roles/archweb: Make the nginx config able to support preload by redirecting alternate domains to their https version before redirecting then to the main domain.

It's used by the syncrepo script that is linked in the wiki[1].

[1] https://wiki.archlinux.org/index.php/DeveloperWiki:NewMirrors



Signed-off-by: Florian Pritz <bluewind@xinu.at>

roles/archweb: Deny iso downloads on the /iso url. All the other downloads are allowed. Also change the location to use the configuration.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

roles/nginx: Add a handler for reloading nginx and change all the roles to use it, instead of restarting nginx.

playbooks/orion: Added the postgres_ssl setting to the playbook, since orion does not have postgres role

roles/archweb: Add a forced_deploy variable to trigger a deploy even when nothing seems to have changed. Also restart memcached on deploys.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

roles/dbscripts: Template rsyncd.conf.proto to allow apollo to kitchesink. Also change gen_rsyncd.conf.pl to use ssl only when enabled.

roles/archweb: Added a register for virtualenv changes and to deploy archweb in this case. Also changed nginx template to use the main domain.

roles/archweb: Deploy archweb on config changes too. Also, add a check to add ssl_require mode when connecting to remote hosts.

roles/archweb: Add an alternate domains variable, with the proper templating, redirecting even tls requests to the main domain

playbooks: Add the archweb role to apollo and change the orion role to use the new default variables, with a global db host variable