On Mon, Sep 25, 2017 at 01:54:49PM -0700, Kevin Fenzi wrote: > This morning pkgs02 stopped answering to git:// clone urls from koji, > breaking builds. Could we make koji also use https:// nowadays? I remember that there was a ticket about this. > systemd was happy after that, but load was still very very high. Looking > I found a number of git clones from external ip's. Since there's no > reason for this (external people should use https:// clone urls or > ssh://) I blocked those except from 10.0.0.0/8. > > Since this was outage causing for builds I went ahead and did all this, > but would like to get retroactive +1s or any adjustments I might have > missed. +1 (for no unencrypted services) Kind regards Till _______________________________________________ infrastructure mailing list -- infrastructure@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to infrastructure-leave@xxxxxxxxxxxxxxxxxxxxxxx