Compare revisions

98f72a54 · d58e654e · 9c2ca685 · faba3a3d · 2039efbe · f5b566fa
--- a/.ansible-lint
+++ b/.ansible-lint
@@ -14,3 +14,5 @@ skip_list:
  - 'meta-no-info'
  # Allow package versions to be specified as 'latest'
  - 'package-latest'
+  # Don't require FQCN for builtin actions
+  - 'fqcn-builtins'
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
 image: "archlinux:latest"

-before_script:
-  - pacman -Syu --needed --noconfirm ansible-lint ansible yamllint terraform
-
 ansible-lint:
+  before_script:
+    - pacman -Syu --needed --noconfirm ansible-lint ansible
  script:
    # Fix weird ansible bug: https://github.com/trailofbits/algo/issues/1637
    # This probably happens due to gitlab-runner mounting the git repo into the container
@@ -15,6 +14,8 @@ ansible-lint:
    - ansible-lint $(printf -- "--exclude %s " */*/vault_*)

 terraform-validate:
+  before_script:
+    - pacman -Syu --needed --noconfirm terraform diffutils
  script:
    - cd tf-stage1
    - terraform init -backend=false

--- a/.gitlab/issue_templates/New Official Project.md
+++ b/.gitlab/issue_templates/New Official Project.md
@@ -93,3 +93,5 @@ If you want to add a new official project, here are some guidelines to follow:
 1. [ ] In the GitHub description of the mirrored project, append " (read-only mirror)" so that people know it's a mirror.
 1. [ ] Disable `Packages` and `Environments` from being shown on the main page.
 1. [ ] In the website field put the full url to the repository on our GitLab.
+1. [ ] Go to https://github.com/archlinux/my-example/settings/access and remove the GitHub account `archlinux-github`
+1. [ ] Go to https://github.com/orgs/archlinux/teams/read-only-mirrors/repositories and add the repository with `write` permission
--- a/.gitlab/issue_templates/Offboarding.md
+++ b/.gitlab/issue_templates/Offboarding.md
@@ -14,15 +14,21 @@ This template should be used for offboarding Arch Linux team members.
 ## All roles checklist

 - [ ] Remove user email by reverting instructions from `docs/email.md`.
+  - [ ] Setup forwarding if desired (please add the current date as a comment above the mail address in Postfix's `users` file).
+  - [ ] Inform the user of the conditions for forwarding.
+    - In most cases we only offer forwarding for 6 months.
+    - We will inform the user prior to disabling the forwarding.
+    - The forwarding can be extended if there are good reasons for doing so.
 - [ ] Set user to inactive in archweb: https://www.archlinux.org/admin/auth/user/
 - [ ] Remove member from [staff mailing list](https://lists.archlinux.org/admin/staff/members)
 - [ ] Ask the user to leave `#archlinux-staff` on Libera Chat and forget the password
+- [ ] Remove staff cloak on Libera Chat ([Group contacts](https://wiki.archlinux.org/title/Arch_IRC_channels#Libera_Chat_group_contacts))

 ## TU/Developer offboarding checklist

 - [ ] Remove entry in `group_vars/all/archusers.yml`.
 - [ ] Remove SSH pubkey from `pubkeys/<username>.pub`.
- [ ] Run `ansible-playbook -t archusers playbooks/*.yml`.
+- [ ] Run `ansible-playbook -t archusers  $(git grep -l archusers playbooks/ | grep -v phrik)`.
 - [ ] Remove the user from the `Trusted Users`/`Developers` groups on Keycloak.
 - [ ] Moderate email address on [arch-dev-public](https://lists.archlinux.org/admin/arch-dev-public/members) (find member and moderate)
 - [ ] Remove member from [arch-tu](https://lists.archlinux.org/admin/arch-tu/members) and/or [arch-dev](https://lists.archlinux.org/admin/arch-dev/members) mailing lists

--- a/.gitlab/issue_templates/Onboarding.md
+++ b/.gitlab/issue_templates/Onboarding.md
@@ -2,66 +2,90 @@
 This template should be used for onboarding new Arch Linux team members.
 It can also be used as a reference for adding new roles to an existing team member.
 -->
+/confidential
+<!--
+NOTE: Do not remove the above short actions.
+They ensure that the ticket is created confidential and that personal
+information is not publicly visible.
+-->

 # Onboarding an Arch Linux team member

 ## Details

- **Team member username**:
+- **Team member username**: <!-- Used for SSO account and @archlinux.org e-mail address -->
 - **Application**: <!-- Add link to relevant mailing list mail -->
-  - **Voting result**: <!-- Add link to relevant mailing list mail -->
+- **Voting result**: <!-- Add link to relevant mailing list mail -->
+- **SSH public key**: <!-- Add this when a user's access to machines is added or updated -->
+- **Full Name**: <!-- Relevant for all new users -->
+- **Personal e-mail address**: <!-- Relevant for users who will get a new archweb and/or SSO account -->
+- **PGP key ID used with personal e-mail address**: <!-- Relevant for users who will get a new archweb account -->
+- **Communication e-mail address**: [arch, personal] <!-- Relevant for users who will be signed up to mailing lists. Either choose "arch" or "personal". -->

-## All roles checklist
-The mailing list password can be found in misc/additional-credentials.vault.
+<!--
+NOTE: When creating this ticket as the sponsor for a new trusted user or
+support staff member, attach the above information as a clearsigned document to
+this ticket.
+https://www.gnupg.org/gph/en/manual/x135.html
+-->

- [ ] Add new user email as per `docs/email.md`.
- [ ] Create a new user in archweb: https://www.archlinux.org/devel/newuser/
-      This is also linked in the django admin backend at the top
- [ ] Subscribe user to internal [staff mailing list](https://lists.archlinux.org/admin/staff/members/add)
- [ ] Give the user access to `#archlinux-staff` on Libera Chat
- [ ] Give the user a link to our [staff services page](https://wiki.archlinux.org/title/DeveloperWiki:Staff_Services)
+## All roles checklist
+The mailing list password can be found in [`misc/additional-credentials.vault`](misc/additional-credentials.vault).
+
+- [ ] Add new user email as per [`docs/email.md`](docs/email.md).
+- [ ] Create a new user in [archweb](https://www.archlinux.org/devel/newuser/). Select the appropriate group membership and allowed repos (if applicable).
+- [ ] Subscribe **communication e-mail address** to internal [staff mailing list](https://lists.archlinux.org/admin/staff/members/add).
+- [ ] Give the user access to `#archlinux-staff` on Libera Chat.
+- [ ] Give the user a link to our [staff services page](https://wiki.archlinux.org/title/DeveloperWiki:Staff_Services).
+- [ ] Replace the **Team member username** with the @-prefixed username on Gitlab.
+- [ ] Remove personal information (such as **Full Name** and **Personal e-mail
+  address**, as well as the clearsigned representation of this data), remove
+  the description history and make the issue non-confidential.
+- [ ] Request staff cloak on Libera Chat ([Group contacts](https://wiki.archlinux.org/title/Arch_IRC_channels#Libera_Chat_group_contacts))
+- [ ] Go to [Arch Linux group](https://gitlab.archlinux.org/groups/archlinux/-/group_members) -> Enter Admin mode -> go to members -> add username as "minimal access"
+- [ ] Go to [Arch Staff group](https://gitlab.archlinux.org/groups/archlinux/teams/staff/-/group_members) -> Enter Admin mode -> go to members -> add username as "reporter"

 ## Packager onboarding checklist

 <!-- The ticket should be created by a sponsor of the new packager -->
- [ ] Create [issue in archlinux-keyring](https://gitlab.archlinux.org/archlinux/archlinux-keyring/-/issues/new) (choose *"New Packager Key"* template)
+- [ ] Create [issue in archlinux-keyring using the *"New Packager Key"* template](https://gitlab.archlinux.org/archlinux/archlinux-keyring/-/issues/new?issuable_template=New%20Packager%20Key).

 ## Main key onboarding checklist

- [ ] Add new user email for the `master-key.archlinux.org` subdomain as per `docs/email.md`.
+- [ ] Add new user email for the `master-key.archlinux.org` subdomain as per [`docs/email.md`](docs/email.md).
 <!-- The ticket should be created by the developer becoming a new main key holder -->
- [ ] Create [issue in archlinux-keyring](https://gitlab.archlinux.org/archlinux/archlinux-keyring/-/issues/new) (choose *"New Main Key"* template)
+- [ ] Create [issue in archlinux-keyring using the *"New Main Key"* template](https://gitlab.archlinux.org/archlinux/archlinux-keyring/-/issues/new?issuable_template=New%20Main%20Key).

