psf-salt
psf-salt copied to clipboard
python
PSF infrastructure configuration
Bumps [django](https://github.com/django/django) from 1.2.3 to 3.2.24. Commits f5c8808 [3.2.x] Bumped version for 3.2.24 release. c1171ff [3.2.x] Fixed CVE-2024-24680 -- Mitigated potential DoS in intcomma template ... 9dc3456 [3.2.x] Added stub...
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot] avatar"){kind=avatar}
currently the default MOTD doesn't make people aware that hosts are pretty much fully automated by salt. we should override it with something that informs users :)
Deadman snitch currently gets an [auto generated key/check](https://github.com/python/psf-salt/blob/main/salt/_extensions/pillar/dms.py) for each server. We need to either add a step to our infra.psf.io [migration guide](https://infra.psf.io/guides/migration-recipe.html) that pauses the service during the migration...
There are some instances where we are calling `latest` when pinning our Ubuntu upgrades to salt. For example, we do [this](https://github.com/python/psf-salt/pull/331/files#:~:text=%22%5D%20%7D%7D/-,latest,-jammy%20main) in our `/salt/base` environment for `salt.sls` We should go...
A simple change, in the `/salt/base` environment for `codespeed.sls` we need to include configurations that adds the `nginx` user to the `codespeed` group for proper automated provisioning of static files...
A small change should be made to infra.psf.io's [Migrating to a new host guide](https://infra.psf.io/guides/migration-recipe.html#migrate-the-host), step 7 of "Shutdown and reclaim hostname" to include `salt-minion` to the command. Step should look...
https://github.com/python/psf-salt/blob/31d9219bb523754643e2dc37fe769b18df7589a5/pillar/base/users.sls#L263-L270 According to this, I should be able to connect, though it is rejecting my key for some reason. Maybe the configs aren't synced yet though this change is pretty...
WIP: Currently, this PR introduces globally applied `mod_qos` [Client Level Control ](https://mod-qos.sourceforge.net/#clientlevelcontrol)directives to establish rate limiting for our hg service. Although, the current configuration applies rate limiting specifically to `hg.conf,`...
`mail.python.org` do have an IPv6 (and an IPv4): ``` $ dig A +short mail.python.org 188.166.95.178 $ dig AAAA +short mail.python.org 2a03:b0c0:2:d0::71:1 ``` But it does not accept emails on its...
``` [WARNING ] The function "module.run" is using its deprecated version and will expire in version "Phosphorus". ``` Some of our states use `module.run` which apparently is using a deprecated...