Fixed the description of the archwiki-prune-cache.timer.

Added the archwiki role to the apollo playbook and also added the intl extension to the
php-fpm role.

The intl package is required for mediawiki.

Added the certbot command to create the certificate on the first run of the role.
Also install the archwiki-runjobs, archwiki-prune-cache service and timers and the
archwiki-runjobs-wait service. Enable the timers and start them as well as the runjobs-wait
service.

Create service/timers for the runJobs and pruneCache maintenance commands. The runJobs
runs every 5 minutes and the pruneCache every day at 04:12 AM. Also add a new service
that runs the runJobs with the --wait parameter.

Create the required directories on the first run of the role and make sure they
keep the required permissions.

Create a template for the wiki configuration with the db user and password
and the secret key and upgrade key

Place the db password on the vault

This is the same as used on luna and as expected by the zabbix nginx monitoring service.

Deploy LocalSettings.php with the changes required to run archwiki.

Add the tasks that create the archwiki user, clone the repo, create the db
and the db user and also configure the php-fpm daemon.

Define the path as a variable for usage on the php-fpm configuration.

Add a handlers entry for reloading systemd and restarting the php-fpm
unit.

Add a nginx template based on the configuration extracted from luna.
Add a php-fpm template based on the one from luna, but changing some
variables, disallow /bin/bash and apply the same disable_functions
as flyspray. This might need to be changed.

Create a default file for archwiki.

The defaults for max_allowed_packet (1M) and innodb_log_file_size (5) are too small for doing larger imports.
Increase the max_allowed_packet to 16M and innodb_log_file_size to 64M.

Already quoted in the new config template.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

For some reason printf doesn't error if zabbix_sender dies. Try if
syswrite does.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

A new archweb release has not been made yet with the donor import
integration.

Add donor import service, which imports donors from a maildir directory
in /home/donate/. The emails are dumped using a script on orion which
calls doveadm to create a directory with exported emails.

The workaround for ignore_errors has been fixed in Ansible 2.1.1.0.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

This makes the security tracker role idempotent.

The security tracker renamed app to tracker and needs an ngnix config
and uwsgi config change.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

This is the same as used on luna and as expected by the zabbix nginx
monitoring service.

Signed-off-by: Florian Pritz <bluewind@xinu.at>