Signed-off-by: Florian Pritz <bluewind@xinu.at>

This requires the update script to be run so add a handler for it.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

sendmail doesn't work from php due to our service file disabling setuid.
Use SMTP just like the other services do.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Enablding them doesn't really work well if they are still commented...

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Before validate_root and validate_permission opcache was insecure in a
multiuser environment. Now it should be fine.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

All the cached requests have 0 request time and that brings the median
request time to 0 nearly all the time thus rendering the stats useless.
Since we want to know how the application requests perform, we can just
ignore 0 values.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Make the role fully idempotent by pinning the version and also use a variable
for setting the repository.

Fixed the description of the archwiki-prune-cache.timer.

Added the archwiki role to the apollo playbook and also added the intl extension to the
php-fpm role.

The intl package is required for mediawiki.

Added the certbot command to create the certificate on the first run of the role.
Also install the archwiki-runjobs, archwiki-prune-cache service and timers and the
archwiki-runjobs-wait service. Enable the timers and start them as well as the runjobs-wait
service.

Create service/timers for the runJobs and pruneCache maintenance commands. The runJobs
runs every 5 minutes and the pruneCache every day at 04:12 AM. Also add a new service
that runs the runJobs with the --wait parameter.

Create the required directories on the first run of the role and make sure they
keep the required permissions.

Create a template for the wiki configuration with the db user and password
and the secret key and upgrade key

Place the db password on the vault

This is the same as used on luna and as expected by the zabbix nginx monitoring service.

Deploy LocalSettings.php with the changes required to run archwiki.

Add the tasks that create the archwiki user, clone the repo, create the db
and the db user and also configure the php-fpm daemon.

Define the path as a variable for usage on the php-fpm configuration.

Add a handlers entry for reloading systemd and restarting the php-fpm
unit.

Add a nginx template based on the configuration extracted from luna.
Add a php-fpm template based on the one from luna, but changing some
variables, disallow /bin/bash and apply the same disable_functions
as flyspray. This might need to be changed.

Create a default file for archwiki.

The defaults for max_allowed_packet (1M) and innodb_log_file_size (5) are too small for doing larger imports.
Increase the max_allowed_packet to 16M and innodb_log_file_size to 64M.

Already quoted in the new config template.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>