mirror/infrastructure
1
1
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-09-20 01:21:36 +02:00
Code Issues
54ca51a217
infrastructure/playbooks/lists.archlinux.org.yml

22 lines
651 B
YAML
Raw Normal View History

Capitalize the first letter of all task names ansible-lint 6.5.0 complains about: name: All names should start with an uppercase letter. (name[casing])
2022-08-23 04:49:23 +02:00
- name: Setup mailman server
Add initial playbook for lists.archlinux.org nginx, certbot, postfix and mailman are still missing and the DNS is still pointing to luna.
2021-06-12 21:19:43 +02:00
hosts: lists.archlinux.org
remote_user: root
roles:
- { role: common }
- { role: firewalld }
WireGuard all hosts This is meant as a internal authenticated and encrypted network which we can use for internal services, we don't want to expose to the internet or when encryption is desired but not easily implementable.
2021-07-06 19:47:22 +02:00
- { role: wireguard }
Add initial playbook for lists.archlinux.org nginx, certbot, postfix and mailman are still missing and the DNS is still pointing to luna.
2021-06-12 21:19:43 +02:00
- { role: sshd }
- { role: root_ssh }
- { role: hardening }
Kill the mailman2 server and put the mailman3 server in its place With the final lists migrated to mailman3[1], the mailman2 server can finally be killed. When the mailman3 server was initially setup[2], it was done on a separate server because the mailman and mailman3 packages conflicted, and the traffic was routed over wireguard (HTTP, LMTP and SMTP). Instead of installing mailman3 on the original lists.al.org server and transferring the data, it was easier just to install the missing pieces (basically Postfix and adjusting the Nginx configuration) on the ml3 server and move the IPs (to keep the IP mail reputation). So basically the following was done: - The IPs for the original lists.al.org was moved to the mailman3.al.org server - The mailman2 datadir was transferred to mailman3.al.org server, so we can keep the pipermail links alive, and import missing mails if needed - The original lists.al.org server was decommissioned - The mailman3.al.org server was renamed to lists.al.org - The missing pieces was added to the mailman3 role (basically Postfix + Nginx adjustments) - The mailman role was deleted and the mailman3 role renamed to mailman [1] 75ac7d09 ("mailman: Fourth and final batch of mailman3 migrated lists") [2] 9294828f ("Setup mailman3 server") Fix #59
2022-09-16 18:56:44 +02:00
- { role: borg_client, tags: ["borg"] }
Add initial playbook for lists.archlinux.org nginx, certbot, postfix and mailman are still missing and the DNS is still pointing to luna.
2021-06-12 21:19:43 +02:00
- { role: prometheus_exporters }
- { role: promtail }
Add mailman role for the new lists.al.org machine The DNS is still pointing to luna.
2021-06-12 23:02:00 +02:00
- { role: certbot }
- { role: nginx }
Add initial playbook for lists.archlinux.org nginx, certbot, postfix and mailman are still missing and the DNS is still pointing to luna.
2021-06-12 21:19:43 +02:00
- { role: fail2ban }
- { role: rspamd, rspamd_dkim_domain: lists.archlinux.org, rspamd_dkim_use_esld: false, tags: ["mail"] }
- { role: unbound, unbound_port: 5353, tags: ["mail"] }
Add mailman role for the new lists.al.org machine The DNS is still pointing to luna.
2021-06-12 23:02:00 +02:00
- { role: uwsgi }
Kill the mailman2 server and put the mailman3 server in its place With the final lists migrated to mailman3[1], the mailman2 server can finally be killed. When the mailman3 server was initially setup[2], it was done on a separate server because the mailman and mailman3 packages conflicted, and the traffic was routed over wireguard (HTTP, LMTP and SMTP). Instead of installing mailman3 on the original lists.al.org server and transferring the data, it was easier just to install the missing pieces (basically Postfix and adjusting the Nginx configuration) on the ml3 server and move the IPs (to keep the IP mail reputation). So basically the following was done: - The IPs for the original lists.al.org was moved to the mailman3.al.org server - The mailman2 datadir was transferred to mailman3.al.org server, so we can keep the pipermail links alive, and import missing mails if needed - The original lists.al.org server was decommissioned - The mailman3.al.org server was renamed to lists.al.org - The missing pieces was added to the mailman3 role (basically Postfix + Nginx adjustments) - The mailman role was deleted and the mailman3 role renamed to mailman [1] 75ac7d09 ("mailman: Fourth and final batch of mailman3 migrated lists") [2] 9294828f ("Setup mailman3 server") Fix #59
2022-09-16 18:56:44 +02:00
- { role: postgres }
Add mailman role for the new lists.al.org machine The DNS is still pointing to luna.
2021-06-12 23:02:00 +02:00
- { role: mailman }
Copy Permalink