 ## Developer onboarding checklist

- [ ] Add entry in `group_vars/all/archusers.yml`.
+- [ ] Add entry in [`group_vars/all/archusers.yml`](group_vars/all/archusers.yml).
 - [ ] Add SSH pubkey to `pubkeys/<username>.pub`.
- [ ] Run `ansible-playbook -t archusers playbooks/*.yml`.
+- [ ] Run `ansible-playbook -t archusers  $(git grep -l archusers playbooks/ | grep -v phrik)`.
 - [ ] Assign the user to the `Developers` groups on Keycloak.
- [ ] Assign the user to the `Developers` group on [archlinux.org](https://archlinux.org/admin/auth/user/)
- [ ] Subscribe user to internal [arch-dev mailing list](https://lists.archlinux.org/admin/arch-dev/members/add)
- [ ] Whitelist email address on [arch-dev-public](https://lists.archlinux.org/admin/arch-dev-public/members) (find member and unmoderate)
+- [ ] Assign the user to the `Developers` group on [archlinux.org](https://archlinux.org/admin/auth/user/).
+- [ ] Subscribe **communication e-mail address** to internal [arch-dev](https://lists.archlinux.org/admin/arch-dev/members/add) mailing list.
+- [ ] Allow sending from **communication e-mail address** on [arch-dev-public](https://lists.archlinux.org/admin/arch-dev-public/members) (subscribe and/or find address and remove moderation).

 ## TU onboarding checklist

- [ ] Add entry in `group_vars/all/archusers.yml`.
+- [ ] Add entry in [`group_vars/all/archusers.yml`](group_vars/all/archusers.yml).
 - [ ] Add SSH pubkey to `pubkeys/<username>.pub`.
- [ ] Run `ansible-playbook -t archusers playbooks/*.yml`.
+- [ ] Run `ansible-playbook -t archusers  $(git grep -l archusers playbooks/ | grep -v phrik)`.
 - [ ] Assign the user to the `Trusted Users` groups on Keycloak.
- [ ] Assign the user to the `Trusted Users` group on [archlinux.org](https://archlinux.org/admin/auth/user/)
- [ ] Whitelist email address on [arch-dev-public](https://lists.archlinux.org/admin/arch-dev-public/members) (find member and unmoderate)
- [ ] Subscribe user to internal [arch-tu mailing list](https://lists.archlinux.org/admin/arch-tu/members/add)
+- [ ] Assign the user to the `Trusted Users` group on [archlinux.org](https://archlinux.org/admin/auth/user/).
+- [ ] Subscribe **communication e-mail address** to internal [arch-tu](https://lists.archlinux.org/admin/arch-tu/members/add) mailing list.
+- [ ] Allow sending from **communication e-mail address** on [arch-dev-public](https://lists.archlinux.org/admin/arch-dev-public/members) (subscribe and/or find address and remove moderation).

 ## DevOps onboarding checklist

- [ ] Add entries in `group_vars/all/root_access.yml`.
+- [ ] Add entries in [`group_vars/all/root_access.yml`](group_vars/all/root_access.yml).
 - [ ] Run `ansible-playbook -t root_ssh playbooks/all-hosts-basic.yml`.
 - [ ] Run `ansible-playbook playbooks/hetzner_storagebox.yml playbooks/rsync.net.yml`.
 - [ ] Assign the user to the `DevOps` group on Keycloak.
- [ ] Subscribe user to [arch-devops-private mailing lists](https://lists.archlinux.org/admin/arch-devops-private/members/add)
+- [ ] Subscribe **communication e-mail address** to internal [arch-devops-private](https://lists.archlinux.org/admin/arch-devops-private/members/add) mailing list.
 - [ ] Add pubkey to [Hetzner's key management](https://robot.your-server.de/key/index) for Dedicated server rescue system.

 ## Wiki Administrator checklist

 - [ ] Assign the user to the `Wiki Admins` group on Keycloak.
- [ ] Subscribe the user to the [arch-wiki-admins mailing list](https://lists.archlinux.org/admin/arch-wiki-admins/members/add).
+- [ ] Subscribe **communication e-mail address** to the [arch-wiki-admins](https://lists.archlinux.org/admin/arch-wiki-admins/members/add) mailing list.
--- a/README.md
+++ b/README.md
@@ -65,7 +65,7 @@ but for the time being, this is what we're stuck with.
 The very first time you run terraform on your system, you'll have to init it:

    cd tf-stage1  # and also tf-stage2
-    terraform init -backend-config="conn_str=postgres://terraform:$(../misc/get_key.py group_vars/all/vault_terraform.yml vault_terraform_db_password)@state.archlinux.org"
+    terraform init -backend-config="conn_str=postgres://terraform:$(../misc/get_key.py ../group_vars/all/vault_terraform.yml vault_terraform_db_password)@state.archlinux.org"

 After making changes to the infrastructure in `tf-stage1/archlinux.tf`, run

@@ -124,11 +124,27 @@ Arch-audit can be used to find servers in need of updates for security issues.
 The following steps should be used to update our managed servers:

  * pacman -Syu
-  * manually update the kernel, since it is in IgnorePkg by default
  * sync
  * checkservices
  * reboot

+##### Semi-automated server updates (experimental)
+
+For updating a lot of servers in a more unattended manner, the following
+playbook can be used:
+
+    ansible-playbook playbooks/tasks/upgrade-servers.yml [-l SUBSET]
+
+It runs `pacman -Syu` on the targeted hosts in batches and then reboots them.
+If any server fails to reboot successfully, the rolling update stops and
+further batches are cancelled. To display the packages updated on each host,
+you can pass the `--diff` option to ansible-playbook.
+
+Using this update method, `.pacnew` files are left unmerged which is OK for
+most configuration files that are managed by Ansible. However, care must be
+taken with updates that require manual intervention (e.g. major PostgreSQL
+releases).
+
 ## Servers

 This section has been moved to [docs/servers.md](docs/servers.md).
@@ -166,7 +182,9 @@ See [docs/backups.md](./docs/backups.md) for detailed backup information.

 Our Gitlab installation uses [Omnibus](https://docs.gitlab.com/omnibus/) to run Gitlab on Docker. Updating Gitlab is as simple as running the ansible gitlab playbook:

-    ansible-playbook playbooks/gitlab.archlinux.org -t gitlab
+    ansible-playbook playbooks/gitlab.archlinux.org.yml --diff -t gitlab
+
+To view the current Gitlab version visit [this url](https://gitlab.archlinux.org/help/)

 ## One-shots


--- a/ansible.cfg
+++ b/ansible.cfg
@@ -8,7 +8,7 @@ roles_path = roles
 vault_password_file = misc/get-vault-pass.sh
 retry_files_enabled = False
 callback_plugins = plugins/callback
-callback_whitelist = profile_tasks
+callbacks_enabled = profile_tasks
 max_diff_size = 250000

 [ssh_connection]

--- a/docs/backups.md
+++ b/docs/backups.md
@@ -8,21 +8,21 @@ You'll have to get the correct username from the vault.
 We use two different borg backup hosts: A primary one and an offsite one.
 The URL format for the primary one is

-    ssh://<hetzner_storagebox_username>@u236610.your-storagebox.de:23/~/backup/<hostname>/repo
+    ssh://u236610@u236610.your-storagebox.de:23/~/backup/<hostname>/repo

 while for the offsite one it's

-    ssh://<rsync_net_username>@prio.ch-s012.rsync.net:22/~/backup/<hostname>
+    ssh://zh1905@zh1905.rsync.net:22/~/backup/<hostname>

 In the examples below, we'll just abbreviate the full address as `<backup_address>`.
 If you want to use one of the examples below, you'll have to fill in the
 placeholder with your desired full address to the backup repository. For instance,

-    misc/borg.sh list <backup_address>::20191127-084357
+    misc/borg.sh list <backup_address>

 becomes

-    misc/borg.sh ssh://<hetzner_storagebox_username>@u236610.your-storagebox.de:23/~/backup/homedir.archlinux.org/repo::20191127-084357
+    misc/borg.sh list ssh://u236610@u236610.your-storagebox.de:23/~/backup/homedir.archlinux.org/repo

