I think I've mostly coerced sentry, at url https://sentry.softwareheritage.org/, into working. I used the opportunity to start refactoring the way apache is handled in our puppet environment, as well as slowly migrating some vhosts to Let's Encrypt.

All in all I've spent way too much time on some stupid docker-compose environment variables stuff, and the (afaik, advertised) way I set the kafka broker URIs was never taken into account. *sigh*.

User accounts are self-service for now. We should be able to integrate with keycloak using the OIDC plugin by Siemens: https://github.com/siemens/sentry-auth-oidc. (I'll avoid mentioning why this hasn't been integrated by upstream, the mind boggles...)

The next steps would be:

• looking at the phabricator integration (which at this point only allows to create tasks (manually) from sentry)
• figure out how to do repository integration