https://tools.ietf.org/html/rfc8461

Migrate conf.archlinux.org to GitLab Pages

Closes #61 and #237

See merge request !227

Setup TLS-RPT + MTA-STS in testing mode

See merge request !191

https://tools.ietf.org/html/rfc8461

https://tools.ietf.org/html/rfc8460

tf-stage1/archlinux: Cleanup SPF record

Closes #197

See merge request !229

5.9.250.164/2a01:4f8:160:3033::2 (luna) -> lists.archlinux.org SPF

138.201.81.199/a:apollo.archlinux.org: decommissioning TBD
66.211.214.132 (gerolde): decommissioned
88.198.91.70 (orion): decommissioned

Fix #197

Changes for the security.archlinux.org migration

See merge request !225

Based on the apollo playbook, add the roles needed for the security tracker to run.

The make package was missing from the list of packages that are needed for
the security tracker.

Change the security DNS record from a CNAME to an A and create the AAAA,
both pointing to the new security server.

Add the security.archlinux.org ssh host keys so we can have the backup working.

Added security.archlinux.org to the relevant groups on hosts and created a host_vars
so we can run the all-hosts-basic.

add aur-dev to borg backups to let the aur-dev role run properly

See merge request !228

Remove borg-restore.pl

See merge request !224

Sven-Hendrik Haase authored 4 years ago and Frederik Schwan committed 4 years ago

The perl script is currently breaking and there's not really an advantage to keeping it around.
We've never used it.

Migrate all services to use implicit TLS for SMTP Submission

See merge request !207

fix missing permissions for fetchmail to pass mails to patchwork

See merge request !226

Final changes for the patchwork migration

See merge request !219

Change the DNS record from a CNAME to apollo to point to the new patchwork machine.

Changed the user creation to not create the home directory anymore. Also fixed the uwsgi vassal
file owner and permissions, because the deploy was not working.

Added the missing systemd daemon-reload handler, otherwise running with -t patchwork
will not work.

Updated patchwork to version 3.0.0.

Created a playbook for patchwork.archlinux.org

Added patchwork to the relevant groups on hosts and created a new host_vars file
for it.