README.md

@@ -123,19 +123,10 @@ Arch-audit can be used to find servers in need of updates for security issues.
 
     ansible all -a "arch-audit -u"
 
-#### Updating servers
+### Semi-automated server upgrades
 
-The following steps should be used to update our managed servers:
-
-  * pacman -Syu
-  * sync
-  * checkservices
-  * reboot
-
-##### Semi-automated server updates (experimental)
-
-For updating a lot of servers in a more unattended manner, the following
-playbook can be used:
+For updating all servers in a mostly unattented manner, the following playbook
+can be used:
 
     ansible-playbook playbooks/tasks/upgrade-servers.yml [-l SUBSET]
 

group_vars/all/archusers.yml

@@ -468,6 +468,8 @@ arch_users:
   jouke:
     name: "Jouke Witteveen"
     ssh_key: jouke.pub
+    hosts:
+      - mail.archlinux.org
     groups:
       - ""
   jsteel:

misc/vaults/vault_matrix.yml

 $ANSIBLE_VAULT;1.1;AES256
-63326165313663613036346436666531313032323236363962616232643435626436393532633463
-3936613539376366626233353034373965356131303431610a316564306139366635613031316432
-63323265353863353236383639326531366639353431646435333265333563666435316163323363
-6338353636346432310a613237393239666138386564666134626632333636306461643239373635
-34326230333465396535613639336239303434343462323036353530643533353537636438366637
-63326336373632336136373331613730323363643331663936306437316537373161653261373066
-33643362666334386566653436323432323436643434373330316131393766613564336238356231
-39393334316161306463323965636265303537383065623139343833663165633832303331643637
-62656463613236353064313562363431623733653135633032633366313064323662343961663633
-61623762653434666566366161356537396531383662646630336133386335396431633837376161
-63326561633961343862323739333036376665306433633465303835386264313333356161323165
-38666331356330383063653262353431303366356335336435303366643461613561343562613132
-35323934306330313039343032306136346439626437323130613933626331643363353734353564
-30396633323565616134383766383263346335393863656131363235333662376237666466343230
-32333033626631336539333130613935313739343132623239373162366635386131326139386364
-32373861373164623463303666346436636161373463633035353336633663336261333538363163
-39363262343136363436666232333563306262373531633031373633636266356138353565306536
-39356632353737346666633334396632646161663734623939396633383739373438323934333836
-35323965616236613538356534313137323633636362393834383635393132386161376135636565
-63613863323330373265613036633865663331623832626237356362313162323933366338366663
-62383134356235653237613030336563336532643738613239623261306264383364383433396139
-38316437626432346234663562636262393134666339313433636563663535363666363661343635
-34613136643632366238633561386364666532623738336333373866653163663335643437393830
-33303965646633616635396535313831306165393439396139616135316231313039373630633232
-66373538313033643432383635363064316638653436393866303132626333653863643065643933
-37633864356538303630376437383938326431343261626337326366613935656166643932623962
-33663465656636346361646432306162616634306661663261616638356365386664303364616139
-37633866653237366332393462636366386139653739623266616539643666393932636338383865
-35336361323263636163663336313239363066323031366536373432316361313266306162353739
-66316632313962386266326336303739393666323464396330653533623333383864386533333032
-66366262353632653335393430363732373336636132343034353138383764313233633662383362
-33346535666630633733376437326434653664313561356533366466613464616430356162623630
-36313964383363383563636666393463383434313032626133636161303138623563353466333939
-36316539326239316639666133616332333634366236326535393638653530343836623064353735
-64333662633062333061656538393236373230396664356461343433303765386332633932623937
-37326463616162653038353834656638346134343234626238336266366537623466646266396666
-38303333356235313634623965653030323033313137363434393535643731613339653164326663
-33653137633333363330666135666630386133376264623437323031663039616462303337393734
-64366535316662626261663831333964303062353261373332613235363436346366653464343731
-36386664333463633961376562343866326334373232663938333165323135383463353437323266
-33646236386430643764393765326537633834303333643637653030666664323637656630343535
-37353732646536353964313336643331613166346666623335353765363766653834646364633032
-34303238323139623132366461303238613464626636356532356561386562623535363363386165
-36313435663363323465386633363235623962623130653636353466353064616437323533616135
-30646336306434383330613866376432626261353666326232316236636366383964386562393130
-62376634333563326636363537323466663165313832633563323737336137363964633664323334
-62356535646566353630653361643735383462336364633735613166363361623261363661643238
-63663466616335363764666163656561623534376264626463316263356661353030343361616136
-30616239623137623364633536383233376639616537653366336132316461653032656366353237
-32336633373435303936316565313736656133386261663732336161336638623639383739663563
-62303432323230313963656666336134303230366662393830656563636265626662363330353464
-32336439353732393031383734613934303137626664613336353666663734323634303731396437
-31396165356361613364383839366338363331623838376564306138316336636337346336613866
-35393232363534396163383536363262366261656333613434306231373866386363333539333032
-32343631396236343265376566343432303931623464316332303962316237303134633931643636
-31613566633964633639346134366166306331303537366266323761643563343961303039363562
-35393135383863383232336135383830363763623537303933333633656364396533613439343062
-61313138626633343134333333333066353435643233323735323235663937633932656464666665
-39343732623638306239353263336630643836626334663163306439616639626438633637323434
-32653930303739393561363835333937343436623264303431623064656166646466613764316334
-63393462333336346235373433393536306366393262636663366230323563396264316363356463
-37656637393039626339633837663261396339326364376262303162353364616562303439636431
-63626265623865643333373038333532623731353632373361383933623735333434633363373137
-33373237306261653635656539663862383935613131353538353361623934363738666332306261
-39653533383432643135623063643161333733326438613435326433343962366463343839666336
-35356130363438353734333938396335386336633361336237326336336261333763646137386236
-62323231306666636663313431623165383537656637316537336665623064373634336464613330
-34373463626332663036623632313661613530346634633236636138303035363266336538666262
-35623639316230353733633664363137653732386135643832353961346238346335313261656231
-36326231353334376433333630323536383663313863363630363734313165313332366631363737
-64623738323063316339356265393138363835326330356234343065363038336235353135306365
-31663563383132303131383033636535393232663832646163636564303931356465626631383239
-37333465643932396232343561336133336239323735613338333632623164326535366266633334
-31316635353631643730373461333233646535323162653330333638363435373034313264316634
-32356462343761366666623663376263666134633131643361396433336438353966636234333930
-61303038326331643634646431323664396435613965663831353332353537326163316466636232
-62366161616461386631313361346630316230646635356630656139643737363263353364373562
-61366437356132366663336661653937303138326438646361663262306464326638313964633464
-31663663616262306662346365303235303433376463383632613132626536663530326565643666
-63383966353231336234393664353462636237313463303434316361353237323862646366393362
-30353965636331316461303538383433636236653839343034633563656163383138383034643965
-30616662343561323538656538613437396265383132356133366435313538373861656430316163
-30646665386330643936343765313537346138353561383635653337626562666366656131396235
-32313936376534653763376635313963313130636234653231616361326365656331646231316331
-31633430653239333832363364346265663733363433303939643066356163363062383962633532
-35633935626430353066613433663264363739353933333336323339663935353334613932653133
-61333630656535373132653463376336656164393632326363336135326539336631626431386466
-36333862656435366131326433316638356435353731343366356464616237373732643235663038
-38613363613637346630303631366537393637383362343331653535373361363333663563653137
-61616463616635663637376433346561363264393338366335626138626261303331363663323064
-37666362633761613362353031653164336265373464336661363564633064343066326133663738
-36623232386633343065646230663264633936653130323462316461303032363430353062356137
-39643533646464643934643266346338333963396130333338663233333831333461373763656137
-33376364663733303963636333663662313731376531366461336635626530653934363138663431
-62636338346134343136363261643961336563303931303938396136373832393532356463343635
-63363564383335363462353937323565343732666335383333336162616631633632633636313135
-33366633393433613430366161383963346431613464386638633432336362646162386263353135
-66383331666435323062376365383966613361613631663638316336613131313562396637336130
-33396439616438633362633462646632633466626161376365376165356436326430613762653530
-37303363653130626139323637336433666637656265613935633939643763313336386361373937
-61313831343862303231323536306132303233373837366130323863326535663463386532343065
-33613234343435653332313964633735306137656338656437353136623633383164656334326239
-62623665333038323639396434366232633131313236643339306236333966376435326332373738
-62323262376631323432303565376166613262623133353362333365616635303862366662663238
-62323132646538313234373761383534353836303039363566323265646666333833343464356262
