It has been killed by systemd-oomd a few times recently and we don't
want to start it manually every time it happens.

Add gluebuddy client

See merge request !524

The gluebuddy client is required for gluebuddy to retrieve users and
groups membership without being able to change other keycloak data. The
realm-management roles cannot be assigned yet via keycloak as it does
not know about the roles and realm-management client.

Fix smart data collection

See merge request !523

Resolve issues when a smart self test is in progress and a disk is nvme
which has no ata smart table.

sync sshd and grafana configs

See merge request !514

Django security update

tasks: stop arch-svntogit.timer before rebooting

See merge request !520

In a recent execution of the server upgrade task, svntogit was started
shortly before the reboot command was issued. Therefore, it was killed
two seconds into its run, leaving behind a lock file that prevented it
from starting again after gemini was rebooted.

Avoid the above timing issue by stopping the timer before rebooting.

Run a self test every day at 02:00/03:00 and a long tests every
saturday.

Collects the smart data using smartctl and outputs them in the
textcollector dir. This expects smartd to be configured to regularly
self tests on a regular interval to detect if a disk is broken.

tasks: skip reboot when borg-backup{,-offsite} is running

See merge request !518

archwiki: Update to 1.37.1-4

See merge request !517

Without this change, search suggestions don't work.

[1] https://phabricator.wikimedia.org/T288686

Issue: #442

The firefox diffoscope output requires unzip for making the diff
readable.

The gitlab logs are enormous, spammy and are half a terabyte per month.