docs/backups.md

@@ -8,7 +8,7 @@ You'll have to get the correct username from the vault.
 We use two different borg backup hosts: A primary one and an offsite one.
 The URL format for the primary one is
 
-    ssh://<hetzner_storagebox_username>@u236610.your-storagebox.de:23/~/backup/<hostname>
+    ssh://<hetzner_storagebox_username>@u236610.your-storagebox.de:23/~/backup/<hostname>/repo
 
 while for the offsite one it's
 
@@ -22,7 +22,7 @@ placeholder with your desired full address to the backup repository. For instanc
 
 becomes
 
-    misc/borg.sh ssh://<hetzner_storagebox_username>@u236610.your-storagebox.de:23/~/backup/homedir.archlinux.org::20191127-084357
+    misc/borg.sh ssh://<hetzner_storagebox_username>@u236610.your-storagebox.de:23/~/backup/homedir.archlinux.org/repo::20191127-084357
 
 A convenience wrapper script is available at `misc/borg.sh` which makes sure you
 use the correct keyfile for the given server.

docs/otp.md

@@ -50,6 +50,19 @@ You can then run
 
 to generate a token to log in.
 
+## Rsync.net
+
+Run
+
+    pass otp insert -i rsync.net -a archlinux Rsync.net/archlinux-master-token -s
+
+When asked for a secret, provide the `2FA token seed` from `group_vars/all/vault_rsync.net.yml`.
+You can then run
+
+    pass otp code Rsync.net/archlinux-master-token
+
+to generate a token to log in.
+
 ### Adding your own account
 
 Hetzner supports multiple 2FA devices at once which allows you to add your own 2FA app of choice

docs/ssh-hostkeys.txt

@@ -97,6 +97,17 @@
 256 MD5:7b:38:67:01:59:c8:a7:b3:66:ec:78:df:ec:dd:30:72 root@build.archlinux.org (ED25519)
 3072 MD5:f2:6a:ba:b0:53:9b:d4:73:83:21:d6:76:0f:70:71:72 root@build.archlinux.org (RSA)
 
+# dashboards.archlinux.org
+1024 SHA256:+3thWVH8prQwcpDSmAUGuJugpHWWk5IGvHjnOsKaeZY root@archlinux-packer (DSA)
+256 SHA256:b9dVKP5g+tEvBDxSVeDy5st0K/3MrlHqoIZreusIag8 root@archlinux-packer (ECDSA)
+256 SHA256:DvYeApOHuG/tZDiWHwAoOkY5ayT0S32fbCyJEMMCJ0M root@archlinux-packer (ED25519)
+3072 SHA256:wqlRFmjOSlBuIbYMxCaSF0rmZ/dk322rS12rjXX+qqY root@archlinux-packer (RSA)
+
+1024 MD5:c5:d6:c1:4f:14:90:8e:74:cb:dd:d5:06:05:88:3c:6d root@archlinux-packer (DSA)
+256 MD5:da:b1:48:49:e4:78:e0:d4:88:01:be:20:cd:11:b9:1f root@archlinux-packer (ECDSA)
+256 MD5:5b:6b:10:c6:78:b3:ad:cf:0b:3f:84:e4:24:7b:92:5a root@archlinux-packer (ED25519)
+3072 MD5:2c:88:5f:24:07:2a:63:ef:86:27:1b:f1:18:2d:fe:dd root@archlinux-packer (RSA)
+
 # europe.mirror.pkgbuild.com
 1024 SHA256:Oq3eikchfo8Wt6AUzWAiU1mDR24rXudJR/zqKBFnrMo root@europe.mirror.pkgbuild.com (DSA)
 256 SHA256:3S0HuO72jHUUrPM8BjfcjsB0FNXkubxovc7Sm5jZBjc root@europe.mirror.pkgbuild.com (ECDSA)
@@ -142,15 +153,15 @@
 3072 MD5:50:c8:93:43:05:d5:73:a4:84:b1:07:66:a7:20:a5:79 root@archlinux-packer (RSA)
 
 # lists.archlinux.org
-1024 SHA256:az7ZHreYtkvFBgA1goSjry0/e62JKhk4NRXXgT/+VFg root@archlinux-packer (DSA)
-256 SHA256:vt22ZCpoWg0/L5uFfNsbrZ5EkdBnOh5G3jENuBpQeGo root@archlinux-packer (ECDSA)
-256 SHA256:E0ivN9XqSi7U9GIPQ3JUvw6CP6uiS68M5No0DA/BFfI root@archlinux-packer (ED25519)
-3072 SHA256:5YZCzd1C0bVsaye5l/lNiqsn1/IdOGjTmHqwyjV8lc0 root@archlinux-packer (RSA)
+1024 SHA256:/o3BhNZ6MdfHXrqDzVxP5OgKcTmo1/e2v80Xb+Q2ypc root@archlinux-packer (DSA)
+256 SHA256:Xe+YrG+IfhtQkNft+SB7UsTQCIgbqNnqMl/Pqs6uzBE root@archlinux-packer (ECDSA)
+256 SHA256:fAKD+26rDZ74MOMWZI8L3k2c7RzTYd69+iwKp4zhw8c root@archlinux-packer (ED25519)
+3072 SHA256:NyspEiVRnuRtL854ErcdybtjoBia+miQkpuToYZEl78 root@archlinux-packer (RSA)
 
-1024 MD5:74:6b:bd:62:a9:52:52:e9:f7:78:fe:44:8a:fa:4f:d2 root@archlinux-packer (DSA)
-256 MD5:ed:60:7c:e3:d6:4d:5a:f5:b9:cd:9e:30:4a:6a:64:c0 root@archlinux-packer (ECDSA)
-256 MD5:a7:2e:f4:3a:3e:34:84:ca:6f:73:05:0e:2e:da:60:d0 root@archlinux-packer (ED25519)
-3072 MD5:ae:ad:58:b8:0a:12:a7:d1:86:f0:c6:ba:fa:9e:ea:9f root@archlinux-packer (RSA)
+1024 MD5:fb:bb:0e:a8:0c:5c:41:5a:b1:d9:61:4d:e5:c3:bf:b1 root@archlinux-packer (DSA)
+256 MD5:56:43:80:27:a7:4e:4c:1f:a4:14:dd:d1:eb:37:13:a9 root@archlinux-packer (ECDSA)
+256 MD5:3c:91:d8:b0:4b:5c:36:40:79:27:8a:c7:24:d6:26:af root@archlinux-packer (ED25519)
+3072 MD5:88:99:f2:47:b1:e3:3c:99:52:67:d5:d5:55:b0:af:2c root@archlinux-packer (RSA)
 
 # luna.archlinux.org
 1024 SHA256:9Nqu9y1LhT3L3Kd6J9CSyuOc1AdGWo0eLsPxoc5bpaw root@alderaan (DSA)
@@ -174,17 +185,6 @@
 256 MD5:dd:20:c1:f1:f2:fa:70:86:3a:e2:39:86:b1:01:2f:61 root@archlinux-packer (ED25519)
 3072 MD5:b6:14:30:bd:fe:43:46:6a:20:a2:8b:b0:aa:d4:35:19 root@archlinux-packer (RSA)
 
