Ref #485

aurweb: bump to v6.1.9

See merge request archlinux/infrastructure!661

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

Copy the latest dashboard from upstream, fixing the graphs.

Ref: rfcs!15

Similarly to geo.mirror.pkgbuild.com, this is monitored elsewhere.

Fix #475

No reason this should be 0600 as it doesn't contain any sensitive data;
switch it back to the package's default permissions of 0644.

syncrepo: let mirrorsync perform the repo syncing

See merge request archlinux/infrastructure!652

This role will still handle setting up nginx and rsyncd, due to specific
configuration requirements these services have.

We're also effectively relieving build.archlinux.org of rsyncd duties as
it is not something it should be doing anyway.

mailman: update mkinitcpio URL in arch-projects mailing list description

See merge request archlinux/infrastructure!654

mkinitcpio moved from GitHub to gitlab.archlinux.org.
See archlinux/infrastructure#474.

I think this was renamed when Keycloak switched to Quarkus.

keycloak: remove /auth from all Keycloak endpoints

See merge request archlinux/infrastructure!655

From [1]: "By default, the new Quarkus distribution removes /auth from
           the context-path."

[1] https://www.keycloak.org/migration/migrating-to-quarkus

matrix: Enable backchannel logouts from keycloak to synapse

See merge request archlinux/infrastructure!653

SQLAlchemy 1.4 no longer accepts engine URLs of the form postgres://.

https://docs.sqlalchemy.org/en/20/changelog/changelog_14.html#change-3687655465c25a39b968b4f5f6e9170b

CacheDir, as configured by common's pacman.conf task, already includes
the local package mirror when available (on mirrors, gemini and build).

This worked because riscv was the only nginx-enabled mirror.

Fixes: 43eb814b ("Combine sync{archive,debug,riscv} into mirrorsync")

sshd: adjust /etc/ssh and includes dir permissions

See merge request archlinux/infrastructure!651

There is no reason these should have such restrictive permissions, and
missing the execute bit appears to be a mistake. Let /etc/ssh keep the
mode from the package (0755). Use the same for the includes directory.

Update archmanweb to v1.5

See merge request archlinux/infrastructure!650

aurweb: new release

See merge request !649

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

Migrate PostgreSQL to C.UTF-8

Closes #470

See merge request !643

C.UTF-8 is installed by default, so we can avoid messing with locale-gen
by using that.

All the postgres servers (excluding matrix due to[1]) have been migrated
with the following commands:
# sudo -u postgres pg_dumpall > d
# sed "s/LOCALE = 'C'/LOCALE = 'C.UTF-8'/" -i d
# systemctl stop postgresql.service
# mv /var/lib/postgres/data{,.old}
$ ansible-playbook --diff -t postgres playbooks/<host>.yml
# sudo -u postgres psql < d

[1] https://github.com/matrix-org/synapse/blob/19a57f4a3710d6c3f7cc9d031e0e59bc2ed3b052/docs/postgres.md#fixing-incorrect-collate-or-ctype

Fix #470