BBR behaves badly when it is not the sole connection. It slows down
other streams (bbr and cubic) and generally doesn't scale well when
deployed widely. Let's disable it so we don't make the internet for
others worse.

https://ripe76.ripe.net/presentations/10-2018-05-15-bbr.pdf

https://kanboard.archlinux.org/public/task/117/7dd7510424e4229247e8e0b90bf43e1553fce86cdf8475b60edc956ed5a8



Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

This unit has no ExecStop nor do we want a timeout for ExecStop but we
want one for ExecStart.

Our roles are switched to python3 and have to be updated to install the
python3 variant of modules to deploy the role.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Currently .all/ keeps symlinks for each package file that point to the
actual file. We also track all files in the /pacakages/ tree separated
into directories based on their pkgname. This rewrite rule matches the
.all/ URLs to the /packages/ directory tree so that we can eventually
delete the symlinks from .all/.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

This text is no longer relevant since zabbix configuration is now
handled via ansible and not via the zabbix website.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Update django to 1.11.18 security release

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Context: https://lists.archlinux.org/pipermail/arch-projects/2019-January/005063.html



Signed-off-by: Florian Pritz <bluewind@xinu.at>

arch-audit -u also recommends updating to testing packages, while this
is not something we recommend or want.

Add monitoring for our PostgreSQL DB size using a similiar construct as
the MySQL DB size monitoring with a perl script.

Add a role for the hefur torrent tracker. A simple
service which runs on tracker.archlinux.org. Note that our setup
overrides a few things of the systemd service.

Signed-off-by: Jelle van der Waa <jelle@vdwaa.nl>

This is mostly so that the roles runs OK and that we have every host in
there. This change only affects 2 unused pia machines. All other hosts
already set a template list.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

This breaks firewalld for machines where this variable hasn't yet been
reconfigured. We don't need python2 anywhere so just get rid of this and
use the python3 default I put into another group var already.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

This only changes the dns server of two unused PIA boxes. All other
machines were already configured like this.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

It's just a cat and only populates the variable. No need to mark it
changed every time.

Signed-off-by: Florian Pritz <bluewind@xinu.at>