-65616135366338363264383166343061376465373934363436376165303666656664313531333438
-34346362383364303339613263356139646539313834323231363836323634353665613864356138
-62336334313163636635626130623835396366366137636430636336323865636233616332653035
-30366564346333346462303864333466333333363636663034623165616431626135636334656436
-63303438613132653037656261316339346532386263376231626138653361333033326630336634
-64353232363730613361316164333233316166646332663538353233333936646334393831303063
-37373537396234333035643737363761326163643161366336396333633937613661356438623366
-62613164346362353664646536636434323131656432396663663132353331326663363432376634
-63326439306635343736396663313266633933653432373834663739636136653930653764643165
-62363264363130336336636166363031303937636438663133346231313935663030353864303635
-61333563313465316665616137363436393166373663656662633232643134383538313664316134
-61633465386266343364356133613439613138616439623866346261393533353531326639303465
-61623964353732653030663439663938613936636138653634633730616537333961393566363837
-31343038343938653964306635366366303431386236656161383235396437623664393439363035
-32343336383033663938643361363261383639346537633865626262643364633632316465303065
-63393165666531653236643034363066663137353530663336616661396538316233633733333830
-38646533636163626431613261613136346266646137653235646364333362313834633633323134
-63383362623336353532303861306562303736646535396265343137313833343331636462306236
-63386435383731396431333265303135333038383266626137336335313130643037623832343062
-63353362666563323362303239303834383061663131623261333536303966346333343132386339
-33386139336266613530626435383563616634306663323339376464353161303136376161663864
-62313361333661306337313235333562316636356232393536353264323731373066656236303133
-37653334626563636364323431333931386536646162383534386239643063643433666364306138
-38333466643363333632353761356435386339636464373630653939353836363138373836356164
-61626635303238623162376337646132333562613938656161666131386439653835636438376337
-61643334373362663266313332396635653836643861353363663538363331383663636236363561
-30303038303639393132303265373463383266633732393236346461626461393338666534396662
-32316637643166313362636562613163373363363865383161623662653335366539663766376438
-36353366316166306666303533393163626563623563366437666664326436306336303436353865
-33643736376636643635666662636230326337646330663963643638656336343562353836616266
-62393238383830346230373263633530323938393766663966626334633733323033633432353566
-62623935356431613236303261663566373163373030633766616432373561626434643432353764
-65653130626433613435316261363636313336633761353535383638653438623061633064323231
-31376432353231663131333237363230313438306237663864323536626236663731333661343932
-66383064636165336636313233336262383339636231363436383463626435336137373935626461
-65393133646331623732333137636263313333356238653865356163303532306237303062373563
-34363761393530623637623966373561666535626363643431633338373866613935386665643965
-62643636636637396133313461396664613334656365646361653363326439323062386463323430
-33656635316663336365643333343531326331303563386139366364356366346161316139376337
-38616665363035393138373337343863643237363739326339313835383266353735373562646133
-31303462336131636430623434333462376265616631386637353762613234646230316632313163
-63376164333932646436656365626239656433373364636636343864316332323431323937643264
-33626363353737666637376431623761653739353666386531656262343834616363646266396537
-35336461333266663537373365303138306435336661393561613663623166653062333263643966
-65373231343030393036633539333038373762616561646461336432376262313835653865373434
-61363961626330393566346163323132333834303738363233396337643830623036653034323364
-32623362323263386166343266333734663334393963323430313061346631326136336566373037
-35393034303837653061646336303564626638343832303139363065356531663531636139356638
-64653030666464613735656266353861613865666564363537313265616232643964623834323565
-65326463333732356439383765643466303931366230653565356235656337313530343334666538
-61393862646635633734336437386362303763316435633333316339326363363364383265336438
-38653938353263306339373336633630623436316437316136343663313463616533346133333065
-32666263333035306361306238653364656438373562613766393063353261363336343832393439
-65366337666462656335633535346630663832313963633631336463626465346164313436376232
-64396261663864386335336433356632666661313132616465346432616338653533346538663239
-66383437336261323137653965303963396634316532316566656430663966346363373531376662
-33633261656462646466353638663062343336613934343961633438636265333162303261616438
-62386361633632626363363437623661323337363962623363336333373235373339653765663461
-38383236396362333132303437383936386134353162636333326366313538393036613565653133
-63636366303430326563633239636535393531323331646263343135643564623464323833356637
-37643634306633633862376532353030383964616238343232343561343938353963303265633339
-32353163623231613332663734323231366135663234376530373164373833353831363732623133
-37366261633562313534386539643962663762366130663738333634366539353634366239326666
-63633063386136373166626438386634656131376266356366366538623064613465613736396233
-31623762356661643463363637346132393464656133633061643730623064613935653863633664
-62623434613363613136386362316266633233636139393438643666653132343732343334373063
-30666539383738343431633264353938386134653137393338653931646533383362373632373962
-65336132346230376462346464363136323439653864326636633361646364336233303334326262
-63343161323630613438636530333164373035363064353862666132653136333961346439653736
-32633161643761396662356331363831373162313863303937333731343134366532643366613965
-38643030356437663164383461663963306563346234646332613137323139353361616237363264
-61303665616266346362643262663237313731326231646636376537663537336238336266643162
-32386562353234353362653338373765646664653666336661306232373965663163396535366335
-66376332383538653531303234613136326432303462376237303036303437333666386631663162
-66343365613261323631666238663364363430303933323634333736343962646131303162306130
-32316533656433323838653830646138396138336662386632303364346636383166623132343033
-63626261666161383236643235366332613361653737346534656535666230633235353163656565
-38313539643362666433613038313130343463643330303731356565313033376466303732313830
-63383931346165373961386438376465373439373232386264313662326462643665323266336535
-35313563313833343464336237623633666632613538313931613233313831383365356666613962
-61303731303263396266346464646336663734373235306539353238356633663566343531383932
-35643239613563316264353166666432306636343865353961656265313363386630643337393761
-30373830326138343739666633623835386138386132326366613036636133666566356564616234
-61393236346662303232636231393062353166323032346662343736643163303531393830643638
-62666166353763336563666238353637366236643439386662333261376634313635346332636636
-39643630666332653334303637396136666165356163383764376430316162356435393964633736
-64316161303337323336653362313262303837633335616466646237653733623137343338363964
-30373864643132636536386130333731316266666130643866393438333262346639383332396534
-37373732386266356564613433666264373664646164386362353165613665343132643163663036
-62376435353834346134316339366232346134623232613034646666653764636566633638313865
-32383038653334356338626439326665333735323562626661656466643737393865386136386363
-62393966343562623534626464323631376131383334623365316434323939386538636662363830
-39346338613530626162633235626365616161306661313962363532376434393831656538373466
-66616662343433343265633866626333333732643836653163393265633630613566326330623334
-66336561643636633861323561646233373462633837323863653361646332636566356361643630
-38613136323134353637316530653938623839333134643034336666626633343930323033613066
-32656232303432383830646639613936346565393539393061376533333531666163303635626635
-63373331373531363161383664336631306231393937613338633333616431393865373032363137
-33643565386139323130383030646632356532616531633061636662333762383563616231393032
-65663131333337616638636635633634623730346633623230633739656565353332366236353731
-61323335303266326333366662393337393139386438366665623333313936626565623135636137
-36383632623633353037366461393832613365333462623630343264346439376362343262636533
-64306636393632353137343262633734613738393064363139343162333932316166623732613233
-32383933323435356639643830613339353761626332626666373335396131376536373534656138
-33663663333137373837353338343930336436653666356137666539303832356363396634303533
-33303038353164646561653466326534646139376638386131383862663435643066663332333431
-33303764333736313034313634666562303833313633613332383261653063313630336232623735
-32316631333563396265356666383030616430636138346636343930396433366233343638366436
-63633838626338343335383065356530373038343964316638376435383632396630616666613933
-35623936346635646562623931656236393539383935306530336335386638616534636332656366
-36623533623863613164316562303433646364343562633737346238356262393461316239623230
-35353662333433646130613834376566333930623530306165616162316332316638613532316131
-62353966323937363064663762356435326466616238393434366439656537623466303361623161
-34653933356537343437343265353936633564306266383161656135623336643863613135626137
-34336466653237326538316430666164646634353461323737313038363734346366373230636135
-61623331376238626465383430363762386433373331613037373934623266643037636366346636
