Signed-off-by: Jelle van der Waa <jelle@vdwaa.nl>

Earlier it would only snapshot the top dir which resulted in some awkward moments when another btrfs drive that was mounted to /home was empty in the backups because snapshots only snapshot the topmost device in the tree.

Added a host_vars entry for aur-dev.archlinux.org.

Robin Broda authored Dec 15, 2019 and Sven-Hendrik Haase committed Dec 27, 2019

Signed-off-by: Sven-Hendrik Haase <svenstaro@gmail.com>

Signed-off-by: Jelle van der Waa <jelle@archlinux.org>

Those who should know about the details on this were notified by email.

Initial playbook for AUR dev

Create a separate VPS for aur-dev so we can test new AUR role and also new AUR deployments
without breaking main AUR.

Created a new variable called archweb_allowed_hosts that allows ipxe.archlinux.org
to be served under archweb. We make sure on the nginx template that only a small subset
of the locations is served with weaker ciphers.

Restored the alternate domains variable, otherwise the maintenace mode role would not run.

Changed the nginx template to handle includes and also reworked the way the dict is used, by using
the dict2items filter on the template directly. We also have create a custom template for ipxe.archlinux.org
using weaker ciphers.

roles/archweb: Rework the variables so we get rid of the alternate_domains and create a new dict for custom ngnix templates

Removed the alternate domains variable and now we use the dict directly inside the nginx template. Also create a dict containing
the domains and custom templates for each of them. Right now we only have a custom template for ipxe.archlinux.org.

Added makerepropkg to the list of tools allowed on archbuild role.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Eli Schwartz authored Dec 14, 2019 and Florian Pritz committed Dec 15, 2019

Whitelist all extensions known to makepkg.
Signed-off-by: Eli Schwartz <eschwartz@archlinux.org>

From dircolors -p

Initial commit for adding ipxe.archlinux.org domain as an alternative domain
for www.archlinux.org, to be able to host the images with weaker cipher suites.

This gives us a maximum history of 1 year, configurable per-room down to
1 day.

synapse 1.7.0 now disables publishing the public room list by default.

irccat allows connections on 12345 on localhost and forwards them to the
archlinux-devops channel. To be used for zabbix to irc notificatons.

Signed-off-by: Florian Pritz <bluewind@xinu.at>