GitLab

This patch adds a license header to all roles and Ansible files to make
it easier to keep track of copyright ownership in future.

To keep all compose files a bit more uniformed adding a comment about
ansible-managed files is always a good idea.

This patch fixes the quotation of files modes in the tasks file as those
are otherwise interpreted as octal numbers which can result in wrong and
unexpected file permissions.

Tis patch adds a proper README as well as additional documentation to
the default variables to this role. This should allow people to adopt
the role a lot easier.

This patch allows to configure the gitlab registry feature to store and
deploy containers from a local gitlab container registry. It's disabled
by default and reuses various components from the existing gitlab setup
and provides a minimal config set to configure it.

Currently the certresolver used for GitLab is hardcoded to the
originally only cert resolver the traefik role provided. This patch
allows to configure the cert resolver individually now allowing to use
different resolvers depending on the use-case and setup.

A long time ago there was a typo built into this role for the
`gitlab_smtp_tls` setting. It called it `gitlab_snmp_tls` which doesn't
make sense as gitlab has nothing to do with the SNMP protocol and the
setting is also used for the TLS settings of SMTP.

Long story short, this patch fixes the typo but keeps backwards
compatibility to make the transition easier.

Update tmpfs settings to match upstream reality.

According to: https://github.com/codimd/container/pull/111

Currently we still provide the old upstream alias for backwards
compatiblity even when we never need it. This patch removes it as it's
already unused and only around for legacy reasons.

This patch adds a README to the CodiMD role as well as adding various
comments to the defaults file in order to improve readablity.

This should provide the needed documentation to allow everyone to use
this role in their own setups.

Currently the the SELinux level variables are undefined and optionally
then omitted in tasks and templates. This patch moves them as being
defined by default to the defaults file and sets them to omit.

This makes it a bit easier to adjust them in future as well as reducing
the need of checking for undefined variables.

This brings the option via "codimd_uploads_local", to enable using a
local uploads folder, which will then create the folder with the correct
permissions and mount it into the codimd container. (This still needs
the codimd environment variables to be set to use the filesystem as a
upload destination)

Currently the traefik certresolver is hardcoded. This patch allows to
define the used certresolver for the codimd container via variable,
while maintaining backwards compatiblity.

The selinux level variable was renamed, to remove the association with
postgres and allow future changes to the database without having to
rename the selinux variable.

The default used `HMD_DOMAIN`, which is deprecated and also would be extended to `CMD_HMD_DOMAIN`.

The old name "HackMD" was stuck in various places of this role. This
patch removes them and replaces them with CodiMD.

This patch serializes the updates of the static_websites servers as this
results in less downtime. If one of the installations fails, only one
host is down and the websites can continue to function.

Orignally it would have updated all hosts in parallel (only limited by
the number of parallel SSH connections Ansible is configured for) and
all would break in sync, resulting in higher downtimes.

gitlab: Fix log volume mapping

See merge request shivering-isles/infrastructure!11

This fixes the wrong destination path for the log volume on the gitlab container.

Currently the generated changelog used as release description contains
merge commits. This doesn't make sense in a changelog. Therefore this
patch adds `--no-merge` to the `git log` command in order to get rid of
them.

I noticed that the past 3 days my Mastodon instance wasn't that stable
due to OOM issues. This patch solves the problem for now.

This patch adds a cleanup role to get rid of old images from hosts. It
will remove all unused images that are older than 3 days from the host.

It will run by default before installing any new version of software as
this keeps the old version around in case the deployment causes problems
and is easier to revert.

Matrix decided to depreacte the `-py3` image names as they only support
python3 versions of their images for quite a while now. This patch
follows their advice and removes it, which should still result in the
same image as before, according to their release notes:

https://github.com/matrix-org/synapse/releases/tag/v1.18.0

Fix deployment of roles without traefik's tor configuration

See merge request shivering-isles/infrastructure!10

The variable is always registered, even when the task is skipped, so we need to check if the variable holds any content.

The issue is not a missing reference of HEAD, but the fact that there is
no other tagged release.