-61383736386631313238343463373230346634373135626264613036616464376631323565383133
-32633239366635623134373766653335303030333261343439303731303137343935376133623737
-61666331363535356139643939363531626236646534373663343333666461376339323936636333
-35386565353662653839623430313138636431356337323336653435643533303137636435346562
-62633063643033366639306133346564653330623963313831393163396636623361363839353939
-35633538316562363839373964316239666237373462396635313933363231363864306430663630
-61316236633030346635303163633737613037313736353335333330336130643365633837643966
-39633737336463616365643037393030323139343666373464633239663435313365366535303061
-62626264643263303662396438376462343730373337333163653836616566336566653265653032
-64353538373161396438316166636136313338363762323961643639336538366332343963663961
-30303866313861363932346164353665356663313039396663366132646235343833336364313835
-62633438346330616631366562633763386231343863653465343766663039316437303439396562
-64396332666330653037303166356366323361323938343533613064613065623165306538613637
-62363431303266616164326233303362633237653537323737646138626661363533323162353863
-37343935356362353430393264383438363761613839616335376335313066313238313936633466
-33303437326332396338346134386635303236336139343530343632626134373433663333373661
-64316334336334393437383531303361616535343531613665333330363965626164363262623336
-34313762343838623830656438376130313362393939393033653539303564313334316636656137
-66366565623364626339376134366635633463393133313764303533373432613962326333613562
-35663961616466386565666331623262393032666235646538656261613762363234343161343035
-32646433343431306463333732326537356534316437623132393634313230373730613762386564
-36626433386339336363353134653734333035616136336633356334313937646434313835383434
-37643732356461613864663130363339323165356331373839313833646337323532313662396531
-33623634633135376134633431366333316236656462366638376133336337646338353363626163
-32383134363035613263306335666230306631393434613162366232363461356165383539393037
-33303731633837373538313662343064303461613136313135383336646632306337336133663137
-37363466633231383739333964616531613065356364356661333836663134313034623736306432
-38373566303964636338323136663531316462376363343232656432616636366133343038353232
-65666236346466366661623333333132613865613830656461633665346462306434636231396236
-61663131653533323335313761643539633165373335313863653739383166336666396236366336
-33353364633063366637396666613262626166333264346563306135343966636539653565663766
-66356365373936343037313931663665393537613663333831663934646563626435356634323766
-33643963626461356439313130386238326332333635343462396261613235646231613130623135
-31623637343339336235313231666635373661616564356136373336326137623965356632306436
-38353837663464333061373562323136633837646238333731636435346361313965323330333164
-30333461373263393965633736613366373630646634393038643831353032303565656362666636
-37383464343364303736386465643839333034363730383536326462623234636265636566326435
-34323266366238313363363033666261373961656164313334623030653637363263363334363464
-36303833313337643832376534616664333032366234626532306530343134643336336631383036
-33363533343535326365323634636661356565666366353936343466306334306631363639373861
-30363534396231333564656262336364663063366239366135316636303739653336396131663031
-37353465386638353738666165646665376433636135646537306330383961663237613164303638
-61366162363539313063333365656665393161613031396666303061323039303166643932613363
-38646439366534323537316265383262373639386534383338323364356430323666616561346638
-65306132366531356664336335376335316635363863356364373365643461333432366130333635
-35303931346233636532306664616565326138663634613638363864383666636663383537333334
-38373361333135316138663262313232323839356664376330303135383762343831366162323836
-30343932323764643461646533303064653634396233316633613433663530303730313436666162
-39636232326566633735613538316637643963613363306561373761623531303336633464376664
-32636463393962363130633339616332303963653531313833363364613230613135353762663966
-30373339306265373365643764653632363934663939356166663562326563343734653431346538
-66363365626231663166363734633861616165366166303035653238376562313662396537613562
-31353264323837323564303861326430363461343238366165316139393166643863316138343434
-61373937336335643161333238633534343832636336343934333336396565313537366162363961
-64316230303035393037623339306637306665653861383932396637613138333863336562633263
-30393039636664373761633664636334633235353436646665396662356261633866
+38356330366566333734353231656162663633383464626131386531646330643539383039353666
+3163656436616530333937366133656531346231316464320a386538313662663339316437323739
+30656465323730373438636363616337363465666533383163616337623363393334336431663231
+3139626634383462330a336664386662333766323162616230383863386163343864363863656462
+64356261396330393962663566393961386136373663326334316634333636306134383635326266
+32333238653639306236636534626565336565353634313164646334623631313634656266636431
+61303533376336653431356662333266653532613661373263623836316539393532393931313339
+34623365633339306239653039323063383564376139613333656339303964653538663232623632
+66373264643331386637343935633166636534666463616632643337626264393537396532336432
+33613137656161363837336430653566373566663764326665313731303332373164396333653363
+33313662353636383162353264643334333035373966623133646533326431663764383034393436
+35343937366636343934613839303066316435396261313037353662396434353936623164666630
+61626337653633346438636364326335396263636438303937666663323663353866633561323230
+65653635656661346530376131636232373239373866396336663962333765393164303361336139
+35353435363235666432396662316434616533656631373731643834313738613336313633316130
+61386337376432393630333962333935633330326235373834636135396665343866363934656237
+30663161643536383438336432623337363636353835316563613233316430336333386630303465
+65616434383833653439393266306130376634376232383331626631306136653966343431396461
+31613534313661333339306262383965646565323833326130343061646462323865656235306538
+38333363316233363861396665626137653766396235313162643638363530346531663834666363
+30636466356132393835393661333965316338666366383133396665656562366262316638323365
+33353131633335613965383664316561353431613963643231663064363631373730326436666561
+34386463353031646234303232346133346530653365383932613134666666393465393831616361
+31376465373239363361366539633064363035356435613636363330633665303632333262313535
+62623764303161663732613030646535653663306335333936303934343664373366393236633161
+64346439323965653537306435333138386237363033396664626234353361323431613961313930
+35363139643638666339393761303232316337623337333437383536376238663630343063363466
+38616561393437323339376563666362323762636263653966306636353537393934343439326539
+36306666343338333835333064623865346636623864313464343962373938616366616164313330
+30653238396664336131396639663266643765376664643361373932336464653963393863323162
+63616465656635663332313361353432383535646161383035343434636334613831393761336430
+37643738323336386532626637653864396237663462326135366634353132643863636538343066
+39393336393931666137326635636538643961323561333666323439663033633932383136333233
+39366431363936623664633637313636363063333532356235626136376564373639376264343039
+66346365313366666137636265343434396433313164323634316639313834326235643733333961
+30633963666630643036336238303236626338646264616335393933323164616364643730646534
+32333363343238663166343733613863626361363262313466326138646631663766366562623338
+37653764633464373432336330393033666139646232636637636439643362626162363537373664
+33663635643832373032393936396637386133363139323331383466333737613038313834626330
+31383662353739623361383261306137613935613638373361363438383239356231646463386162
+32383539343230643332626437656232383439623035333634343634666237323339323563396139
+32303433323666633166626638386334636563383736356465383833643538313363313562386139
+35326464343935663031626361376233343534613364326130366662643339373239373433396435
+31306639363162643333356134396335326230346237363364316331646465623630376265353265
+64623031386334333365363834613765616335323832313437306466373961393363313438393434
+39353563393836373663613136333461666630666635636636646239306531316630333930393839
+63343836643830666638636535613733383834633330663131326365313131636462636330623932
+36366430643030376534623966393862376632636238333263626465316362623731373230363734
+64376338376635333331323336633039666663373531323930386439396563613933333062333831
+34343437343631323239336137396631313837303962633064656439333866656134323165363736
+64363162316366373465623434663462623063313563376234306531386337346664636337353462
+35393738343638623338663239643263346532643265616137303832663361383663333631326432
+33616339333935363466396338383262623733646162316664393639616364646433316434393831
+34313131383636663033303037636130356139396238646566363738343137346230613761613130
+39353661663236316338366237333732343836333663373634633962373863336635346533386662
+35373165353833653364383839353964643066656239333734653036323961393065326361303937
+30323636666338373236306538326238386331346231313838383234616230623337343132613733
+66313631646162396365663933313132306165366530323434623861343337333261653034336131
+30363737303338613835653235343235356638656662313261633164623764666132663662303763
+39383463656439323266386562316437376635363939313761666137643662336362323835336132
