Fix #554

Fix #549

Fix #547

In the context of the bugmigration the navbar of this service has to be
redeployed for which I request access to this service.

related to: !776


Signed-off-by: Christian Heusel <christian@heusel.eu>

gromit is our newest Junior DevOps[1] and will get access to:
* bugs.archlinux.org: for helping with the bug migration
* wiki.archlinux.org: for helping with (archwiki) maintenance

[1] https://lists.archlinux.org/archives/list/arch-devops@lists.archlinux.org/message/2LAOGIVY33MZLBZCDSQHDQVQNEULLUTW/

Fix #543

Jelle van der Waa authored 1 year ago and Kristian Klausen committed 1 year ago

Ref #527

Re #537

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

The VMs created in the Hetzner cloud sandbox project must be accessible
with a DNS name. This creates a dedicated DNS zone for this purpose.

For now this zone will only be used by the aurweb project, so it can
create DNS records for the VMs it creates. This is needed so the dynamic
created environment can be accessed over HTTPS.

[1] https://docs.gitlab.com/ee/ci/review_apps/

Extend the role (previously used for ACME DNS verifications only) to
support dynamic DNS functionality planned for sandbox.archlinux.page.

Relates to: #521

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

Requested in #archlinux-staff on IRC for uploading lib32-mangohud.

Jelle van der Waa authored 1 year ago and Jelle van der Waa committed 1 year ago

This drops all svn specific functionality and switches to dbscripts git
version. Drops the community repository as it's merged into extra.

The accepted RFC has merged [community] into [extra] so now all
packagers will need to be into one base group. The RFC also introduces
junior packaging roles.

Closes: #510

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

https://lists.archlinux.org/archives/list/staff@lists.archlinux.org/message/EFXA72JZ32OFYJ2LSHPOXB2CKHTCHGXQ/



Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

group_vars/all/archusers.yml:
Promote artafinde to `dev`.
https://lists.archlinux.org/archives/list/arch-dev@lists.archlinux.org/message/AMAN62A2UERSNWO73G5Y5FRVWBIJNETL/
Also add to `multilib` group (for good measure).

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

Ref #491

This reverts commit fd28fffb.

Ref #489

Ref #485

Fix #472

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>
Co-authored-by: Kristian Klausen <kristian@klausen.dk>
Co-authored-by: moson-mo <mo-son@mailbox.org>

group_vars/all was enabling just the sshd jail so move this into the
fail2ban role defaults. patchwork, security and wiki were redefining
fail2ban_jails without deviating from the group_vars/all default and
can therefore be dropped.

With the final lists migrated to mailman3[1], the mailman2 server can
finally be killed.

When the mailman3 server was initially setup[2], it was done on a
separate server because the mailman and mailman3 packages conflicted,
and the traffic was routed over wireguard (HTTP, LMTP and SMTP).

Instead of installing mailman3 on the original lists.al.org server and
transferring the data, it was easier just to install the missing pieces
(basically Postfix and adjusting the Nginx configuration) on the ml3
server and move the IPs (to keep the IP mail reputation).

So basically the following was done:
- The IPs for the original lists.al.org was moved to the mailman3.al.org
  server
- The mailman2 datadir was transferred to mailman3.al.org server, so we
  can keep the pipermail links alive, and import missing mails if needed
- The original lists.al.org server was decommissioned
- The mailman3.al.org server was renamed to lists.al.org
- The missing pieces was added to the mailman3 role (basically Postfix +
  Nginx adjustments)
- The mailman role was deleted and the mailman3 role renamed to mailman

[1] 75ac7d09 ("mailman: Fourth and final batch of mailman3 migrated lists")
[2] 9294828f ("Setup mailman3 server")

Fix #59

Going to be served by all our Geo boxes under riscv.mirror.pkgbuild.com.

They should never have been in two files.

Fixes: 98704c48 ("root_ssh: Add additional SSH key for klausenbusk")

Ref #469

See #468

Useful if we wanted to create a Geo-based archive consisting of machines
in the archive_mirrors group (though this will likely not happen because
it'd break archlinux-repro due to the ~4 hour sync delay).

Ref #465

Fix #463