Commit Graph

22 Commits

Author SHA1 Message Date
Michal Konecny
a807fb3d4f [mailman3] Create gunicorn configuration file
To make changing the gunicorn configuration more easily let's move
configuration values from systemd service to separate configuration
file.

The file will live in /etc/mailman3/gunicorn.conf.py.
2025-03-27 13:01:13 +01:00
Michal Konecny
cabd6b7385 [mailman3] Set logging level for database to warning
The database log is really big even on info level, let' set it manually to
warning to save space and don't generate GB of logs.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-07-24 10:49:12 +02:00
Michal Konecny
d655c7b366 [mailman3] Update logging for mailman
There was a typo in logging section of mailman configuration, which caused that
only default log files were created.
Also there is separate logging for gunicorn now, let's use that.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-07-18 11:30:54 +00:00
Michal Konecny
2f1529f76e [mailman3] Disable sending e-mails on staging
This commit is setting both mailman and hyperkitty to devmode and doesn't allow
them to sent mails anywhere.

I tested that from web UI and using `mail` command on the machine.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-07-11 09:30:42 +02:00
Michal Konecny
bebc73c9e3 [mailman3] Fix the syntax error
ansible-playbook is complaining about missing quotes.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-07-04 09:46:49 +02:00
Michal Konecny
9892b05601 [mailman3] Fix yamllint error
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-07-04 09:35:42 +02:00
Michal Konecny
2c4f7c6968 [mailman3] Improve the gunicorn setup
Use the recommended CPU*2+1 amount of workers and limit max requests done. After
that the gunicorn reloads itself and free up all the memory.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-07-04 09:27:46 +02:00
Kevin Fenzi
35902dad8b mailman: lets try 9 workers
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-07-03 13:46:36 -07:00
Kevin Fenzi
95a5a8b6ae mailman: try 15 gunicorn workers
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-07-03 12:36:48 -07:00
Michal Konecny
171527dd94 [mailman3] Change the amount of workers back to 4
10 workers were able to drain the memory of the machine in minutes.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-07-01 17:27:59 +02:00
Michal Konecny
0d4e40f7b2 [mailman3] Increase the default amount of gunicorn workers
Mailman hourly job is making the web unresponsive, let's try if increasing the
amount of gunicorn workers improves the situation.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-06-28 11:10:48 +02:00
Michal Konecny
897190bcc6 [mailman3] Fix for production deployment
Don't use the same name for variables in ansible-private and playbook.
Remove fedmsg.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-06-27 12:53:03 +02:00
Michal Konecny
051650c710 [mailman3] Update default variables
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-06-24 16:19:46 +02:00
Michal Konecny
1c37ff096c [mailman3] Fix the OIDC server url
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-26 10:50:19 +02:00
Michal Konecny
ee55811b8b [mailman3] Remove the unused variables
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-26 10:43:52 +02:00
Michal Konecny
261ec360fa [mailman3] Remove the superuser creation
We don't need the superuser if we knew how to add the permissions to any user.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-26 10:43:52 +02:00
Michal Konecny
4c7885c89d [mailman3] Add django superuser creation task
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-26 10:43:52 +02:00
Michal Konecny
9fbe2c3d7e [mailman3] Enable OIDC
Enable OIDC support for mailman3 staging deployment.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-08 15:08:32 +02:00
Michal Konecny
96b5e73a99 [mailman3] Add compress step
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-03-28 16:09:44 +01:00
Michal Konecny
df0c21ed89 [mailman3] Remove SSL apache conf
The SSL is handled by proxies we don't need to handle it on the machine itself.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-03-27 16:01:58 +01:00
Michal Konecny
0a1fbd509f [mailman3] Use gunicorn instead of apache
Use apache only as reverse proxy, but run mailman-web through gunicorn.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-03-26 15:18:58 +01:00
Michal Konecny
c2862e1e8b [mailman3] Create a new role mailman3
It seems that the mailman update is more complicated than I originally thought. So I
decided to start with clean role and will slowly start adding new changes.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-03-25 10:02:23 +00:00