-# mailman3.archlinux.org
-1024 SHA256:Vs/PxyU74qe6uR5EUUMWhDLA+B8lBQO2PEbRSmZwzYA root@archlinux-packer (DSA)
-256 SHA256:ARXQTmcvjHISznthbjI04GBOUEuQAIT2v/fRdAg3Zqw root@archlinux-packer (ECDSA)
-256 SHA256:R6sapXFYhonwFNXA90p6OMy3vhKD9P9oPd00/BeuPTA root@archlinux-packer (ED25519)
-3072 SHA256:xIJSPj5r2b3WEwwyx1qG7cCysqFHQfELUGE3vaRlxsM root@archlinux-packer (RSA)
-
-1024 MD5:93:7b:7f:47:09:5b:b5:bf:a3:ad:f7:5f:a2:a1:e5:dd root@archlinux-packer (DSA)
-256 MD5:e5:30:24:b4:03:0a:8b:07:23:5b:8b:9e:68:f3:7e:45 root@archlinux-packer (ECDSA)
-256 MD5:91:95:e9:e2:1f:17:24:66:10:ae:29:ea:90:41:d9:fb root@archlinux-packer (ED25519)
-3072 MD5:97:9f:77:0e:f5:99:44:f3:ab:db:4b:f4:4a:98:cd:dc root@archlinux-packer (RSA)
-
 # man.archlinux.org
 1024 SHA256:11C7Qa1GSNBBspSlber3Sp+LEMRpfr/VWkypfu6OnhA root@archlinux-packer (DSA)
 256 SHA256:fL79NVaEiwXGfUhTXWLkue/D1seSADYbui+jwQ2dvW0 root@archlinux-packer (ECDSA)
@@ -372,17 +372,6 @@
 256 MD5:2b:7f:a8:75:ef:38:e3:c3:f7:2e:ea:9e:73:fd:3e:d5 root@archlinux-packer (ED25519)
 2048 MD5:f8:a9:75:e2:99:4f:ae:2b:70:72:a2:ae:9e:fb:f1:a2 root@archlinux-packer (RSA)
 
-# svn2gittest.archlinux.org
-1024 SHA256:R5uXRsoC0CXMxAE+dV6Ola8K1amyK84VFknjM9QgonI root@archlinux-packer (DSA)
-256 SHA256:CVc0FXXE1DY1wmwoHCseGg5TnzYOgbf6adTbgstVWx0 root@archlinux-packer (ECDSA)
-256 SHA256:kcuaxYVB/oCraE0q+ZsnUeozpVJYYDZ24tW5MEObj1E root@archlinux-packer (ED25519)
-3072 SHA256:YMH0JwP+KqyNZ0JR1T0e4SrugZUGpwiUCHKwndHaAYw root@archlinux-packer (RSA)
-
-1024 MD5:be:c7:a8:0d:86:b6:08:b6:bc:3b:f5:ae:d6:9d:2d:55 root@archlinux-packer (DSA)
-256 MD5:62:eb:27:c4:a1:6f:a4:21:ed:50:6f:dd:bf:37:4e:ab root@archlinux-packer (ECDSA)
-256 MD5:9a:97:48:f7:11:b3:32:ba:fa:ab:9f:0c:41:41:da:e4 root@archlinux-packer (ED25519)
-3072 MD5:f3:11:d6:58:f9:32:d1:34:fa:4e:d9:e3:d7:c8:6b:f2 root@archlinux-packer (RSA)
-
 # wiki.archlinux.org
 1024 SHA256:MnCkxFpWB/mTDRHPVB4RLuSPMNfPQyotpFaWuc55DCk root@archlinux-packer (DSA)
 256 SHA256:26K98Dg4laIWFt++vxGPiANR6w+AvxgQUTb1TzeLilY root@archlinux-packer (ECDSA)

docs/ssh-known_hosts.txt

@@ -43,6 +43,11 @@ build.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlz
 build.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILmifn4KBLX24gBH4RwdBzYwLCSyVM1UbjGWxdtvoN1k
 build.archlinux.org ssh-rsa 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
 
+# dashboards.archlinux.org
+dashboards.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBCAfVE0DIkafjiLvlCYuHqdqQSLpFHusNjF8DcXcpQjZxlxwBFpApqoPdNbN2Bry/k7lwonciJ2qE1uglrgKY6w=
+dashboards.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINBlMtNCc3M9ZlCFCXVzdRscvJfB6DJpCEeOoraVD4/b
+dashboards.archlinux.org ssh-rsa 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
+
 # europe.mirror.pkgbuild.com
 europe.mirror.pkgbuild.com ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBASkHNbJZvfME9OAFLZpxoVMt7JfKhN8/VpH6JPRD8eRXfXc2Wt0YOZQGzJsrUNoFchEUUGeNxs7vmj8nwtfqGI=
 europe.mirror.pkgbuild.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF6sVYSrTIVj+xwyC5uJdFVU+X50tAIDEndsnGta75C7
@@ -64,9 +69,9 @@ homedir.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPxEHvFCXujU6s4eW0U79o
 homedir.archlinux.org ssh-rsa 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
 
 # lists.archlinux.org
-lists.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBMaKy4TZsOKC5tAJvfEXdIeLU+TMVHiwlJAWxSl9MKikkyf1Qmh0NAMFv0tYd+sJSwwaW+AqEuVnsO+JponGIqc=
-lists.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIWh0NnauWbG40MJHmMisPPGrMkY+jumTBajLllb9CBQ
-lists.archlinux.org ssh-rsa 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
+lists.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBKBHMlX50Jr2HiVJ/qDSH3mAjobpbBrGvBRXTKB/xXFBiVXCbJQCQ9HKXQZunLALaIm+jAgpskbXqLQMEpWzST8=
+lists.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOVKwNsXUXpgNhlwPVlBRNlpvOt0U9deANS/n//nxbe1
+lists.archlinux.org ssh-rsa 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
 
 # luna.archlinux.org
 luna.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBOZAVWmj2k+dHTfyum7FyIivGcVUkDFHaXmPNxDwF7l8TvkAN8VDQJHEEGJhALMYtNsQ+kt0gksSh4HZqj9n5hI=
@@ -78,11 +83,6 @@ mail.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzd
 mail.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICTOoGxsf23f6AjIHcQQuvbTOaeIt48Y0PiBj9qlJi1H
 mail.archlinux.org ssh-rsa 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
 
