GitLab

Rebuilderd-workers are expected to have a high cpu load.

Closes: #240

Add Archive specific dashboard

See merge request !192

This new dashboard shows the archive size and total amount of packages
over time.

Make nginx be able to read the security tracker assets

See merge request !189

Allow http group to read the security tracker directory for web assets.

Add rgacogne as new TU

See merge request !188

Application results:
https://lists.archlinux.org/pipermail/aur-general/2020-December/036034.html

Move the "Servers" section from the readme to docs/servers.md

See merge request !200

Add TOC to readme

See merge request !197

Mention the archive mirrors in our README as offered services

See merge request !195

Improve the maintenance role and create an archweb custom maintenance nginx template

See merge request !190

Added some documentation regarding the service_nginx_template variable and the implications of
using it.

Added the missing break; parameter to allow the maintenace remote machine in.

This template is very similar to the regular archweb nginx one with a few notable differences:
- Regardless of the domain, everything will go to the main domain
- It allows the network manager check to pass
- It will use the ip address of the person running the role, and exempt only that ip address from hitting the
  maintenance page. Everybody else should see the maintenance page.

Configured the variable for the custom nginx template used on maintenance mode. It is important that this template handles the maintenance
on it's own. Also, the maintenance mode was running on gemini, even though archweb_site is false there. Add a check for archweb_site, to make
sure the maintenance mode only runs on the machine hosting the site.

Added a task that sets a custom nginx maintenance mode template, if the calling role sets the service_nginx_template
variable. This allows for much greater flexibility, while putting the responsibility of actually setting the maintenance
mode on the calling role.

stop prometheus from gathering bogus security update informations

See merge request !187

Create archlinux.org playbook and host_vars

See merge request !186

Add the ip addresses for mirror.pkgbuild.com, otherwise the apollo and archlinux.org playbooks won't run

Added a host_var file for archlinux.org as well as the playbook for archlinux.org
machine. It it's a stripped down version of apollo's playbook, only containing the roles
pertaining archweb.

Add archive specific monitoring

See merge request !182

To monitor our archive mirrors and the archive size itself a new
textcollector has been added. This will allow us to monitor the archive
growth and the sync rate to mirrors.

Add a new issue template for adding an Archive Mirror

See merge request !183

add dnswl secrets

See merge request !184

gitlab: use implicit ssl instead of STARTTLS for imap connections

See merge request !180

Gitlab uses IMAP to fetch incoming mails. IMAP used to run on port 143
until the recent migration which disabled that port. This change makes
gitlab use port 993 and implicit TLS.

Make GitLab use host-mode networking

See merge request !179

This cuts some complexity while also getting rid of the Docker userspace proxy which is slow compared
to kernelspace routing.
It also allows us to make GitLab consume a second IP for GitLab Pages without too much fuckery.

fix network of runner1.archlinux.org

See merge request !178

Do not use asterisk on network devices to prevent IP address collisions
on networks. Also use the right network mask for the assigned network.
For runner1 we need to ignore RAs since those routes don't work.

Security tracker lower dns

See merge request !176