https://github.com/ansible-community/ansible-lint/issues/953

As flyspray does not support PHP 8 as of yet, transition to the php7
package by simply introducing a new php7_fpm role.

Add correct After targets for prometheus_exporters

See merge request archlinux/infrastructure!297

arch-audit hung as it was started before there was a working internet
connection. To work around this issue, add proper Wants/After targets
for network-online.target and for the rebuilderd textcollector let it
start after rebuilderd.service is "online".

Stop excluding the iso dir on mirrors

See merge request archlinux/infrastructure!302

Add MIT License

Closes #232

See merge request archlinux/infrastructure!301

Fixes: #232

sourceballs wasn't able to generate any new tarballs due to not being
able to sudo due to systemd hardening.

security-tracker: bump to latest release 0.10

See merge request archlinux/infrastructure!300

If the protection is enabled, saying any of these words shortly after
joining triggers a ban.

The monitoring on luna fails randomly and we have no proof that the mail
server does not work. Disable it for now until it works in a stable
fashion.

offboard barthalion

See merge request archlinux/infrastructure!298

Update jleclanche.pub

See merge request archlinux/infrastructure!295

Add hedgedoc as new service

See merge request archlinux/infrastructure!292

This adds a collaborative markdown editor as newly offered service which
is available via login for all Arch Linux Staff with an option to allow
anonymous edits by users (not default). Users are managed via keycloak
and require the Staff role to be allowed in, non staff keycloak users
currently will receive an internal server error due to an upstream
issue.

Enable aurweb-usermaint timer

Closes #106

See merge request archlinux/infrastructure!290

According to 'doc/maintenance.txt' the usermaint service needs to be
every 2 hours. To remove the last login IP address of all users that did
not login for 7 days.

Closes: #106

Remove dragon (fixes #267)

Closes #267

See merge request archlinux/infrastructure!291

Restart failed backups (fixes #270)

Closes #270

See merge request archlinux/infrastructure!288

The reason is that we might want to independently retry the offsite backup in case it fails but not rerun the primary backup in that case.
This isn't possible with the current setup and so we'll have to split this up into two oneshot services.
The way it works is that borg-backup.service will schedule borg-backup-offsite.service to run after it which ensures that
no two backups are running at the same time and also that they can be indendently retried if one of them fails.