+39643231313563343361366161623535383666353665333964313962393930303461346239353830
+64346339353565383563616663353135663964353538386265363533313261343961316265383662
+37636135663632373433376264353363353831333836326161313735346331343961333832396338
+63393136343262363930616365353539336133326561353965383134623862343337323932393264
+61303431393234633262353336303338623838636435663731343331636432663461356531666430
+30303830323264613836656534396138616362666638646137366631663564383564316466343238
+66366163393630613065336335373465333963643131613533313962636634663366333136393836
+35323763383064653563326232643734613263363238336536376431656335386338643135363539
+30346537386634346532613231633963343866353038623130653261616533356132336138343065
+61356535663035356438313838623231333464613331383839373038363335373838356566323935
+30313633383533393464386636613863636161623336613162333862663366613639303864396231
+65306634336239373764626534353136633434626365616261626233343432326532643233363664
+37643166636664343135623436376461383162313266306461323435616265383230373534313861
+32356463613138633863366333326361623539313638353062636361636332323435643364323863
+61666263333461663862373034366635393534343961663932636165663563623231616265386637
+64353732326665333338343863353430373661616664646535353832353862383364626665323730
+64366234343835396538316435636337396530356561633339333538343662323930616238613334
+33336461373361343964323065616235343537646265383166336131313035313731653165363364
+39653435393738386162643964356333326232383961373836326262613834643166666234623431
+61356636313033316265336165623035633930623835323434656634383563323563373561373232
+66313039653136333639643233306363393832613932623439396535653132336235373732636531
+62353865633866613261353035393965393663656330653836646261326631623435316439383131
+37636533613031316335666462636465663235393432646666313862643536313332643164653361
+36323339323637336264373033346265383736633363656338346234323239646334613832653633
+39623463616462376330303530663830613733646565303239613734616534393362623038396638
+30313333616239663431306665386564643463643832343464626636303332666539346436313330
+34333164323833333034336637616434373264356266363366393533633361303931666331373066
+64626636663862303633336466346439653339666366393439643363386532623632353736663535
+38616134376134376564636431366130616539306131356466303136313238613334346630653062
+31313431666166356461316136343930326434346433633835623562346439613134616361343532
+32363462363264653761646434306464383862306138396163313863363066396666373637656633
+64316638366666643163343236336264386537376134346665313034666137633338646435316634
+32346164643239376665643965306165636462323363353763643335346363636161613234636338
+62363562653834393935616263616263633735306564353833623834356561313531356134653933
+32663436383335316535363037336164626165373165363861376637383461343966623364346133
+39356630363961306233333662623064643134653161383530366135653238366661666335396265
+37633139623966653539623439616366346430643361343236663165373036383136633664353132
+65383137336664356661623334306532386630663734366561346438386535363230383763343361
+66643332303835633063323533633163333862333732643139353836643063613830343661613030
+39363737666161633964653766383664653261366234663664646663373064303337313035343861
+63643362616137666433303835316362343936313331356361376536303432643333383161666139
+39626462653032666130383638633430326336386332376633643431313764383036646661626633
+31353637323133663138663062373131373831383336623065323036306130363661613061373366
+64363634653566323635363438633637353035663039333233613233653932346233366661303666
+65336639343065326530653331313039623331343765366433623063376661316633343161376666
+64613864306265316331346633343865343635623761386639326262333433656139636235393132
+35306661343266313833653536346239333633646362373438646335653265353161363662623833
+39616538383666373362396266623438666239386462366434323132653563343866656162306662
+35313365326333316330373936363963323232623965393436656562373132343034336635356337
+37346438383366313366303138386263303639663534363034653064313135613562663337303466
+65383739613264323632386238386631353061313530393138373263386462646631626434613232
+37323666386532636437366338643132633865663733396236663862303264333132336339303939
+31343033663033376462666636616665313636343831376166313837323065346332333732643034
+39363034333366366638636431663338336562643463613735386237366137646539623562613537
+39326332643033623533376535373034333330336361363233343566366537313538633337363834
+35343266623133303736333262636233353432393236363233616565643232323931623064376536
+36343465323831623061376261613766343062616635623366316331313864316238666131346466
+63646233356538383432363736356239386465303835303935303530366365643662643033373234
+39636361346566653339343932303139623434343433333435366164306239646237373938363361
+34396165306136376164663939383238653438376537353262633664623933343863613061393831
+37396138633438356135306634383266363734316539386333613863393733303861663035343833
+37653030666563643833336339303363336234363738396539303233613264643737313730343061
+36653266313235336565663537333437643165353464366632363063373037336438306335613061
+61373134636631653630333661666463366336326536643463653264663938626637313364363736
+64626466643265326438326166366338663934336339636231356537333336616366666234616166
+66653836396230353061366461323661326438656338353265383631373330333061336239346639
+65636337386664303339653165616335393030373261313731396333376564623233373666383737
+63636432386162383063653163656362636638316163663834313164313733636536633064306266
+66393232386233633230643163623932343964386437323865373139373135356334613861643861
+63356263666431663061393834633436643266653730376637653761323863313038333061623735
+36346333613235363534363566353834313833323039626238396138376239646237316333353233
+62333162336461316264386634366338653036663462336361663130363537316266616435626337
+36373864343032306531653238643636643664636434613536306434633131636230383264343061
+38616635666162383061333739323661616630663237353033633537326565363437333433616330
+35623434626665653361346537616639623264623235316430363838616339646661303663313833
+61363762396666386163666337666532663265323732376634356432323165653033353833616134
+36333965376537393038383933353262616135663932343164353333376138343239653963313962
+38336333363533626235376132366536353064353530376533333231643131373161363038343636
+33613562356463353766333864306233316236636434633934343038633230383636633732303536
+30613864303064636532643732353664653562373937343062616663386564613933656337396134
+33333064616364636663666234616535396537626462643364313638366261393662653036306363
+35623539663032373164363363383863383165333835386135316136356265633962333161653535
+61326238666364663661363138346665333133363061366462653334343339653661303563626565
+64633333343766373865313031336438633231663831313061376339653866333035636134663135
+64626662386232313665336666636331393432323330386237653230323139356638363333613161
+36613139373562653662656562343533343664623035336365353163373764323638313931353439
+32633539333863666361353035356665333036613237376536653161316139393965623338356664
+34393037323532353965366234363139653138373761323466623636613262386634323535646163
+39633065353136383331363762353633386466653762353966336231636437636631663834616436
+32323331666665663236653064623639353531376435316565346231336330336135393261666465
+38616330323765323330613439656338653664623432336432316637356637333433623934663962
+34646564303365626330343434393964643930373162306130386663636333663838616266376333
+39623438323431363734393438313364663032653463643261376564346464396635643831316335
+37623565393462393538313365363836666433303538363062613664653236363332383032366138
+65333430336230633836643931336166663062343163303434653531333666353961633037653533
+39336336663232623265353762626533333663383637633166313730326164306634623839613234
+37363338383930393030663564356164656266363666376466313634626665653438636566336562
+32396535333664373835396263363364376231326263373864633436663336623434356661386465
+62663532363665316230626338653639643232636539393438663336343632346339373530653532
+61316336306264653735343665633139356634366435666635313836323139633139353732666530
+37393163386562653038663532333931383739613130343333653865303936333462616135376539
+61316261656464393632333635656136656263653966323366306338303037656264306438376664
+63636631623561663662633962333062346261313463353033636435303739613637303839376661
+32303230303134356132653332646230663164346264653563616664303634356365613133343137
+34363265373239636539616363383331313035333333663231646466646136356131396639366436
+36663965303230373465333365363035613362376566376331626137376130663432383061653334
+64636330613436336534316231383965356333313863363265626235643263363639353731373237
+64303936623035336431616665383836393134303637353361343666623962306163393263613661
+61386236353638663665383035346161343130366237386665663937363834336263386237653464
+39343239386331653834323961643239633039356364646665386663623132653332316430303661
+66663238663066383732663230316164366535396639306462393238326537636338373336626636
+66356636653064633330653732383234623166326164316365626534333064323539666137373032
+39636661383030306332356539333532323634313563633030383331396665356432633565386430
+34663766356362626532376365636436356438366235336634626131663130613665343264396265
+62353961343738303533633632353364633436343039373863383433306361376635316561363934
+33353337623165386239656666306236653338323662386435376462643133643832306332663163
