Created a cx11 server for the patchwork migration and lowered its CNAME DNS record.

Changed the wiki's dns record from a CNAME pointing to apollo, to an A/AAAA records
pointing to the new machine ip addresses.

The additional volume is not needed since the machine has actually
40 G of diskspace. The btrfs partition had just to be resized.

This reverts commit d33427fa.

Created a new CPX11 server for the wiki and lowered the TTL of the wiki CNAME
entry.

Giancarlo Razzolini authored Dec 18, 2020 and Jelle van der Waa committed Dec 20, 2020

tf-stage1/archlinux: Change DNS records for the archweb migration and also increase the machine size

Changed the A and AAAA record for @ to point to the new machine. Also, since we can't have CNAME to
@, change www from CNAME to A and AAAA and point to the new machine too. The other domains were kept
CNAME, but pointing to www in this case. Also, the master-key domain only had an A record, so added an
AAAA record too. The TTL is still at 600, but we can increase after a while.

Giancarlo Razzolini authored Dec 18, 2020 and Jelle van der Waa committed Dec 20, 2020

Escape the value, since TXT records need it.

The security tracker will be migrated to a new CX11 server.

As we want to serve mirros and the archive add a new domain for the
archive so the mirror and archive can be hosted.

Giancarlo Razzolini authored Dec 04, 2020 and Sven-Hendrik Haase committed Dec 12, 2020

Lower the ttl of master-key, dev, packages and ipxe

Giancarlo Razzolini authored Dec 04, 2020 and Sven-Hendrik Haase committed Dec 12, 2020

tf-stage1/archlinux.tf: Lower TTL for archlinux.org and www.archlinux.org and create a new server for archlinux.org

For the archweb migration, we need to lower the TTL and create a new archlinux.org server to host the site.

Setup Kape servers as archive mirrors (asia,europe,america), Gitlab
runner and Rebuilderd worker. All machines except runner1 are EFI
machines with grub setup and a EFI parition which is not supported by
our ansible install role and is manually rolled out.

Jelle van der Waa authored Nov 21, 2020 and Jelle van der Waa committed Dec 03, 2020

The repro3.pkgbuild.com machine was a packet.net box with an Ubuntu
installation. Now converted to an Arch Linux installation managed by
ansible with a new rebuilderd_worker role.

also move the dkim key generation to the docs as this is only run ~once

In coordination with Foxboron, the box has fulfilled its use and has been deleted.

Earlier, Terraform would always show a diff because Hetzner DNS API will tranform our entries
after submitting them. This commit ensures that the entries are in the same format the API expects
them to be in from the start.

The RFC[1] recommends it and it seems to be best-pratice these days.

[1] https://tools.ietf.org/html/rfc7208

As it turns out, secure-runner2 isn't fast enough to serve as CI/CD and if we keep rescaling it to be
large enough, it'll be more expensive than secure-runner1 which is a lot faster. So, it'd be most
useful to just get rid of this VPS.

The idea is to cancel secure-runner1 and use secure-runner2 as the sole secure-runner as it should be fast enough.
We originally had secure-runner1 in hardware as we thought we needed KVM but as it turns out, qemu software emulation
via tcg is actually fast enough so that's what we're using now. That also menas that we can now use a cheap cloud
runner for everything.

We decommissioned kanboard in favor of GitLab.

Jelle van der Waa authored Oct 29, 2020 and Sven-Hendrik Haase committed Nov 02, 2020

The WKD webservice ran on orion, but as we want to retire it, we will
move it to it's own CX11 VPS. As it's just a simple web page.

mx pointed to orion which is removed
mx is not used anymore, instead we use mail.
mail. got a fresh DKIM key
in the spf record, mx gets replaced with mail

Sorry, this was kind of an emergency and I had to quickly perform this change so no MR for this.