Signed-off-by: Christian Heusel <christian@heusel.eu>

Move backup-related variable defaults from the database roles into the
borg_client role. Also check group membership to guard installation of
database backup helper scripts.

Due to the "systemctl is-active foo && backup-foo || true" shorthand,
errors during database dumping were being ignored. Change the MariaDB
section to also be wrapped in a proper if statement. Finally, get rid
of "|| true" silencing statements + enable errexit in helper scripts.

dbscripts: Upgrade to latest commit

See merge request !813

dbscripts@cde46716


includes fixes for pacman 6.1

Signed-off-by: David Runge <dvzrv@archlinux.org>

Onboard carsme as Junior Package maintainer

Closes #579

See merge request !815

Fixes #579

Fixes a NOT NULL violation related to Pacman 6.1 dropping MD5 checksums
from repository databases.

Registration has been disabled since 2023-07-09, so the code should have
been updated a long time ago.

Fixes: 4e5550a8 ("Decommission bugs.archlinux.org and replace it with a static copy[1]")

This shell behavior[1] in Bash 5.2 "expands occurrences of '&' in the
replacement string of pattern substitution to the text matched by the
pattern" but we want literal ampersands so escape them.

[1] https://www.gnu.org/software/bash/manual/html_node/The-Shopt-Builtin.html

Make the "Geo Mirrors" dashboard and metrics publicly available

See merge request !809

This may be interesting for our mirror administrators and mirror owners.

I tried backfilling the data, but was unsuccessful, due to a bug[1]. We
may try again if/when the bug is fixed.

[1] https://github.com/prometheus/prometheus/issues/13747

The only variables we want to change are MAKEFLAGS and SRCDEST so
this is a cleaner approach compared to templating the whole file.

pubkeys/eworm: update my actively used keys

See merge request !811

archwiki: Switch notification mail to noreply

Closes #563

See merge request !810

Change this to the noreply mail but also add a wiki tag to it so it can
more easily be filtered in mail programs.

Fixes #563



Signed-off-by: Christian Heusel <christian@heusel.eu>

Add new SSH key for polyzen

See merge request !806

archwiki: Switch captcha to time-based method

See merge request !808

Up until now the captcha has depended on the exact output of the pacman
version command which could lead to multiple problematic scenarios:

    a) User uses testing repos (user pacman newer)
    b) Server is not instantly updated (user pacman newer)
    c) User system is not updated (user pacman older)

Circumvent this problem by switching to a time based captcha instead.

Signed-off-by: Christian Heusel <christian@heusel.eu>

Update archmanweb to v1.10

See merge request !807

Onboard codingkoopa as support staff

Closes #575

See merge request !805

Fixes #575

Promote gromit to full DevOps

Closes #573

See merge request !798

Fix #573

archwiki: Update to version 1.41.0-3

See merge request !802

Signed-off-by: Christian Heusel <christian@heusel.eu>

The systemd environment variables can be read by anyone, so move the
secret to the configuration file, which can only be read by root and the
hedgedoc user.

Fix #562

The config file contain secrets, so it should not be world writable.

Fix #562