-# mailman3.archlinux.org
-mailman3.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBE6mE3BtsReBFLagZwLn1Mo3N7RIqILAzFMOMUINFi41EEmGBNinjwOfX0qNx8AHo41g+M6Yu3CiDcC/BimCWto=
-mailman3.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIxf1nIo36jwbX9nkuYIcbE6t/jVxY7Fnlf99u9MWSvt
-mailman3.archlinux.org ssh-rsa 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
-
 # man.archlinux.org
 man.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBPhnsStoFw6rbVpE1S1vsXNk8de1SyMag1C+v0DWVSuNYzTylYg4322WbYzw45z2XhxrF6XmCSDMvgxvFwnfLQA=
 man.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHzjkN+igIxSIv5N9+ANNoo6knPa51Tj5TAXs4EQ8lY2
@@ -168,11 +168,6 @@ state.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlz
 state.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFbZyVxaIdyd5f/dhPN7qGBnOSpLCYzoEqAKuakhi5ou
 state.archlinux.org ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoH0lD8Je2KUktA0RWREiN9v2oIpl/kTZfXZw7LhBaJLdZorqGLI/Nu0Kzb+7Wp0RvcNi5eOpLtFctAwIEs2nEvkPHmKH70KoMBiNNzMWHK6IwTH0EdyYQzjOm4E7qWtbIdK6vSUqtLwgkfaUJ+EokJu51632hmTE2Bk0I12K93hjODmZnM7GhGmSx6h+3KrYfkCz4a2PXVpTptvTTl5t4SkFQMdioQ6k+1m2itjhhEujkewl4N6rar6jB6b4yGHlPZN5Y3lmYaQhraZwen6kuPHfjuMjtkf6lR0cqoK7FvwwrkiXcuGqS8xcVYmRsqRQdXZzLORcMSW4wjlizwQCd
 
-# svn2gittest.archlinux.org
-svn2gittest.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBPUurgjvGKpn7RCQwlSicMzwLowQ4M0Gtf60GE0Rl5nN2XUGe5lDl/A0bUi16dHCPEUbQWlmBxNBNoa0r4bwo6k=
-svn2gittest.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFgvu1kXUUucO0ss+A+cDR1dsn71N77T9U/wWtcf+1w5
-svn2gittest.archlinux.org ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC/2iOTxrCAXRfpzLfJzvwlnISD+G7wxH5aONHybVga3O1p/KQv8TiTK/+dqnH9ZW6KBPnQjtsIEmzx/ZIr/aAMeZX8OwZAl1wbKdFSpeCAhJtK7zKGr/f8qlYttHgttiGq9PJMQ8bwldaAWEllgFhr/hveKPckfACrgADTJStaWW7eeqAe28BjqHm7BpT/jO3DAeVaHrcY8CVtHsCFUXCoHSFf5ER3QOH4LTfqM7Imz0cK8i29x1H5RruM+pzIMaHthabWHERwE/V/j0Xt0gEyfXZOWK5K+3ueZjVl5yUsvpSxoYSQzpQg+rvsnN7L7qRYjA04bI6NWopFdpMKzk0NcVF64tR4wfPfaaTjYdH2HU3uO/JRtN4IZmFdI2vL1UtycM9w44humZyNUGjeMUBFbBwwPGTAkcTWjPW8HLtVYjgS6Zl5/cBjLSG90qpg7hPo0V80ybRRRJbOH14txlX4z2btxCiurHCi+nxzYBABGINsZgd9s+7AORWtvfBGo0U=
-
 # wiki.archlinux.org
 wiki.archlinux.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBFtDdXEOfPTQfdsZGHIHRtYZaXZLV6lFddU0LkzyxlsYhHf84sWDSMKrQcJn6ywBInh00K8BE90N6H+mOgiLaeY=
 wiki.archlinux.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILFxxvRi7khrt6mUQGiXX35O1MBrrDeEmvaAnWo9ql/7

group_vars/all/vault_hetzner_storagebox.yml

 $ANSIBLE_VAULT;1.1;AES256
-30353736373466623531333732393935376435353939366632383839376531653761656631646638
-3831333465373263336232653931643162656363653039320a383736393636613231386465663430
-37313062303933653633626637623539363565316161666433656138393036343538623863386666
-3039346264393066620a396231646534303262616162346261643639323838313635366332653861
-39353239393134326130383766323832383361656431336335616138363865623865356538636139
-63363234343962333166313038646633613534653963613961656336646464393338373635663832
-62396633363932663931633532363732653766356136393137363366376134363135663864313935
-63323635666431353165396235633066313334316161396163646633366536366361643331386461
-6535
+37316639623364363536666561383935376436663233323431626639316438646631643165663734
+6431386565316161653535656137393634656333633863330a353364633135376461343137663938
+34343133336337656237373961303530393765383338613937313332313433363838383064363061
+3061376164316662350a313534656536303164626464353030356339353237313834336632393039
+65333832336635633730326230323934383733653533346135656431356534303765383365323538
+66323437313839653733323063343436386130343139343761363037646437653263333066316665
+63373335656238336136323961356133353833313737303538313936663366303435306134326138
+30396366336130386263356264336361343231313763326239643562666662346634616639663165
+33653962323336613537616363323931366235373930326436643863376463656165303433643635
+3632343163323137633630373561333731616334306135616234

group_vars/all/vault_hetzner_webservice.yml

+$ANSIBLE_VAULT;1.1;AES256
+39623835306534616661653830393863636639343938313031316132376662316530366330623162
+3936383035626238336439363638633634623036343238300a366332303632323235303038343534
+34643833623730346430623961396464353235393465313264313465653864316131636665373864
+6565333732636366330a326664316638353065643838633865333036616331313637303736303865
+39316434636563653237376131636266333834626331356331613039366664373561353631666336
+63643439383163636239396232626131393431303637623236613433313533666562623339653239
+61336566613136383537623863316533343465343237636563313633653136373734376561373164
+30386533346162333662393337633133666138356139343331313662383038633561313265613534
+38343833313534303839316264633436313831633631666539663062396363333334

group_vars/all/vault_mailman.yml

+$ANSIBLE_VAULT;1.1;AES256
+33663534393934353761333131636338343835616465386562393436663463343566376536303962
+3463363464623530653630383464326232303565333039320a386364623664613931636531336233
+34366536623139613733626539306462366139356562393166346234343261306631333763396462
+3735643430396562650a646463303232633039313037346238636239616461373337656563393239
+62386464396237303634336661363135333464363135343234626234336432333963666136346633
+66636633633237383937393431326639623938356133323566663562653964613564343231323939
+38336537656532353163366439393366373264366363303730663139383436356335613462653234
+64313365643833333739

