Switch to our own mirror for aurblup

See merge request !294

The mirrors.kernel.org mirror seems to have network issues for us from
aur.archlinux.org which makes the aurweb-aurblup service fail from time
to time. Switch to our own mirror as we are in control.

Bbs php8

See merge request !306

Update fluxbb to the latest commit with PHP 8 compatibility, fix
permissions being to strict so http can't access it and rate limit
searching.

Lock before deleting files

See merge request !307

As reported in FS#69614 the lock should be before the delete for when
another sync job is running rsync can't move the files as they are
removed.

common: Use the "hardware" watchdog

See merge request !304

A lot of our systems have a "hardware" watchdog (ex: all the Hetzner
cloud servers) so let's use it.

Prefer using lists of maps with consistent keys.

Fix linting (ansible-lint v5.0.0)

See merge request !305

yaml: truthy value should be one of [false, true] (truthy)
yaml: wrong indentation: expected 4 but found 2 (indentation)
yaml: too few spaces before comment (comments)
yaml: missing starting space in comment (comments)
yaml: too many blank lines (1 > 0) (empty-lines)
yaml: too many spaces after colon (colons)
yaml: comment not indented like content (comments-indentation)
yaml: no new line character at the end of file (new-line-at-end-of-file)
load-failure: Failed to load or parse file
parser-error: couldn't resolve module/action 'hosts'. This often indicates a misspelling, missing collection, or incorrect module path.

With a dynamic inventory and vault_password_file set it will try to use
them, which of course doesn't work in the CI.

https://github.com/ansible-community/ansible-lint/issues/953

As flyspray does not support PHP 8 as of yet, transition to the php7
package by simply introducing a new php7_fpm role.

Add correct After targets for prometheus_exporters

See merge request !297

arch-audit hung as it was started before there was a working internet
connection. To work around this issue, add proper Wants/After targets
for network-online.target and for the rebuilderd textcollector let it
start after rebuilderd.service is "online".

Stop excluding the iso dir on mirrors

See merge request !302

Add MIT License

Closes #232

See merge request !301

Fixes: #232

sourceballs wasn't able to generate any new tarballs due to not being
able to sudo due to systemd hardening.

security-tracker: bump to latest release 0.10

See merge request !300

If the protection is enabled, saying any of these words shortly after
joining triggers a ban.

The monitoring on luna fails randomly and we have no proof that the mail
server does not work. Disable it for now until it works in a stable
fashion.