New username; separate and longer account manager + storage passwords.

Also, have to use --remote-path=borg1 when interacting with rsync.net.

Create Hetzner cloud servers in Helsinki (Finland)

See merge request archlinux/infrastructure!500

Kristian Klausen authored 3 years ago and Jelle van der Waa committed 3 years ago

With Hetzner now having a datacenter in the US[1], we don't want to
accidentally create a server in the US, so let's always create them in
Helsinki where most of our cloud servers are.

[1] https://www.hetzner.com/news/11-21-usa-cloud/

prometheus-borg-textcollector is no longer started by timer, but instead
defines a WantedBy= relationship with the borg-backup{,-offsite} service.

Increase default time range from 90 days to 6 months.

rsync.net is about to migrate us to a new username/hostname pair.

Create a group for Wiki Maintainers in Keycloak

See merge request !496

This was a regression which has been fixed upstream.

This reverts commit 67e7677e.

We're no longer allowed to reserve formerly used namespaces.

Enable Unified Alerting and wire up with alertmanager

See merge request archlinux/infrastructure!495

Grafana v8.2.0 added support for Prometheus's Alertmanager[1] which can
be used with the Unified Alerting added in v8.0.0[2].

[1] https://github.com/grafana/grafana/releases/tag/v8.2.0
[2] https://grafana.com/blog/2021/06/08/grafana-8.0-unified-grafana-and-prometheus-alerts-live-streaming-new-visualizations-and-more/

Mostly changes from Grafana v8.0[1].

[1] https://grafana.com/docs/grafana/latest/whatsnew/whats-new-in-v8-0/

The security tracker is not compatible yet with the new sqlalchemy, use
the old version in our repos

archwiki: update to 1.36.2-1

See merge request archlinux/infrastructure!494

With Loki needing roughly 108GiB[1] and Prometheus at least[2]
116GiB[3], 200GiB sounds like a good starting point.

[1] increase(loki_ingester_chunk_stored_bytes_total[1w]) / 7 * 90
[2] https://www.robustperception.io/how-much-disk-space-do-prometheus-blocks-use
[3] (rate(prometheus_tsdb_compaction_chunk_size_bytes_sum[1w]) /
    rate(prometheus_tsdb_compaction_chunk_samples_sum[1w])) *
    increase(prometheus_tsdb_head_samples_appended_total[1w]) / 7 * 365

Useful for mail.archlinux.org where this setting doesn't matter since we
force the SSH command to passwd and zsh was removed as part of the tools
cleanup effort recently (stops shadow.service from complaining about zsh
missing).

It's not available as a shell anymore after tools were removed from it.

sort + groupby fanciness by @klausenbusk.

Fix nginx "single path" location blocks

Closes #293

See merge request archlinux/infrastructure!455

github-pull-closer[1] needs write access for closing the PRs.

[1] https://gitlab.archlinux.org/archlinux/github-pull-closer/

Fix #390

[1] https://github.blog/2021-04-05-behind-githubs-new-authentication-token-formats/

Ref #396

Clean up offload-build artifacts tasks and files

Closes #268

See merge request archlinux/infrastructure!478