infrastructure/playbooks/build.archlinux.org.yml

- name: Setup build.archlinux.org
  hosts: build.archlinux.org
  remote_user: root
  roles:
    - { role: common }
    - { role: tools, extra_utils: ['setconf', 'mlocate'] }
    - { role: firewalld }
    - { role: sshd }
    - { role: root_ssh }
    - { role: archusers }
    - { role: sudo, tags: ['archusers'] }
    - { role: mirrorsync }
    - { role: archbuild }
    - { role: fail2ban }
    - { role: wireguard }
    - { role: prometheus_exporters }
    - { role: promtail }
Capitalize the first letter of all task names ansible-lint 6.5.0 complains about: name: All names should start with an uppercase letter. (name[casing]) 2022-08-23 04:49:23 +02:00			`- name: Setup build.archlinux.org`
Add build.archlinux.org 2021-01-26 18:03:56 +01:00			`hosts: build.archlinux.org`
			`remote_user: root`
			`roles:`
			`- { role: common }`
common: remove mlocate from all boxes except build Bash histories indicate this isn't being used anywhere other than {build,gemini}.archlinux.org and gemini's filelist is so big that locate becomes so slow that it's practically useless on this box. 2022-05-09 13:07:20 +02:00			`- { role: tools, extra_utils: ['setconf', 'mlocate'] }`
build: add missing firewalld include and fix ordering 2024-01-19 20:40:29 +01:00			`- { role: firewalld }`
Add build.archlinux.org 2021-01-26 18:03:56 +01:00			`- { role: sshd }`
			`- { role: root_ssh }`
			`- { role: archusers }`
			`- { role: sudo, tags: ['archusers'] }`
syncrepo: let mirrorsync perform the repo syncing This role will still handle setting up nginx and rsyncd, due to specific configuration requirements these services have. We're also effectively relieving build.archlinux.org of rsyncd duties as it is not something it should be doing anyway. 2022-11-06 18:31:42 +01:00			`- { role: mirrorsync }`
Add build.archlinux.org 2021-01-26 18:03:56 +01:00			`- { role: archbuild }`
			`- { role: fail2ban }`
build: add missing firewalld include and fix ordering 2024-01-19 20:40:29 +01:00			`- { role: wireguard }`
Add build.archlinux.org 2021-01-26 18:03:56 +01:00			`- { role: prometheus_exporters }`
Implement centralized logging Fix #263 2021-02-26 22:14:05 +01:00			`- { role: promtail }`