infrastructure/playbooks/archive-mirrors.yml

- name: Common playbook for archive-mirrors
  hosts: archive_mirrors
  remote_user: root
  roles:
    - { role: common }
    - { role: firewalld }
    - { role: wireguard }
    - { role: hardening }
    - { role: sshd }
    - { role: root_ssh }
    - { role: certbot }
    - { role: nginx }
    - { role: mirrorsync }
    - { role: archive_web }
    - { role: prometheus_exporters }
    - { role: promtail }
Capitalize the first letter of all task names ansible-lint 6.5.0 complains about: name: All names should start with an uppercase letter. (name[casing]) 2022-08-23 04:49:23 +02:00			`- name: Common playbook for archive-mirrors`
Fix ansible deprecation messages 2019-11-18 03:05:18 +01:00			`hosts: archive_mirrors`
Add syncarchive role This is a new role for syncing the archive. Currently only ger.mirror.pkgbuild.com is capable of this due to disk space requirements. It can probably be extended fairly easily to other hosts. 2019-10-25 05:51:34 +02:00			`remote_user: root`
			`roles:`
			`- { role: common }`
Add Kape donated servers Setup Kape servers as archive mirrors (asia,europe,america), Gitlab runner and Rebuilderd worker. All machines except runner1 are EFI machines with grub setup and a EFI parition which is not supported by our ansible install role and is manually rolled out. 2020-12-03 19:45:42 +01:00			`- { role: firewalld }`
WireGuard all hosts This is meant as a internal authenticated and encrypted network which we can use for internal services, we don't want to expose to the internet or when encryption is desired but not easily implementable. 2021-07-06 19:47:22 +02:00			`- { role: wireguard }`
Add Kape donated servers Setup Kape servers as archive mirrors (asia,europe,america), Gitlab runner and Rebuilderd worker. All machines except runner1 are EFI machines with grub setup and a EFI parition which is not supported by our ansible install role and is manually rolled out. 2020-12-03 19:45:42 +01:00			`- { role: hardening }`
Add syncarchive role This is a new role for syncing the archive. Currently only ger.mirror.pkgbuild.com is capable of this due to disk space requirements. It can probably be extended fairly easily to other hosts. 2019-10-25 05:51:34 +02:00			`- { role: sshd }`
			`- { role: root_ssh }`
			`- { role: certbot }`
			`- { role: nginx }`
Combine sync{archive,debug,riscv} into mirrorsync These roles are very similar and can be merged into a single new role. Note: The archive mirror is changed from a 4-hour sync to minutely for conformity with the other two mirrors. In practice this doesn't matter as it was already taking over 4 hours to finish and was starting again right after its previous run. 2022-09-25 02:33:30 +02:00			`- { role: mirrorsync }`
Split archive role into archive_web for archive-mirrors To simplify the archive role, split it up in the web serving part for the archive-mirrors, gemini and keep the archive role for only the archive operation. This simplifies the new role as only two lines are required to setup the the archive mirror website. 2020-12-12 14:53:02 +01:00			`- { role: archive_web }`
Monitor the archive mirrors 2020-12-14 20:20:50 +01:00			`- { role: prometheus_exporters }`
Implement centralized logging Fix #263 2021-02-26 22:14:05 +01:00			`- { role: promtail }`