Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2025-05-13 20:22:34 -04:00
Code Issues Projects Releases Packages Wiki Activity
Shared server infrastructure - https://grapheneos.org/articles/grapheneos-servers
603 commits 1 branch 0 tags 2.2 MiB
Find a file
Daniel Micay fd31471ae3 enable CAKE for the new update server 
This wasn't initially enabled because we were concerned about a
potential bottleneck due to CAKE being single threaded. We expect the
Ryzen 9950X will be more than powerful enough for CAKE at 25Gbps and it
does appear to help substantially compared to fq_codel with maintaining
high throughput across problematic connections especially when combined
with BBR which we'll likely switch to for congestion control across the
servers, especially with BBRv3 on the horizon.
2025-04-03 17:08:49 -04:00
.github add GitHub funding metadata 2021-07-19 23:02:29 -04:00
certbot add nominatim.grapheneos.org subdomain for network server 2024-11-20 02:40:40 -05:00
guide add nftables dscp counter config to guide 2023-08-19 00:46:21 -04:00
home/.config fish: add vi keybinding setup 2024-11-29 14:03:58 -05:00
logrotate.d replace certbot log rotation with logrotate 2024-02-13 12:38:14 -05:00
mkinitcpio.d disable mkinitcpio fallback image 2024-03-04 13:13:58 -05:00
modprobe.d blacklist virtio_console module 2023-07-17 02:21:12 -04:00
modules-load.d set up systemd runtime watchdog support 2025-02-12 08:23:11 -05:00
nftables replace 0.releases.grapheneos.org server 2025-03-19 12:05:37 -04:00
packages rename new update server 2025-04-03 17:08:45 -04:00
pacman.d add directory structure for mirrorlist 2023-07-11 11:38:53 -04:00
ssh reduce SSH liveness check timeout to ~2 minutes 2024-07-02 18:06:47 -04:00
sysconfig chrony: save/restore measurement history for servers 2024-11-05 17:10:07 -05:00
sysctl.d drop kernel.sched_energy_aware sysctl 2025-03-19 12:13:06 -04:00
systemd enable CAKE for the new update server 2025-04-03 17:08:49 -04:00
tmpfiles.d add cleanup for chrony state 2024-11-05 16:59:54 -05:00
.gitignore extend info fetching to sysctl values 2024-07-24 16:58:11 -04:00
certbot-ocsp-fetcher Update certbot-ocsp-fetcher to match upstream 2024-07-01 21:37:10 -04:00
chrony.conf chrony: save/restore measurement history for servers 2024-11-05 17:10:07 -05:00
connection-stats clean up stats scripts 2023-07-16 01:25:27 -04:00
count count: handle optimized factory image downloads 2025-01-02 23:39:25 -05:00
crypttab drop discard for swapfile 2024-10-26 13:54:07 -04:00
deploy-initial disable systemd-userdbd.socket in initial deployment 2025-04-02 14:46:48 -04:00
disconnect add disconnect script 2024-09-25 17:44:13 -04:00
dns-stats dns-stats: show total TCP and UDP queries 2024-03-28 11:38:06 -04:00
fetch-info extend info fetching to sysctl values 2024-07-24 16:58:11 -04:00
for add batch command script 2024-11-17 10:38:51 -05:00
fstab.metal add 8.releases.grapheneos.org server 2025-04-02 14:47:25 -04:00
fstab.virtual add 8.releases.grapheneos.org server 2025-04-02 14:47:25 -04:00
grub disable autogroup since cgroups are used instead 2024-10-31 08:02:57 -04:00
hosts.sh raise journald limits for new update server 2025-04-03 17:08:49 -04:00
LICENSE update copyright notice 2025-02-05 04:40:50 -05:00
locale.conf switch to C.UTF-8 locale 2023-01-10 14:09:06 -05:00
logrotate.conf use standard log rotation approach for wtmp/btmp 2024-03-20 23:43:48 -04:00
mkinitcpio.conf switch to systemd-based initramfs 2024-10-19 13:54:54 -04:00
nginx-create-session-ticket-keys move umask to systemd unit configuration 2024-10-14 06:11:32 -04:00
nginx-rotate-session-ticket-keys move umask to systemd unit configuration 2024-10-14 06:11:32 -04:00
nginx-stats clean up stats scripts 2023-07-16 01:25:27 -04:00
ovh-mitigation rename OVH mitigation script 2023-07-03 18:35:43 -04:00
ovh-mitigation.py ovh-mitigation: add checking/toggling firewall 2024-07-05 00:40:20 -04:00
pacman.conf update for pacman 7.0.0 download sandbox 2024-09-15 01:14:01 -04:00
pacreport.conf pacreport: mark owners of more unowned files 2024-10-29 19:23:26 -04:00
README.md Fix readme 2021-12-16 12:43:34 -05:00
reboot improve reboot script confirmation message 2024-12-12 15:27:57 -05:00
requirements.in add OVH mitigation control script 2023-02-22 16:22:47 -05:00
requirements.txt update python dependencies 2025-02-04 03:23:13 -05:00
resolv.conf add resolv.conf 2022-07-03 09:05:41 -04:00
setup specify python3 in setup script 2023-07-06 22:12:26 -04:00
unbound.conf force DMARC enforcement for hotmail.com and live.com 2024-09-15 01:31:08 -04:00

README.md

Information about GrapheneOS servers is available in the GrapheneOS servers article on grapheneos.org.