arch-audit hung as it was started before there was a working internet
connection. To work around this issue, add proper Wants/After targets
for network-online.target and for the rebuilderd textcollector let it
start after rebuilderd.service is "online".

sourceballs wasn't able to generate any new tarballs due to not being
able to sudo due to systemd hardening.

If the protection is enabled, saying any of these words shortly after
joining triggers a ban.

The monitoring on luna fails randomly and we have no proof that the mail
server does not work. Disable it for now until it works in a stable
fashion.

This adds a collaborative markdown editor as newly offered service which
is available via login for all Arch Linux Staff with an option to allow
anonymous edits by users (not default). Users are managed via keycloak
and require the Staff role to be allowed in, non staff keycloak users
currently will receive an internal server error due to an upstream
issue.

According to 'doc/maintenance.txt' the usermaint service needs to be
every 2 hours. To remove the last login IP address of all users that did
not login for 7 days.

Closes: #106

The reason is that we might want to independently retry the offsite backup in case it fails but not rerun the primary backup in that case.
This isn't possible with the current setup and so we'll have to split this up into two oneshot services.
The way it works is that borg-backup.service will schedule borg-backup-offsite.service to run after it which ensures that
no two backups are running at the same time and also that they can be indendently retried if one of them fails.

Collect prometheus btrfs errors from the btrfs command from btrfs-progs
which since 5.10 supports json output for device stats. The collected
errors will in the future trigger an alert when the errors reach a
certain treshold.

To allow packagers to test their changes in the testing repos, enable
them for rebuilderd.

To reduce bandwidth on mirror.pkgbuild.com.

Closes: #231

Kristian Klausen authored Jan 02, 2021 and Frederik Schwan committed Jan 25, 2021

The enotify extension can be used to send mails as other users, so let's
only enabled the sieve extensions, which we need.
The extensions was found by running `grep require` on the existing sieve
user scripts. mailbox wasn't in that list, but it is used by the global
spam-to-folder.sieve script.

Mediawiki allows the configuration of Referrer policy, which is set to
the same value as archlinux.org, retaining the referrer for https://
links as they might be beneficial as promotion. Set the X-Frame-Options
header to deny framing.

Databases used by sogrep are fetched by syncrepo from gemini, no point
in duplicating this work; consider this to be part of roles/dbscripts.

GitLab becomes unhappy if it can't poll localhost.

This reverts commit 750c2f6f.

For unknown reasons we basically allowed phrik to allow arbitrary sudo
commands which isn't great as phrik is an irc bot.

Add a new graph which shows the overall results summed up per status.