These are already known (so no need to hide them) and are fairly static
(so variables are more of a hindrance) so it's better to use the actual
usernames in the documentation. Also, simplify the first example given.

This reverts commit 5c4ff7af.

The account migration is done, so offsite backups can be re-enabled.

Complete rsync.net account migration

See merge request archlinux/infrastructure!501

New username; separate and longer account manager + storage passwords.

Also, have to use --remote-path=borg1 when interacting with rsync.net.

Create Hetzner cloud servers in Helsinki (Finland)

See merge request archlinux/infrastructure!500

Kristian Klausen authored Nov 03, 2021 and Jelle van der Waa committed Nov 05, 2021

With Hetzner now having a datacenter in the US[1], we don't want to
accidentally create a server in the US, so let's always create them in
Helsinki where most of our cloud servers are.

[1] https://www.hetzner.com/news/11-21-usa-cloud/

prometheus-borg-textcollector is no longer started by timer, but instead
defines a WantedBy= relationship with the borg-backup{,-offsite} service.

Increase default time range from 90 days to 6 months.

rsync.net is about to migrate us to a new username/hostname pair.

Create a group for Wiki Maintainers in Keycloak

See merge request archlinux/infrastructure!496

This was a regression which has been fixed upstream.

This reverts commit 67e7677e.

We're no longer allowed to reserve formerly used namespaces.

Enable Unified Alerting and wire up with alertmanager

See merge request !495

Grafana v8.2.0 added support for Prometheus's Alertmanager[1] which can
be used with the Unified Alerting added in v8.0.0[2].

[1] https://github.com/grafana/grafana/releases/tag/v8.2.0
[2] https://grafana.com/blog/2021/06/08/grafana-8.0-unified-grafana-and-prometheus-alerts-live-streaming-new-visualizations-and-more/

Mostly changes from Grafana v8.0[1].

[1] https://grafana.com/docs/grafana/latest/whatsnew/whats-new-in-v8-0/

The security tracker is not compatible yet with the new sqlalchemy, use
the old version in our repos

archwiki: update to 1.36.2-1

See merge request !494

With Loki needing roughly 108GiB[1] and Prometheus at least[2]
116GiB[3], 200GiB sounds like a good starting point.

[1] increase(loki_ingester_chunk_stored_bytes_total[1w]) / 7 * 90
[2] https://www.robustperception.io/how-much-disk-space-do-prometheus-blocks-use
[3] (rate(prometheus_tsdb_compaction_chunk_size_bytes_sum[1w]) /
    rate(prometheus_tsdb_compaction_chunk_samples_sum[1w])) *
    increase(prometheus_tsdb_head_samples_appended_total[1w]) / 7 * 365

Useful for mail.archlinux.org where this setting doesn't matter since we
force the SSH command to passwd and zsh was removed as part of the tools
cleanup effort recently (stops shadow.service from complaining about zsh
missing).

It's not available as a shell anymore after tools were removed from it.

sort + groupby fanciness by @klausenbusk.

Fix nginx "single path" location blocks

Closes #293

See merge request !455