Node's address lookup strips the scope ID from link-local IPv6
addresses, making them invalid and unable to be connected to.

We're getting hit with this since Node 17 because it now defaults to the
`verbatim` dns-result-order and this happens to return the link-local
IPv6 address for `matrix.archlinux.org` first.

Specify `ipv4first` so we return to Node 16's behavior.

We sadly run all that stuff in docker now.

Issue: #420

https://lists.archlinux.org/private/arch-dev/2021-October/016798.html

Only run it for te required playbooks, exclude the phrik playbook as we
only need it to give demize access to phrik and only running archusers
removes demize from the phrik group. Seperate bug which should be
fixed...

Eschwartz resigned as TU, Staff

See merge request !505

Create Hetzner cloud servers in Falkenstein (Germany)

See merge request !511

Sven considers this location to have higher capacity and reliability.

Create Hetzner cloud servers in Nuremberg (Germany)

See merge request !510

Follow-up to [1]; while most of our cloud servers are in Helsinki, the
latency from most of Europe is lower when accessing servers in Germany.

Pinging from multiple locations using ping.pe, the latency to Nuremberg
from most locations appears to be 10-20ms lower (compared to Helsinki).

[1] !500

loki: Simplify loki.yaml

See merge request !502

Loki v2.4.0 introduced a common config section[1][2] making the config
much smaller and better defaults.

So stripped loki.yaml down, removed options where the default is "good
enough" and tweaked retention settings per the upgrade notes[3].

So the config should basically be the example loki.yaml[4] + compactor,
retention enabled and a few tweaks (ex: compress chunks with zstd).

[1] https://github.com/grafana/loki/releases/tag/v2.4.0
[2] https://grafana.com/docs/loki/latest/configuration/#common_config
[3] https://grafana.com/docs/loki/latest/upgrading/#the-single-binary-no-longer-runs-a-table-manager
[4] https://github.com/grafana/loki/blob/v2.4.0/cmd/loki/loki-local-config.yaml

rsync.conf: Exclude debug package pools and repos

See merge request !509

Signed-off-by: Morten Linderud <morten@linderud.pw>

[1] aurweb!233

These are already known (so no need to hide them) and are fairly static
(so variables are more of a hindrance) so it's better to use the actual
usernames in the documentation. Also, simplify the first example given.

This reverts commit 5c4ff7af.

The account migration is done, so offsite backups can be re-enabled.

Complete rsync.net account migration

See merge request !501

New username; separate and longer account manager + storage passwords.

Also, have to use --remote-path=borg1 when interacting with rsync.net.

Create Hetzner cloud servers in Helsinki (Finland)

See merge request !500