2025-09-02: Maintenance work meeting notes

[mroderick]

Agenda from Slack

In case Jonathan attends: updates from Kriszta

From Jonathan: I've got merge powers but I'm afk until Thursday. I know @Till is waiting for a key for an S3 bucket - I'm going to dedicate some time to that this week. I won't make the meeting, but will see you next week

"FATAL: no pg_hba.conf entry" in production logs

This was caused by someone externally trying to access the database. All Heroku databases are public, so this is to be expected.

It did eat up our log allowance in Papertrail, since we're on a free plan that only includes 10mb/day. We've added a filter to ignore those logs in the future, so our allowance will not get eaten up by these again.

The offending IP was: https://whatismyipaddress.com/ip/213.136.101.4

Rails upgrade: 7.2

Olle will start a branch, everyone encouraged to pair with Olle on it

Finding missing indexes for foreign keys, see discussion

This needs more work and discussion in order to be able to properly identify and fix these.

Caching static assets

We need access to Cloud Flare, so we can set this up correctly. Olle will look into how to add a middleware to Puma to set the correct headers for CloudFlare.

Performance improvements, let's make a list of ideas

We didn't discuss this one

dependabot should not update rails, yet this happened #2330

An inline comment from Dependabot revealed why this happened:

Note: Dependabot was ignoring updates to this dependency, but since you've updated it yourself we've started tracking it for you again. 🤖

Olle will make a comment to get Dependabot to close stop being so helpful!

Should we start moving to ViewComponent? What are the steps?

Olle will create a GitHub discussion, introducing ViewComponent and we can discuss there.

jemalloc

We are using a buildpack in production, which adds jemalloc. That dependency has been archived. See https://github.com/jemalloc

Most likely the current Heroku buildpack has similar and maintained memory allocator. This needs a bit of an investigation to confirm, and we can likely remove this buildpack entirely.

RECPATCHA_SITE_KEY - are we even using ReCAPTCHA?

We should create a GitHub discussion about removal of these, seemingly, unused values.
Morgan will do that.

[mroderick]

https://devcenter.heroku.com/articles/heroku-24-stack#upgrading-to-heroku-24
Heroku’s “Stack” concept has gotten a new version, heroku-24.
(We are on the not-latest heroku-22.)