gitlab.archlinux.org's host SSH daemon now listens on port 2222. Adjust
the sync-ssh-hostkeys task to take this into account. Port 22 is for GL.

Move GitLab's SSH to port 22 and sshd to port 2222

See merge request !716

With the ongoing git migration[1] our GitLab will gain a lot more usage,
so GitLab should get the default ssh port and then DevOps can use a
non-standard port.

We will redirect the old port (222) to the new port for some time, so
fetching won't break for existing local repositories.

[1] https://archlinux.org/news/git-migration-announcement/

tasks: add a temporary AUTHORS creation task

See merge request !715

Jelle van der Waa authored 1 year ago and Levente Polyak committed 1 year ago

Signed-off-by: Levente Polyak <anthraxx@archlinux.org>

gcc is required by the zstandard Python package in order to build.

security-tracker: cache all json API and feed requests

See merge request !706

This avoids the issue of ending up with a HTML page that contains a
redirect link if we are not hitting the final endpoint with the
retrieved link.

archusers: introduce new groups for packaging

See merge request !714

The accepted RFC has merged [community] into [extra] so now all
packagers will need to be into one base group. The RFC also introduces
junior packaging roles.

And fix optional features.

aurweb: archives moved to separate folder

See merge request !709

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

This reverts commit 6d5a8767.

Let's try to find out the real reason first. Plus, this might not have
worked well, as the default systemd restart time limit would not catch
repeated restarts.

The gitlab-exporter service occasionally fails with errors like:

  Error: missing: `response data`
  Caused by: MissingData("response data")

Let's see if restarting it on errors automatically helps avoid this.

New feature by Hetzner, primary IPs are a way to manage addresses
assigned to each cloud server. This allows having IPv6-only boxes.

Newer = better.

Move gitlab to bare metal host

See merge request !707

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

aurweb: release 6.2.3

See merge request !708

This release removes the php code and adjusts the location of .gz
artifacts.

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

Onboard gromit as TU

Closes #510

See merge request !705

Closes: #510

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

sq verify --signer-cert now expects a fingerprint/key ID.

This also simplifies the request limit configuration as json API and
feed requests are cached hence a more strict request limit is not really
necessary anymore.

- Configure a uwsgi cache of 1GB for all json API and feed requests
- Cache JSON API and feed requests for 5 minutes
- Use a single global request limit zone

Signed-off-by: Levente Polyak <anthraxx@archlinux.org>

Sequoia now manages the trust level, so we need to add the fingerprints
and mark those keys trusted before verifying the file.

Add artafinde to dev and multilib groups

See merge request !699

offboaring checklist: add move from active to fellow

See merge request !688