Kevin Fenzi
352c1a2838
think we need and here.
2015-11-10 21:08:25 +00:00
Ricky Elrod
edc4b7067d
watchdog-ify staging, hopefully
...
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org >
2015-11-10 20:11:11 +00:00
Peter Robinson
595c222baf
kojibuilder: add ppc hub to firewall
2015-10-13 03:02:45 +00:00
Kevin Fenzi
f6722659e5
Switch sshd config for f22/f23 to explicitly say only v2 protocol, adjust rkhunter for this.
2015-10-09 19:32:51 +00:00
Kevin Fenzi
96d1784001
Adjust rkhunter and sshd config for releng so they stop alerting.
2015-10-08 16:42:13 +00:00
Kevin Fenzi
b03b871080
Drop *.info on the mirrorlist servers as that causes a ton of traffic to log01
2015-10-07 15:30:26 +00:00
Kevin Fenzi
981f1906a1
Add f22 and f23 sshd configs
2015-09-27 16:04:35 +00:00
Kevin Fenzi
1dd79c9801
Remove mentions of lockbox01.
2015-09-25 18:49:17 +00:00
Stephen Smoogen
3be0ca58fa
and we have nagios-external
2015-09-01 23:05:58 +00:00
Stephen Smoogen
b74a402571
and we remove proxy09
2015-09-01 22:13:09 +00:00
Kevin Fenzi
096a7204a2
Fix out ntp setup to use 5 ip's from the rhel.pool.ntp.org pool.
2015-08-31 16:32:10 +00:00
Mikolaj Izdebski
80a2b5c6bb
Remove configuration for old jenkins
2015-08-26 16:51:39 +00:00
Mikolaj Izdebski
11840759fa
Add custom resolv.conf for jenknis in new cloud
2015-08-26 16:49:26 +00:00
Kevin Fenzi
eb61b06a56
Fix resolv.conf on s390 koji for good hopefully.
2015-08-23 19:33:49 +00:00
Kevin Fenzi
237a7113fd
Take out releng04/relepel01/bodhi01/bodhi02.
2015-08-21 19:17:59 +00:00
Aurélien Bompard
278c215cce
Rollback migration of lists.fedorahosted.org
2015-08-21 15:48:50 +00:00
Aurélien Bompard
5b5c83d4de
Update the Mailman role after addition of fedorahosted
2015-08-21 10:43:32 +00:00
Kevin Fenzi
4d72631446
Make sure all hosts have at least 2 nameservers and rotate with 1 sec timeout.
2015-08-19 18:52:51 +00:00
Ralph Bean
08ca54945c
Copy prod fedmsg iptables loop to staging.
2015-08-18 03:47:44 +00:00
Kevin Fenzi
371b97ead5
Fix some typos
2015-08-15 15:27:50 +00:00
Kevin Fenzi
f28aad573d
Use fas-all ips instead of name, as dns may not yet be on at boot.
2015-08-15 15:16:03 +00:00
Aurélien Bompard
bdff5cf7bf
Set the postfix main.cf file for the new lists-dev
2015-07-31 08:33:12 +00:00
Mikolaj Izdebski
d3af309a12
Jenkins: don't try to relay mail through bastion
2015-07-30 15:06:17 +00:00
Kevin Fenzi
b6cd81c40b
Good bye bapp02. You served long and well.
2015-07-28 03:26:40 +00:00
Kevin Fenzi
81f09d2e00
Drop some more app01.stg stuff
2015-07-27 18:35:39 +00:00
Kevin Fenzi
8fdf8ef319
Fix up sync http logs cron job
2015-07-20 15:30:28 +00:00
Patrick Uiterwijk
0a113b2993
Seems the other NTP servers are unreachable
2015-07-18 10:56:40 +00:00
Tim Flink
8a344cc106
properly rename sshd config for qa-stg
2015-07-17 22:42:43 +00:00
Tim Flink
12659b2361
more renaming stuff for migration from qadevel-stg to qa-stg
2015-07-17 22:37:04 +00:00
Kevin Fenzi
856c3b9e31
Switch out which unbound server cloud uses.
