cfp-2024 → cfp

group_vars/gitea/vars

@@ -36,7 +36,8 @@ nft_deny_list: |
   ip saddr 94.103.188.103 counter drop comment "2024-03-22: user profile spam"
   ip saddr 78.40.116.193 counter drop comment "2024-03-22: user profile spam"
   ip saddr 159.253.120.5 counter drop comment "2024-03-22: user profile spam"
-  ip saddr 176.123.1.195 counter drop comment "2024-03-31: created 108 unactivated accounts"
+  ip saddr 176.123.0.0/21 counter drop comment "2024-03-31: created 108 unactivated accounts"
   ip saddr 43.225.192.242 counter drop comment "2024-04-04: advertising in user profile"
   ip saddr 117.216.199.83 counter drop comment "2024-04-16: advertising in user profile"
   ip saddr 37.221.65.103  counter drop comment "2024-04-17: user profile spam"
+  ip saddr 168.100.10.122  counter drop comment "2024-04-18: user profile spam"

ponyconf.yml

@@ -5,8 +5,6 @@
     ponyconf_sites:
       - domain: 'cfp-2023.pycon.fr'
         authenticator: gandi
-      - domain: 'cfp-2024.pycon.fr'
-        authenticator: gandi
     ponyconf_user: ponyconf
     ponyconf_home: "/home/{{ ponyconf_user }}"
     ponyconf_imap_password: !vault |
@@ -41,25 +39,25 @@
         home: "{{ ponyconf_home }}"
         system: true
 
-    - name: PonyConf nginx redirection
+    - name: cfp-2024 is now a pretalx instance
       include_role: name=nginx
       vars:
-        nginx_domain: "cfp.pycon.fr"
-        nginx_certificates: ["cfp.pycon.fr"]
+        nginx_domain: "cfp-2024.pycon.fr"
+        nginx_certificates: ["cfp-2024.pycon.fr"]
         nginx_conf: |
           server
           {
               listen [::]:80; listen 80;
-              server_name cfp.pycon.fr;
-              return 301 https://cfp-2023.pycon.fr$request_uri;
+              server_name cfp-2024.pycon.fr;
+              return 301 https://$host$request_uri;
           }
 
           server
           {
               listen [::]:443 ssl http2; listen 443 ssl http2;
-              server_name cfp.pycon.fr;
-              include snippets/letsencrypt-cfp.pycon.fr.conf;
-              return 301 https://cfp-2023.pycon.fr$request_uri;
+              server_name cfp-2024.pycon.fr;
+              include snippets/letsencrypt-cfp-2024.pycon.fr.conf;
+              return 301 https://cfp.pycon.fr$request_uri;
           }
 
     - name: PonyConf nginx config

roles/gitea/templates/app.ini.j2

@@ -47,7 +47,7 @@ REGISTER_EMAIL_CONFIRM = true
 ENABLE_NOTIFY_MAIL = true
 DISABLE_REGISTRATION = false
 ALLOW_ONLY_EXTERNAL_REGISTRATION = false
-ENABLE_CAPTCHA = false
+ENABLE_CAPTCHA = true
 REQUIRE_SIGNIN_VIEW = false
 DEFAULT_KEEP_EMAIL_PRIVATE = false
 DEFAULT_ALLOW_CREATE_ORGANIZATION = true