Fix #436

The gluebuddy client is required for gluebuddy to retrieve users and
groups membership without being able to change other keycloak data. The
realm-management roles cannot be assigned yet via keycloak as it does
not know about the roles and realm-management client.

Issue: #442

Issue: #420

https://lists.archlinux.org/private/arch-dev/2021-October/016798.html

New username; separate and longer account manager + storage passwords.

Also, have to use --remote-path=borg1 when interacting with rsync.net.

This was a regression which has been fixed upstream.

This reverts commit 67e7677e.

We're no longer allowed to reserve formerly used namespaces.

Ref #396

Fix #177

I don't know why this wasn't enabled.

Ref #388

These groups are no longer required as docker/arch-boxes images are
build by Gitlab.

Closes: #389

Looks like a oversight when he was offboarded as DevOps.
As support staff he shouldn't have access to

!473

#377

Ref #381

Ref #374

Ref #373

It simplifies it a bit.

Primarily to be used for mail accounts on mail.archlinux.org.

This offers improved separation between the server backups and should
avoid bumping against the storage box 10 concurrent connection limit.

Fixes: #362

The DNS is still pointing to luna.

Fix #325

Ansible complains if the fail2ban_jails dictionary is missing the
nginx_limit_req key. Adding this as default failse.

Bugfix from: e5773374

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>

This implements authentication to our repos.archlinux.org tier 0 mirror
via archweb.