 A convenience wrapper script is available at `misc/borg.sh` which makes sure you
 use the correct keyfile for the given server.
@@ -72,6 +72,19 @@ or just a sub-directory:

    misc/borg.sh extract <backup_address>::<archive_name> backup/srv/gitlab

+## Special backups
+
+### Mariadb
+
+For Mariadb backups are made using mariabackup to `mysql_backup_dir`.Backups can are made and
+restored using the `mariabackup` tool. See also [official MariaDB docs](https://mariadb.com/kb/en/full-backup-and-restore-with-mariabackup/).
+
+### PostgreSQL
+
+For PostgreSQL backups are made using pg_dump to `postgres_backup_dir`.
+
+Restoring backups can be done with `pg_restore`. See also [official PostgreSQL docs](https://www.postgresql.org/docs/current/app-pgrestore.html).
+
 ## Adding a new server

 Adding a new server to be backed up goes as follows:

--- a/docs/banning.md
+++ b/docs/banning.md
 # Banning IP Addresses for abuse

+For banning with an expiry `fail2ban` can be used, the expiry time depends on the configured fail2ban jail:
+
+```
+fail2ban-client set sshd banip 1.1.1.1
+```
+
+To permanently ban an IP address `firewall-cmd` can be used as shown below:
+
 ```
-firewall-cmd --add-rich-rule="rule family='ipv4' source address='1.1.1.1' reject"
+firewall-cmd --add-rich-rule="rule family='ipv4' source address='1.1.1.1' reject" --zone=public
 ```

 ```
-firewall-cmd --add-rich-rule="rule family='ipv6' source address='1:2:3:4:6::' reject"
+firewall-cmd --add-rich-rule="rule family='ipv6' source address='1:2:3:4:6::' reject" --zone=public
 ```

 Note that on Gitlab, you must block the ip address for the docker zone:
@@ -23,5 +31,5 @@ firewall-cmd --list-all
 To remove a banned IP Address:

 ```
-firewall-cmd --remove-rich-rule='rule family="ipv6" source address="1:2:3:4:6::" reject'
+firewall-cmd --remove-rich-rule='rule family="ipv6" source address="1:2:3:4:6::" reject' --zone=public
 ```
--- a/docs/email.md
+++ b/docs/email.md
 # Configuration for users

 SMTP/IMAP server: mail.archlinux.org
-SMTP port: 465 (TLS), [deprecated: 587 STARTTLS]
+
+SMTP port: 465 (TLS)
+
 IMAP port: 993 (TLS)

 username: the system account name
+
 password: set by each user themselves with `passwd` on mail.archlinux.org

 # Adding new archlinux.org email addresses
@@ -16,6 +19,13 @@ If the user wants to forward email, either enter the destination directly in
 the /etc/postfix/users file or enter a username and then put the destination
 into `~username/.forward` so that they can edit it themselves.

+If the user is a new onboarded user the password has to be made empty, so the
+user can login and set a password:
+
+```
+passwd -d $username
+```
+
 # SMTP Architecture

 All hosts should be relaying outbound SMTP traffic via our primary MX server
@@ -31,19 +41,16 @@ to the server. This gives us several benefits:

 When a new host is provisioned:

- The *postfix* role has a task delegated to 'mail.archlinux.org' to create a local user
+- The *postfix_null* role has a task delegated to 'mail.archlinux.org' to create a local user
  on 'mail.archlinux.org' that is used for the new server to authenticate against. The user
  name is the shortname of the new servers hostname (ie, "foobar.archlinux.org"
  will authenticate with the username "foobar")
 - You will need to run the *postfwd* role against mail.archlinux.org to update the
  rate-limiting it performs (servers are given higher rate-limits than normal
  users - see `/etc/postfwd/postfwd.cf` for exact limits). This *should*
-  happen automatically as the *postfwd* role is a dependency of the *postfix*
+  happen automatically as the *postfwd* role is a dependency of the *postfix_null*
  role (using `delegate_to` to run it against 'mail.archlinux.org' regardless of the target
  host that the postfix role is being run on)
- Any services on the new host that need to relay mail should relay using SMTP
-  to `localhost` on port 10027 which bypasses any filtering/restrictions that
-  are applied by postfix to port 25 traffic.

 # Create new DKIM keys


--- a/docs/fail2ban.md
+++ b/docs/fail2ban.md
@@ -39,3 +39,6 @@ Add `fail2ban_jails` dict with `dovecot: true` to the host's `host_vars`.
 The nginx_limit_req jail is not enabled on any server. This jail bans IPs based repeated errors on nginx error log. Default blocking is 1 hour(s). Adding to a host:

 Add `fail2ban_jails` dict with `nginx_limit_req: true` to the host's `host_vars`.
+
+The `rsslimit` zone is whitelisted from being banned with `ignoreregex`, as we
+choose to not ban RSS abusers.
--- a/docs/ipmi.md
+++ b/docs/ipmi.md
@@ -3,4 +3,6 @@
 One of our servers has IPMI access, to use it install ipmitool and active an
 IPMI remote shell with:

+```
 impitool -C3 -I lanplus -H $ip -U $username -P $password sol active
+```
--- a/docs/monitoring.md
+++ b/docs/monitoring.md
@@ -23,7 +23,7 @@ For general system performance monitoring [prometheus-node-exporter](https://git

 ### Borg

-For monitoring our borg backups prometheus-node-exporter's textfile collector feature is used, the textfile is written by a systemd service run periodically by a systemd timer called prometheus-borg-textcollector. Borg's last backup time is recorded for our Hetzner and rsync.net backups. Adding monitoring to a system is as simple as:
+For monitoring our borg backups prometheus-node-exporter's textfile collector feature is used, the textfile is written by a systemd service called prometheus-borg-textcollector. Borg's last backup time is recorded for our Hetzner and rsync.net backups. Adding monitoring to a system is as simple as:

 * Add the host to the `borg_clients` group
 * Rollout exporter on host: `ansible-playbook playbooks/host.yml -t prometheus_exporters`
@@ -73,3 +73,7 @@ The Nginx access logs/systemd logs are indexed by loki. For non webserver hosts
 ### AUR monitoring

 Some fun statistics are scraped from aur.archlinux.org using `curl` and `hq` as there is no proper AUR prometheus endpoint as of yet. The statistics are the AUR packages and users and is retrieved every 5 minutes.
+
+### Smart
+
+TODO:
--- a/docs/otp.md
+++ b/docs/otp.md
@@ -56,7 +56,7 @@ Run

    pass otp insert -i rsync.net -a archlinux Rsync.net/archlinux-master-token -s

-When asked for a secret, provide the `2FA token seed` from `group_vars/all/vault_rsync.net.yml`.
+When asked for a secret, provide the `2FA token seed` from `host_vars/localhost/vault_rsync.net.yml`.
 You can then run

    pass otp code Rsync.net/archlinux-master-token

--- a/docs/quassel.md
+++ b/docs/quassel.md
@@ -10,10 +10,14 @@ support@libera.chat.

 ## Add a user

-1. `sudo -u quassel quasselcore --configdir=/var/lib/quassel --add-user`
+`sudo -u quassel quasselcore --configdir=/var/lib/quassel --add-user`

 ## Migration quassel

-1. `Stop the quassel service`
-2. `sudo -u postgres pg_dump -F c quassel >quassel.dump`
-3. `sudo -u postgres pg_restore -d quassel --clean --exit-on-error <quassel.dump`
+Stop the quassel service:
+
+`sudo -u postgres pg_dump -F c quassel >quassel.dump`
+
+Restore the data:
+
+`sudo -u postgres pg_restore -d quassel --clean --exit-on-error <quassel.dump`
--- a/docs/ssh-hostkeys.txt
+++ b/docs/ssh-hostkeys.txt
@@ -108,6 +108,17 @@
 256 MD5:5b:6b:10:c6:78:b3:ad:cf:0b:3f:84:e4:24:7b:92:5a root@archlinux-packer (ED25519)
 3072 MD5:2c:88:5f:24:07:2a:63:ef:86:27:1b:f1:18:2d:fe:dd root@archlinux-packer (RSA)

