We're not using LDAP after all.

It's pretty complicated to express what we want but we eventually succeeded. We even found a bug in Keycloak while implementing this and had to patch the package.

Disallow all pages with /index.php? as this excludes wiki history pages
which are shown as
https://wiki.archlinux.org/index.php?title=Lala&action=history to allow
us to remove the lockdown plugin.

Use with_items to make adding sync configurations easier.

Use Gitlab's official backup tool for dumping the database, git
repositories and other data with a wrapper script similiar to the
postgres and mysql backup scripts.

Signed-off-by: Jelle van der Waa <jelle@archlinux.org>

If they are not checked first, we will run into a situation where we ask the user twice to provide an OTP.

This wrapper automatically handles auth and server via Ansible vault information that we have already.

As flyspray has no captcha for registering, we deploy this stop gap
measure to stop bots registering spam accounts.

We ran at the bare minimum and cx51 should last us some time.

oidentd was used for matrix but was moved away from in
04b4c61e and phpinfo was only created to test php-fpm.

This was an attempt to block too many requests from bots but it leads to
an increase of cpu usage and blocking wiki administrators.

As the dutch registrar has blocked or what they claim rate limited
connections from orion.

Signed-off-by: Jelle van der Waa <jelle@archlinux.org>

This reverts commit 14097eee.

We already have group_vars/all/root_access.yml
and playbooks/tasks/reencrypt-vault-key.yml .

This one has a trivial NGINX config.

Add appservice and federation_sender workers, which do not need any
NGINX configuration.

The crond role was deployed on soyuz which no longer exists and is no
longer needed on dragon.

Signed-off-by: Jelle van der Waa <jelle@archlinux.org>

Signed-off-by: Jelle van der Waa <jelle@archlinux.org>

Ansible the reproducible.archlinux.org website which is as of now still
released from jelly's github and will soon be on archlinux's official
infra.

Signed-off-by: Jelle van der Waa <jelle@archlinux.org>