Kristian Klausen authored 4 years ago and Frederik Schwan committed 4 years ago

The enotify extension can be used to send mails as other users, so let's
only enabled the sieve extensions, which we need.
The extensions was found by running `grep require` on the existing sieve
user scripts. mailbox wasn't in that list, but it is used by the global
spam-to-folder.sieve script.

Configure mediawiki's security headers

See merge request !278

Mediawiki allows the configuration of Referrer policy, which is set to
the same value as archlinux.org, retaining the referrer for https://
links as they might be beneficial as promotion. Set the X-Frame-Options
header to deny framing.

improve terraform handling of virtual machine domains

See merge request !280

machine.domain has been an mandatory attribute which creates
<domain>.archlinux.org entries automagically. For migrations this can be
a problem if <domain>.archlinux.org supposed to point to a different
machine. Adding the new machine with the same domain leads to additional
DNS entries. The DNS ends up pointing to both machines in this case.
By making the domain attribute optional for machines, we allow the new
machines to be created without any domain pointing to them.

Monitor man.archlinux.org

See merge request !281

Merge sogrep (createlinks script) into dbscripts

See merge request !279

Databases used by sogrep are fetched by syncrepo from gemini, no point
in duplicating this work; consider this to be part of roles/dbscripts.

Deploy archmanweb v1.1

See merge request !277

GitLab becomes unhappy if it can't poll localhost.

This host is special and only allows demize to login as user to
administer phrik and no other users/groups should be created on the
machine.

This reverts commit 750c2f6f.

For unknown reasons we basically allowed phrik to allow arbitrary sudo
commands which isn't great as phrik is an irc bot.

Offboard Aaaron

Closes #133

See merge request !276

Closes: #133

tf-stage1/archlinux: Remove unneeded quotation marks from ed25519 domainkey

See merge request !272

https://lists.archlinux.org/pipermail/aur-general/2021-January/036079.html

Closes: #259

Add overall status for rebuilderd results

See merge request !275

Add a new graph which shows the overall results summed up per status.

No need to store secrets for more than one matrix server.

rebuilderd prometheus-exporter: use new /dashboard endpoint

See merge request !270

tf-stage1/archlinux: Lower lists TTL and create the new lists server

See merge request !273

The ttl must be aligned with the previous entries.

Lowered the CNAME DNS record TTL for lists to 600 and created a new cx11 server
to migrate lists.archlinux.org to.

gitlab-ci: Add --diff to terraform fmt command

See merge request !274

Added --diff to the terraform fmt --check command, because it then will show the
offending lines on the pipeline output.

add freswa to patchwork_admins

See merge request !271

Deploy man.archlinux.org

See merge request !269