Commit graph

129 commits

Author SHA1 Message Date
db0233691c lint: add back "useless" return to tf_prehook 2022-06-17 14:26:22 +01:00
61564e8c01 lint: tidy up code some more, pylint is enforcing 2022-06-17 14:02:10 +01:00
ac5a604587 lint: tidying up code in block tasks 2022-06-17 12:42:42 +01:00
8c411e39bc proxy: ensure use of only active proxies for smart proxy 2022-05-27 15:24:34 +01:00
0619fe743b proxy/cloudfront: add smart proxy alarms 2022-05-27 10:32:23 +01:00
c916624414 smart_proxy: asset domain configuration formatting 2022-05-25 15:57:00 +01:00
d99cf88f38 smart_proxy: add asset domains concept 2022-05-25 15:32:17 +01:00
dfb4d66557 smart_proxy: more escaping in the configuration 2022-05-25 11:01:04 +01:00
7bc38d10be smart_proxy: handle links to origin domain without trailing slash 2022-05-25 10:46:48 +01:00
f828d1779b proxy/azure_cdn: needs smart zone 2022-05-25 10:36:34 +01:00
c0a0474fbf proxy/azure_cdn: the origin has the smart requirement 2022-05-25 10:23:25 +01:00
5b503da621 proxy/azure_cdn: HACK! chain the cloudfront smart proxy where needed 2022-05-25 10:07:13 +01:00
dc0bfc8cb5 block/external: backwards comparison 2022-05-25 09:20:57 +01:00
66af6e6550 proxies: add smart proxy support
still to do:

* document new configuration options
* add smart proxies to groups view
* import bandwidth and CPU alarms
2022-05-25 09:07:10 +01:00
9b90101cf4 eotk: use published module 2022-05-23 11:27:35 +01:00
e18aece9b5 list/gitlab: no parallelism to avoid conflicts with multiple files in the same repo 2022-05-23 10:59:26 +01:00
592aa16734 block/external: more sanity checks 2022-05-23 10:55:59 +01:00
f31cb768ea list: add var for picky languages that require it 2022-05-19 12:27:47 +01:00
a1d777a81c alarm/http_status: ensure alarm exists for exception handling 2022-05-19 12:26:16 +01:00
cf027b5c32 list/gitlab: update to tf provider 3.14.0
if there are multiple files in the same repository
this will cause a conflict in previous versions
2022-05-18 16:40:34 +01:00
e2ce24bf3b alarms: refactor the alarms subsystem
also include eotk alarms now
2022-05-18 15:49:36 +01:00
a935055083 lists/git: always refresh when updating git repos
looks like errors can occur when the latest commit
isn't what is expected
2022-05-18 12:00:18 +01:00
8c9565f284 flake: remove unused import 2022-05-17 08:13:50 +01:00
dbb480a030 auto/lists: remove additional dot in filenames 2022-05-16 17:21:23 +01:00
6fe633bf0a lists: introduce obfuscated formats 2022-05-16 17:09:33 +01:00
e163c58445 block/roskomsvoboda: skip proxies with no url 2022-05-16 14:01:11 +01:00
b828e2bc99 alarm/http_status: catch generic RequestException 2022-05-16 13:41:17 +01:00
bc559d8fa2 proxy/cloudfront: transposed isinstance arguments 2022-05-16 13:36:20 +01:00
dd501a6e4e ci: add flake8 2022-05-16 13:29:48 +01:00
014596d271 security: fix all bandit issues 2022-05-16 12:47:40 +01:00
3665c34961 lots of typing fixes 2022-05-16 11:44:03 +01:00
51f580a304 auto/terraform: typing hints for base terraform module 2022-05-16 10:08:18 +01:00
55a0b19c8c block/ooni: add type hint for origin result 2022-05-15 18:56:15 +01:00
f7e83611f1 auto/base: type hint metadata 2022-05-15 18:56:15 +01:00
f96bbcf49d auto/terraform: straight up return a string for logs 2022-05-15 18:56:15 +01:00
264d5a870e bridge: explicitly declare ssh private key for hcloud 2022-05-14 14:43:30 +01:00
850ee09ce7 bridge: update openstack module to 0.0.7 for gandi 2022-05-14 13:59:38 +01:00
b7c4f00456 bridge: be explicit about ssh private key for gandi 2022-05-14 13:54:31 +01:00
9a8ce373d7 bridge: be explicit about ssh private key for ovh 2022-05-14 13:53:29 +01:00
d29f589eb4 eotk: remove out-of-band posthook run 2022-05-14 12:09:38 +01:00
3d280f391e block: log activities when auto-rotating proxies 2022-05-14 10:35:24 +01:00
ce520b87a5 eotk: import instance information from terraform 2022-05-13 15:40:59 +01:00
d7091ead5a automation: run some jobs less frequently 2022-05-13 09:28:54 +01:00
56ddd3a771 alarms: handle ConnectionError in http_check 2022-05-12 10:13:49 +01:00
54a2c457f0 list: add role to s3 lists
fixes: #12
2022-05-11 16:12:52 +01:00
ad63a9ff41 block: origin censorship is a warning, not critical 2022-05-11 14:25:58 +01:00
a7432a6b96 terraform: do not immediately fail if a lock is held
terraform will wait 15 minutes to see if the state
is released before returning an error

fixes: #16
2022-05-11 14:13:02 +01:00
f6d7f406a0 block: change roskomsvoboda automation frequency to 90 2022-05-10 10:37:24 +01:00
5dfc3931a8 block: import blocklist from roskomsvoboda 2022-05-09 14:11:05 +01:00
257a2eacea automation: bring eotk into new framework
see: #1
2022-05-09 08:55:11 +01:00