Skip to content

turing: Enable fail2ban, use unprivileged guix-daemon, clean up imports#632

Closed
jchristgit wants to merge 29 commits into
guix-sops-pinfrom
turing-improvements
Closed

turing: Enable fail2ban, use unprivileged guix-daemon, clean up imports#632
jchristgit wants to merge 29 commits into
guix-sops-pinfrom
turing-improvements

Conversation

@jchristgit
Copy link
Copy Markdown
Contributor

@jchristgit jchristgit commented Mar 23, 2026 •
edited
Loading 

                                  .-"``"-.
                                 /______; \
                                {_______}\|
                                (/ a a \)(_)
                                (.-.).-.)
  ________________________ooo__(    ^    )___________________________
 /                              '-.___.-'                            \
| Q. Why is this so clumsy?                                           |
| A. The trick is to use Perl's strengths rather than its weaknesses. |
|                 -- Larry Wall in <8225@jpl-devvax.JPL.NASA.GOV>     |
 \________________________________________ooo________________________/
                               |_  |  _|  jgs
                               \___|___/
                               {___|___}
                                |_ | _|
                                /-'Y'-\
                               (__/ \__)
                               ```

jchristgit and others added 17 commits March 11, 2026 21:30
@jchristgit
Add Joe's ACL key
237966c
@jb3
Add kutiekat aliases
7746c09
@jb3
Remove Graphite
e8a9775
@jb3
Add statsd-exporter deployment
797647f
@jb3
Exempt Prometheus from NGINX P99 timing alert
ad1cc13
@jb3
Add mod team as an AlertManager destination
9928b64
@jb3
Add some missing graphite categories
2777117
@jb3
Add Prometheus alert autodeployment
f41ad20
@jb3
Fix paths
723ed48
@jb3
Increase Discord join alarm threshold
03fef7e
@jb3
Update Graphite matching rules some more
b3b1fc2
@jb3
Add experimental alert for 20 percent guild member growth
c857601
@jb3
Add missing newline at end of discord alert config file
1d34b0f
@jchristgit @jb3
Only deliver moderation alerts to the mod team
83f5864 
The DevOps team does not concern itself with the problems of the chat
platform's moderator team.
@jb3
Update discord.yaml experimental members alert
de28481
@jb3
Update Discord experimental alerts
5e895c4
@jb3
Update Discord alerts
7a9db98
@jchristgit jchristgit requested a review from jb3 March 23, 2026 21:55
@jchristgit jchristgit changed the base branch from main to guix-sops-pin March 23, 2026 21:56
dependabot Bot and others added 8 commits March 26, 2026 21:17
@dependabot @ChrisLovering
Bump actions/deploy-pages from 4 to 5
def1799 
Bumps [actions/deploy-pages](https://github.com/actions/deploy-pages) from 4 to 5.
- [Release notes](https://github.com/actions/deploy-pages/releases)
- [Commits](actions/deploy-pages@v4...v5)

---
updated-dependencies:
- dependency-name: actions/deploy-pages
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @ChrisLovering
Bump azure/setup-kubectl from 4.0.1 to 5.0.0
9b9b416 
Bumps [azure/setup-kubectl](https://github.com/azure/setup-kubectl) from 4.0.1 to 5.0.0.
- [Release notes](https://github.com/azure/setup-kubectl/releases)
- [Changelog](https://github.com/Azure/setup-kubectl/blob/main/CHANGELOG.md)
- [Commits](Azure/setup-kubectl@v4.0.1...v5.0.0)

---
updated-dependencies:
- dependency-name: azure/setup-kubectl
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @ChrisLovering
Bump dorny/paths-filter from 3 to 4
12ec119 
Bumps [dorny/paths-filter](https://github.com/dorny/paths-filter) from 3 to 4.
- [Release notes](https://github.com/dorny/paths-filter/releases)
- [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md)
- [Commits](dorny/paths-filter@v3...v4)

---
updated-dependencies:
- dependency-name: dorny/paths-filter
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@jchristgit
Prevent httpd from dying on logrotate reloads
f2f654e
@jchristgit
Add meeting notes for 2026-03-26
7ee8597
@jchristgit
Initial guix-sops configuration
0cedfca 
This allows us to deploy secrets without making them publicly accessible
in the store.
@jchristgit
Pin channels
4d460c5
@jchristgit
Add instructions to use channels via lockfile
04354f9
@jchristgit
Copy link
Copy Markdown
Contributor Author

jchristgit commented Mar 26, 2026

Chris said good to merge.

@jchristgit jchristgit force-pushed the turing-improvements branch from d66451f to 54fded0 Compare March 26, 2026 20:33
@python-discord-policy-bot python-discord-policy-bot Bot requested a review from a team March 26, 2026 20:34
@github-actions github-actions Bot added group: github actions Pull requests that update GitHub Actions code group: ansible Issues and pull requests related to the Ansible setup group: kubernetes Issues and pull requests related to the Kubernetes setup group: docs Issues and pull requests related to our documentation component: email Issues relating to our email forwarding system, hosted on our netcup machines. labels Mar 26, 2026
@jchristgit
Copy link
Copy Markdown
Contributor Author

jchristgit commented Mar 26, 2026

Applied in master

@jchristgit jchristgit closed this Mar 26, 2026
@github-project-automation github-project-automation Bot moved this from Up next to Done in Infrastructure Mar 26, 2026
@ChrisLovering ChrisLovering deleted the turing-improvements branch April 14, 2026 08:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jb3 jb3 Awaiting requested review from jb3

Assignees

No one assigned

Labels

component: email Issues relating to our email forwarding system, hosted on our netcup machines. group: ansible Issues and pull requests related to the Ansible setup group: docs Issues and pull requests related to our documentation group: github actions Pull requests that update GitHub Actions code group: kubernetes Issues and pull requests related to the Kubernetes setup

Projects

Infrastructure
Status: Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@jchristgit @jb3