+# debuginfod.archlinux.org
+1024 SHA256:Pr4dHixKB9iUWfnsGrBJttz2WRP1xmVkdDETCF1U5FM root@archlinux-packer (DSA)
+256 SHA256:64Tuq5ZDPuHQYVlvpY/RqNN4EZCgOw0SLWwU8esFF10 root@archlinux-packer (ECDSA)
+256 SHA256:h3PoOLj4fBkElmcwBa146uHFsggXl8hSgDUYQrpjJ9o root@archlinux-packer (ED25519)
+3072 SHA256:9j0GGtHsWWlbDH0COPinY02QeS+ykl40LCSKnuGDVRc root@archlinux-packer (RSA)
+
+1024 MD5:ba:d3:54:53:2d:0d:c3:da:61:d9:f7:af:dc:f2:f8:c4 root@archlinux-packer (DSA)
+256 MD5:ce:c1:de:8d:6e:fd:13:de:0e:82:08:1f:29:76:41:6d root@archlinux-packer (ECDSA)
+256 MD5:32:66:ec:d5:e2:75:66:c7:0d:a7:8a:8c:17:ba:dc:4b root@archlinux-packer (ED25519)
+3072 MD5:b2:79:fd:7c:e7:4f:2f:62:2f:17:71:21:d2:94:2d:2a root@archlinux-packer (RSA)
+
 # europe.mirror.pkgbuild.com
 1024 SHA256:Oq3eikchfo8Wt6AUzWAiU1mDR24rXudJR/zqKBFnrMo root@europe.mirror.pkgbuild.com (DSA)
 256 SHA256:3S0HuO72jHUUrPM8BjfcjsB0FNXkubxovc7Sm5jZBjc root@europe.mirror.pkgbuild.com (ECDSA)
@@ -141,6 +152,17 @@
 256 MD5:3b:a2:48:8c:33:ac:8b:74:43:d4:4f:f1:fc:78:be:20 root@archlinux-packer (ED25519)
 3072 MD5:a3:ce:cf:2c:59:05:5d:eb:a0:1f:fb:30:81:cc:07:d8 root@archlinux-packer (RSA)

+# gluebuddy.archlinux.org
+1024 SHA256:eKv7TBDRnYRCA/DtyNOAezBL1p/G2zbqCYsyUIRYAWw root@archlinux-packer (DSA)
+256 SHA256:Y7pKFVFPyk11342/vbPx7G/oOBJMOuT2NpVn5sCNGu4 root@archlinux-packer (ECDSA)
+256 SHA256:Ps4iPggiQbEis2m/RhcmVl+7rjvoOZp8Yr0uV3FJC9c root@archlinux-packer (ED25519)
+3072 SHA256:3uiGaWronYWQzaSjh74c/6ZOHk7t+WO4RvrH09TDWl8 root@archlinux-packer (RSA)
+
+1024 MD5:7c:16:2b:05:9c:dd:27:5a:e5:a8:fd:02:0a:5a:b4:9b root@archlinux-packer (DSA)
+256 MD5:6a:55:6b:55:f2:d5:bb:60:25:33:91:a0:bd:a7:e0:07 root@archlinux-packer (ECDSA)
+256 MD5:a1:cc:9d:47:09:dc:25:78:9c:28:8e:5d:43:f0:29:89 root@archlinux-packer (ED25519)
+3072 MD5:09:8b:88:fc:d9:84:80:89:73:b1:be:81:48:e8:d9:f8 root@archlinux-packer (RSA)
+
 # homedir.archlinux.org
 1024 SHA256:3iibcYCSLNa+WeOM62/9p3MxJFvmm2qJVnLr2vNljV0 root@archlinux-packer (DSA)
 256 SHA256:j7PC/+H3R4buq32hZZjsoLumNlBJ+Qiw7IZSL7yjn+k root@archlinux-packer (ECDSA)
@@ -174,6 +196,17 @@
 256 MD5:dd:20:c1:f1:f2:fa:70:86:3a:e2:39:86:b1:01:2f:61 root@archlinux-packer (ED25519)
 3072 MD5:b6:14:30:bd:fe:43:46:6a:20:a2:8b:b0:aa:d4:35:19 root@archlinux-packer (RSA)

+# mailman3.archlinux.org
+1024 SHA256:uYhlq19YzcZ8PEModMv2Y65xsiq1H+mjdwZ8PtbPET8 root@archlinux-packer (DSA)
+256 SHA256:85YiWFreKiw2Pv/XaKTqs0J0VInFtyVahpDRx2O9/B4 root@archlinux-packer (ECDSA)
+256 SHA256:b0mcOvNMzGrekDDtx83ZB1p5kN0meFek7zz1LbkfeHM root@archlinux-packer (ED25519)
+3072 SHA256:5hC4XSzA+/CgpL6cLYt0UbHB4aUs/o0IPxSScZwoi4A root@archlinux-packer (RSA)
+
+1024 MD5:3b:20:ad:1e:65:d8:3a:2e:09:69:62:46:e6:d9:6a:3e root@archlinux-packer (DSA)
+256 MD5:8d:ee:10:9b:05:56:b3:c7:4a:de:00:ad:95:c1:95:fa root@archlinux-packer (ECDSA)
+256 MD5:25:a8:b9:3c:fe:74:e7:7f:39:03:8e:23:dc:20:eb:bf root@archlinux-packer (ED25519)
+3072 MD5:20:a0:74:13:bd:97:59:11:75:a4:67:28:92:c3:40:35 root@archlinux-packer (RSA)
+
 # man.archlinux.org
 1024 SHA256:11C7Qa1GSNBBspSlber3Sp+LEMRpfr/VWkypfu6OnhA root@archlinux-packer (DSA)
 256 SHA256:fL79NVaEiwXGfUhTXWLkue/D1seSADYbui+jwQ2dvW0 root@archlinux-packer (ECDSA)
@@ -307,15 +340,15 @@
 3072 MD5:42:0a:57:89:2a:ae:e6:c5:c1:ae:6a:a2:bd:3d:5f:dc root@archlinux-packer (RSA)

 # runner1.archlinux.org
-1024 SHA256:TgWGBKCSo3rkdYuP4mJzGtH+Ucub8dmEJXnnzrhUSwM root@84.17.49.250 (DSA)
-256 SHA256:2OEO/Pv1OxCLaVg9r8wHzTR7V3YTWEw//g7LJgIBMGs root@84.17.49.250 (ECDSA)
-256 SHA256:nXpZ/R3IuOEAasoIvCCTkdMlyNjCnWVTvQBh6xvycIg root@84.17.49.250 (ED25519)
-3072 SHA256:Ii5JwUoEKXV37rdjnsts4k3ppbEX+GHYjBC9mygdwY4 root@84.17.49.250 (RSA)
-
-1024 MD5:31:f6:9c:50:d2:80:f1:fa:b5:50:c5:06:3a:9e:80:cc root@84.17.49.250 (DSA)
-256 MD5:ad:cb:d6:53:cb:42:8d:33:26:99:33:fd:c9:19:a0:ea root@84.17.49.250 (ECDSA)
-256 MD5:c1:7f:43:ad:dc:69:17:b4:33:df:bb:94:00:22:33:5a root@84.17.49.250 (ED25519)
-3072 MD5:da:9f:ec:c4:f3:c1:63:6e:ca:f4:9b:ac:32:23:d9:74 root@84.17.49.250 (RSA)
+1024 SHA256:/8lwFrCJznKrOXlMWWzq2SwInUAdEp/2WxpL4VMPnTE root@runner3.archlinux.org (DSA)
+256 SHA256:VIbire3ek5TUMOFgLAO/hQV9FG5/OYWSJif0CziS/CI root@runner3.archlinux.org (ECDSA)
+256 SHA256:gWeV6cBQPoe6hrqtItOVhv9Wr7Awnzgt1YcnzcmArJM root@runner3.archlinux.org (ED25519)
+3072 SHA256:Ke3/DVYRlx8EA/JzmdD4evxbyVwPQ3rQAroGkmScpRs root@runner3.archlinux.org (RSA)
+
+1024 MD5:68:27:02:26:23:b8:95:cc:d3:82:34:57:54:61:29:41 root@runner3.archlinux.org (DSA)
+256 MD5:54:d3:ac:fa:52:e6:38:be:09:5c:51:c4:5c:3f:0e:d4 root@runner3.archlinux.org (ECDSA)
+256 MD5:fe:fc:6f:0f:0f:5e:76:25:ed:ac:6d:f1:5d:22:94:13 root@runner3.archlinux.org (ED25519)
+3072 MD5:92:43:38:30:47:11:2a:a3:df:2d:df:93:ce:3f:cc:d8 root@runner3.archlinux.org (RSA)

