Our ansible.cfg had some settings that were using the default values,
according to ansible documentation.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Uses the nginx config from here:
https://kanboard.net/documentation/nice-urls



Signed-off-by: Florian Pritz <bluewind@xinu.at>

The HSTS header is already added by nginx. If kanboard adds its own the
reply contains a header that contains max-age twice which is invalid.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

This behaves better with non-C compilers, where we do not provide any
environment FLAGS.

It does add -O3, but I think this can be excused as an upstream choice.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

At http://www.archlinux.org/check_network_status.txt (no https)

Instead of looking at the access time of the dirs; that one is
useless for cleaning.

The tasks that use variables need them to be at least defined,
even if empty, to be able to run. Added some defaults.

When using when: on ansible, it already checks if the variable is
set or not. But the variable must still be defined.

To correctly be safe for CVE-2016-1247, we need all nginx log dirs
to be owned by both user and group root. Also, since nginx childs
runs as http user, the directories permissions must be 0755, so the
http user can descent into it. Since the logrotate will create the
log files as http:log, the nginx childs will be able to write to the
logs, but will not be able to create files inside those dirs, fully
preventing CVE-2016-1247.

Create a dummy patchwork role for returning a HTTP 503 message while
we work on updating patchwork version and carry on with gudrun decommission.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Added the missing index rewrites. They are used for sorting the issues,
and they were not working, because nginx needs it to be an absolute regex,
ending in $ for it to work, otherwise it replaces the index files finding
logic.

We don't use any and the template is the same as for normal extensions
so it's wrong anways.

Signed-off-by: Florian Pritz <bluewind@xinu.at>