749 Commits

Author SHA1 Message Date
89d5849708 apply rate-limiting to wiki urls consistently 2026-03-25 19:47:31 -07:00
13a3a1cb5e add X-Forwarded-Proto header to let mw/gitea know requests came in over https 2026-03-25 19:46:53 -07:00
892eddcbbb fix imagemagick thumbnail size limit 2026-03-25 19:43:57 -07:00
c95fcfaaf2 implement frontend/backend network segmentation 2026-03-25 19:43:19 -07:00
0e09187b3e Merge branch 'claude-fix-backup-scripts' into claude-audit
* claude-fix-backup-scripts:
  fix var handling (more defensive)
2026-03-25 19:41:52 -07:00
8afcd3073b fix var handling (more defensive) 2026-03-25 19:41:39 -07:00
efb3fa0140 fix variable name error 2026-03-25 19:39:32 -07:00
3048c35647 actually print error message in backups canary 2026-03-25 19:38:29 -07:00
86997b5a55 add restart policy for mysql and mw 2026-03-25 19:37:13 -07:00
fadee2ea91 fix min password length to 10 2026-03-25 19:35:06 -07:00
87582b77b2 Merge branch 'claude-pin-versions' into claude-audit
* claude-pin-versions:
  pin gitea and nginx versions
2026-03-25 19:34:26 -07:00
aaa226d82a pin gitea and nginx versions 2026-03-25 19:33:08 -07:00
5f26ebac25 Merge branch 'claude-mw-upgrade-key' into claude-audit
* claude-mw-upgrade-key:
  no .mysql.rootpw.cnf file (empty)
  get MW upgrade key from env var
2026-03-25 10:36:56 -07:00
940e21f507 no .mysql.rootpw.cnf file (empty) 2026-03-25 10:35:38 -07:00
99ab12a2ba get MW upgrade key from env var 2026-03-25 10:35:38 -07:00
6c49dd3171 fix stupid timer issue 2025-12-06 19:04:03 -08:00
99616d5de5 5 per second 2025-10-16 02:43:30 -07:00
83f898192a bump rate limit to 6 requests per second 2025-10-16 02:42:59 -07:00
5eb9ee5c3c add rate limits to /wiki, /w, and gitea endpoints 2025-10-16 02:42:44 -07:00
df23627e9a add a mediawiki cache directory to mw conf 2025-10-16 02:42:25 -07:00
76dc820b2d bind-mount /var/log/nginx between container and host 2025-10-16 02:42:09 -07:00
6b2b21b668 add base nginx.conf with rate limiting 2025-09-24 12:26:20 -07:00
bcb04257fa add slow query log config for mysql 2025-09-24 12:26:08 -07:00
0cad1e0398 add nginx and mysql config files 2025-09-24 12:25:50 -07:00
14d70a919d add rate-limiting to https config 2025-09-24 12:25:13 -07:00
3aba9729e6 add Troubleshooting.md 2025-06-14 03:48:49 -07:00
eb840384d1 update gitea theme name in app.ini.j2 2025-06-14 03:47:59 -07:00
5bf613cd56 ban more jerks 2025-05-24 19:36:17 -07:00
ccfed3f3fc update mw skin 2025-05-24 19:36:17 -07:00
194e619537 3 weeks for backups 2025-03-09 10:39:23 -07:00
a0f9548fcf ban more jerks 2025-03-07 16:13:15 -08:00
418315150a ban more jerks 2025-03-07 15:55:14 -08:00
ebb304d374 ban more jerks 2025-03-07 15:43:51 -08:00
8580c2c1f0 ban jerks 2025-03-06 12:24:43 -08:00
a3f460113a add instructions for blocking IP addresses 2024-11-16 19:17:46 -08:00
e94f911d99 add "ban jerks" section to nginx config 2024-11-16 19:17:31 -08:00
f7446c5a2d chmod the logs 2023-10-22 08:27:17 -07:00
6d1fa940a7 add wikifiles restore script 2023-10-15 13:06:49 -07:00
cfac7c69dc fix env var problem 2023-10-15 13:06:48 -07:00
3287d57554 fix script comment 2023-10-15 13:06:48 -07:00
d347024939 update gitea app.ini jinja template 2023-10-02 07:34:19 -07:00
8e4f86c8c6 smol makefile fix 2023-08-22 04:33:15 -07:00
5b855a575a make adjustments to bring all pod backup scripts in sync 2022-07-16 13:19:39 -07:00
4248f86c64 fixup restore db script 2022-07-15 17:52:58 -07:00
f36011d4cc fixup restore wikifiles 2022-07-15 17:49:59 -07:00
4953dfb8f3 remove tree subdomain 2022-06-05 21:05:20 -07:00
d003935769 update php.ini upload size to match localsettings.php 2022-03-23 20:05:47 -07:00
58e795bd98 fix backup canary script 2022-03-17 15:20:02 -07:00
0709e883ea 8am 2022-03-17 14:37:04 -07:00
8965515215 run backups canary every day 2022-03-17 14:36:00 -07:00