Fix certificate catch-22 bootstrapping issue

Closes #30

See merge request !267

Kristian Klausen authored 4 years ago and Sven-Hendrik Haase committed 4 years ago

Issuing a certificate requires nginx to be running, but nginx requires a
certificate to start. Fix it by using Python built-in http.server.

Fix #30

roles/common: install pacman.conf as soon as possible to avoid duplicate package cache update

See merge request archlinux/infrastructure!203

It should also be installed before installing any packages with Ansible.

Remove openpgpkey.archlinux.org leftovers

See merge request archlinux/infrastructure!266

ioni is no longer a Developer for a while.

WKD pages

See merge request archlinux/infrastructure!263

The WKD will be migrated to Gitlab Pages, requiring a lowering of DNS
TTL.

Move certificate issuing to its own role to ease maintenance

See merge request !265

It should make it easier to change how the certificates is issued.
Ex: If we want to switch to ECDSA certificates in the future or replace
certbot with something else.

Remove conf_archlinux role, replaced by GitLab Pages

See merge request !264

See #237

update mailman admin password

See merge request !262

Link to relevant mailing list mails when off-/onboarding

See merge request !259

Drop old hardcoded ips from rsyncd.conf

See merge request !261

These ips are no longer controlled by Arch Linux and ftp-archlinux is
not synced by anything from us.

We aren't interested if status.archlinux.org is down as it's not part of
our own infra.

Add dashboard for general server monitoring

See merge request !258

This dashboard is for the general node_exporter system status in
Grafana.

The box now is much smaller than the box we had the wiki on before and so we used a lot of workers because it didn't matter.
The new box had too much memory pressure and so we had to decrease this.
In a load test, it lead to much better performance under high HTTP load.

prometheus: Monitor every al.org and pkgbuild.com domain with a valid certificate

See merge request archlinux/infrastructure!260

Move pacman alerts into separate group in Prometheus

See merge request archlinux/infrastructure!205

Install systemd service/timer as 644

Closes #222

See merge request archlinux/infrastructure!256

Resolve warning from systemd that setting service/timer files to 600
is useless, as systemd still makes them accessible via APIs without
restrictions.

Closes: #222

Fixes announcement release email.