This implements authentication to our repos.archlinux.org tier 0 mirror
via archweb.

He has too many smartcards!

implements #346

Add our uptimerobot to terraform so it's managed in code and we can
easily extend it. This currently only adds our to be monitored sites and
leaves the status page as is now.

Deleting resources on uptimerobot will cause terraform unable to run
see: https://github.com/louy/terraform-provider-uptimerobot/issues/82

References: #209

Sven-Hendrik Haase authored 3 years ago and Kristian Klausen committed 3 years ago

Co-authored-by: Kristian Klausen <kristian@klausen.dk>

Closes #94

Kristian Klausen authored 3 years ago and Jelle van der Waa committed 3 years ago

klausenbusk is our new newest Junior DevOp and he needs some access:
* bugs.al.org for helping with migrating Flyspray tasks to GitLab
* monitoring.al.org for setting up centralized logging

Our dbscripts role expects the default ssh key to be username + '.pub'.

Prefer using lists of maps with consistent keys.

yaml: truthy value should be one of [false, true] (truthy)
yaml: wrong indentation: expected 4 but found 2 (indentation)
yaml: too few spaces before comment (comments)
yaml: missing starting space in comment (comments)
yaml: too many blank lines (1 > 0) (empty-lines)
yaml: too many spaces after colon (colons)
yaml: comment not indented like content (comments-indentation)
yaml: no new line character at the end of file (new-line-at-end-of-file)
load-failure: Failed to load or parse file
parser-error: couldn't resolve module/action 'hosts'. This often indicates a misspelling, missing collection, or incorrect module path.

This adds a collaborative markdown editor as newly offered service which
is available via login for all Arch Linux Staff with an option to allow
anonymous edits by users (not default). Users are managed via keycloak
and require the Staff role to be allowed in, non staff keycloak users
currently will receive an internal server error due to an upstream
issue.

Closes: #133

https://lists.archlinux.org/pipermail/aur-general/2021-January/036079.html

Closes: #259

No need to store secrets for more than one matrix server.

Resignation email: https://lists.archlinux.org/pipermail/aur-general/2020-December/036048.html

Closes: #218

Giancarlo Razzolini authored 4 years ago and Jelle van der Waa committed 4 years ago

Change the archweb_db_host variable to point to archlinux.org instead of
apollo. This is of particular importance to gemini.

Application results:
https://lists.archlinux.org/pipermail/aur-general/2020-December/036034.html

Setup Kape servers as archive mirrors (asia,europe,america), Gitlab
runner and Rebuilderd worker. All machines except runner1 are EFI
machines with grub setup and a EFI parition which is not supported by
our ansible install role and is manually rolled out.