group_vars/all/vault_matrix.yml

 $ANSIBLE_VAULT;1.1;AES256
-34386633326636306562363339373235376665323764616132353561393630363836633366666661
-3931656565363130336536636430343932376665383662630a316532653933306665613065663466
-62326239383634366335653539313361333238316465376663356465383031663732346362396336
-6436373833366265370a643331386466616164313265616165666532313162306434643231336636
-32343262383737343561383235646166323033383034316361366163663365396130303762346138
-62616532616234303333663437646333663432363133316532353633393264396433343865313465
-34363033616337363537336239356636663234656363346137656133663832646536323332313364
-63323636343165366664383836393464353635393538363962363232373630633135633565313934
-31336331306531646439356261646163346231363439383833633738316336356433323437633963
-36633563353163326133653931653761363836396630306462383731306638633036323764326665
-38356538343262633464623934626539653063316664626265303235646366333463366230616438
-39333439616462613732396333343531626566373933376430653532396432633466383234373762
-66333663353135333363353037313438376133363732656436323837313632623439346531613863
-32653064393566396434633339313736613835636563343261323566633064633230323061383737
-32666264333937373539386433626339383533366338383331626234323564303630303532646634
-35306133323832643464303035306466616238613035306538633461656636343466396133336663
-33343832333265383164316163663837373065646635613439363135633564323138663938373731
-65373336613861396639373237393437646563373733633535323537306165663838333264623531
-66633863306264363634656639376361346263353235383932313962363963336565346130656432
-38613733663338396235666237393836666562303031323762623039353437346434346339613366
-35323237653033643030616465316238343434343333663361663933353162633766383230386431
-37666666383839393938303831653137353531363366333964376138316337333461386166653631
-63353032623662383331646334613732393939363432326163666630633530643261343262396332
-32373162323963363466316366376565636136316339343130323138623732353735383539653663
-37643632306364643065643738333032616464353864306136356239623331626135336365636462
-31653331386433396231663665313762333166326131383832393965366561336533656161326130
-36393039613365623164343864376333363063643364393733356365613338656337353730383139
-65653163653034393364636538346133306262313930633838333839333639303637313735326536
-66373335336237363337343361323834306265656462393138633232616339386632613732626562
-33343936646239393631313031636166613939346136643566386561393865656565353436306434
-64366663303034313862623664636565363539613535383063316164336432346132626664623866
-64653534336563336231653366393063353566653164653462316466393164333532376566623261
-37333530613539333638353733353536396135373463346136333634303764646166396233383133
-33653761316530626132313230623831663237383963313964343966313665343139303230396539
-66343339666661386239643339336231383534323936313665643566306638643331663566313332
-37656430363364396238373537626164396135363936353931353433336664333164323563623366
-31326666623265636239346637316163633930373635353033343263346231663739373664623135
-65306262616531643034633261663638333837366562633934313264383766653330383134323730
-37323530643733303464663565373930646233303264353139363663663966343862313433343532
-39383031393865386631303837313166323337613132663131333264666231323034663331393164
-63366131613631666339363036643866326334383639363239643635336639626633343234396364
-62633933316634333238303566333339353637656330313363636432633764366635623066653163
-32303765363865386630626338396534363639346266333164326338336365343636376636313466
-35316631303264303530383634656338326364396566303664313834356631303039343964356561
-34353937636436366534616339383738393833323963316236613561613539316132393664636431
-39643035326533643736303164376161336239363838323561663533363733643361356538363130
-65363438333466616234353666326130633831323935653963666537636337626132313630663861
-65363635353430636439623939636662383666633537383039303732636466656337336537663231
-63303438306361636637376335343563346438633832383032363435633539326533643930613638
-32306334326639326439346132666365626265653064306465323136393536633034393764333331
-37633033306665623930326363373664613135393739363262646139663266613332376563626661
-66393562636364363665353139613136356235383437613364323633336631646264363337313231
-62366234303138383439653238373438656561633430366161383639303834636136393262366463
-31643061646563633838663738643834323835633635363034303739383633663764333033633334
-63393032643864653833656439316131316265623436653364643235633466383062323562353339
-38666238333430643363383233303930313435613533393464323462333730386139373133663864
-39666439336166666266313564366531323366656537336136653366393136323436626666383234
-34323937303333613830313865613865303035303233633063393338663834343166666661306234
-64613963613136383161313963326461633338333864303936326361623039383636396239333838
-38616136633665363336343630616438326263653233343261633565613330316162316133323162
-33636139323831366137626661623133306163616232646462656466376131393565306535646435
-38343936306161396561366635663161616334383663663436353166633463623835333230313264
-63313862383666303637343036643932663563316233643933623431623833396537653633383465
-65633931623832636661396563383332393839666462353764303462373665396636333539336534
-33363135646438396135653665383764646261643532346637303531343937346231623464316135
-33376363303837376235623237656435386361396537653231343434363662333838613162343966
-30653132333964336636663566396164663631396461643562353233323038313335323564353238
-37303862393035376434306637653937303837393630623136633035396663386662393866393866
-30383435303139666564306438633133616364313036306438663439353237616366323066663435
-33353261396333633237306439313262623662653563366433666132303837353261343834396462
-31313437326635633233346639656463666539336165666133633132653665373661313537316362
-32663861663236376431633037666161616165376366613062653632373530393132366136383835
-38356133383035666166633166616330333233653665666235666434636366316162653761656564
-62633137633538663237626564313839356430623361323264383263306137393466346339323466
-65333366373436323131626432353638663530653834613765353462306362396362626436353339
-35616437633638386564376336643135373962633864633266656234356632616539376461303839
-61343931333431656165333265643135353961383538616138626630653533396262663963303337
-35653563363432346431346266336261666461616132306339343661323639383535343833666564
-30336564623239323664363761336137326134366530313664353436373861316237356132386662
-66653662636361643033343766316661366161306530383064386463663962643434633639633730
-64666430333230626461646662313134386564376339646434323363663735643032376664303030
-36623236666339333234663138636361393665633332386530386236653165316135326537376661
-37323938303038346361396430383839316666346161323931646533363365343936633135636334
-30383461323732616631643666323232313132306463353365383964663266623563373166323766
-64353166343532636130343962373563666662393864333263393634333163303534353665633033
-31316266396266313437306332663430653264663430653635613132313662666364343861643431
-39643734313865393438623338313836353333343064356233636164613932666430303037666464
-62373834653533633139663433363135653632653130623630666530636539316638623938653435
-66316537613434643463343339313463366233663262373433323436333133663265353761376639
-31376563386438656233313738653735313032623836356263326230663735656633663730633135
-35633235626434353030646232633235353638633463356631613033333935376633303664646232
-30663032306538663331616536646436343432366464663732343034393535336133646634623164
-37663462663632626364623365623138333161383738383832393466363536633631623764373766
-31616339636366626233656132303865623163663330613364613433643536323430363939313730
-63363638343061383932353337653432646135376130623837383132623463363461303662303332
-38313531383366343330313338636134623938376632656132653866323834353864623336336232
-65366532643061613964353864333032613437356538303330386666663238323466656333313265
-33376632623637386633653439396462623531343934363134666433326230323634313836363836
-64366438316233316533633064613465393562666462626263376538393538353663333561383434
-66303764303935373932656161353739626366383865373161393932343965383662383438373734
-31336338303962303565633731393164303462376465633366323438343236303566313739643664
-66303864363065313530356531366533383131643833303334646563613635373337656439336264
-63336437636538663563396538353862386239383837393433616635326163333166323836313432
-62333237353732663430306536393562313766333533336234343838356135366163353562343862
-33326436396165353132306262373766336262343434333530666165633764376633323532343837
-34616463313434346163653062316439333063356662353362616530613166623463653639316161
-37623233613234636461623463663733633834313535623538633961336439663464346464306635
-63363963613164613835613366373137633166336463353734303731323235326438326530376261
-64396233303131376436393232373764393865356566343138393634643763613639306439393333
-37316133303836353135313434666632663732623832633439666131623530386566343066366232
-61643966623133323465393664376135656234646261303161353136303434336266613931646365
-66376664633865383735633431656234366364333733343730663039623039353730393334636436
-30633565316632633237616332373835323531363663346564343666663436343637633535393734
-39313866623034303538613735663130326366643033346138353332373131356663306665633062
-33623564626165633964343862313932636337313063666631653361306332643239383537633133
-31346365613434643465383934323439656333333062626137376262653633313532366531653565
-39663764303839653936336165666436333565626434663461396332393838623065356637643863
-31353332373362323638303236613633303532646437646561333634393833363766343731373538
-32633162343665636163393265373033616163613036613638313639623831396433313237366265
-30613831666433353763386565333634316330343263373537353564643631313833353939323439
-31313332393735323732643230616164666263366262633130326261633731333630376263623138
-63653766613539393332616366366333623565623139333763663930363332326465303963316435
-33336166393431353033653131633338613837313562666539303764313361306435366464623065
-32396464353936623765383537366136623230636334366232353865383461326336336533383039
-64333537303834363061656437333239343932353266316162616130363564653431636161316462
-63313663336136323937646265356430343431666332373463386232626364663363623737656161
-32613934633235313362386336303563353639313335323732636431336433386533303138623361