+38623865316661666239396364313233356433303939393935653935343761386530666561663231
+65613933356639363138643965393036306134393362383464613938396633646362366664656331
+30323834336437376363613530353064313766353735363437313637623361356133346339343633
+31656432646463643430343434323833386162343263656461646464333565386462663738363336
+33306465663764623235613235613536393636346531363766393662623136613762383933373061
+65383661633534373730636235373166333961313463326336363261653730376532363537333838
+33386463353933316363333438393562663464313466613465316361386635316136356664376538
+65633565656439346165333962636431373662316465363964393362393536626635316336386634
+66303266623533323065383761636462336562376238323035333333386638316232353630646536
+61366233626334633863323331386531356164653464656637646164393032653535376365326438
+32386234366331313162303962366533333933336133303061323237623964303763623431656363
+36663139373435663035646166653361643834393536333734626664653266363964653830373334
+31313430643639386530323233353262313231366235396335373935393431306536653036386661
+66643239383866363036323230313962643734663931383338306534653432313238326330393530
+64346261323161646266316561393334636565663739366466303934343139613733353737633164
+37633831323839353964373335376633313663363434346164346339643363333364663134316662
+33306239346534333737396235666162383131316333343064613266643565653330323566313364
+30363063326263356161326463303832316639643361366130353866323538623937376636616331
+35353131323039323166393430386466363163356439393063656630393937353263353534393839
+39353438663139343765663036366365393830383030383862633339303335323062386263653736
+39363030656136323932663932346332376161376333323032383830316263623234646162623162
+36663661393463373563366561666439366431383333646430333339363361363835313631646135
+62316531353331623265626539633436626333613233333935346635656366366433326636346632
+30326565303563633535626637373433373837303931343532333330646162393434656637313861
+38323464393433656265633463376231616135303130346563373566376232626532316563343262
+65316464353366653330663234346337663263356661646538663136333362663432366662303564
+38303932373134306133366565376136393930663065363830646365343733383063363835396236
+61386462636630663335616366653362303139316639353735313066303336666534383131393932
+30643462613962633934636236613738356131383430636463613739616538383534336261393463
+37633439633465343039363137336338653137633938366263353061356165383962656563353231
+61336133383263343361313438333131343031373036336638303130386364303963326266376532
+38386539336236393336613138353231353533646636373965313962633434313039653030666535
+39393766633036343332306535636132326334306630663061343462336239373834323661363239
+37646130326132656262303336376431313063666439623165656139383765626535393332356333
+30326132633265633733393361633764383236343338633335393136653531353738653032376266
+34386261383864326139393963303837613461333464373133396164383866336530323832363730
+39646138626239306661366135393863663233643339336265613631626465303261323261346539
+61333439316264326530386164333966613435643630373630656164616637343263643366316234
+39363537303836666366626162663739383837623731373964343631353131363636323765323033
+33393231306533333662656566326434303739316661366337663036303432383566376233376666
+31626331313364373237633965646665326663633034376631613734666364643139356461666133
+30653763653130646539613333396362616233303236643863656236613461623335323832393031
+36336663373934386238366337353963313531383136633364663030666433356536383966303036
+66626334353562656431613537666535373135393836373161643539663935376565663431613633
+65393531613930346164613531626634336530386339633432393565366365613738626535653733
+31343435633133376464326437646236333737396563356266616363373339353461316164343037
+65373461313262306231363439396661376465313364643465646564323839663661306431646230
+64313231656362376236616634653934373134383162343263616436633732326536333931616334
+38623265333234306139656266613162643934323232343539356332616661393361643739313935
+66626461373861373838623065313162633834616364383235656438373364613639653164666333
+37303964613731366639393532373333366665386365316663653435323131636637376330643638
+39313064353031633663303138656666333731633937613266343164636432663839376364633266
+61343831666164353362306631323265303637383432616534313361373531343433646133343939
+37383765323939656561336466626130393631393163613365346337313936626238666533366361
+34363466663238373134383462666163656238653038316566643331656265303861383133646135
+39363538396335323134626532366639346664613565383961303965356666393432356466363831
+65383638616234623234613837643131383862356438373362633764633563386637336231646162
+39323734646230646130386134323830643732626661653933363263373962636431323861363061
+31613062366537373433366531313461393631656235663735623133613463303066636136653036
+39303432666161656166623234343762663535353131623135393938653238343539393136323737
+36646563306239356431366362363866316166323436383738643430373263343433623335363363
+66323539356235383765386134356639663037316631656366633331336135616463303865313633
+36656439663463376635633563623231646563636461363665326364373266313232353965353933
+33333332366564326334383136643661616435653035663934643636643138646634373337643330
+30326663316561623534376465306332353438346138646132316563633464356234373031386263
+33626466316364393639343030643130643233333638613762366466666334383731346366373966
+30346463376436343733653763626133373766306332343136323933343635626563326665383065
+38396231663666393035666336323865303766363735313362653430376438663236646639323233
+31623164633964373739303166663666633866663336373939373338633530653663613831393139
+35363662626631396336396163666431376337353765386139326334393230326161383631666561
+37333963646633353536623731393966643635303765623766326139643562323232363466386136
+38363363613836343335353861326536333932306139663664666561393062633339313530623736
+62633132633661623661333466663032363232313364656238383236666561343530653365303230
+37323661376434396532653638326162326532653935373036363034353966313338303430323533
+39306636356262633238616662303531303463353639356235623534303130396564653435383964
+61383633646261663139356331313338616137333962653064366566343062633433373835653661
+37663534343166383961343335316236616330353163623730376465643666363732626632643132
+66623238333834366365616635303738653036393339653165666637316438646330323139666566
+31666238613166343332616634636561306335376335653162646336303764343733613032333034
+32336366316265383538626164363238353331663736363865376366393231363237663166313732
+66643033643130393665623230333666356564316662616462623966363431393332663139613437
+66646461323564663634326532373539333634353139363138623238363935313866376466333830
+34653839366534663462633135623761313832613431376438356334626566656261663335653633
+66316466333361373838613431326565643761363263373335666264333134663235363764363238
+39393837306233653432386164623730646438326662396562633966336337373235316638653364
+64323333303362303138613065313834393735623263646333343631396635316338396138626638
+64393461373461363636623435343163653537616461613062633036626164623463663830633037
+65326439663030656562343962646264333339373332336537383937313332376433613132326261
+36366638356361636466393565373532363561353863633939623632656462373662636635363330
+37623839303035633162383036626335633738373033353231333835343638343263306332333433
+37313837316266663138633338366537333934313262636230326336353533613836393233626661
+31313230313334396430336666396465313161643563633766653966333832346133633034636564
+66653432376535396138613536346163613638356233353235646630626338383961346165313165
+36613631323362326230646435666637313031326131613433313833373430633333623164306636
+39383730623330633737363235666565306166663933333734386438653935656531326439353035
+34623961656539616630373337373661626137626231316638333066336337656461653134663965
+37613434616166613139626663386266366633306336393638396464646131386632656339383061
+61303733646636373430613137326465613661343431343039643031663734666365366534393631
+65373835613435366232656664626662653332373030356634393863386532343632343266363066
+35613263633866393463383164653236613432643266333537346631613032396632666235376630
+35353430636665623231663063636566303430333936336137356639653336313036663937373866
+66313763646635323061613463353734666630373439653661346132393337323339613931373835
+31363164376337343032623035326562643834626237643864306566653939613130616663653836
+66396336396665333932616535346331383139373937396361306231303363333338653637396234
+38616265623463626131333630393136653136376438353036393334373037326266663365376364
+36323732396433396664653163623633646561323433323232613035613636633332336537356464
+64363363623262643736386238326461373834656266653431313530353939373062383964643032
+31623238326461373863366436643866363066366562613435623465613735353438346636616430
+31353164313638633531356538336161663566663564376139356239656464386130306630393437
+33393136343438366364653733303333613433323738363366376261373433393535313864663936
+62326233653634376331333463633839356365336266376361313730323661366635643361306161
+33643361336135633563633866633135396331643634323365653134323736613732373232316531
+30396234326533323234336238353037393461303063383063623531316562326631323932656436
+65636563383436306138343263623037336638653730663264353063396537663232353330653765
+61343635313765313432316231653531386534373336313931636236373832613464383566396163
+35336233633138363532306230343337643565313564373132343732376162343834616132303761
+3130

