Enable Unified Alerting and wire up with alertmanager

See merge request archlinux/infrastructure!495

Grafana v8.2.0 added support for Prometheus's Alertmanager[1] which can
be used with the Unified Alerting added in v8.0.0[2].

[1] https://github.com/grafana/grafana/releases/tag/v8.2.0
[2] https://grafana.com/blog/2021/06/08/grafana-8.0-unified-grafana-and-prometheus-alerts-live-streaming-new-visualizations-and-more/

Mostly changes from Grafana v8.0[1].

[1] https://grafana.com/docs/grafana/latest/whatsnew/whats-new-in-v8-0/

The security tracker is not compatible yet with the new sqlalchemy, use
the old version in our repos

archwiki: update to 1.36.2-1

See merge request archlinux/infrastructure!494

With Loki needing roughly 108GiB[1] and Prometheus at least[2]
116GiB[3], 200GiB sounds like a good starting point.

[1] increase(loki_ingester_chunk_stored_bytes_total[1w]) / 7 * 90
[2] https://www.robustperception.io/how-much-disk-space-do-prometheus-blocks-use
[3] (rate(prometheus_tsdb_compaction_chunk_size_bytes_sum[1w]) /
    rate(prometheus_tsdb_compaction_chunk_samples_sum[1w])) *
    increase(prometheus_tsdb_head_samples_appended_total[1w]) / 7 * 365

Useful for mail.archlinux.org where this setting doesn't matter since we
force the SSH command to passwd and zsh was removed as part of the tools
cleanup effort recently (stops shadow.service from complaining about zsh
missing).

It's not available as a shell anymore after tools were removed from it.

sort + groupby fanciness by @klausenbusk.

Fix nginx "single path" location blocks

Closes #293

See merge request archlinux/infrastructure!455

github-pull-closer[1] needs write access for closing the PRs.

[1] https://gitlab.archlinux.org/archlinux/github-pull-closer/

Fix #390

[1] https://github.blog/2021-04-05-behind-githubs-new-authentication-token-formats/

Ref #396

Clean up offload-build artifacts tasks and files

Closes #268

See merge request archlinux/infrastructure!478

A string is always "true"[1].

[1] https://stackoverflow.com/a/34868470

Cleanup tools

Closes #392

See merge request !485

Fix #392

install_arch: Use shell instead of command

See merge request !461

Thorben Günther authored 3 years ago and Kristian Klausen committed 3 years ago

shell is like command but runs the command through a shell, so that
piping will work.

Push docker logs to journald

Closes #326

See merge request !480

archwiki: ensure that MediaWiki file cache is invalidated on each MediaWiki update

See merge request !490

Jakub Klinkovský authored 3 years ago and Kristian Klausen committed 3 years ago

We've hit this problem at least twice in the past, last time with the new
Vector skin update. With this change it should not be necessary to do
anything manually after an update.