Superseded by archive.archlinux.org

https://tools.ietf.org/html/rfc8461

https://tools.ietf.org/html/rfc8461

https://tools.ietf.org/html/rfc8460

5.9.250.164/2a01:4f8:160:3033::2 (luna) -> lists.archlinux.org SPF

138.201.81.199/a:apollo.archlinux.org: decommissioning TBD
66.211.214.132 (gerolde): decommissioned
88.198.91.70 (orion): decommissioned

Fix #197

Change the security DNS record from a CNAME to an A and create the AAAA,
both pointing to the new security server.

Change the DNS record from a CNAME to apollo to point to the new patchwork machine.

This makes it easier for projects to use it as they only have to provide a single CNAME entry
instead of having to provide a A and a AAAA entry.

Given that we are migrating everything out of apollo, create a machine
for hosting security.archlinux.org

Created a cx11 server for the patchwork migration and lowered its CNAME DNS record.

Changed the wiki's dns record from a CNAME pointing to apollo, to an A/AAAA records
pointing to the new machine ip addresses.

The additional volume is not needed since the machine has actually
40 G of diskspace. The btrfs partition had just to be resized.

This reverts commit d33427fa.

Created a new CPX11 server for the wiki and lowered the TTL of the wiki CNAME
entry.

Giancarlo Razzolini authored Dec 18, 2020 and Jelle van der Waa committed Dec 20, 2020

tf-stage1/archlinux: Change DNS records for the archweb migration and also increase the machine size

Changed the A and AAAA record for @ to point to the new machine. Also, since we can't have CNAME to
@, change www from CNAME to A and AAAA and point to the new machine too. The other domains were kept
CNAME, but pointing to www in this case. Also, the master-key domain only had an A record, so added an
AAAA record too. The TTL is still at 600, but we can increase after a while.

Giancarlo Razzolini authored Dec 18, 2020 and Jelle van der Waa committed Dec 20, 2020

Escape the value, since TXT records need it.

The security tracker will be migrated to a new CX11 server.

As we want to serve mirros and the archive add a new domain for the
archive so the mirror and archive can be hosted.

Giancarlo Razzolini authored Dec 04, 2020 and Sven-Hendrik Haase committed Dec 12, 2020

Lower the ttl of master-key, dev, packages and ipxe

Giancarlo Razzolini authored Dec 04, 2020 and Sven-Hendrik Haase committed Dec 12, 2020

tf-stage1/archlinux.tf: Lower TTL for archlinux.org and www.archlinux.org and create a new server for archlinux.org

For the archweb migration, we need to lower the TTL and create a new archlinux.org server to host the site.

Setup Kape servers as archive mirrors (asia,europe,america), Gitlab
runner and Rebuilderd worker. All machines except runner1 are EFI
machines with grub setup and a EFI parition which is not supported by
our ansible install role and is manually rolled out.

Jelle van der Waa authored Nov 21, 2020 and Jelle van der Waa committed Dec 03, 2020

The repro3.pkgbuild.com machine was a packet.net box with an Ubuntu
installation. Now converted to an Arch Linux installation managed by
ansible with a new rebuilderd_worker role.

also move the dkim key generation to the docs as this is only run ~once

In coordination with Foxboron, the box has fulfilled its use and has been deleted.

Earlier, Terraform would always show a diff because Hetzner DNS API will tranform our entries
after submitting them. This commit ensures that the entries are in the same format the API expects
them to be in from the start.