Removed apollo and added the following servers: archlinux.org, mail.archlinux.org,
patchwork.archlinux.org, redirect.archlinux.org, security.archlinux.org and wiki.archlinux.org

Removed apollo from the ssh-hostkeys and ssh-known_hosts files.

Removed any mentions of apollo and also orion, since it was decommissioned a long
time ago.

The svn2gittest was renamed to fqdn, so fix it on the ssh hostkeys and knowhosts.

Add the security.archlinux.org ssh host keys so we can have the backup working.

Updated the hostkeys for the new patchwork server.

Added some documentation regarding the service_nginx_template variable and the implications of
using it.

To monitor our archive mirrors and the archive size itself a new
textcollector has been added. This will allow us to monitor the archive
growth and the sync rate to mirrors.

The hosts file contains repro2.pkgbuild.com in the `[kape_servers]`
group.

Setup Kape servers as archive mirrors (asia,europe,america), Gitlab
runner and Rebuilderd worker. All machines except runner1 are EFI
machines with grub setup and a EFI parition which is not supported by
our ansible install role and is manually rolled out.

Jelle van der Waa authored 4 years ago and Jelle van der Waa committed 4 years ago

The repro3.pkgbuild.com machine was a packet.net box with an Ubuntu
installation. Now converted to an Arch Linux installation managed by
ansible with a new rebuilderd_worker role.

also move the dkim key generation to the docs as this is only run ~once

Zabbix has been replaced by Prometheus for monitoring our services.

Jelle van der Waa authored 4 years ago and Jelle van der Waa committed 4 years ago

Orion has been replaced by gemini and for mail by mail.archlinux.org

As it turns out, secure-runner2 isn't fast enough to serve as CI/CD and if we keep rescaling it to be
large enough, it'll be more expensive than secure-runner1 which is a lot faster. So, it'd be most
useful to just get rid of this VPS.

Update the ssh-known_hosts with the sorting fix applied, so the next
time it shouldn't change anymore.

We forget doing this too often. :(

Jelle van der Waa authored 4 years ago and Sven-Hendrik Haase committed 4 years ago

The PIA boxes are retired.

The magnet uri's and torrent files no longer include a torrent tracker
link so running the service is obsolete.