"docker system prune --volumes" does no longer prune named volumes in
Docker 23.0[1][2], so use "docker volume prune --all"[3] for pruning
named volumes.

[1] https://github.com/docker/cli/issues/4028
[2] https://github.com/moby/moby/pull/44259
[3] https://github.com/docker/cli/pull/4229

In the Hetzner rescue environment, they have begun setting
TMPDIR=/tmp/hwc which breaks mkinitcpio, so remove the ~/.bashrc file so
that is not set.

fluxbb: update the navbar url from bugs to gitlab

See merge request archlinux/infrastructure!773

archwiki: switch bugs entry to GitLab

See merge request archlinux/infrastructure!770

I don't expect more GitHub Pages to be set up, so using a explict
resource instead of abstracting it, is fine I think.

[1] https://github.com/archlinux/archinstall/issues/2098

Some of the mails generated by gitlab are way bigger than 200KB, e.g.
this[1] Thunderbird package bump resulting in a 850KB mail. So bump t0
1000KB for now and see if it is enough.

[1] archlinux/packaging/packages/thunderbird@3da91c6e

They are small and cute.

The last hunk which I applied manually incorrectly retained its pluses.

Fixes: 825a0c92 ("grafana: rebase grafana.ini to grafana 10.2.0-1")

Also add script to make rebasing easier.

Onboard gromit as Junior DevOps

Closes #543

See merge request !767

gromit is our newest Junior DevOps[1] and will get access to:
* bugs.archlinux.org: for helping with the bug migration
* wiki.archlinux.org: for helping with (archwiki) maintenance

[1] https://lists.archlinux.org/archives/list/arch-devops@lists.archlinux.org/message/2LAOGIVY33MZLBZCDSQHDQVQNEULLUTW/

Fix #543

aurweb: Enable traceback for sandbox environments

See merge request !768

Enable error reporting for internal server errors and show stack trace
on a sandbox/dev environment.

Signed-off-by: moson <moson@archlinux.org>

Update Antiz's SSH key

See merge request !766

Kristian Klausen authored 1 year ago and Levente Polyak committed 1 year ago

There is no reason for exposing the service to the whole internet nor
communicating without encryption. It could be fixed by restricting the
firewall rule to the public IP of the gitlb server and running it over
HTTPS or we could just use our existing WG network.

To allow gitlab to send requests to a private network address, the IP
has been allowlisted[1]. The endpoint also expects a "secret token"[2],
so it won't accept events from e.g. users creating a webhook with the
same URL.

[1] https://docs.gitlab.com/ee/security/webhooks.html#allow-outbound-requests-to-certain-ip-addresses-and-domains
[2] https://docs.gitlab.com/ee/user/project/integrations/webhooks.html#validate-payloads-by-using-a-secret-token

There is no reason for this and we very rarely use the console anyway.

Ref #541

archwiki: rename archtu group to archpackager

See merge request !765

Trusted Users are now called Package Maintainers.
See the discussion in https://wiki.archlinux.org/title/ArchWiki_talk:Requests#Trusted_User_name_change

Once this is deployed, the users need to be migrated to the new group
by running:

    php ./maintenance/migrateUserGroup.php archtu archpackager

Related to #533

Closes: #542
Fixes: 722cc5bf ("aurweb: release 6.2.8")

The role has been renamed[1], so rename the bylaw subdomain.

tu-bylaws.aur.a.o will be kept around for some time redirecting to
package-maintainer-bylaws.aur.a.o.

[1] archlinux/rfcs!7

Ref #533

aurweb: release 6.2.8

See merge request archlinux/infrastructure!762

* bump version
* services: rename tuvotereminder to votereminder
* nginx: redirect /tu to /package-maintainer
* nginx: remove /trusted-user/TUbylaws.html redirect

Signed-off-by: moson <moson@archlinux.org>