-35663833336535653134346265356466393261356561373639386261346465623364346330626261
-62383465663439376536623063363262313532623334316330633063616262326532663135613334
-32653062386133306136396633393163666535333332353438316431323962393532613463333134
-62613738313735386264343832393662663630636239386163623838633936333863386466303936
-30316438373764326634653937333466303333353039326535613162653264646234356463363032
-63366533373034326562383735326465386136383936646437616239633865633630326464393634
-62656639633731316331643431633461383863393633393530396333633538626632343665363365
-66356335666362386264303837656336633738383861663162656666363836363365353132643931
-31366362373363393333323262376663316633326435613162353963623638363738373239366437
-35323235613837396138336335386164393134386632333362326161333734303630303537333530
-66613835383831383934656136363564343261656437333736326132366637363134623465663239
-62636665636139643836343336613331623966643936303839396531346337366465653361633664
-34366232333230343436326131373764643963613064663761383439353738623362353039653333
-35666135346162383132633333303439666162326531383837663862356439326137636630353835
-38343933343437356264616338613661313738643035643462323161313338356136336537623030
-33636632653764326266623165613365636464626436646565356462653633303466353762323837
-65663066643762653130656235386236636165313661663533633638643031646435326334663739
-36396538336435623261663664383331643765383033353537613134613437313032643739633665
-63656432626361613366316265623131626130326235343863316364663830373634316238663961
-31353061343336633239386233616334646630336531376262323365633165363563353234363961
-35356431306564336564353562613933626430346566333161306530383935346235616634343064
-36306463623738663863393265656261313130313037363734316331303366343833336239393765
-62653232666464343062613562636531656635663766326462356536633435626465656331353435
-34336664363435616334633936336239633162396164336361393736646164633439343638383861
-63343533653665393730643235383366353835613936373461323839363636336430353233333362
-34326339363762383931313532393761643932373932633436396266333531366163393363386561
-35353663663862653933383935626637633431383133326262653030663463626332643534383936
-61323262343563626464363464336234663237306163383734363538646239666163366463353138
-65323465323262636633336639363433363931616531666230393235613965396437616463393131
-33313936376261653234623336663735343931336539653737663236366130373164653233663365
-64663130396233623230363035623065313763383163353430313038353433356565653863316363
-39663131316633363261626464653861636363383834656365613066663236643563313632336436
-33616530653264393735363434343133373665383931613566333663306361306234613761323939
-38376364353361353436613732653332393532333764336263343636313965316330653638333764
-66616366353539323566393664633233616530373665353037613362346633366262326366326232
-37333237326563653338316661353862373334346538356531336530336266333165386437626536
-63306464393461643534393734323465373433313366306135363735316464613831363262663030
-31343239323635663464353135343534376632623863346566396332656631656461616439346166
-61663232663538633332366133363361376638633831383639346630326361666530653261373336
-39373261363132313461386133666432633166393264643661303564343832633139346533356263
-37386363386163656364353734643963613334326234393033333138356337333366643439333432
-61386235313539376636323335323831343163626361646166646337346566653962313830323336
-35666161623139643833633634666535353436303264613139363461356238646238306439306233
-64356234313864646662323636363633333034666539636664316266383833343230356463306165
-61306137666631653131336332623932323331313336326261626665303361363261613039363363
-61353630373336636236393638393637393633383731366363366266626162666133343338316262
-34336331346637366236663266346536623162613333333231656566303263383566333536653032
-31316361623461383233613866393531646664363361626531623933323238623962346336333836
-30376334336131633565613430373163636461396663666331303333613964626637653933353063
-31313334646430393963343432343934353339396637376661633562656366646463356461623433
-65333765613238646136326661666430383733376266653833343663653734363265643433323433
-62316466326139346639343561633666396533363736333561343035386430326561373032363663
-35316630333361626135316436366564303937646366343239666166333336643266366531613666
-37656333376135316562666232613734343262623765313962663132636565366231383131643036
-62303662373161333531323433363033373863303537306664313139613365636534316237613163
-30373836393239626363613537353833643632633932313833333638623965363232303565353563
-33396261363264393739373334643933626434333465336638353564333164386563633630383139
-38393264383730323034396261363436316333333536376131393662306661626139623466613236
-36613937653563303232353839663031663561366637396633336562306338316337666161643934
-353639373166613231623630313131363032
+65396363623630633732613965306233643063626662363338393139366164656139346434383462
+6564626437333762333763393433333631663439663964340a336230626137356433366331366632
+36383933313530326562346639663834336563326439313233333034613861343966646564316234
+3036653632653039390a323533633335653433666431326662343663313733373933366563626164
+31623264386565356138393331326164393362303236623835656665323930623731393734653761
+34663432383632363163303564626634666463343638323262383636373730353462613634653131
+32623537326433333938623336346163396166396266366564383235623737333961336665643733
+38633939306138343237623830333339633830666562393232616436333538646532356239336530
+62333864323339616563636664636165363439326332633365343962393435326237343930393231
+37663630646661313936303864623531343063656530666466666232343431323938646533353563
+61633439633666353361633631316234383533363665323964313033623233366138383365376365
+37356637313533333939623265633665633365356662643930336264646265633962323662643332
+64646439383338353063313937633063653630393061633238616538646135613337636465653833
+33633139653637343638636330333537623630373365353964653035353537636465366237643331
+35366266666465396332333866336539306465306635323063376238363131333337616336353265
+34366561616532316266333464323966616435616534353739383461666234616437646133623937
+65353532663632643236363966383637343635653362313038386436333562316534336639323438
+66373033373666326137626266303765353232336535303933336164643365383766303661383263
+64646363396633616163633939613138663566633635343037353834623162393932653932656263
+35353537353334353739633963616362316631313065666265636434653338663331323365373039
+63653332333939326165336662636662336637636439346137626132623238393635323761343432
+66613134373932346562616434356635313663373538666539393739666133396132333466373264
+30383330633330346666633430666332643965303735616363366537366237343036643030323865
+34613932646638343664613761313734333336633163336233623930336539646463633836376635
+39663264363865316639616664663364303166373865313834333533656331626330666139313137
+62353934633533303439333164663866613738376438633061343839306339633536376562343866
+62343362346532643735326439636565376331376563343164383234653637326530303233363538
+33346638393863616130323662653132653562633136356230643239326438646165386563313962
+66623739666639396665323134356339636437386632383966623535333865393135656664633338
+36323334366330656232653062306338363938616163303562346436336631626234316233343061
+34303964633762323764613032353133386162643164346362366136313738383363333864363965
+34643762373433613663663166383038313162396366346464356237636330373566613736626136
+31613865343361336638653836316265653436333532316235323132353138373937386334306561
+35633461376464613862303438656561653966623266313363666563363434613231623530663238
+32366565333635636134303934366332613438356433643433383438636264323735663964313139
+35306532316465666331333037323665363663646264623530313737356564383462336264333864
+32316430636162626432336461343437376565386236633634373839396534303065303937346462
+39363761613865353162373232666639383963326330636566383836363932623935313563616637
+32393362396464353937306333636466646339653230326437626337333735636261363037326561
+38336431303130663438356666343963653363316134386262363461323766376130663765623764
+63343963636466383136633033393735653031373261653765353431626439633936633966646565
+34373761653730326162366332323335363635306538306437336635336333313732383739366534
+63383965376365636231366430383730316339616535343131383933616235383536376364613562
+65663930303465346531316361393837333537363235376430316334373764636363363530343730
+63323334303333613562383135626136373533323539303230306533643736313864613365386461
+64663465373130313063316139383333623134393865613337643931383664323766636437366439
+66613763343438353934653230386264323364613437373663366261656338663363323862376637
+64656431393964303339396435383037386265613861343535636432616461656436396332643838
+33356236613233613136666633643066613636306532376161333036636363366562306632333636
+62643532363965613534373734363130633530643766653235626437303138623636353663666265
+61613161383835623863663561386564633533626237303038323830373361633763353830376166
+32303131666439396162656137303737316562623264356663623162373161303161356364363633
+30663162336235323338303131386330343263646530303736376334383436646335346639613263
+33363939393132626139363361656130376361663437623362626635323233666333336230656331
+63313335383564373535346264376330373737393464316661646332373435616636326163363266
+32643333393234613737346138396338636333336331616162393231643438303665613261363038
+61613733643534363932356334663739316533353837343138306662326632376137316664323638
+65663566623632363161373061653963313966343265316262333061326566646238636162653661
+34383032363238626161653338623734333938386331323464306531363634313632386539316663
+37363537303563313538663436316130356132353866313037306630386364303636626266333637
+65386536643063333935663461326266333564323731303230336539643661383337333066663361
+34323462633264383232386438313064316539303664626365396630353062323132616266306564
+37643132626534356436393063613865386538663439343435313532653130653035653961646136
+31306366343065646663393233363866666534346633373134383531626335656364313339663031
+65613664363937323737646265653639643532373266663039363864653166323837353434333231
+63633932393661633664313730313164313335663862373235363634396134366564356565346634
+66383134323134303939303930613433613361343562316231316135643539623835333462326537
+61376161306135363738323465393761363063656330626530613936653966646166323936356665
