Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

This reverts commit 5dd8e051.

Setting RemainAfterExit breaks the timer and prevents it from running
again.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

There's a need for having the iso on soyuz, for the arch-boxes role,
so it can build the images without needing to download an iso from
external sources.

Requested on IRC, also no longer a dev/TU

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Make things technically official, not just on paper.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

I'm not sure if a symlink race is possible with lockfiles, but better
safe than sorry.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Without this hidden files will show up in the /srv/ftp tree and other
mirrors will sync these. Sometimes they get removed in the meantime and
then errors are printed on the downstream mirror. Just move them out of
the way and let rsync keep them in a dedicated directory until they are
ready to be moved into place.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

This is simpler/better than coding some complex check directly in
archweb and it should work just fine. Not really needed for our mirror
(no monitoring in archweb), but potentially important for downstream mirrors.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Add the new dependency on python-flask-talisman for CSP.

This allows zabbix to monitor the active/failed status of the service.
Otherwise systemd will discard it once the executable exits.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Disable retry files by default. Those can be enabled on a per role
or per playbook basis.

The security_tracker repository was moved to the archlinux organization
on github.

Create a systemd unit for patchwork memcached.

Configure the DEFAULT_FROM_EMAIL variable and also add a cache backend
configuration using the patchwork memcached instance.

Add a memcached systemd unit and start it on patchwork deployment.

Define the default from email for patchwork.

Create a patchwork handler for reloading systemd and memcached.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Spamassassin on apollo tries to connect to a local dns resolver, but
can't which leads to long timeouts. Flyspray sends mail via SMTP which
goes through SA and thus each request that sends a mail will also block
for a long time.

Fix this by adding unbound as a local resolver which is needed for
proper performance of SA since public resolvers are often blocked by
blacklists because they send too many requests.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

According to rumors, the bits travel faster to New Zealand with BBR.

Django generates an unique css, png and JavaScript files when
collectstatic is run. Which allows us to set an expiry of 1 month.

Signed-off-by: Jelle van der Waa <jelle@vdwaa.nl>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

The snapshot is not actually a mountpoint, but rather looks like a
directory.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>