Commit Graph

187 Commits

Author SHA1 Message Date
Daniel Micay
ae3f52087e add matterbridge configuration to backups 2023-12-07 08:41:25 -05:00
dependabot[bot]
c5c056834d Bump actions/setup-python from 4 to 5
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4 to 5.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-07 02:23:30 -05:00
Daniel Micay
0ff5eb8776 remote-backup add privileges for mjolnir backup 2023-11-15 22:10:11 -05:00
Daniel Micay
00db61217c update charset_types 2023-11-06 01:55:25 -05:00
Daniel Micay
1cd3535546 reduce sendfile max chunk size to 256k 2023-11-06 01:54:26 -05:00
Daniel Micay
dba2c3c26d backup mjolnir data 2023-11-04 15:12:45 -04:00
dependabot[bot]
d6cee6024c Bump actions/checkout from 3 to 4
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-05 03:39:45 -04:00
Daniel Micay
7cf654f333 update pip-compile command 2023-08-19 00:29:36 -04:00
Daniel Micay
b3afabeb73 use low scheduling priority for remote-backup 2023-08-03 13:07:48 -04:00
Daniel Micay
b72159bf72 fix systemd directive sort order 2023-08-03 13:07:25 -04:00
Daniel Micay
58e41128ca update python dependencies 2023-07-29 22:17:13 -04:00
Daniel Micay
ac23da36e3 remove useless sync of local-backup to server 2023-07-26 04:56:35 -04:00
Daniel Micay
af04353d64 use fsync and preallocation for rsync 2023-07-26 04:46:39 -04:00
Daniel Micay
6b7dff0c64 simplify nginx configuration deployment 2023-07-15 17:58:03 -04:00
Daniel Micay
fd5c6b0c58 sync local-backup script 2023-07-15 15:13:28 -04:00
Daniel Micay
7f666deeb9 drop legacy block-all-mixed-content 2023-07-11 11:25:36 -04:00
Daniel Micay
01a0e97fdf use new OCSP cache path 2023-07-09 18:30:25 -04:00
Daniel Micay
6a34c523c9 specify python3 in setup script 2023-07-06 18:18:28 -04:00
Daniel Micay
f7f260a0ac update python dependencies 2023-06-30 10:54:56 -04:00
Daniel Micay
c31759b483 remove backup intermediates when finished 2023-06-29 10:52:16 -04:00
Daniel Micay
39711a6085 move mta-sts.matrix.grapheneos.org to mail server 2023-06-21 14:32:40 -04:00
Daniel Micay
7b897e0a6f use Python 3.11 for CI 2023-06-10 21:19:46 -04:00
Daniel Micay
b32a6b1715 regenerate requirements.txt 2023-06-06 22:03:34 -04:00
Daniel Micay
d6c8717a4f regenerate requirements.txt 2023-05-31 19:05:02 -04:00
Daniel Micay
e66a204ca7 avoid configuration warning with nginx 1.24.0 2023-05-23 18:22:29 -04:00
Daniel Micay
12e5ad3a7e add mta-sts configuration 2023-05-22 17:57:49 -04:00
Daniel Micay
341f7a3077 update call configuration 2023-05-13 11:13:47 -04:00
Daniel Micay
9550aa0fc7 consistent whitespace style 2023-05-05 14:46:11 -04:00
Daniel Micay
837d4f0c5c disable failure tracking for backend 2023-04-17 10:01:00 -04:00
Daniel Micay
32a33ba94f improve HTTP request logging
* add $upstream_cache_status
* add '-$connection_requests' after $connection
* enable subrequest logging

$connection_requests makes it much easier to see connection reuse in the
logs and also helps to understand subrequests.
2023-03-09 11:02:03 -05:00
Daniel Micay
937be19e46 add upstream timing to http log format 2023-03-07 14:18:27 -05:00
Daniel Micay
73cca1dbfb enable minimal stderr logging 2023-03-07 11:00:08 -05:00
Daniel Micay
139b0ed376 ssl_reject_handshake is working as intended 2023-03-07 10:36:12 -05:00
Daniel Micay
12b5478585 work around unreliable ssl_reject_handshake 2023-03-06 11:01:29 -05:00
Daniel Micay
697f926f63 avoid double logging for nginx error log 2023-03-06 00:55:32 -05:00
Daniel Micay
648ca1f657 disable keepalive for stub HTTP service 2023-02-27 02:38:35 -05:00
Daniel Micay
babdb283ad use consistent configuration style 2023-02-26 10:50:11 -05:00
Daniel Micay
ddcf7a2a36 add back request method to log format 2023-02-19 22:42:58 -05:00
Daniel Micay
d3c60a104b set baseline nginx root directory in http block 2023-02-19 11:51:37 -05:00
Daniel Micay
7725a8617d work around nginx keepalive configuration bug
https://trac.nginx.org/nginx/ticket/2012
2023-02-18 12:38:10 -05:00
Daniel Micay
74228f0fdc entirely disable access log for status socket 2023-02-18 08:18:07 -05:00
Daniel Micay
deb985e065 reject connections to invalid names 2023-02-17 23:16:01 -05:00
Daniel Micay
f8ac420c83 improve gitignore configuration 2023-02-17 19:05:22 -05:00
Daniel Micay
843e57b45f disable multipart range requests 2023-02-14 10:33:25 -05:00
Daniel Micay
d142058ade improve naming for http limit conn zone 2023-02-11 04:26:52 -05:00
Daniel Micay
8f673908ef move error_log configuration to top level 2023-02-11 04:07:55 -05:00
Daniel Micay
4540f10175 add request time to log format 2023-02-10 08:28:49 -05:00
Daniel Micay
7f61787026 switch to improved custom log format
This switches to a fully custom log format instead of using a variant of
the standard combined format since we don't use any tools requiring the
logs to be a standard format. This provides a cleaner format, allows us
to freely add new fields and gets rid of legacy/redundant fields.

The redundant timestamp already provided as the syslog timestamp is
dropped along with the legacy identd field always set to a dash.

This adds the connection serial number for identifying requests coming
from the same connection. TLS version is added as a replacement for our
previous addition of the URI scheme. This also adds the total request
length and total bytes sent to the client instead of only the body bytes
sent.
2023-02-10 08:04:30 -05:00
Daniel Micay
3ff77f472d add remote backup files to deploy script 2023-02-10 07:46:01 -05:00
Daniel Micay
66b973a3b6 allow resources system calls for remote backup 2023-02-10 07:46:01 -05:00