Merge branch 'upgrade-accounts-boxy-first' into 'master'

tasks/upgrade-servers: upgrade Keycloak box first

Closes #496

See merge request !685

playbooks/tasks/upgrade-servers.yml

+- name: Upgrade, reboot and health-check accounts.archlinux.org
+  hosts: accounts.archlinux.org
+  max_fail_percentage: 0
+  gather_facts: false
+
+  tasks:
+    - name: Upgrade and reboot
+      include_tasks: include/upgrade-server.yml
+
+    - name: Wait for Keycloak to become available
+      uri: url=https://{{ inventory_hostname }}/metrics
+      register: result
+      until: result.status == 200
+      # retry for 5 minutes after boot
+      retries: 30
+      delay: 10
+
 - name: Upgrade and reboot all hetzner servers
-  hosts: all,!kape_servers,!equinix_metal
+  hosts: all,!accounts.archlinux.org,!kape_servers,!equinix_metal
   max_fail_percentage: 0
   serial: 20%
   gather_facts: false

roles/keycloak/files/increase-start-timeout.conf

+[Service]
+TimeoutStartSec=3min

roles/keycloak/tasks/main.yml

@@ -23,6 +23,12 @@
 - name: Create drop-in directory for keycloak.service
   file: path=/etc/systemd/system/keycloak.service.d state=directory owner=root group=root mode=0755
 
+- name: Increase start-up timeout on single-core systems
+  copy: src=increase-start-timeout.conf dest=/etc/systemd/system/keycloak.service.d/ owner=root group=root mode=0644
+  when: ansible_processor_vcpus == 1
+  notify:
+    - Daemon reload
+
 - name: Get service facts
   service_facts: