heftig has agreed to have his access reduced, as a way to reduce the
number of people with access to the "super" vault.

With this change the matrix vault is moved from the "super" vault to the
"default" vault as that is needed for maintaining the matrix server.

Fix #567

Peter has previously been a Junior Package Maintainer and since the two
month period is now up and his changes in the packaging ecosystem
were all good so far they can be promoted as outlined in RFC 14.

Signed-off-by: Christian Heusel <christian@heusel.eu>

Fixes #641

Signed-off-by: Christian Heusel <christian@heusel.eu>

Fixes: 24e73359 ("Decommission patchwork.archlinux.org and replace it with a static copy[1]")

As per my announcement to arch-devops[1] and staff, this adds a Mumble
server for Arch Linux.

The password for the special root user SuperAdmin is automatically
generated on first launch and printed to the logs. I went ahead and
added it to the vault. It should not usually be required to login as
SuperAdmin though as long as there are user admins around.

This uses certbot for local certificates.

[1] https://lists.archlinux.org/archives/list/arch-devops@lists.archlinux.org/thread/AHAOSTGFJTLQDSXLWFORDKGR6RDVHYEI/

We are not on top of expiring bot tokens and we usually only notice when
someone else points it out.

It is also a bit cumbersome to add new bot tokens, so avoid the issue
altogether, by just extending the lifetime of the bot tokens
continuously.

Fix #617

Relates to #632

Relates to: #630

Signed-off-by: Christian Heusel <christian@heusel.eu>

Related to archlinux/archlinux-keyring#271



Signed-off-by: Christian Heusel <christian@heusel.eu>

Bert has previously been a Junior Package Maintainer, but the two
month period is now long up and their changes in the packaging ecosystem
looked good and their community engagement is awesome.

Signed-off-by: Christian Heusel <christian@heusel.eu>

pacman/curl does not utilize HTTP/3, but it makes sense to enable
regardless to ensure consistency.

We self-host the authoritative nameservers for the geo domains, so the
configuration has been tweaked to add the HTTPS DNS record for each geo
domain.

Ref #606

Signed-off-by: Christian Heusel <christian@heusel.eu>

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

https://lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/thread/QSBPAWQGOT66VHP62ODTMLAICRTBUYP7/

Related to #625



Signed-off-by: Christian Heusel <christian@heusel.eu>

Anonfunc has been a Junior packager for longer then two months.

Fixes: https://gitlab.archlinux.org/archlinux/infrastructure/-/issues/595

We do not usually expose metrics publicly and there is no good reason
for handling aurweb differently.

Fixes: 74757d6b ("Scape aurweb metrics")

Tomas has previously been a Junior Package Maintainer, but the two
month period is now long up and according to their sponsors their
changes in the KDE packaging ecosystem all looked good.

Fixes #616



Signed-off-by: Christian Heusel <christian@heusel.eu>

https://lists.archlinux.org/archives/list/arch-dev-public@lists.archlinux.org/thread/G57Z24ORXN3IJZEEXMMEB43M2QDJ343X/

Fixes: archlinux/infrastructure#605


Signed-off-by: Christian Heusel <christian@heusel.eu>

Archweb now exports Prometheus status via /metrics with request duration
information.

Carsme has previously been a Junior Package Maintainer, but the two
month period is now up and their changes all looked good.

Related to #579



Signed-off-by: Christian Heusel <christian@heusel.eu>

He was onboarded as a Junior Packager but mistakenly the wrong group was
assigned to him.

Fixes: 27a2c9ac ("Onboard bertptrs as Junior Package Maintainer")
Signed-off-by: Christian Heusel <christian@heusel.eu>

Related: #595

Signed-off-by: Christian Heusel <christian@heusel.eu>

related to archlinux/infrastructure#531



Fixes: c31dd330 ("prepare the split of repo and archive server")
Signed-off-by: Christian Heusel <christian@heusel.eu>

Fixes #593

Signed-off-by: Christian Heusel <christian@heusel.eu>

Fixes #591

Signed-off-by: Christian Heusel <christian@heusel.eu>

Fixes #592

Signed-off-by: Christian Heusel <christian@heusel.eu>

Fixes archlinux/infrastructure#587

Fixes #582



Signed-off-by: Christian Heusel <christian@heusel.eu>

related to #531



Co-authored-by: Kristian Klausen <kristian@klausen.dk>
Signed-off-by: Christian Heusel <christian@heusel.eu>

Fixes #579

Fixes: 4e5550a8 ("Decommission bugs.archlinux.org and replace it with a static copy[1]")

Fixes #575

Fix #573

See #554.

Fix #565