 # runner2.archlinux.org
 1024 SHA256:tK3XeUrt/ahlj1fdl5tQgeVXticllUIaewK2y86Jvzc root@runner2.archlinux.org (DSA)

--- a/docs/ssh-known_hosts.txt
+++ b/docs/ssh-known_hosts.txt
+# u236610.your-storagebox.de
+[u236610.your-storagebox.de]:23 ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBAGK0po6usux4Qv2d8zKZN1dDvbWjxKkGsx7XwFdSUCnF19Q8psHEUWR7C/LtSQ5crU/g+tQVRBtSgoUcE8T+FWp5wBxKvWG2X9gD+s9/4zRmDeSJR77W6gSA/+hpOZoSE+4KgNdnbYSNtbZH/dN74EG7GLb/gcIpbUUzPNXpfKl7mQitw==
+[u236610.your-storagebox.de]:23 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIICf9svRenC/PLKIL9nk6K/pxQgoiFC41wTNvoIncOxs
+[u236610.your-storagebox.de]:23 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5EB5p/5Hp3hGW1oHok+PIOH9Pbn7cnUiGmUEBrCVjnAw+HrKyN8bYVV0dIGllswYXwkG/+bgiBlE6IVIBAq+JwVWu1Sss3KarHY3OvFJUXZoZyRRg/Gc/+LRCE7lyKpwWQ70dbelGRyyJFH36eNv6ySXoUYtGkwlU5IVaHPApOxe4LHPZa/qhSRbPo2hwoh0orCtgejRebNtW5nlx00DNFgsvn8Svz2cIYLxsPVzKgUxs8Zxsxgn+Q/UvR7uq4AbAhyBMLxv7DjJ1pc7PJocuTno2Rw9uMZi1gkjbnmiOh6TTXIEWbnroyIhwc8555uto9melEUmWNQ+C+PwAK+MPw==
+
+# zh1905.rsync.net
+zh1905.rsync.net ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBLR2uz+YLn2KiQK0Luu8rhfWS6LHgUfGAWB1j8rM2MKn4KZ2/LhIX1CYkPKMTPxHr6mzayeL1T1hyJIylxXv0BY=
+zh1905.rsync.net ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJtclizeBy1Uo3D86HpgD3LONGVH0CJ0NT+YfZlldAJd
+zh1905.rsync.net ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPgHxQyaDaVxUefoUJZO/lITh0Gp0sqbP7HejQcCfZi7gAcuM6/IAuUXLHFImefCHh52x6T/cHxgL1qz26GKgdxykl06WRXlRIuE45QFSy/cd9JKr6l58fKq30ApmXRsCNwFrMlFPoEpCTqxzddZ9cLXs1Yt9dRxvFlQVEuAzw7ayvt8DE6RP9/CHYVp54wbbvUToECGwu70sxY1vFg51K+vNpvJ3J0t5j3s4c1Wls4BrIwqi2U8kqCq9Nj2CUIQqjM+93CSqEacR3qOGvG/6QMzd733wzpJ/iZee+lcyTYzA0YNMosnaF01hrv7NMwtZ6xRFLlJZtMZ7JpfySrOBr
+
+# BEGIN ANSIBLE MANAGED BLOCK
+
 # accounts.archlinux.org
 accounts.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBFi9o8CPcvujoELaKVRqMh92KiMJrBvvoTpf3FlTNAfAo641IdkGqzqCFyJA1FeFXLYOS+Zeehi1AMe1iI/b1js=
 accounts.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBu3+qlfqd8FwqodNzem7cCVcNA5RQpidYHkDRPdsZzq
@@ -48,6 +60,11 @@ dashboards.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAA
 dashboards.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINBlMtNCc3M9ZlCFCXVzdRscvJfB6DJpCEeOoraVD4/b
 dashboards.archlinux.org ssh-rsa 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

+# debuginfod.archlinux.org
+debuginfod.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBGQoDiPiCKhyb6T8Wsh/jQe4VWkZIGDaMH67OYnRN/fXN1Urq4uVuRx7iyMBtk9H8I4jtfVVTALJjjKH3xapHd4=
+debuginfod.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICDH8NaxqnAme6QXO8S/4NrqrffUNEMSi5xnyrQt6RSf
+debuginfod.archlinux.org ssh-rsa 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
+
 # europe.mirror.pkgbuild.com
 europe.mirror.pkgbuild.com ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBASkHNbJZvfME9OAFLZpxoVMt7JfKhN8/VpH6JPRD8eRXfXc2Wt0YOZQGzJsrUNoFchEUUGeNxs7vmj8nwtfqGI=
 europe.mirror.pkgbuild.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF6sVYSrTIVj+xwyC5uJdFVU+X50tAIDEndsnGta75C7
@@ -63,6 +80,11 @@ gitlab.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbml
 gitlab.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHlEYgcEupuvacbGF90L0PK8ZwL605p2APY5CFHv+aTV
 gitlab.archlinux.org ssh-rsa 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

+# gluebuddy.archlinux.org
+gluebuddy.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBIee6Gt+QO0+6MdJK0TQnHOuwkwmmUqHPIoIWZWrwT/0/YaYriU+SO3losnJt385kTCSJfpvWPVdjWB4LABeo04=
+gluebuddy.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINqSuWiT1xKGjsErjdQh3vmgK7+/okC4AqZ/MEM1y6+c
+gluebuddy.archlinux.org ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCzH+LzWrP9ajVt7H37U5EQRx7EAaOWa7HUmhG3iMkgZSTMBbcvt6CY+I2sRjrv5W31YFs/f8S8JakuJIjhoOaZ3hKFvYT4lkoSKYi4X83seSPhb2xCKlEn+nw0zqZJw6JhM3rPQq2WBoLF3+FSfIOmFxgVSEWZZwqN5tuqL2Idv/+m1RIDSfV5Facvos2YH9LpXLjs67KM9QElVTbCybYOZcM3GrE5OGOXsZmwQH2aPPRokUd7Lk8PNccZXGhXfF6nQlddCM/tBRRHhA4A4kGIceALqozeBMkRFGaWDc1hQW+AwdvYFsRVqy5GAPzGFzGKsRMgGmAQ4CzhuHRlb4GLa0BLsSxTCnH3zrta3apfzQgPpYpal3qD8Xcw9jJThjhKk1b/mKMhhUVWV9CncXPk0Lbl6SXc5iClde7MgPnOeKCvk5lnXOWZTy/R/4Q779Y7e4T4+MjL40m2DxZKbWrDv7MUuRgS8EIaDNlU6s8R67LIjFTKup47UXDORi8IPO0=
+
 # homedir.archlinux.org
 homedir.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBP4Wb9DA2Ni2QyTnMXRKI52puuhyuVqxKGQ5xmk36Xxj4OeTlILXIwfQ8k/Ywovs1izNs+xqLMF7DqbE8sXChKY=
 homedir.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPxEHvFCXujU6s4eW0U79olHnNZta9WWC9SH/Nq6vTp0
@@ -78,6 +100,11 @@ mail.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzd
 mail.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICTOoGxsf23f6AjIHcQQuvbTOaeIt48Y0PiBj9qlJi1H
 mail.archlinux.org ssh-rsa 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

+# mailman3.archlinux.org
+mailman3.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBFIHctq5/hKXaU//Jkzifp71ePIzcxdlxE5SZz1e7AcNp0Cci9W8A8NPtP6DMUvv4ezdKp+A/Czcy49tQolI30s=
+mailman3.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL0FZBrH2DQQoGn85t+2PN8t8FmUst9PsEsmGekfFAc+
+mailman3.archlinux.org ssh-rsa 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
+
 # man.archlinux.org
 man.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBPhnsStoFw6rbVpE1S1vsXNk8de1SyMag1C+v0DWVSuNYzTylYg4322WbYzw45z2XhxrF6XmCSDMvgxvFwnfLQA=
 man.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHzjkN+igIxSIv5N9+ANNoo6knPa51Tj5TAXs4EQ8lY2
@@ -139,9 +166,9 @@ reproducible.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDjL6uJx0faep1bFH
 reproducible.archlinux.org ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC/kp2Rm2jhGQn0PJskhrmxUkYDDeEC8tXwvR+J+t40KACQnqi4SMdeu61Jyy2NBdBOw3muegb9kspOzN+NSQFpjYhfkYJGswyF46vTkgXUWJpuHBKiWkWmZzVKcveS6iAOEDLaeAesRHmcuEjaK323d0QDf6vJ4Gbb2veFoW5Kip37phrjZH2RCCLFdrw1IGopPuKHYDGwIIqt0hQLSkyq/A1BgmiR+eo4S8AlN7D/w0MVz7bKIuQkSmm5taTjo9FpOJJ0O6KMFXrXCPKPDuzSa/zMSQgNw+JnwhjQRbnH5AUB+xFe/qt8wstBGE/VT7WoyOsfTvfsgdQmz55BgPxR9lZI+rKl43Lp3zGojCaVOd+9wV08DgGN13W7imGqWuVq0vPyIkGl19Ch5mgemED49g2ehddeAUt0FR/MM8ewD1U4cHYpd4PHLgOdC9KfGvRJkymWFPd/EypwhEdFSCJ4BNDbQfYl4ciXnuTmbh3eM/Z/TjAmztQqAok08KAQYd8=

