-08-19 18:52:51 +00:00
Aurélien Bompard
bdff5cf7bf
Set the postfix main.cf file for the new lists-dev
2015-07-31 08:33:12 +00:00
Mikolaj Izdebski
d3af309a12
Jenkins: don't try to relay mail through bastion
2015-07-30 15:06:17 +00:00
Kevin Fenzi
b6cd81c40b
Good bye bapp02. You served long and well.
2015-07-28 03:26:40 +00:00
Kevin Fenzi
81f09d2e00
Drop some more app01.stg stuff
2015-07-27 18:35:39 +00:00
Kevin Fenzi
8fdf8ef319
Fix up sync http logs cron job
2015-07-20 15:30:28 +00:00
Patrick Uiterwijk
0a113b2993
Seems the other NTP servers are unreachable
2015-07-18 10:56:40 +00:00
8a344cc106
properly rename sshd config for qa-stg
2015-07-17 22:42:43 +00:00
12659b2361
more renaming stuff for migration from qadevel-stg to qa-stg
2015-07-17 22:37:04 +00:00
Kevin Fenzi
856c3b9e31
Switch out which unbound server cloud uses.
...
The ibiblio one doesn't allow 53/udp.
2015-07-17 14:14:47 +00:00
Kevin Fenzi
aaaca2101c
Drop hosted04 and collab04.
...
These were warm spares we haven't used in the last 2.5 years even once.
Backups used to use them, but now backup from the main/prod instances.
Also sort our parents on ibiblio hosts for vms we have moved.
2015-07-16 19:13:36 +00:00
Patrick Uiterwijk
4c5f650962
Also grab ipsilon http logs
2015-07-15 09:49:36 +00:00
Mikolaj Izdebski
40ae74811a
Remove koschei.cloud.fedoraproject.org host
...
Koschei has been moved to producion. The old cloud instance
(koschei.cloud.fedoraproject.org) is used only for serving HTTP 301
redirect. It hasn't been terminated yet, but this can happen at any
time - we don't need to maintain persistent Ansible configuration.
2015-07-14 14:30:36 +00:00
Kevin Fenzi
68bcc9bff7
Switch from people03 to people01.
...
Switch backups
Change fasClient runs to run on people01 instead of people03.
Change sync logs to get from people01
Change nagios to monitor people01 instead of people03
Change quota limits some to work better.
Enable planet cron jobs on people01.
2015-07-08 21:08:47 +00:00
Kevin Fenzi
e6cf850eb9
Add a resolv.conf for fedorainfracloud and re-add base to jenkins-dev to test.
2015-06-26 19:58:24 +00:00
Kevin Fenzi
76a1c60e66
Add nameserver and bastion02 to /etc/hosts on serverbeach boxes.
2015-06-22 17:30:52 +00:00
Kevin Fenzi
c2e1a61476
Adjust the cloud resolv.conf.
2015-06-01 13:30:37 +00:00
Pierre-Yves Chibon
9b7a100a9c
Add in the list of destination for the pagure's postfix
2015-05-19 17:47:39 +02:00
Pierre-Yves Chibon
7b58ae4dbd
Add a dedicated postgix group and a main.cf for this group for pagure-stg
2015-05-19 08:48:12 +02:00
Pierre-Yves Chibon
fb374fce05
Drop the main.cf.pagure01 and main.cf.pagure-stg01 files
2015-05-19 08:46:28 +02:00
Pierre-Yves Chibon
2b2c4577cf
Fix the origin and domain on main.cf.vpn.pagure
2015-05-19 08:45:58 +02:00
Pierre-Yves Chibon
7c360c7a5f
Add main.cf for the pagure hosts
2015-05-19 08:41:29 +02:00
90bfbace5a
adding sshd config for qadevel-stg so that it uses port 222 for ssh
2015-05-13 17:51:56 +00:00
Kevin Fenzi
6241c3f7a5
Set postfix on cloud nodes to not use a relayhost.
2015-05-11 18:25:01 +00:00
Kevin Fenzi
f059414354
Always search vpn first. This breaks proxies if they try non vpn first.
2015-05-06 15:21:03 +00:00
359e71fbb8
putting qadevel sshd back on port 222
2015-05-06 00:58:36 +00:00
0309289a8c
switching qadevel sshd back to port 22 for debug
2015-05-05 22:28:00 +00:00
Aurélien Bompard
18bccd797f
Update the mailman role for Mailman 3
2015-04-29 16:10:26 +00:00