roles/archweb/defaults/main.yml

@@ -12,7 +12,7 @@ archweb_domains_templates:
 archweb_allowed_hosts: ["{{ archweb_domain }}", 'ipxe.archlinux.org']
 archweb_nginx_conf: '/etc/nginx/nginx.d/archweb.conf'
 archweb_repository: 'https://github.com/archlinux/archweb.git'
-archweb_version: 'release_2025-01-11'
+archweb_version: 'release_2025-01-25'
 archweb_pgp_key: ['E499C79F53C96A54E572FEE1C06086337C50773E']
 archweb_site: true
 archweb_mirrorcheck: false

roles/common/tasks/main.yml

@@ -150,8 +150,8 @@
     - zshrc
     - dircolors
 
-- name: Install pacman-contrib and archlinux-contrib
-  pacman: name=pacman-contrib,fakeroot,archlinux-contrib state=installed
+- name: Install pacman-contrib for paccache/pacdiff and fakeroot for checkupdates
+  pacman: name=pacman-contrib,fakeroot state=installed
 
 - name: Install custom paccache.service
   copy: src=paccache.service dest=/etc/systemd/system/paccache.service owner=root group=root mode=0644

roles/dbscripts/defaults/main.yml

-dbscripts_commit: 0ebae15384d0f4acd79445a4beaf1599a7b379f7
+dbscripts_commit: 4086734db79e757a4b4fe1644f6344b835571f3c
 dbscripts_update: true
 dbscripts_pgp_emails: ['jelle@archlinux.org', 'anthraxx@archlinux.org', 'foxboron@archlinux.org', 'kristian@klausen.dk']
 

roles/grafana/templates/grafana.ini.j2

@@ -319,6 +319,9 @@ check_for_updates = false
 # Static context that is being added to analytics events
 ;reporting_static_context = grafanaInstance=12, os=linux
 
+# Logs interaction events to the browser javascript console, intended for development only
+;browser_console_reporter = false
+
 #################################### Security ####################################
 [security]
 # disable creation of admin user on first start of grafana
@@ -351,6 +354,9 @@ secret_key = {{ vault_grafana_secret_key }}
 # disable protection against brute force login attempts
 ;disable_brute_force_login_protection = false
 
+# max number of failed login attempts before user gets locked
+;brute_force_login_protection_max_attempts = 5
+
 # set to true if you host Grafana behind HTTPS. default is false.
 cookie_secure = true
 
@@ -412,8 +418,9 @@ cookie_samesite = strict
 # The CSRF check will be executed even if the request has no login cookie.
 ;csrf_always_check = false
 
-# Comma-separated list of plugins ids that won't be loaded inside the frontend sandbox
-;disable_frontend_sandbox_for_plugins =
+# Comma-separated list of plugins ids that will be loaded inside the frontend sandbox
+# Currently behind the feature flag pluginsFrontendSandbox
+;enable_frontend_sandbox_for_plugins =
 
 # Comma-separated list of paths for POST/PUT URL in actions. Empty will allow anything that is not on the same origin
 ;actions_allow_post_url =
@@ -467,6 +474,10 @@ default_home_dashboard_path = /var/lib/grafana/public-dashboards/archive.json
 # Check datasource documentations for enabling concurrency.
 ;concurrent_query_count = 10
 
+# Default behavior for the "Manage alerts via Alerting UI" toggle when configuring a data source.
+# It only works if the data source's `jsonData.manageAlerts` prop does not contain a previously configured value.
+;default_manage_alerts_ui_toggle = true
+
 ################################### SQL Data Sources #####################
 [sql_datasources]
 # Default maximum number of open connections maintained in the connection pool
@@ -759,8 +770,11 @@ hide_version = true
 ;enabled = false
 ;allow_sign_up = true
 ;auto_login = false
+;client_authentication =
 ;client_id = some_client_id
 ;client_secret = some_client_secret
+;managed_identity_client_id =
+;federated_credential_audience =
 ;scopes = openid email profile
 ;auth_url = https://login.microsoftonline.com/<tenant-id>/oauth2/v2.0/authorize
 ;token_url = https://login.microsoftonline.com/<tenant-id>/oauth2/v2.0/token
@@ -1127,6 +1141,9 @@ mode = syslog
 # Max requests accepted per short interval of time for Grafana backend log ingestion endpoint (/log).
 ;log_endpoint_burst_limit = 15
 
+# Enables all Faro default instrumentation by using `getWebInstrumentations`. Overrides other instrumentation flags.
+;instrumentations_all_enabled = false
+
 # Should error instrumentation be enabled, only affects Grafana Javascript Agent
 ;instrumentations_errors_enabled = true
 
@@ -1321,8 +1338,8 @@ mode = syslog
 # The timeout string is a possibly signed sequence of decimal numbers, followed by a unit suffix (ms, s, m, h, d), e.g. 30s or 1m.
 ;evaluation_timeout = 30s
 
-# Number of times we'll attempt to evaluate an alert rule before giving up on that evaluation. The default value is 1.
-;max_attempts = 1
+# Number of times we'll attempt to evaluate an alert rule before giving up on that evaluation. The default value is 3.
+;max_attempts = 3
 
 # Minimum interval to enforce between rule evaluations. Rules will be adjusted if they are less than this value  or if they are not multiple of the scheduler interval (10s). Higher values can help with resource management as we'll schedule fewer evaluations over time.
 # The interval string is a possibly signed sequence of decimal numbers, followed by a unit suffix (ms, s, m, h, d), e.g. 30s or 1m.
@@ -1337,6 +1354,9 @@ mode = syslog
 # The interval string is a possibly signed sequence of decimal numbers, followed by a unit suffix (ms, s, m, h, d), e.g. 30s or 1m.
 ;state_periodic_save_interval = 5m
 
+# If the feature flag 'alertingSaveStatePeriodic' is enabled, this is the size of the batch that is saved to the database at once.
+;state_periodic_save_batch_size = 1
+
 # Disables the smoothing of alert evaluations across their evaluation window.
 # Rules will evaluate in sync.
 ;disable_jitter = false
@@ -1945,6 +1965,10 @@ timeout = 30s
 ;feedback_url = ""
 # How frequently should the frontend UI poll for changes while resources are migrating
 ;frontend_poll_interval = 2s
+# Controls how the Alert Rules are migrated. Available choices: "paused" and "unchanged". Default: "paused".
+# With "paused", all Alert Rules will be created in Paused state. This is helpful to avoid double notifications.
+# With "unchanged", all Alert Rules will be created with the pause state unchanged coming from the source instance.
+;alert_rules_state = "paused"
 
 ################################## Frontend development configuration ###################################
 # Warning! Any settings placed in this section will be available on `process.env.frontend_dev_{foo}` within frontend code

roles/matrix/files/draupnir.service

 [Unit]
 Description=Draupnir Matrix moderation tool
-Wants=synapse.service pantalaimon.service
-After=network.target synapse.service pantalaimon.service
+Wants=synapse.service
+After=network.target synapse.service
 
