ansible-lint 6.19.0 started complaining about this:

   schema[tasks]: 'become_method' must be one of the currently available
   values: ansible.builtin.runas, ansible.builtin.su,
           ansible.builtin.sudo, ansible.netcommon.enable,
           community.general.doas, community.general.dzdo,
           community.general.ksu, community.general.machinectl,
           community.general.pbrun, community.general.pfexec,
           community.general.pmrun, community.general.sesu,
           community.general.sudosu, containers.podman.podman_unshare

4242/tcp -> quassel
 113/tcp -> ident

Fixes: 26f289b7 ("Capitalize the first letter of all task names")

ansible-lint 6.5.0 complains about:

  name: All names should start with an
        uppercase letter. (name[casing])

These are used to signal the start of the document in a stream of many
documents. As Ansible only supports one YAML document per file this is
unnecessary. About a third of our YAML documents already lacked these.

yaml: truthy value should be one of [false, true] (truthy)
yaml: wrong indentation: expected 4 but found 2 (indentation)
yaml: too few spaces before comment (comments)
yaml: missing starting space in comment (comments)
yaml: too many blank lines (1 > 0) (empty-lines)
yaml: too many spaces after colon (colons)
yaml: comment not indented like content (comments-indentation)
yaml: no new line character at the end of file (new-line-at-end-of-file)
load-failure: Failed to load or parse file
parser-error: couldn't resolve module/action 'hosts'. This often indicates a misspelling, missing collection, or incorrect module path.

Signed-off-by: Jelle van der Waa <jelle@archlinux.org>

Our ansible is python3 only now

Again, with a package not in the repos.

oidentd can use forwarding now.

The discovery script now uses a regex and no longer cares where exactly
accounting is enabled. Follow systemd upstream by enabling it by
default.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Currently needs custom versions of quassel (for oidentd-strict) and
oidentd (for forwarding).

Expect quassel to switch to forwarding as well once their identserver
implementation lands.

Disable firewall because python2 module is not avaible and the tasks
fail which makes the playbooks fail and leads to handlers not being run.

https://github.com/ansible/ansible/issues/24855



Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Seems to be required with postgres 10 now.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

A full VACUUM takes quite a long time and requires an exclusive lock on
the table. Since our current quassel host is not starved for disk space,
use a normal VACUUM instead.

This speeds up cleaning from about 50s to about 6s. Most of that is the
CLUSTER, which also requires an exclusive lock. However, stalling the
quassel core for just 6 seconds every night is a lot less likely to
cause timeouts.

This was well-meant but breaks the sudoers entry.