Deploy LocalSettings.php with the changes required to run archwiki.

Add the tasks that create the archwiki user, clone the repo, create the db
and the db user and also configure the php-fpm daemon.

Define the path as a variable for usage on the php-fpm configuration.

Add a handlers entry for reloading systemd and restarting the php-fpm
unit.

Add a nginx template based on the configuration extracted from luna.
Add a php-fpm template based on the one from luna, but changing some
variables, disallow /bin/bash and apply the same disable_functions
as flyspray. This might need to be changed.

Create a default file for archwiki.

The defaults for max_allowed_packet (1M) and innodb_log_file_size (5) are too small for doing larger imports.
Increase the max_allowed_packet to 16M and innodb_log_file_size to 64M.

Already quoted in the new config template.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

For some reason printf doesn't error if zabbix_sender dies. Try if
syswrite does.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

A new archweb release has not been made yet with the donor import
integration.

Add donor import service, which imports donors from a maildir directory
in /home/donate/. The emails are dumped using a script on orion which
calls doveadm to create a directory with exported emails.

The workaround for ignore_errors has been fixed in Ansible 2.1.1.0.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

This makes the security tracker role idempotent.

The security tracker renamed app to tracker and needs an ngnix config
and uwsgi config change.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

This is the same as used on luna and as expected by the zabbix nginx
monitoring service.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Otherwise discovery rules don't seem to work for dependent items.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

We might want to monitor client/table/index stats in the future too
without having to change the zabbix item configs.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

If the service is started before the config is copied, we can't recover
from a typo in the config file because maraidb will refused to start. At
least not without manually fixing that typo. This way the typo can be
fixed in ansible and then deployed normally.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

speps: https://lists.archlinux.org/pipermail/aur-general/2018-January/033763.html

faidoc: https://lists.archlinux.org/pipermail/aur-general/2018-January/033764.html



Signed-off-by: Florian Pritz <bluewind@xinu.at>