 # runner1.archlinux.org
-runner1.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBFXWZCrWgRV7mPbjSLccWOlq7W0TwWyeVc/BWwFMstmBFwEDwo89VseT9zfaabHgPjLmTaN+uzQg75xNIzAJl2U=
-runner1.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMO4pNVClWcKyQXI8oqhqDWKxYkVu+/1qUIz6vkVG2St
-runner1.archlinux.org ssh-rsa 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
+runner1.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBKvHLgeAi6GFIpXYVDRfiTW24QsQeTCDTEB4oiEfWyt6fge/3kmLCQ8ho0r3BuGdZSzDBJdLhMOEq3T0YL2nCYU=
+runner1.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP+eji5tWpLLWOJKqWJSW2niUQNxPaY+AeKXxFCQ+u+9
+runner1.archlinux.org ssh-rsa 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

 # runner2.archlinux.org
 runner2.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBBUZk2jW9uO9Hnjmbf9Bnpm2/HrR5vg8wpVPIUgcSQhkoU7B54j28UgVvnmcEeoD9gyO9gH9gJG9xN95kM3JobI=
@@ -168,11 +195,4 @@ wiki.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzd
 wiki.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILFxxvRi7khrt6mUQGiXX35O1MBrrDeEmvaAnWo9ql/7
 wiki.archlinux.org ssh-rsa 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

-# prio.ch-s012.rsync.net
-prio.ch-s012.rsync.net ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO5lfML3qjBiDXi4yh3xPoXPHqIOeLNp66P3Unrl+8g3
-
-
-# u236610.your-storagebox.de
-[u236610.your-storagebox.de]:23,[2a01:4f8:b16:3000::68]:23 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIICf9svRenC/PLKIL9nk6K/pxQgoiFC41wTNvoIncOxs
-
-
+# END ANSIBLE MANAGED BLOCK
--- a/group_vars/all/archusers.yml
+++ b/group_vars/all/archusers.yml
@@ -5,8 +5,6 @@ arch_groups:
  - tu
  - fellows
  - multilib
-  - archboxes-sudo
-  - docker-image-sudo
  - support-staff

 arch_users:
@@ -29,8 +27,22 @@ arch_users:
  alad:
    name: "Alad Wenter"
    ssh_key: alad.pub
+    hosts:
+      - mail.archlinux.org
+      - homedir.archlinux.org
+    groups:
+      - support-staff
+  alerque:
+    name: "Caleb Maclennan"
+    ssh_key: alerque.pub
    groups:
      - tu
+  alex19ep:
+    name: "Alexander Epaneshnikov"
+    ssh_key: alex19ep.pub
+    groups:
+      - tu
+      - multilib
  allan:
    name: "Allan McRae"
    ssh_key: allan.pub
@@ -45,6 +57,11 @@ arch_users:
      - dev
      - tu
      - multilib
+  artafinde:
+    name: "Leonidas Spyropoulos"
+    ssh_key: "artafinde.pub"
+    groups:
+      - tu
  anatolik:
    name: "Anatol Pomozov"
    ssh_key: anatolik.pub
@@ -117,16 +134,18 @@ arch_users:
      - dev
      - tu
      - multilib
+  braindamage:
+    name: "BrainDamage"
+    ssh_key: braindamage.pub
+    hosts:
+      - mail.archlinux.org
+    groups:
+      - support-staff
  cbehan:
    name: "Connor Behan"
    ssh_key: cbehan.pub
    groups:
      - tu
-  cesura:
-    name: "Brad Fanella"
-    ssh_key: cesura.pub
-    groups:
-      - tu
  coderobe:
    name: "Robin Broda"
    ssh_key: coderobe.pub
@@ -157,6 +176,13 @@ arch_users:
      - mail.archlinux.org
    groups:
      - support-staff
+  det87:
+    name: "Det87"
+    ssh_key: det87.pub
+    hosts:
+      - mail.archlinux.org
+    groups:
+      - support-staff
  diabonas:
    name: "Jonas Witschel"
    ssh_key: diabonas.pub
@@ -173,12 +199,13 @@ arch_users:
      - dev
      - multilib
      - tu
-  eschwartz:
-    name: "Eli Schwartz"
-    ssh_key: eschwartz.pub
+  edh:
+    name: "Gordian Edenhofer"
+    ssh_key: edh.pub
+    hosts:
+      - mail.archlinux.org
    groups:
-      - tu
-      - multilib
+      - support-staff
  escondida:
    name: "Ivy Foster"
    ssh_key: escondida.pub
@@ -210,6 +237,13 @@ arch_users:
    shell: /bin/bash
    groups:
      - tu
+  flyingpig:
+    name: "Sibo Dong"
+    ssh_key: flyingpig.pub
+    hosts:
+      - mail.archlinux.org
+    groups:
+      - support-staff
  foutrelis:
    name: "Evangelos Foutras"
    ssh_key: foutrelis.pub
@@ -225,6 +259,7 @@ arch_users:
    name: "Morten Linderud"
    ssh_key: foxboron.pub
    groups:
+      - dev
      - tu
  foxxx0:
    name: "Thore Bödecker"
@@ -235,7 +270,10 @@ arch_users:
  fukawi2:
    name: "Phillip Smith"
    ssh_key: fukawi2.pub
-    groups: []
+    hosts:
+      - mail.archlinux.org
+    groups:
+      - support-staff
  gitlab:
    name: ""
    groups: []
@@ -284,13 +322,6 @@ arch_users:
      - dev
      - tu
      - multilib
-  jgc:
-    name: "Jan de Groot"
-    ssh_key: jgc.pub
-    groups:
-      - dev
-      - multilib
-      - tu
  jleclanche:
    name: "Jerome Leclanche"
    ssh_key: jleclanche.pub
@@ -319,6 +350,20 @@ arch_users:
      - dev
      - multilib
      - tu
+  kevr:
+    name: "Kevin Morris"
+    ssh_key: kevr.pub
+    hosts:
+      - mail.archlinux.org
+    groups:
+      - support-staff
+  kewl:
+    name: "Kewl FFT"
+    ssh_key: kewl.pub
+    hosts:
+      - mail.archlinux.org
+    groups:
+      - support-staff
  kgizdov:
    name: "Konstantin Gizdov"
    ssh_key: kgizdov.pub
@@ -341,6 +386,13 @@ arch_users:
      - name: klausenbusk_2.pub
        hosts:
          - all
+  lahwaacz:
+    name: "Jakub Klinkovský"
+    ssh_key: lahwaacz.pub
+    hosts:
+      - mail.archlinux.org
+    groups:
+      - support-staff
  lcarlier:
    name: "Laurent Carlier"
    ssh_key: lcarlier.pub
@@ -375,6 +427,13 @@ arch_users:
    ssh_key: muflone.pub
    groups:
      - tu
+  neitsab:
+    name: "Bastien Traverse"
+    ssh_key: neitsab.pub
+    hosts:
+      - mail.archlinux.org
+    groups:
+      - support-staff
  nicohood:
    name: "NicoHood"
    ssh_key: nicohood.pub
@@ -414,25 +473,22 @@ arch_users:
    ssh_key: sangy.pub
    groups:
      - tu
-      - docker-image-sudo
  schuay:
    name: "Jakob Gruber"
    ssh_key: schuay.pub
    groups:
      - tu
      - multilib
-  scimmia:
-    name: "Doug Newgard"
-    ssh_key: scimmia.pub
-    groups: []
  morganamilo:
    name: "Morgan Adamiec"
    ssh_key: morganamilo.pub
-    groups: []
+    groups:
+      - tu
  freswa:
    name: "Frederik Schwan"
    ssh_key: freswa.pub
    groups:
+      - dev
      - tu
      - multilib
  seblu:
@@ -449,7 +505,13 @@ arch_users:
    shell: /bin/zsh
    groups:
      - tu
-      - archboxes-sudo
+  skydiver:
+    name: "Xiao Guo"
+    ssh_key: skydiver.pub
+    hosts:
+      - mail.archlinux.org
+    groups:
+      - support-staff
  kpcyrd:
    name: "Kpcyrd"
    ssh_key: kpcyrd.pub
@@ -471,6 +533,11 @@ arch_users:
    groups:
      - tu
      - multilib
+  segaja:
+    name: "Andreas Schleifer"
+    ssh_key: segaja.pub
+    groups:
+      - tu
  svenstaro:
    name: "Sven-Hendrik Haase"
    ssh_key: svenstaro.pub