+64396231383863333130613732633961313461656465333534663836663633313838366361343139
+37333061323164373634346632396264633034303161613865633262393230646631373961633231
+35336564376564636538303035396338393238333464303737636663663039656134633762613332
+66393532616439323830393665646265386233613939613139303263626337396230393832636132
+35323335366663626439623438663032653532363135643066353462646637356461643832633138
+32316132346162663035646538316566353064613934366632646333363831323664343566656363
+64623031393834386262383462383932633936643935376261313230623538653939623963663561
+32626330383834343162323066383265343761353330373362613365353465363335643365333036
+34363639623330363134666163333831626630656364353163613866396433656431356533383164
+64343165343766666630363031663364643262363637316533623634396537623037343135623936
+30663861363866663632373336333031393632356531356533323363383066373334363464323234
+64356133343037323164386539373135643834653934343230376435303762636632633132616537
+66626335323566383836623965383364303539313631303461366461316636353765363461656532
+36326136316437373838363636343964356132633032316335646635626131636634356634383834
+64343136626165383239333139636537343566313539366437393138663562336534613230643139
+64653533643132656535376164356331323236366539346533343663396532646565346639636363
+35313564303833323364656366343630613738656161373266363664346362316437383937643630
+64356264366362366630646565323066663637653166393062396339356130636263636430633533
+37633961303233623538633632373061353833306230396632636238343666653363333235646437
+61313139396161633730326638303139323263393135366161313962643336353536616234633037
+63376461333337363338633333626637666233373363613665613066336233336361346137653039
+63383236373637346531616337376464666265333432656231363633353561366537383161353466
+37306631366565356231306635336137303264626232333663356437313239663533633132663037
+30626537666130313136393762616138306133636136656361633631326339316334343265316133
+63383166656365643263393032626332633338343336323062656430626137326664393735393966
+65373531666663323361653866316666303632646630313931623232346562353463346362353330
+36353438636333346135366135303561633261313262626464663038306139313338346136373537
+65323237656266393233373138663165656362356234643261383863616561363864343966343261
+34633064383436643332646633653337323762393638303639373631653939336132393465666462
+64663037333530623639353934353034396234396261376332306266643163643038643437633933
+39363731353466663537363735666333663238326238633030356462396139353962633036306538
+39386636666563363735656230373032656164636137613464333763383032643139613366363433
+39376661346431333765396133343466373832316334663530366464333365373562303462346465
+66363565626363633635323466363861343664646531393835626236643132633265663131336432
+64636535343438373166646636356530656131613535306238383332363535653665336661333566
+63616239643239613366363661653738343837623165316635643938363863313539346232653865
+65623363353466333033376438653161613364396661313762623161626666333130336161303733
+61626534303263653239363132303261346364666531373836653239333562316262393636306137
+64386563626664303838616332393566623565386662376434383064643234633762653166343562
+32323438623132323330323732373737633135333233366466343133633938316235613237396463
+63366336613965356262363330303036353632353236336235613861376535353232323363306236
+61396664396234306534303734323931383035363235633164373865633538663134323165633938
+32386139386462303466353331616361393834363865333833303633613365333939633665333333
+38306564663862666239656365323261363439323131613464353834353762323262653564353734
+34313739343164666334333633376131636462383232396334303763323163633935303233383232
+64643234313835666432303361643364306339373730616535663831636566613538353238656461
+31326335666465393730386164376465616430396265306632326535363062643930323633623265
+37323563333861316566386361396236616638346137386162373865663836633963363038636235
+39383831653932666439646465623666306133356434646164623938653737653466336364333865
+38313432363265376566343737373835323566333534353563353663353938643734626538633163
+30623032393533306231313239333065666566666230643736386661383763623532323934616631
+33373132393430623536663566343738383866646336653630626362616237663037376664663137
+30616161356163643031633561646539653961366238613331316466653537366331316164663336
+31656634383036353937313162323163646465373363313332326331376330666539663534636234
+61346436323264623266663733326630633034393861376338646363656531643665396333616561
+36626335323939333337356265356464616335643266356563656263646138386261663137383937
+38623066633433383162346330376431356163313166363163343834623435366438316238386130
+62646638376466383066316430343330366632626237643936653831616139306365373939323064
+37303632613536636565623336363336386262623861393031666531366634396636333965386265
+35366561393634636662383239616330396364336231613731383363353635656161376163653739
+30623539653161633531353161616462366263623039643838633365356266306237326332633764
+30653261373265646433616638303865346361303038656566623633663032303239343766316436
+34316239393535656238306237643332343264383133653237393630373534316439623962656165
+30623439393136366366383439323633323533306566616362306261323337333264356534653365
+65343161313538663265663861663361336537356166613231663031623131613264326466383130
+64303366616537356264393663383763336231643037643336323231316437376536333062353639
+38623136663762323533326533666135303235356130663932613763343963393962663433343139
+66303035613930303935343935663362356561393862653938323833653139373161666365353135
+31646332383164653133616663383563666366636362616466343965346535316630316236306164
+37636334616538636434386133656164373837313738313035666332633037653333623461343831
+34643134396530313136626434306263333737363032636134386135303939616335616636653463
+65626535316438336233313566323731626632626632303734653963343364646564323566373337
+35386138326633393263343633383537393338333136303830646631353965346334303866363465
+62323261313566643335386533333636326334316465663535313464636263643231613135373336
+30653235366434323033303461643864663632663039343132383237363466386265646365663939
+37323738623366656261303934346438623133366233393437643962363438323535316663663063
+65326262353361376162366262373833653931316239613433323563306133373833636364323139
+37353361633039323566613262343266366439306462323364633132653261623234646332626130
+63303039646131663336383031643430626630383764313330393364393530316262336634376334
+63383261386539336635653337366338646565343133356262363065636562656338323137316562
+61623430313263386330646537663135653165666234306466356633643238666464396533356331
+61303966343838626336396333303466646262386639316665356534383537333236616266323866
+35343932356133366233353635323963386466353363623361633838666364373065323632623931
+61303730363435663630383336386262346636633463333239373066373866363661663537616534
+37373164316438333136366336373835376235333762383931353830626465633536613364356662
+30653464613131383232373132323035386230356634353132616266373739323539616137633366
+64383562633931366431636166383430373161363931643262373665356134353836356138613535
+35336264316662663330343733663834633738326534623039633465613339393335663166613362
+36663339646234336334353736386337626330316133313632666231393564643430633739353736
+35363264356565353138626531646234303638383832333030623366616134313265386235303963
+32663861623862666661376461643633363263623063666236636332326339363263333363356132
+65376137396463656533626336306238303738643330313736333335656133623438613934646366
+31643933346639333934353836326163633265633439656165343634666366623736396433656435
+34336262303431653263373030353438383163346531643435646164323532646430636661326337
+36663933613831326131366566386537633235356131666563393932633131303461663866356665
+39333430633030323435663962616436656230396564346339316131663161333133366364313065
+64616133323331626634336631646664646564353232646361353461333161373439313737323765
+38343931343533326264343732316361643161653034626161653434643262656335303935393666
+36373063623266326331366539656635323632653331613132636537306430626238393631386333
+63343261623963376439363836303362343136653165343938616636626431353830633365633933
+34323735336231396138666364333237396361356164623366663130653637663734373037333465
+39393535346163643936653636356531626363383437346461333561626136323132393365353162
+64666532363838643031306636386465333266353432383164313831653438663165656539303836
+66303436303764383132313063666638393630373238326464353264363064383138393734383161
+63366537626636353065623138376363386333326338343838303566306530343231356136656634
+36656236353331346331636363653162363835646563623866353430613539656666306533333161
+36633664306563376665613161326536326637643036396163323735343030393666346566373932
+36646137313134343339393062613435643232366165653537393163303333383836326136626365
+31323234343035373932383066336530366661663064393733313430323338333963343730353637
+32353564393837646437643463316465373162623534616433623137363966643535626530616137
+63323232396163333236633064376236663237373638616134396164333261616237313836336434
+65653563353033353334633831333430383064666335306538643632336464393261623434633132
+30363039393330616262663738386231393736383862653637636338386432336666656364613862
+37353462643266613865643061646431306539326637626638366631336665613738386130623138
+37613463633165356134616430356537616332643831626566303033313463633262623665643437
+65386437633762393032313532313362306437376364623365396635313937643439356536343432
+35616561363831643063353032663436316662633964343735363662656565393562363333663039
+65353064623664383934333965626339373838313037386239663464396231643937333533363839
+36333261343337666265343039393062656239363136626335303463393761353561633638373031
+35643865313764333139306664323038373763303962333134623034666431393963623131393230
+36343966383037376163376335383165633231386531616336373565636435653439323931623361
+34303363366436666236343964323934356661613232326562313765356563373437306661376661
+34336364376430666265346236316565633465316139653635303738323366303432643263666161
+65323866333366396337663539386231613237336230306539393331633165303234386534373764
+62393339396432646439323563333465333032333337633833646165306433326132316363383163
+37343162376332343363376534343763353536313031373933623539666330393665396535316334
+35303262613138616434383730653537656439653364373066353236356334386633306130663866
+32323331306331306138626339333832373731356466373666373463633038386137656638663562
+3763

