opendev/system-config
Code Issues Proposed changes
Files
master
system-config/playbooks/roles
History
Jeremy Stanley 6402d4d488 Disable SecResponseBodyAccess for all static sites 
As a followup to I19aa313a322f6973c0927cf20753b71a0fe421be we've
continued to see increased memory use and disruptive OOM incidents,
so move the selective SecResponseBodyAccess switch to apply to every
vhost on the server.

Change-Id: I213e84ff24cd624429690005baafb93a1b82114a
2026-03-16 15:31:49 +00:00
..
accessbot
Reapply "Move system-config irc bots into quay.io"
2025-08-06 09:15:42 -07:00
add-inventory-known-hosts
bridge: Disable writing known_hosts files
2022-11-21 15:29:56 +11:00
afs-release
afs-release: better info when can not get lockfile
2022-10-11 10:53:02 +11:00
afsmon
Install python3-venv for venv creation on mirror-update
2025-05-28 15:13:32 -07:00
apache-ua-filter
Add large blocks of UA filters
2026-03-11 11:58:01 -07:00
base
Update base roles README
2025-07-29 09:24:53 -07:00
borg-backup
Handle borg 1.2 rc 1 for warnings behavior
2025-01-21 15:41:07 -08:00
borg-backup-server
Merge "Skip purged borg backups during backup pruning"
2024-11-25 18:44:02 +00:00
codesearch
Add ProxyPreserveHost to codesearch vhost
2026-01-22 15:17:03 -05:00
configure-kubectl
…
configure-openstacksdk
Remove nodepool configuration
2025-07-16 20:20:36 +00:00
create-venv
Fix task name to reflect correct distro
2024-07-09 09:12:13 +10:00
disable-puppet-agent
…
dstat-logger
dstat-logger: redirect stdout to /dev/null
2021-03-24 22:23:13 +00:00
edit-secrets-script
edit-secrets: configure gpg-agent/emacs
2022-11-03 10:07:20 +11:00
etherpad
Run all mysqldumps over tcp 127.0.0.1 instead of localhost socket
2026-01-15 11:10:43 -08:00
gerrit
Merge "Run all mysqldumps over tcp 127.0.0.1 instead of localhost socket"
2026-02-03 21:12:07 +00:00
gerritbot
Pull gerritbot from quay.io
2025-08-06 10:12:13 -07:00
gitea
Run all mysqldumps over tcp 127.0.0.1 instead of localhost socket
2026-01-15 11:10:43 -08:00
gitea-git-repos
gitea-git-repos: remove #!/usr/bin/env python
2022-11-23 08:26:28 +11:00
gitea-lb
Trigger load balancer deployment jobs when their roles update
2025-07-23 14:24:09 -07:00
gitea-set-org-logos
Update gitea to 1.19.3
2023-05-03 14:42:08 -07:00
grafana
Pull grafyaml from quay.io
2025-08-07 16:36:35 -07:00
graphite
Delete statsd gauges after 24h of inactivity
2025-09-17 11:08:29 -07:00
haproxy
Pull the haproxy and zookeeper statsd sidecars from quay
2025-08-07 12:37:28 -07:00
import-gpg-key
…
install-ansible
Revert "Cap django-health-check for ara installations"
2026-02-26 15:18:36 +00:00
install-ansible-roles
Disable recursive git clones with ansible
2025-07-08 18:22:59 -07:00
install-apt-repo
…
install-borg
Expand explanation of borg version pinning
2025-08-22 19:16:51 +00:00
install-certcheck
Disable recursive git clones with ansible
2025-07-08 18:22:59 -07:00
install-docker
Explictly install docker.io package
2025-10-24 06:36:08 -07:00
install-kubectl
…
install-launch-node
Deduplicate Rackspace control plane API keys
2024-03-12 19:17:09 +00:00
install-podman
…
iptables
Add iptables rule blocks to drop traffic from specific IPs
2025-07-23 14:16:49 -07:00
jaeger
Cleanup docker-compose.yaml versions in Noble services
2025-03-20 09:32:28 -07:00
jitsi-meet
Notify meetpad users when someone is recording
2025-04-11 14:48:47 -07:00
kerberos-kdc