...
The ibiblio one doesn't allow 53/udp.
2015-07-17 14:14:47 +00:00
Kevin Fenzi
aaaca2101c
Drop hosted04 and collab04.
...
These were warm spares we haven't used in the last 2.5 years even once.
Backups used to use them, but now backup from the main/prod instances.
Also sort our parents on ibiblio hosts for vms we have moved.
2015-07-16 19:13:36 +00:00
Patrick Uiterwijk
4c5f650962
Also grab ipsilon http logs
2015-07-15 09:49:36 +00:00
Mikolaj Izdebski
40ae74811a
Remove koschei.cloud.fedoraproject.org host
...
Koschei has been moved to producion. The old cloud instance
(koschei.cloud.fedoraproject.org) is used only for serving HTTP 301
redirect. It hasn't been terminated yet, but this can happen at any
time - we don't need to maintain persistent Ansible configuration.
2015-07-14 14:30:36 +00:00
Kevin Fenzi
68bcc9bff7
Switch from people03 to people01.
...
Switch backups
Change fasClient runs to run on people01 instead of people03.
Change sync logs to get from people01
Change nagios to monitor people01 instead of people03
Change quota limits some to work better.
Enable planet cron jobs on people01.
2015-07-08 21:08:47 +00:00
Mikolaj Izdebski
7025200095
Support IPv6 on jenkins
2015-06-26 20:59:11 +00:00
Mikolaj Izdebski
4e593519cc
Use custom iptables config for jenkins
2015-06-26 20:47:11 +00:00
Kevin Fenzi
e6cf850eb9
Add a resolv.conf for fedorainfracloud and re-add base to jenkins-dev to test.
2015-06-26 19:58:24 +00:00
Kevin Fenzi
54ab78ac4a
Fix up base role so it works on f22 machines with dnf module.
2015-06-26 18:49:19 +00:00
Kevin Fenzi
76a1c60e66
Add nameserver and bastion02 to /etc/hosts on serverbeach boxes.
2015-06-22 17:30:52 +00:00
Ralph Bean
07667d7ea2
YATypofix.
2015-06-16 19:44:52 +00:00
Ralph Bean
c680e56767
Restore dynamic fedmsg endpoints experiment.
...
Revert "Hold off on that.."
This reverts commit 9f5fd276e2
2015-06-16 19:21:50 +00:00
Ralph Bean
9f5fd276e2
Hold off on that..
...
This reverts commit 8df675b378
2015-06-16 18:58:12 +00:00
Ralph Bean
8df675b378
Toy with dynamically generating fedmsg endpoint config.
2015-06-16 18:57:41 +00:00
Kevin Fenzi
d206ef0f46
Finally make the fedora infra cloud playbook idempotent
...
Don't set root password in base and again later in host playbook.
Download rpms and make sure they are installed rather than using url in yum module.
Move cinder restart to a handler.
2015-06-15 19:14:55 +00:00
Kevin Fenzi
1b8e4afdf8
Use releng rootpw on s390 hub too.
2015-06-12 20:17:45 +00:00
Kevin Fenzi
747ff82f95
Add ip address of new c-mode filer so we can actually mount things from it.
2015-06-09 16:59:37 +00:00
Till Maas
e3606ba68e
Use more https URLs where possible
2015-06-04 17:20:06 +02:00
Kevin Fenzi
c2e1a61476
Adjust the cloud resolv.conf.
2015-06-01 13:30:37 +00:00
Kevin Fenzi
275f4b5203
Change all instances of ansible_distribution_major_version to filter to int for comparisons.
2015-05-27 22:27:39 +00:00
Pierre-Yves Chibon
9b7a100a9c
Add in the list of destination for the pagure's postfix
2015-05-19 17:47:39 +02:00
