syncrepo: Properly clean up .~tmp~ dirs

See merge request archlinux/infrastructure!158

We noticed that sometimes rsync becomes confused and leaves .~tmp~ dirs around which inhibits syncing from that point forward.

dovecot: Open hole for managesieve in the firewall + cleanup

See merge request archlinux/infrastructure!152

Per Mozilla's guidelines: https://ssl-config.mozilla.org/#server=nginx&version=1.17.7&config=intermediate&openssl=1.1.1d&guideline=5.6

offboard arcanis

See merge request !154

remove unencrypted IMAP, POP3 and add SMTPS support

Closes #219

See merge request archlinux/infrastructure!155

This sets the dovecot ports for imap and pop3 to 0 which disables those
services. For SMTPS we add the the SMTPS service on 465 first before
deprecating support for submission on 587.

Now that the archlogo has the version appended we can cache svg's
safely.

Remove old dkim key

See merge request archlinux/infrastructure!151

remove unused kanboard role

See merge request archlinux/infrastructure!150

add new dkim keys

See merge request archlinux/infrastructure!149

also move the dkim key generation to the docs as this is only run ~once

fix handling of tag generate_dkim_keys

See merge request archlinux/infrastructure!148

To allow creation of the dkim keys, the directory must exist.
The directory containing the dkim keys should not allow global read.

Use Rspamd for DKIM signing

Closes #213

See merge request archlinux/infrastructure!147

Fix #213

Remove zabbix

See merge request archlinux/infrastructure!143

repro1/repro2.pkgbuild.com where going to be reproducible-builds.org
managed CI runners but we have gotten rid of that plan and those
servers.

Zabbix has been replaced by Prometheus for monitoring our services.

Remove orion

See merge request archlinux/infrastructure!145

Jelle van der Waa authored 4 years ago and Jelle van der Waa committed 4 years ago

Orion has been replaced by gemini and for mail by mail.archlinux.org

Onboard bastelfreak

See merge request archlinux/infrastructure!140

Jelle van der Waa authored 4 years ago and Jelle van der Waa committed 4 years ago

https://lists.archlinux.org/pipermail/aur-general/2020-November/036011.html

Docker is now build in Gitlab CI

See merge request archlinux/infrastructure!144

Jelle van der Waa authored 4 years ago and Jelle van der Waa committed 4 years ago

We no longer need this role as Gitlab handles it now.

roles/archwiki: purge the nginx cache after pulling from the archwiki git repo

See merge request archlinux/infrastructure!125