Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

The module postgresql_privs deprected the "password" parameter in favour
of the "login_password" parameter, therefore replace accordingly.

https://github.com/ansible-collections/community.postgresql/blob/main/CHANGELOG.rst#id19

Fixes #603



Signed-off-by: Christian Heusel <christian@heusel.eu>

Using a cert named after the primary domain with `_legacy` appended.
However, the cert is only issued for the legacy domains, not the primary
domain.

Deploy for `ipxe.archlinux.org`.

Fixes: archlinux/releng#22

This is already done for the 'sudo' role, but we also have a few more
sudoers files which currently go in unverified.

Signed-off-by: Christian Heusel <christian@heusel.eu>

gcc is required by the zstandard Python package in order to build.

Fixes: 26f289b7 ("Capitalize the first letter of all task names")

ansible-lint 6.5.0 complains about:

  name: All names should start with an
        uppercase letter. (name[casing])

These are used to signal the start of the document in a stream of many
documents. As Ansible only supports one YAML document per file this is
unnecessary. About a third of our YAML documents already lacked these.

Thorben Günther authored 3 years ago and Kristian Klausen committed 3 years ago

Closes #358

Fix deploying archweb on gemini

Fixes: 316b8517 ("Add missing "create ssl cert" tasks")

yaml: truthy value should be one of [false, true] (truthy)
yaml: wrong indentation: expected 4 but found 2 (indentation)
yaml: too few spaces before comment (comments)
yaml: missing starting space in comment (comments)
yaml: too many blank lines (1 > 0) (empty-lines)
yaml: too many spaces after colon (colons)
yaml: comment not indented like content (comments-indentation)
yaml: no new line character at the end of file (new-line-at-end-of-file)
load-failure: Failed to load or parse file
parser-error: couldn't resolve module/action 'hosts'. This often indicates a misspelling, missing collection, or incorrect module path.

The former approach to export a maildir and iterate over it with a
script broke when the mail server and the web server got on their
own hosts. This will use IMAP IDLE to check for new mails and pass
them instantly to the djange manage.py script without storing the mail
locally.

Configured the variable for the custom nginx template used on maintenance mode. It is important that this template handles the maintenance
on it's own. Also, the maintenance mode was running on gemini, even though archweb_site is false there. Add a check for archweb_site, to make
sure the maintenance mode only runs on the machine hosting the site.

/srv/http/archweb has to be readable for nginx to serve css/js static
assets.

Rename the variable so it's more clear it's for the retro website.

Frederik Schwan authored 4 years ago and Sven-Hendrik Haase committed 4 years ago

also use systemd instead of service module

Instead of compiling the binary or relying on the binary pypi variant.

ansible 2.9.0 has a new git module feature gpg_whitelist which is an
array of allowed keys. If a tag or commit was signed with a different
key ansible aborts.

Signed-off-by: Jelle van der Waa <jelle@archlinux.org>

Signed-off-by: Jelle van der Waa <jelle@archlinux.org>

Switch from apcu caching to memcached with 512 MiB so that we have a
sustained cached instead of a php-fpm worker based cache which has a
shorter lifetime of 2000 requests before the worker get's killed and
respawned.

Python 3.3 has venv support, prefer this method over virtualenv.