[1] https://lists.archlinux.org/pipermail/arch-dev-public/2021-January/030284.html

yaml: truthy value should be one of [false, true] (truthy)
yaml: wrong indentation: expected 4 but found 2 (indentation)
yaml: too few spaces before comment (comments)
yaml: missing starting space in comment (comments)
yaml: too many blank lines (1 > 0) (empty-lines)
yaml: too many spaces after colon (colons)
yaml: comment not indented like content (comments-indentation)
yaml: no new line character at the end of file (new-line-at-end-of-file)
load-failure: Failed to load or parse file
parser-error: couldn't resolve module/action 'hosts'. This often indicates a misspelling, missing collection, or incorrect module path.

Apollo had special firewall rules, removed them from the role.

Frederik Schwan authored Dec 02, 2020 and Jelle van der Waa committed Dec 12, 2020

While apollo hosts patchwork it needs to receive mail for
patchwork@archlinux.org. Those mails are forwarded from
mail.archlinux.org. This implies apollo being configures for the
archlinux.org domain. Since Patchwork is not maintained anymore,
this is a quick fix to prevent sending of forged mails via
apollo.

This sets the dovecot ports for imap and pop3 to 0 which disables those
services. For SMTPS we add the the SMTPS service on 465 first before
deprecating support for submission on 587.

Added the missing msa_header_checks to that tasks.

The 'bool' filter only accepts some strings.

For relay host users created on orion set the home directory to /
instead of the default /home/{{inventory_hostname_short}} which is not
created which makes shadow.service fail on orion.

when deploying the postfix role, specify postfix_relayhost variable with the
hostname of the smtp smarthost to use for delivery. all outbound smtp mail
will be delivered via the specified host.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

The discovery script now uses a regex and no longer cares where exactly
accounting is enabled. Follow systemd upstream by enabling it by
default.
Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Disable firewall because python2 module is not avaible and the tasks
fail which makes the playbooks fail and leads to handlers not being run.

https://github.com/ansible/ansible/issues/24855

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Forwards to an old IP, not needed any more.
Signed-off-by: Florian Pritz <bluewind@xinu.at>

Since the script was moved to the patchwork role, the script is being
installed there.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>