Merge "kerberos-kdc: quote some integers to avoid string/int confusion"
2021-03-22 22:56:26 +00:00
keycloak
Use ::1 for keycloak db backups
2026-02-05 08:41:21 -08:00
letsencrypt-acme-sh-install
Disable recursive git clones with ansible
2025-07-08 18:22:59 -07:00
letsencrypt-config-certcheck
Add more LE debugging info to our Ansible role
2024-04-05 13:40:14 -07:00
letsencrypt-create-certs
Add mirror01.iad3.raxflex to our inventory
2025-08-20 10:25:23 -07:00
letsencrypt-install-txt-record
dns: abstract names
2023-04-19 09:53:10 +10:00
letsencrypt-request-certs
letsencrypt-request-certs: refactor certcheck list
2022-11-23 08:26:28 +11:00
limnoria
Reapply "Move system-config irc bots into quay.io"
2025-08-06 09:15:42 -07:00
lodgeit
Perform lodgeit mysqldump via tcp instead of local unix socket
2026-01-15 11:04:21 -08:00
logrotate
Cleanup opensuse mirroring configs entirely
2024-03-18 15:49:43 -07:00
mailman3
Merge "Add modsecurity waf rules to lists.opendev.org"
2026-02-25 19:31:11 +00:00
mariadb
Switch standalone mariadb to opendevmirror hosted mariadb image
2025-01-28 15:46:51 -08:00
master-nameserver
Disable recursive git clones with ansible
2025-07-08 18:22:59 -07:00
matrix-eavesdrop
Switch #opendev logging to Matrix
2026-01-20 08:47:48 -08:00
matrix-gerritbot
Improve opendev's matrix gerritbot repo list
2025-12-03 08:49:23 -08:00
mirror
Clean up OpenEuler mirroring infrastructure
2025-09-17 18:33:15 +00:00
mirror-update
Clean up OpenEuler mirroring infrastructure
2025-09-17 18:33:15 +00:00
nameserver
…
openafs-db-server
…
openafs-file-server
…
openafs-server-config
Add tony's AFS admin user to UserList
2025-04-04 11:35:52 +11:00
opendev-ca
Correct internal tracing server cert name
2022-09-28 10:38:41 -07:00
pip3
Add support for python3.8 get-pip.py on focal
2025-04-29 16:22:10 -07:00
ptgbot
Pull ptgbot from quay.io
2025-08-06 10:49:45 -07:00
puppet-run
…
puppet-setup-ansible
…
rax-dns-backup
rax-dns-backup: fix parsing
2022-11-21 11:44:07 +11:00
registry
Fix registry container name in pruning cron job
2024-11-25 08:30:13 -08:00
reprepro
UCA: Add Gazpacho
2026-02-06 22:30:30 +01:00
root-keys
…
run-selenium
Pull the selenium standalone-firefox image from quay
2025-03-04 07:32:46 -08:00
static
Disable SecResponseBodyAccess for all static sites
2026-03-16 15:31:49 +00:00
statusbot
Add matrix config support to statusbot deployment
2025-12-02 15:40:18 -08:00
sync-project-config
Update sync-project-config to delete
2025-07-02 16:28:11 -07:00
vos-release
…
zookeeper
Upgrade ZooKeeper to 3.9
2025-11-10 14:11:03 -08:00
zuul
Remove nodepool configuration
2025-07-16 20:20:36 +00:00
zuul-executor
Fix zuul service graceful shutdown routines
2025-10-31 14:55:41 -07:00
zuul-launcher
Fix zuul service graceful shutdown routines
2025-10-31 14:55:41 -07:00
zuul-lb
Trigger load balancer deployment jobs when their roles update
2025-07-23 14:24:09 -07:00
zuul-merger
Fix zuul service graceful shutdown routines
2025-10-31 14:55:41 -07:00
zuul-preview
Switch zuul container images to quay.io
2023-04-26 10:40:30 -07:00
zuul-scheduler
Finish removing zuul-status-backup
2026-01-09 17:04:53 -08:00
zuul-status-backup
Finish removing zuul-status-backup
2026-01-09 17:04:53 -08:00
zuul-user
Update zuul ssh keys
2026-01-09 15:28:10 +01:00
zuul-web
Remove docker compose version from zuul services
2025-06-30 15:34:23 -07:00
set-hostname
…