--- a/group_vars/all/vault_gitlab.yml
+++ b/group_vars/all/vault_gitlab.yml
 $ANSIBLE_VAULT;1.1;AES256
-38326435396539336139383762626634363962383031303030633464323433656634343639366564
-3139366461336631626537623866336362336337633062320a326136373934633930656538363633
-39636137336436363233643038663935386633383433353533383134636532353139303239326332
-3465626434646334620a356161303939666163306564663937303532333363376631626463613132
-64336337663939633538346165653839383366643137666635323239316431353332386661306436
-64323239386263323865643232633635323264613863636465653062373937383036366233383035
-32363061333938656639626432333538343130656165653330646461663665386264356136343564
-61643730353136616533613536313539386636366262666439323666393661373030303637636537
-32623634353830326337346131613739306336656562313339363230353630633334363635333566
-38303462663132323635616138363435633766623461663962376262623130646637636364386563
-33636230383939336531363562323065363634353731373662663639373734356362636530313166
-65656333383739356564363365643337633230616563366461386439376238363062373637393762
-37356566326531303939333664396133326634366461333632636664626261333064343335646263
-32663335663665316538313662383039626433613739363230643561313734316263626464396133
-33303335353832306232656664636437663163373535666136643635663930663562313065363062
-38383837396631333939363539363237333261313330373464303339633961356239386132313763
-36393566663535633138616137373266366465616537353461623566643961326530626366383631
-35316336303562643439373166646639323837336531373133393464323236353235663235346161
-35323634373135313865303133646366356630363034386235656531386465383430316432343932
-62376537323962373935313830613437386138396339643437633966363930366339396462353736
-61336631373062343439316261383265356135643238363036343435303932353033393431616634
-39376464396432633635616133323435633461393537656634663139653032313065626538383961
-30316638633065383836353061336437663462643765613863653863313863613830613531643030
-30653133373365313530316637653838636237336532313835363838616639366331303266663632
-62646561656231653536626231323364313836643633623132613239626433323433366138636332
-32653264643736626462323065393163373261663561373236306133646337386335656262313262
-30346265303161323265363431376266313864653763306661316632623333306531303732326561
-63313537636462623366376235373237636536366238613434363737616465636162313832633738
-61323732373566356133646566316536393931303439303863656361616664366133306435633237
-66316339383537376130623537303563333331353937623536376138646566303564303632343363
-63633561643465333331623736353263616438376431376431356538373766356465616130393430
-31646539306564343734303664616132376130313164663431333566366165643132303632373063
-62326463386363656462363830656666336365396165643235613436353665323230313765383266
-34383433343166316366363665333762376463623334626565613530653035646565353135333736
-65643632366565363636613765356162376261643633346661613636323435306135353330386262
-36306165653165333732343032636565366662613131323332306666633835613631393662666633
-65393735333734356539323663373230366265343138646565663631303332323361663435343331
-30623935616366643837383138393764393763663763646238303865613939303965376639663465
-30653432333332643135613934346361613332323732643765656333366135623232353535663862
-63353461343638313738316234313961353864643832383265633561306136333966633338373932
-31393237316138376531363836333239353066353561633539613636643562373537316666306434
-34343339396435646262373134323130353431623435383137373761616164353662313138316235
-66646134616237353031356339643064343936336433663938353834633861613762323862396533
-64613333306436353839613231373736333331323266643532396335663336663530396138393861
-32613163646335343564666634316636353437656466393431356334356164393861363562663836
-38656430333339303161306134303637336535613233653634303235383136393931376262613738
-65343337306433316339616632373032363835646439373934616662383566303063393538383334
-61356236313762326262316265613266626533643238626630663162386532333264356133663366
-35383539353962633062656463616537363137616130353465313639663037336565363831326139
-35313363326634336361303834373764363666383834346365633563373762363965646533643062
-65623130626537653836623262343832323165323539356130616461356131353636316465366662
-39623432356432326330303766316365323237653064646565343833396435333134623635356439
-34613637333939393432616261383439636238323566353138626631643937666165343330663761
-66663064653139663633303736343433633363633062653339666331373862393732303761383639
-37373735643432303366663238383562396534356433663439376563366639613934306430653633
-65626233636639613332633435363066393862363232666236383830646438646463626539393838
-66323364643265333336633263383433656330353033343033356565366361323862353439356435
-34616633666439666661653630616630373032623235336430326366306430633732666337313435
-30656665323736313363663036646462646430663266316231653238643133643134363639613435
-63353239353735653438323964386135326663323939306534306663393931363163623831626631
-31643132376463643633643163613862633832313535343561323734373733623435336339613939
-39306432313638613235386361343738663633613133643964353163366435646337396231656463
-39393435303232393763343237393661626334626263343038343237353736343431306431646432
-66623732386561316436396162383130663065303531313935633864323261363666383364363130
-35303764633265386538383263363039383866376234373536376563366537343833626235666462
-38356666313964666139346632363733396439626363313665643135663061316166636339376230
-35366132613631646130393135613030623962306538323134643539323133393934636666643762
-64326636363865323936636135383565656466663037346235313230366164313361386635316562
-63353038316430373737616231353262653033343730643363353530643936333166313866323933
-63363562346332396164363330346162366333663736643761316361653039343763626133323030
-33333831323363316333663961343661373666353065616165663232346230393966633063366263
-30636362666463643036326562313833653431663262373432383232396561303961333536613762
-62343032646164303762333635376465643735353038303337633865663830643133613039636432
-66393762346336323339383233393539353739663961346362656161306238353766343930656363
-62663830323833326366353539623863333962363366393137363831616537613932346534393764
-35643239373330313866393639393364343939313931633339663932376461613039396430626263
-32666238393565323562663336363339303235333064656130313434643934663566306563626166
-66343032616463393666366361653631373661363938656462373364656636303638396532396365
-30616539656364373032396231303634653261323433333734646262323639323330616264346539
-30623965363335323164646263346332353566396366306639303265373863663062653732386339
-31643862653134613532616236313730366431353962396133613565363564326463616131613739
-37626331643633623934646465653237326366623734623433363534386661343537663736386133
-61383961643066646534653331626330623831383935383361353630383236393632333162343861
-35333533343762643933363234643836333138643566636236663661376562616133626330326435
-37653933313537353562336237653732653431626266663332653764666538363335313161353539
-30633961306337656636663435303535613234303661353438353364323331643861396163393365
-63396433643661373138636664313237633762333731393963383763626631363163633430323633
-35636666383866633231303538346438363932326665323231376162643335636639613866633639
-66333736313233393362636165396233306633386530313737376236613432313833386332613936
-35643633383830346233616162353435323238386364323663626537393738623032323032303638
-61316161356238666235343861373531613236363437613131653761356234643938306430336463
-39373537643431323138
+62613736633165323131306431383535383930616333346638643034343036646363353337376561
+3834393838373239376230626162333036353761663536650a393137313532353766343066653630
+33626439613636396362656633333231303934313639353633633538363439656131653464633766
+3032656462623061650a616333623165313666303237366263623862313561613230383032373136
+66356538633566353232346166353134636131653736393531333630343730333862383535353439
+64333166383862646231393535303534393934393163343130343535656164363365623737616336
+63616566393932623162386234643439373138663231353361616161616530346462353966313935
+61643831323561383164396234633164363335363230396338386637613237353838396366656332
+63316565383234323861623661343665356433333038663164316366643434656233393136656566
+34646337373839616264383031376461643034613663376239363835393263336666666137393632
+63623730383361343037353138313261393163653366323764383364333062666336663661616437
+36333637313936373930663334353031393564386665303230386661326566353664363164633435
+61306564336335363638393838303164393565383163366330376531643564303537643130323636
+66383136646338616161666364326162343164643031613832383935363866393230633930623833
+31646432383735666131303638363866373961396634363762303438613331313934653136353536
+64326338393761316562313266393238633161636230363136346466306138326533663464613332
+31306365353364643936366432346237303862356536666463383364623839666435383231353837
+35386635353033373262386138663164616664343064356163383539343735326637363432326565
+30333633363131343464356539373538333139623566633862656633636436363366373765343062
+30363966666666363938613962393864346431363436633032613432663562383166663962323332
+37343532343433666465323863653234313432613066373831386362653934623431336138316136
+63373566613564366536343664353230633633626631643434366631313535623931363535356231
+36346566643736343262653663626636666362623564366661663164623839633130346338383334
+62313036633961386163373136653630303866636664656234306339306563643330306664303461
+31366133643231613738623435333566613332643062626637353133613736613463633737353464
+62303835613362336461313363386439663839393236656463366561316433633861363035326464
+36623031366664323964653665306564316366386661666533333264656262653163356564633030
