Skip to content

turing: Enable fail2ban, use unprivileged guix-daemon, clean up imports#632

Closed
jchristgit wants to merge 29 commits intoguix-sops-pinfrom
turing-improvements
Closed

turing: Enable fail2ban, use unprivileged guix-daemon, clean up imports#632
jchristgit wants to merge 29 commits intoguix-sops-pinfrom
turing-improvements

Conversation

@jchristgit
Copy link
Copy Markdown
Contributor

@jchristgit jchristgit commented Mar 23, 2026 •
edited
Loading 

                                  .-"``"-.
                                 /______; \
                                {_______}\|
                                (/ a a \)(_)
                                (.-.).-.)
  ________________________ooo__(    ^    )___________________________
 /                              '-.___.-'                            \
| Q. Why is this so clumsy?                                           |
| A. The trick is to use Perl's strengths rather than its weaknesses. |
|                 -- Larry Wall in <8225@jpl-devvax.JPL.NASA.GOV>     |
 \________________________________________ooo________________________/
                               |_  |  _|  jgs
                               \___|___/
                               {___|___}
                                |_ | _|
                                /-'Y'-\
                               (__/ \__)
                               ```

jchristgit and others added 17 commits March 11, 2026 21:30
@jchristgit
Add Joe's ACL key
237966c
@jb3
Add kutiekat aliases
7746c09
@jb3
Remove Graphite
e8a9775
@jb3
Add statsd-exporter deployment
797647f
@jb3
Exempt Prometheus from NGINX P99 timing alert
ad1cc13
@jb3
Add mod team as an AlertManager destination
9928b64
@jb3
Add some missing graphite categories
2777117
@jb3
Add Prometheus alert autodeployment
f41ad20
@jb3
Fix paths
723ed48
@jb3
Increase Discord join alarm threshold
03fef7e
@jb3
Update Graphite matching rules some more
b3b1fc2
@jb3
Add experimental alert for 20 percent guild member growth
c857601
@jb3
Add missing newline at end of discord alert config file
1d34b0f
@jchristgit @jb3
Only deliver moderation alerts to the mod team
83f5864 
The DevOps team does not concern itself with the problems of the chat
platform's moderator team.
@jb3
Update discord.yaml experimental members alert
de28481
@jb3
Update Discord experimental alerts
5e895c4
@jb3
Update Discord alerts
7a9db98
@jchristgit jchristgit requested a review from jb3 March 23, 2026 21:55
@jchristgit jchristgit changed the base branch from main to guix-sops-pin March 23, 2026 21:56
dependabot bot and others added 8 commits March 26, 2026 21:17
@dependabot @ChrisLovering
Bump actions/deploy-pages from 4 to 5
def1799 
Bumps [actions/deploy-pages](https://github.com/actions/deploy-pages) from 4 to 5.
- [Release notes](https://github.com/actions/deploy-pages/releases)
- [Commits](actions/deploy-pages@v4...v5)

---
updated-dependencies:
- dependency-name: actions/deploy-pages
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @ChrisLovering
Bump azure/setup-kubectl from 4.0.1 to 5.0.0
9b9b416 
Bumps [azure/setup-kubectl](https://github.com/azure/setup-kubectl) from 4.0.1 to 5.0.0.
- [Release notes](https://github.com/azure/setup-kubectl/releases)
- [Changelog](https://github.com/Azure/setup-kubectl/blob/main/CHANGELOG.md)
- [Commits](Azure/setup-kubectl@v4.0.1...v5.0.0)

---
updated-dependencies:
- dependency-name: azure/setup-kubectl
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @ChrisLovering
Bump dorny/paths-filter from 3 to 4
12ec119 
Bumps [dorny/paths-filter](https://github.com/dorny/paths-filter) from 3 to 4.
- [Release notes](https://github.com/dorny/paths-filter/releases)
- [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md)
- [Commits](dorny/paths-filter@v3...v4)

---
updated-dependencies:
- dependency-name: dorny/paths-filter
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@jchristgit
Prevent httpd from dying on logrotate reloads
f2f654e
@jchristgit
Add meeting notes for 2026-03-26
7ee8597
@jchristgit
Initial guix-sops configuration
0cedfca 
This allows us to deploy secrets without making them publicly accessible
in the store.
@jchristgit
Pin channels
4d460c5
@jchristgit
Add instructions to use channels via lockfile
04354f9
@jchristgit
Copy link
Copy Markdown
Contributor Author

jchristgit commented Mar 26, 2026

Chris said good to merge.

@jchristgit jchristgit force-pushed the turing-improvements branch from d66451f to 54fded0 Compare March 26, 2026 20:33
@python-discord-policy-bot python-discord-policy-bot bot requested a review from a team March 26, 2026 20:34
@github-actions github-actions bot added group: github actions Pull requests that update GitHub Actions code group: ansible Issues and pull requests related to the Ansible setup group: kubernetes Issues and pull requests related to the Kubernetes setup group: docs Issues and pull requests related to our documentation component: email Issues relating to our email forwarding system, hosted on our netcup machines. labels Mar 26, 2026
@jchristgit
Copy link
Copy Markdown
Contributor Author

jchristgit commented Mar 26, 2026

Applied in master

@jchristgit jchristgit closed this Mar 26, 2026
@github-project-automation github-project-automation bot moved this from Up next to Done in Infrastructure Mar 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jb3 jb3 Awaiting requested review from jb3 jb3 is a code owner

Assignees

No one assigned

Labels

component: email Issues relating to our email forwarding system, hosted on our netcup machines. group: ansible Issues and pull requests related to the Ansible setup group: docs Issues and pull requests related to our documentation group: github actions Pull requests that update GitHub Actions code group: kubernetes Issues and pull requests related to the Kubernetes setup

Projects

Infrastructure
Status: Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@jchristgit @jb3