 [Service]
 User=synapse

roles/matrix/files/pantalaimon.service

-[Unit]
-Description=Pantalaimon E2E Matrix reverse proxy
-Wants=synapse.service
-After=network.target synapse.service
-
-[Service]
-User=synapse
-WorkingDirectory=~
-ExecStart=/var/lib/synapse/venv-pantalaimon/bin/pantalaimon \
-  -c /etc/synapse/pantalaimon.conf \
-  --data-path /var/lib/synapse/pantalaimon-data
-ExecStartPost=/usr/bin/sleep 10
-
-[Install]
-WantedBy=multi-user.target
-
-# vim:set ft=systemd sw=2 sts=-1 et:

roles/matrix/handlers/main.yml

@@ -5,13 +5,6 @@
     enabled: true
     daemon_reload: true
 
-- name: Restart pantalaimon
-  systemd_service:
-    name: pantalaimon
-    state: restarted
-    enabled: true
-    daemon_reload: true
-
 - name: Restart draupnir
   systemd_service:
     name: draupnir

roles/matrix/tasks/main.yml

@@ -47,7 +47,6 @@
     - /var/lib/synapse
     - /var/lib/synapse/media_store
     - /var/lib/synapse/draupnir-data
-    - /var/lib/synapse/pantalaimon-data
 
 - name: Make virtualenvs
   command: 'python -m venv {{ item }}'
@@ -58,7 +57,6 @@
   become_method: ansible.builtin.sudo
   loop:
     - /var/lib/synapse/venv
-    - /var/lib/synapse/venv-pantalaimon
 
 - name: Update virtualenvs
   pip:
@@ -73,12 +71,11 @@
   become_method: ansible.builtin.sudo
   loop:
     - /var/lib/synapse/venv
-    - /var/lib/synapse/venv-pantalaimon
 
 - name: Install synapse
   pip:
     name:
-      - 'matrix-synapse[postgres,oidc,systemd,url-preview,redis,user-search]==1.121.1'
+      - 'matrix-synapse[postgres,oidc,systemd,url-preview,redis,user-search]==1.123.0'
     state: latest
     extra_args: '--upgrade-strategy=eager'
     virtualenv: /var/lib/synapse/venv
@@ -89,69 +86,11 @@
   notify:
     - Restart synapse
 
-- name: Install pantalaimon
-  pip:
-    name:
-      - 'aiofiles==23.2.1'
-      - 'aiohappyeyeballs==2.4.4'
-      - 'aiohttp==3.11.10'
-      - 'aiohttp-socks==0.7.1'
-      - 'aiosignal==1.3.1'
-      - 'appdirs==1.4.4'
-      - 'atomicwrites==1.4.1'
-      - 'attrs==24.2.0'
-      - 'cachetools==4.2.4'
-      - 'cffi==1.17.1'
-      - 'click==8.1.7'
-      - 'cryptography==44.0.0'
-      - 'frozenlist==1.5.0'
-      - 'future==0.18.3'
-      - 'h11==0.14.0'
-      - 'h2==4.1.0'
-      - 'hpack==4.0.0'
-      - 'hyperframe==6.0.1'
-      - 'idna==3.10'
-      - 'janus==1.1.0'
-      - 'jaraco.classes==3.4.0'
-      - 'jaraco.context==6.0.1'
-      - 'jaraco.functools==4.1.0'
-      - 'jeepney==0.8.0'
-      - 'jsonschema==4.23.0'
-      - 'jsonschema-specifications==2024.10.1'
-      - 'keyring==25.5.0'
-      - 'Logbook==1.8.0'
-      - 'matrix-nio==0.22.0'
-      - 'more-itertools==10.5.0'
-      - 'multidict==6.1.0'
-      - 'pantalaimon==0.10.5'
-      - 'peewee==3.17.8'
-      - 'prompt_toolkit==3.0.48'
-      - 'propcache==0.2.1'
-      - 'pycparser==2.22'
-      - 'pycryptodome==3.21.0'
-      - 'python-olm==3.2.16'
-      - 'python-socks==2.5.3'
-      - 'referencing==0.35.1'
-      - 'rpds-py==0.22.3'
-      - 'SecretStorage==3.3.3'
-      - 'unpaddedbase64==2.1.0'
-      - 'wcwidth==0.2.13'
-      - 'wheel==0.45.1'
-      - 'yarl==1.18.3'
-    state: latest
-    extra_args: '--upgrade-strategy=eager --no-deps'
-    virtualenv: /var/lib/synapse/venv-pantalaimon
-  become: true
-  become_user: synapse
-  become_method: ansible.builtin.sudo
-  notify:
-    - Restart pantalaimon
-
 - name: Download draupnir
   git:
     repo: https://github.com/the-draupnir-project/Draupnir
     dest: /var/lib/synapse/draupnir
-    version: v1.87.0
+    version: v2.1.0
     force: true
   become: true
   become_user: synapse
@@ -265,11 +204,6 @@
   notify:
     - Restart synapse
 
-- name: Install pantalaimon config
-  template: src=pantalaimon.conf.j2 dest=/etc/synapse/pantalaimon.conf owner=root group=synapse mode=0644
-  notify:
-    - Restart pantalaimon
-
 - name: Install draupnir config
   template: src=draupnir.yaml.j2 dest=/etc/synapse/draupnir.yaml owner=root group=synapse mode=0640
   notify:
@@ -335,13 +269,6 @@
   notify:
     - Restart synapse
 
-- name: Install pantalaimon units
-  copy: src={{ item }} dest=/etc/systemd/system/{{ item }} owner=root group=root mode=0644
-  loop:
-    - pantalaimon.service
-  notify:
-    - Restart pantalaimon
-
 - name: Install draupnir units
   copy: src={{ item }} dest=/etc/systemd/system/{{ item }} owner=root group=root mode=0644
   loop:
@@ -369,7 +296,6 @@
     - synapse-worker@federation_reader.service
     - synapse-worker@federation_sender.service
     - synapse-worker@media_repository.service
-    - pantalaimon.service
     - draupnir.service
     - matrix-appservice-irc.service
     - turnserver.service

roles/matrix/templates/draupnir.yaml.j2

 # Endpoint URL that Draupnir uses to interact with the matrix homeserver (client-server API),
 # set this to the pantalaimon URL if you're using that.
-homeserverUrl: "http://127.0.0.1:8009"
+homeserverUrl: "https://{{ matrix_domain }}"
 
 # Endpoint URL that Draupnir could use to fetch events related to reports (client-server API and /_synapse/),
 # only set this to the public-internet homeserver client API URL, do NOT set this to the pantalaimon URL.
-rawHomeserverUrl: "http://127.0.0.1:8008"
+rawHomeserverUrl: "https://{{ matrix_domain }}"
 
 # Matrix Access Token to use, Draupnir will only use this if pantalaimon.use is false.
 # This option can be loaded from a file by passing "--access-token-path <path>" at the command line,
 # which would allow using secret management systems such as systemd's service credentials.
-accessToken: ""
+accessToken: "{{ vault_matrix_secrets.mjolnir_access_token }}"
 
 # Options related to Pantalaimon (https://github.com/matrix-org/pantalaimon)
 pantalaimon:
@@ -20,17 +20,17 @@ pantalaimon:
   #
   # Draupnir will log in using the given username and password once,
   # then store the resulting access token in a file under dataPath.
-  use: true
+  use: false
 
   # The username to login with.
-  username: mjolnir
+  username: draupnir
 
   # The password Draupnir will login with.
   #
   # After successfully logging in once, this will be ignored, so this value can be blanked after first startup.
   # This option can be loaded from a file by passing "--pantalaimon-password-path <path>" at the command line,
   # which would allow using secret management systems such as systemd's service credentials.
-  password: "{{ vault_matrix_secrets.mjolnir_user_password }}"
+  password: your_password
 