group_vars/all/vault_rsync.net.yml

 $ANSIBLE_VAULT;1.1;AES256
-31363037363934306662343830323131313361383561656330316537366362656133643237666339
-3932386437386338336663613461653463326461336666350a346536333865333338376638643834
-30306264356232333761333361313239383931663632396534346333643131326364303066363464
-6130363230346562310a626439396536656231643265316438623835656363333034323038616234
-39383731303637346233653332333965623961343163363935633532623235316633373566336464
-38363433663862636233376164313566613732323138333135663530333866333732666539376563
-663861353832316436633761323334313362
+35646362653234383130323436333666656264303737633935336264313539353030376261313636
+3339346461323430653162643938303562666664386235660a333561373038373839653430643666
+35633566393330346136646664343065663039386135363461646136303435313430333561313833
+3630313034303638640a646364373062326464653937313430393332643335633166666663376630
+65383530363163303064336235633831353666323536376636616530363539346261333435326635
+38663061643961633536633165646534613933383336393463393233323339306139653462653566
+33653632633733633432393538356461663963366638653937636237616564326365336464343665
+35313237333636646538353665393437373536383161623833653638356133356131376165653238
+3332

host_vars/lists.archlinux.org

+---
+filesystem: btrfs
+ipv4_address: 95.217.236.249

hosts

@@ -46,6 +46,7 @@ wiki.archlinux.org
 patchwork.archlinux.org
 security.archlinux.org
 md.archlinux.org
+lists.archlinux.org
 
