Install systemd service/timer as 644

Closes #222

See merge request archlinux/infrastructure!256

Resolve warning from systemd that setting service/timer files to 600
is useless, as systemd still makes them accessible via APIs without
restrictions.

Closes: #222

Fixes announcement release email.

tf-stage1/archlinux: Remove unused luna2._domainkey{,.aur,.lists}

See merge request archlinux/infrastructure!253

Terraform stuff

See merge request archlinux/infrastructure!241

Kristian Klausen authored 4 years ago and Frederik Schwan committed 4 years ago

We need to keep the balance between automation and readability.

add microsoft account to vault

See merge request archlinux/infrastructure!255

use fetchmail for donor import

See merge request archlinux/infrastructure!248

The former approach to export a maildir and iterate over it with a
script broke when the mail server and the web server got on their
own hosts. This will use IMAP IDLE to check for new mails and pass
them instantly to the djange manage.py script without storing the mail
locally.

tf-stage1/archlinux: Move luna domainkey to the lists.al.org subdomain

See merge request archlinux/infrastructure!254

luna uses the luna domainkey now, instaed of the luna2 domainkey. The
list (hosted on luna) also use lists.archlinux.org for all ml now[1].

[1] https://lists.archlinux.org/pipermail/arch-dev-public/2020-December/030248.html

Fix python module deployment issues

Closes #164

See merge request archlinux/infrastructure!204

With creates: once the aur python module is initially deployed it and
it's console-scripts will never be updated. To update the
console-scripts when the git repository is updated or when a major
Python update is done. As figuring out if a major Python update is done
we simply check if the python module is importable.

Fixes: #164

Offboard zorun

Closes #218

See merge request archlinux/infrastructure!218

Resignation email: https://lists.archlinux.org/pipermail/aur-general/2020-December/036048.html

Closes: #218

Apollo decomission

See merge request archlinux/infrastructure!252

Removed the A/AAAA entries for apollo, as well as any CNAME's pointing to it. Also
removed the domain key for apollo.

Removed apollo and added the following servers: archlinux.org, mail.archlinux.org,
patchwork.archlinux.org, redirect.archlinux.org, security.archlinux.org and wiki.archlinux.org

Apollo had special firewall rules, removed them from the role.

Removed the host_vars file for apollo.

Removed the apollo playbook.

Removed apollo from the ssh-hostkeys and ssh-known_hosts files.

Removed any mentions of apollo and also orion, since it was decommissioned a long
time ago.

Remove apollo from hosts.

Mailman redirect

See merge request archlinux/infrastructure!251

Added mailman.archlinux.org to the list of redirects pointing to lists.archlinux.org.

Pointed the mailman CNAME to the new redirect machine for finishing the apollo migration.