 # Experimental usage of the matrix-bot-sdk rust crypto.
 # This can not be used with Pantalaimon.
@@ -60,7 +60,7 @@ recordIgnoredInvites: true
 #
 # Note: By default, Draupnir is fairly verbose - expect a lot of messages in this room.
 # (see verboseLogging to adjust this a bit.)
-managementRoom: "#mjolnir:{{ matrix_server_name }}"
+managementRoom: "#draupnir:{{ matrix_server_name }}"
 
 # Deprecated and will be removed in a future version.
 # Running with verboseLogging is unsupported.
@@ -90,12 +90,6 @@ noop: false
 # DO NOT change this to `true` unless you are very confident that you know what you are doing.
 disableServerACL: false
 
-# Whether Draupnir should check member lists quicker (by using a different endpoint),
-# keep in mind that enabling this will miss invited (but not joined) users.
-#
-# Turn on if your bot is in (very) large rooms, or in large amounts of rooms.
-fasterMembershipChecks: false
-
 # A case-insensitive list of ban reasons to have the bot also automatically redact the user's messages for.
 #
 # If the bot sees you ban a user with a reason that is an (exact case-insensitive) match to this list,
@@ -111,14 +105,6 @@ automaticallyRedactForReasons:
   - "spam"
   - "redact:*"
 
-# A list of rooms to protect. Draupnir will add this to the list it knows from its account data.
-#
-# It won't, however, add it to the account data.
-# Manually add the room via '!draupnir rooms add' to have it stay protected regardless if this config value changes.
-#
-# Note: These must be matrix.to URLs
-protectedRooms: []
-
 # Whether or not to add all joined rooms to the "protected rooms" list
 # (excluding the management room and watched policy list rooms, see below).
 #
@@ -164,10 +150,6 @@ commands:
     - "draupnir"
     - "mjolnir"
 
-  # Whether or not commands with a wildcard (*) will require an additional `--force` argument
-  # in the command to be able to be submitted.
-  confirmWildcardBan: true
-
   # The default reasons to be prompted with if the reason is missing from a ban command.
   ban:
     defaultReasons:
@@ -186,10 +168,9 @@ protections:
     #
     # WordList will ban users who use these words when first joining a room, so take caution when selecting them.
     #
-    # For advanced usage, regex can also be used, see the following links for more information;
-    #  - https://www.digitalocean.com/community/tutorials/an-introduction-to-regular-expressions
-    #  - https://regexr.com/
-    #  - https://regexone.com/
+    # The word list protection does not support regular expressions at this time.
+    # The configuration in the past stated support for Regex erroneously.
+    #
     words:
 {% for word in vault_matrix_secrets.badwords %}
       - {{ word | to_json }}
@@ -203,6 +184,31 @@ protections:
     # (users will always be banned if they say a bad word)
     minutesBeforeTrusting: 2160
 
+# The room state backing store writes a copy of the room state for all protected
+# rooms to the data directory.
+# It is recommended to enable this option unless you deploy Draupnir close to the
+# homeserver and know that Draupnir is starting up quickly. If your homeserver can
+# respond quickly to Draupnir's requests for `/state` then you might not need this option.
+roomStateBackingStore:
+  enabled: true
+
+# Safe mode provides recovery options for some failure modes when Draupnir
+# fails to start. For example, if the bot fails to resolve a room alias in
+# a watched list, or if the server has parted from a protected room and can't
+# find a way back in. Safe mode will provide different options to recover from
+# these. Such as unprotecting the room or unwatching the policy list.
+# By default Draupnir will boot into safe mode only when the failure mode
+# is recoverable.
+# It may be desirable to prevent the bot from starting into safe mode if you have
+# a pager system when Draupnir is down, as Draupnir could prevent your monitoring
+# system from identifying a failure to start.
+#safeMode:
+#  # The option for entering safe mode when Draupnir fails to start up.
+#  # - "RecoveryOnly" will only start the bot in safe mode when there are recovery options available. This is the default.
+#  # - "Never" will never start the bot in safe mode when Draupnir fails to start normally.
+#  # - "Always" will always start the bot in safe mode when Draupnir fails to start normally.
+#  bootOption: RecoveryOnly
+
 # Options for advanced monitoring of the health of the bot.
 health:
   # healthz options. These options are best for use in container environments

roles/matrix/templates/pantalaimon.conf.j2

-[Default]
-LogLevel = Warning
-Notifications = Off
-
-[local-archlinux]
-Homeserver = https://{{ matrix_domain }}
-ListenAddress = 127.0.0.1
-ListenPort = 8009
-IgnoreVerification = True
-UseKeyring = No
-DropOldKeys = True

roles/matrix/templates/turnserver.conf.j2

@@ -54,9 +54,22 @@ tls-listening-port=2420
 #tcp-proxy-port=5555
 
 # Listener IP address of relay server. Multiple listeners can be specified.
-# If no IP(s) specified in the config file or in the command line options,
-# then all IPv4 and IPv6 system IPs will be used for listening.
-#
+# If no IP is specified in the config file or in the command line options,
+# then all IPv4 system IPs will be used for listening.
+#listening-ip=
+#
+# If you specify '::' as IP, then all IPv6 system IPs will be used for
+# listening.
+#listening-ip=::
+#
+# If you want to listen on all IPv4 as well as on all IPv6, you can do
+#listening-ip=
+#listening-ip=::
+# or
+#listening-ip=0.0.0.0
+#listening-ip=::
+#
+# to specify just some IPs you prefer:
 #listening-ip=172.17.19.101
 #listening-ip=10.207.21.238
 #listening-ip=2607:f0d0:1002:51::4
@@ -192,12 +205,24 @@ fingerprint
 #
 # You can simply run the turnserver and access the port 9641 and path /metrics
 #
+# This is currently unavailable on apt installations
+#
 # For more info on the prometheus exporter and metrics
 # https://prometheus.io/docs/introduction/overview/
 # https://prometheus.io/docs/concepts/data_model/
 #
 #prometheus
 
+# Enable labeling prometheus traffic metrics with client usernames.
+# Labeling with client usernames is disabled by default, because this may cause memory
+# leaks when using authentication with ephemeral usernames (e.g. TURN REST API).
+#
+#prometheus-username-labels
+
+# Prometheus listener port (Default: 9641).
+#
+#prometheus-port=9641
+
 # TURN REST API flag.
 # (Time Limited Long Term Credential)
 # Flag that sets a special authorization option that is based upon authentication secret.
@@ -465,6 +490,13 @@ cert=/etc/letsencrypt/live/{{ matrix_domain }}/fullchain.pem
 #
 pkey=/etc/letsencrypt/live/{{ matrix_domain }}/privkey.pem
 
+# Raw public keys support.
+# On/off switch for RFC-7250 aka raw public keys.
+# Keep in mind, in order for rpks to work,
+# coturn must be built against openSSL version at least 3.2.1
+#
+#raw-public-keys
+
 # Private key file password, if it is in encoded format.
 # This option has no default value.
 #
@@ -723,6 +755,7 @@ no-cli
 # Enable Web-admin support on https. By default it is Disabled.
 # If it is enabled it also enables a http a simple static banner page
 # with a small reminder that the admin page is available only on https.
+# Not supported if no-tls option used
 #
 #web-admin
 
@@ -794,3 +827,9 @@ no-stun-backward-compatibility
 # binding responses.
 #
 response-origin-only-with-rfc5780
+
+# Return an HTTP/S response when an HTTP/S connection is made to a TCP port
+# otherwise only supporting STUN/TURN. This may be useful for debugging and
+# diagnosing connection problems. A "400 Not supported" response is currently
+# returned.
+#respond-http-unsupported

roles/postgres/files/upgrade_pg.sh

@@ -5,7 +5,7 @@ set -e
 TO_VERSION=$(pacman -Q postgresql | grep -Po '(?<=postgresql )[0-9]+\.[0-9]')
 
 to_major=${TO_VERSION%%.*}
-if (( $to_major != 16 )); then
+if (( $to_major != 17 )); then
 	# NOTE: When this happens you should check the changelog and add any
 	# necessary changes here. Then bump the version check.
 	echo "ERROR: major upgrade detected, aborting..."

roles/rebuilderd_worker/files/repro.conf

 NOCHECK=1
 CACHEDIR=/var/lib/rebuilderd-worker/cache
+MAX_MEMORY=32G