aurweb: serve static assets with nginx and use Cache-Control

See merge request !78

archwiki: fix directory permissions

See merge request !64

- home directory needs 751 - nginx accesses it to serve static files
- cache and sessions directories are used only by PHP -> 750
- uploads is public -> 755

Note that the "fix home permissions" task was duplicated. Other tasks
fixing permissions were moved above.

Small changes for testing some roles in local containers

See merge request !58

This is much cleaner because the nginx role does not have to set the
fastcgi_cache variable to "false" by default, which was overridden by
host_vars/apollo.archlinux.org to "wiki", but the value was still
hardcoded in the config.

At first, I was wondering that the cache "zone" name should be
generalized to improve the configuration (from the original per-host to
per-service), but that would be an overkill since the fastcgi cache is
used only for the wiki...

This is needed for the role to work in containers. The option will also
be applied upstream, see the upstream ticket:
https://github.com/smartmontools/smartmontools/issues/62

The previous task creating the "zabbix_agent" user in the database stays
here as it actually needs the mariadb role. But note that it uses a
hardcoded name "zabbix_agent" for setting the password. The zabbix_agent
uses a different variable ("{{zabbix_agent_mysql_password}}") in the
my.cnf.j2 template, but I don't see where the variable is defined...

This role actually uses a handler from nginx to reload nginx.service.

Otherwise the timer may be started before mysqld and the service would
fail at the first start.

archwiki-runjobs.service is one-shot and timer-activated, it is not
supposed to be enabled.

This happens in the local Docker container, not sure about the
production environment...

Increase AUR machine size

See merge request !76

Exclude btrfs docker submount from being backed up

See merge request !75

The backup script fails on our Gitlab machine as it tries to remove a
snapshot of the docker submount, which we do not want to backup anyway.

btrfs subvolume snapshot -r /var/lib/docker/btrfs /var/lib/docker/btrfs/backup-snapshot
ERROR: Not a Btrfs subvolume: Invalid argument

It's per worker, and we have 5 of them.

Add prometheus role for the prometheus/alertmanager server

See merge request !71

Introduce a new monitoring server with prometheus and alertmanager for
monitoring all our boxes.

Add PTR entries for IPv6

See merge request !70

Update seblu public ssh key

See merge request !69

Make custom Keycloak theme responsive

See merge request !67

Remove vesath & retire devops

See merge request archlinux/infrastructure!68

Jelle van der Waa authored Aug 29, 2020 and Sven-Hendrik Haase committed Aug 30, 2020

https://lists.archlinux.org/pipermail/arch-dev-public/2020-August/030073.html