 [borg_hosts]
 prio.ch-s012.rsync.net
@@ -125,6 +126,7 @@ mirror.pkgbuild.com
 homedir.archlinux.org
 mail.archlinux.org
 matrix.archlinux.org
+accounts.archlinux.org
 bbs.archlinux.org
 build.archlinux.org
 bugs.archlinux.org
@@ -143,6 +145,7 @@ runner1.archlinux.org
 md.archlinux.org
 man.archlinux.org
 dashboards.archlinux.org
+lists.archlinux.org
 
 [kape_servers]
 asia.mirror.pkgbuild.com

playbooks/lists.archlinux.org.yml

+- name: setup mailman server
+  hosts: lists.archlinux.org
+  remote_user: root
+  roles:
+    - { role: common }
+    - { role: firewalld }
+    - { role: tools }
+    - { role: sshd }
+    - { role: root_ssh }
+    - { role: hardening }
+    - { role: borg_client, tags: ["borg"], when: "'borg_clients' in group_names" }
+    - { role: prometheus_exporters }
+    - { role: promtail }
+    - { role: certbot }
+    - { role: nginx }
+    - { role: fail2ban }
+    - { role: rspamd, rspamd_dkim_domain: lists.archlinux.org, rspamd_dkim_use_esld: false, tags: ["mail"] }
+    - { role: unbound, unbound_port: 5353, tags: ["mail"] }
+    - { role: uwsgi }
+    - { role: mailman }

playbooks/luna.yml

@@ -30,6 +30,3 @@
     - { role: mariadb, mariadb_query_cache_type: '0', mariadb_innodb_file_per_table: true }
     - { role: prometheus_exporters }
     - { role: promtail }
-# luna is hosting mailman lists; this postfix role does not cater to this yet
-# TODO: make postfix role handle mailman config?
-#    - { role: postfix, tags: ["postfix"], postfix_relayhost: "mail.archlinux.org" }

playbooks/mail.archlinux.org.yml

@@ -12,7 +12,7 @@
     - { role: mta_sts }
     - { role: postfix, postfix_server: true, postfix_smtpd_public: true, tags: ['mail'] }
     - { role: dovecot }
-    - { role: rspamd, tags: ["mail"] }
+    - { role: rspamd, rspamd_dkim_domain: archlinux.org, tags: ["mail"] }
     - { role: unbound, unbound_port: 5353, tags: ["mail"] }
     - { role: postfwd, tags: ['mail'] }
     - { role: archusers }

roles/archweb/defaults/main.yml

@@ -13,7 +13,7 @@ archweb_domains_templates:
 archweb_allowed_hosts: ["{{ archweb_domain }}", 'ipxe.archlinux.org']
 archweb_nginx_conf: '/etc/nginx/nginx.d/archweb.conf'
 archweb_repository: 'https://github.com/archlinux/archweb.git'
-archweb_version: 'release_2021-06-20'
+archweb_version: 'release_2021-06-23'
 archweb_pgp_key: ['E499C79F53C96A54E572FEE1C06086337C50773E']
 archweb_site: true
 archweb_mirrorcheck: false

roles/archweb/tasks/main.yml

@@ -28,6 +28,7 @@
     name: certificate
   vars:
     domains: "{{ [archweb_domain] + archweb_alternate_domains }}"
+  when: archweb_site|bool and maintenance is not defined
 
 - name: set up nginx
   template: src=nginx.d.conf.j2 dest="{{ archweb_nginx_conf }}" owner=root group=root mode=644

roles/archwiki/templates/nginx.d.conf.j2

@@ -107,7 +107,7 @@ server {
     }
 
     # whitelist known OK directories
-    location ~ ^/(?:skins|resources|images|extensions/ArchLinux/modules)/ {
+    location ~ ^/(?:skins|resources|images|extensions/ArchLinux/modules|extensions/WikiEditor/modules/images/toolbar|extensions/CodeMirror/resources/mode/mediawiki/img)/ {
         expires 30d;
         add_header Pragma public;
         add_header Cache-Control "public, must-revalidate, proxy-revalidate";

roles/borg_client/defaults/main.yml

 ---
 backup_hosts:
-  - host: "ssh://{{ hetzner_storagebox_username }}@u236610.your-storagebox.de:23"
-    dir: "~/backup/{{ inventory_hostname }}"
+  - host: "ssh://u236610.your-storagebox.de:23"
+    dir: "~/repo"
     suffix: ""
   - host: "ssh://{{ rsync_net_username }}@prio.ch-s012.rsync.net:22"
     dir: "~/backup/{{ inventory_hostname }}"

roles/borg_client/templates/borg-backup.sh.j2

@@ -39,6 +39,17 @@ cleanup() {
 
 trap cleanup EXIT
 
+# Dump databases to /root/backup-{postgres,mysql} before taking a btrfs snapshot
+systemctl is-active postgresql && /usr/local/bin/backup-postgres.sh || true
+if systemctl is-active mysqld || systemctl is-active mariadb; then
+    /usr/local/bin/backup-mysql.sh || true
+fi
+
+{% if inventory_hostname == "gitlab.archlinux.org" %}
+# Create tarball backups of various GitLab directories using the official backup tool
+systemctl is-active docker && /usr/local/bin/backup-gitlab.sh
+{% endif %}
+
 if is_btrfs "$src"; then
     # List all btrfs submounts we want to backup, e.g. homedir.archlinux.org with "/ /home"
     list_of_btrfs_submounts=$(findmnt -Rl -o target,fstype,options / | grep btrfs | grep -v docker | grep -v "subvol=\/[[:alnum:]]" | cut -d ' ' -f1)
@@ -62,15 +73,6 @@ else
     backup_mountdir="$src"
 fi
 
-systemctl is-active postgresql && /usr/local/bin/backup-postgres.sh || true
-if systemctl is-active mysqld || systemctl is-active mariadb; then
-    /usr/local/bin/backup-mysql.sh || true
-fi
-
-{% if inventory_hostname == "gitlab.archlinux.org" %}
-systemctl is-active docker && /usr/local/bin/backup-gitlab.sh
-{% endif %}
-
 borg create -v --stats -C zstd \
     -e /proc \
     -e /sys \

roles/borg_server/tasks/main.yml

@@ -37,5 +37,5 @@
     user: borg
     key: "{{ item.stdout }}"
     manage_dir: true
-    key_options: "command=\"/usr/bin/borg serve --restrict-to-path {{ backup_dir }}/{{ item['item'] }}\",no-pty,no-agent-forwarding,no-port-forwarding,no-X11-forwarding,no-user-rc"
+    key_options: "command=\"borg serve --restrict-to-path {{ backup_dir }}/{{ item['item'] }}\",restrict"
   with_items: "{{ ssh_keys.results }}"