+39346339623535636133613630306665333865383763363936373463313934326262613364383734
+32643037313730626263356366653032323832303736323864373334636633313134623163393937
+61373839346661376265643435313535663637643165343862323839353965393138346264396335
+38643365326638363632343731396563316233343038356633666164613761353338306264333735
+62613031323065353961366130303965316463643665663438326639363332376438383364303234
+37643037633035323366303034306235616139306466343862323339343763376563373162633833
+38393431366264376339666133393165376663616439323963643136313162303134616631313232
+30666130623763656533383530326136336266386637653533303066386634306532656637663431
+31336463613161656330636335393061303461323033643965376136653666346537646464346164
+34656632333961383535383232643038353539626339616163623763383439633661353963666539
+33633530346338626438663338613133373832306365333437336631643430333561613339616261
+32333339623636343336373563656438666531393161323665333235313062653966376464666163
+37626236316634666465326634336666313338626361313138333031333431616162616364376164
+66333961343231613134396531306336626366333936326138636566303132633265356566343463
+39303935326236303437663532653733333232353164393137313238356461353731396231623838
+30353631653536663765326436373534336130316632363965363638363431356262643931396565
+64653366323762376164643834316536626434616330326336303933636239653462373165656436
+65623235383466383236666233326331613662623932636232343534393531353234383333396230
+32626364623165666436323361663330343135653765313563333630323838326264646537653333
+33653163303961386563616466666566306430656131613134653235303661396235353932363937
+36366439626534663939663262343237303531643762333861336165366432353666626561353237
+33396361373933636636356462326561393935316362613532623464613230353161333431613532
+65333864613738376639633530323064336135376261333966613262313134316365633665383937
+61313330356664353636333265383133333935653665613337323536323661316539613164623939
+33616138396662613438633963393562323964373163356662386632393366383535333938333235
+37386466306634633738363337393066353939663665613963616436613265303533323439343336
+30383663666166326536306139633466613432653838393039653839636563316437616436346236
+36396637326537313934623939626634316337313031313434303335643630386536646538343132
+35623865363462386332353233316665643861653836656366363064623539653965643466616536
+38363237366238626161353966303935343461623333353463353161303337346337646134626534
+33353631363838383731323863393961633266346461326337633461313863656530656331663462
+61656264623032303134396633336630313433363132633939653266306262353861366266636632
+63663931313164383337666239633963653430383235333337636464623133346536613330393534
+62343030316338616332613961623034366536363265363437363934386433633864393263343161
+30623866373332303266333530363939666238646563653864636539363938333831383234386236
+38323632623337646665356565313562653237636632663362323638643638663339653633333038
+33653332346631346465333463383438343862643635343930393631363132656138383138376464
+32623435623761643435623033373536313664373664333433336563323262643963353634306461
+62376161656630653336326666646431396334353866353436323366386536643663373631336664
+64363865613065393237623737663239393062303464313364616563613734396332653836346134
+31643661336532646130363830363530323061343366643934373461383634363930623839326262
+65383464333930643062663634636365633561646363326134616366316631336165643666393665
+61636334346430666134373665303162643566343133646632323135656461343365646232633533
+37386437313633626362653331373138383962396433383332346663623031616634343735666366
+39653338303630326466373438356433663764653035333136383439343766623665643263306231
+65333163326434306235613436623265323761616536316362346236626634653534316237323530
+64633237613739386535363134323930316637396262393538363463636437643964383564373465
+38376335653963646635626630386566306564386330323431306434666139646435626533393765
+36303539323763636365663038396364663866666636366239343563613363326363643565623031
+66343239303733336538396336376433383539633832633737656266326466383164626135353366
+61373330613363626362303236616261646663363863353666353539333238386165663362346262
+66316333623834306463383739333564353431393136626237623637633965366566363831353764
+31616565326336323632386663336531303836623639376165303064333931353238373833303761
+32393433363539333635663936336538353530396262353431393762346536363630666262383166
+35383731373034393037353032363937336138373935383033363263353532656563383064636335
+61613236623061343461656135616164363933383135323564616364373461396662336133396537
+39353462653831653036346662363261376263373963306562616636313836343333363336373463
+36383866653162346664346134376537313730366637373765323164393564633330336633633030
+30316461353034363661323761313763366664366637313732623035333730396638636262376634
+62633065353664626465383831653930626162393261383537386331386164366664363837666361
+65343632313135303039666566613966663961626264663935353865626561663963353832326638
+65616336303962356662393536616365333539393131643835303538326335303631646563336362
+63343437656138636661383037613766396662643032306238383266316661613231356361326637
+38316561666266666234353761633634363937303664663734346537613863353134303031393031
+35623230663630646234623337343762666261303163316437623139326361313933353230623761
+37643066383834336437373133663031383135346436376235663030386133336461306232336533
+6132353238383465636635333937656365313638393066653631
--- a/group_vars/all/vault_keycloak.yml
+++ b/group_vars/all/vault_keycloak.yml
 $ANSIBLE_VAULT;1.1;AES256
-64326337646461313665316164323764313937643638663430643162313233653132366535303462
-3932656466316661353738313135373866663631333061650a613566316364393730653965393361
-64623737363334636163383137376230663630373236393935313633346363633636616161383462
-6235616162613134330a613231353965663539396636303235323438346663653466376339306638
-61353864633933363361636234313634323231356163383364616161623734636332626233666164
-61633930373263653038383866396431636138633963346133383266306132373339323135373362
-61383065303036336235316564336438393432656631333063363333663066316565323736343539
-33343731333566323530346466383333613561333034383131366138623437663030336466383231
-31363539323964363565663537623036396130313938646662323265386234623735363666636562
-34646130363336643032313533343537646365633530323536643765633135393331333339306466
-65643637633038376364333566393233343262323232373538393238653332366330656537373638
-62343564383833376162316365666230636234623161313036636462353031303936373332633839
-39366436386438383162653637343937326561303465376138633634636161643535373233396461
-64373236633834333565623830393339353539623163353463386364613862333039663364636235
-37626666636335366330376331613430356165376539623136613435653563633534613561373830
-64373038336238343131393839623830656232373634376430633164626564353435613036326631
-32393734633635326132326233353636623664656137643239363630613833353431333765616665
-33303538323266313335353865666237366436323665646439326162373962376430393033326363
-65613732353266376662383730666566343563386131313362303664326237393832363732353938
-33303635646530643062393432383266666435363566633365363061623966636535643864363337
-31646637646265353532383439313439353434653135616462636530613737393632623533383364
-32326238366436623664306330616635623065396466643262346461386464393133313162353766
-32383435353535316630316462303734303062366264633735646664656363656465313562653761
-30396261373236623065
+62343335616439626161633361343633383666333134313630363932323763613665343634386137
+6531633464623036323636653265633232393630396563660a336531663265663133393439616439
+66316235653434623534383132356335363730666434646630383137356234383739626630343164
+3466613664373461340a333961663035313331323362613231643439396338376432326662313437
+35653464356462323831306533353934663364313235343330353066643965666434636239646464
+38613462653933313035373030313735663733396237653161353130646563643462626239613538
+33393731346535373661313265313839633665303135343433656466356438316532633061626332
+38623731333837383432366330393134333166316130313465313135386431323631306636666666
+37326363636265303265613462303061326265653562353030386661316138383135343139373939
+36306132313430383939633631323365623239643330306463343362613764366436356564316233
+32616563313664363334316231326166643164633930633632333634646264383464316230343434
+37303966653337366563383064336265663563376165646461306533346564306534353162366433
+39303563393261376139386634633935336463333361353162353963323735643930336464393334
+36333831613465383332633732646239666430623433373639623938656364623461626137663333
+35656463343634353530373231373236313865313733633862306463656131623530616663386465
+32376263326431616635663730313861663536616163323835616462326235336337373934323839
+30643130306336313536323431366239393735346638636366356230326334336566613638623166
+62343634343032383465303461663139356162346366626135363663613032636532313937373037
+66663835646435356633306531623835386539623835353162616666616239626366643761303632
+62313561393062356566353730303566303632303631643837646439383465303634346438616234
+36636333656237316664306262373136376566366236306135316232366465643436313738616466
+63646438313832663330653235663765396332323166356431623865623366623831306262326430
+63663038616462343836396563363032646661343234653435643637306538643163646563396232
+30383564396132613163643438383564393934653763663534326334613763353863373633393163
+32333338303830326561343636613839313362303132613937303336383865396239333634373535
+62643835353334623738353535373462393836396461663066613738363764336364663664353939
+38303631303333306538333338383134343064303833353738626138653632623536316232373762
+30626363313133386665
No results found