Slava Semushin

We use the same configuration everywhere: ``` - name: Install JDK uses: actions/[email protected] with: distribution: 'adopt' java-version: '8' cache: 'maven' ``` So, the jobs use Maven cache by default. But...

Publish playbook for production

5

Let's commit `infra/vagrant/provisioning/prod.*` files to Git and use https://git-secret.io or https://github.com/AGWA/git-crypt in order to encrypt sensitive data. Idea from @asm0dey

Use ansible-vault for sensitive data

2

We can use [`ansible-vault`](http://docs.ansible.com/ansible/playbooks_vault.html) for a sensitive data like database and mailing passwords. Also for an uptimerobot api key during deployment.

We can add a dropdown with a list of years.

Reasons to change the hosting: - I can't pay for it anymore as my card isn't accepted - The price got higher ($7.2/mo) and there should be a cheaper alternative...

Similar to #511 and #1282 but for a page about a category.

See: - https://www.digitalocean.com/community/tutorials/how-to-acquire-a-let-s-encrypt-certificate-using-ansible-on-ubuntu-18-04 - https://docs.ansible.com/ansible/latest/collections/community/crypto/acme_certificate_module.html

A list of proposed conditions see at #1154 See also related: #615 Similar to #423 but for GitHub Actions Tech debt for: #1154

Candidate WAR shouldn't write to a production log file (only to stdout): ```console $ grep candidate /data/logs/mystamps.log 2022-12-19 07:48:02.661 [user: ] INFO 26615 --- [main] r.m.w.s.s.boot.ApplicationBootstrap : Starting ApplicationBootstrap v0.4.7-SNAPSHOT...

I don't use it for a long time. Let's remove its usage. Related issues: - [x] #417