The WKD will be migrated to Gitlab Pages, requiring a lowering of DNS
TTL.

Move certificate issuing to its own role to ease maintenance

See merge request !265

It should make it easier to change how the certificates is issued.
Ex: If we want to switch to ECDSA certificates in the future or replace
certbot with something else.

Remove conf_archlinux role, replaced by GitLab Pages

See merge request !264

See #237

update mailman admin password

See merge request !262

Link to relevant mailing list mails when off-/onboarding

See merge request !259

Drop old hardcoded ips from rsyncd.conf

See merge request !261

These ips are no longer controlled by Arch Linux and ftp-archlinux is
not synced by anything from us.

We aren't interested if status.archlinux.org is down as it's not part of
our own infra.

Add dashboard for general server monitoring

See merge request !258

This dashboard is for the general node_exporter system status in
Grafana.

The box now is much smaller than the box we had the wiki on before and so we used a lot of workers because it didn't matter.
The new box had too much memory pressure and so we had to decrease this.
In a load test, it lead to much better performance under high HTTP load.

prometheus: Monitor every al.org and pkgbuild.com domain with a valid certificate

See merge request !260

Move pacman alerts into separate group in Prometheus

See merge request !205

Install systemd service/timer as 644

Closes #222

See merge request !256

Resolve warning from systemd that setting service/timer files to 600
is useless, as systemd still makes them accessible via APIs without
restrictions.

Closes: #222

Fixes announcement release email.

tf-stage1/archlinux: Remove unused luna2._domainkey{,.aur,.lists}

See merge request !253

Terraform stuff

See merge request !241

Kristian Klausen authored 4 years ago and Frederik Schwan committed 4 years ago

We need to keep the balance between automation and readability.

add microsoft account to vault

See merge request !255