infrastructure/playbooks/wiki.archlinux.org.yml

- name: Setup wiki.archlinux.org
  hosts: wiki.archlinux.org
  remote_user: root
  roles:
    - { role: firewalld }
    - { role: wireguard }
    - { role: common }
    - { role: sshd }
    - { role: root_ssh }
    - { role: borg_client, tags: ["borg"] }
    - { role: certbot }
    - { role: nginx }
    - { role: postfix_null }
    - { role: mariadb }
    - { role: sudo }
    - { role: php_fpm, php_extensions: ['bcmath', 'curl', 'gd', 'iconv', 'intl', 'mysqli', 'sockets', 'zip'], zend_extensions: ['opcache'] }
    - { role: memcached }
    - { role: archwiki }
    - { role: fail2ban }
    - { role: prometheus_exporters }
    - { role: promtail }
Capitalize the first letter of all task names ansible-lint 6.5.0 complains about: name: All names should start with an uppercase letter. (name[casing]) 2022-08-23 04:49:23 +02:00			`- name: Setup wiki.archlinux.org`
playbooks/wiki: Created a playbook for wiki.archlinux.org Created a playbook for the new wiki.archlinux.org machine, based on the apollo playbook. Removed from php_fpm the unneded modules. 2020-12-21 20:38:24 +01:00			`hosts: wiki.archlinux.org`
			`remote_user: root`
			`roles:`
Add missing firewalld role 2021-07-05 22:37:48 +02:00			`- { role: firewalld }`
WireGuard all hosts This is meant as a internal authenticated and encrypted network which we can use for internal services, we don't want to expose to the internet or when encryption is desired but not easily implementable. 2021-07-06 19:47:22 +02:00			`- { role: wireguard }`
playbooks/wiki: Created a playbook for wiki.archlinux.org Created a playbook for the new wiki.archlinux.org machine, based on the apollo playbook. Removed from php_fpm the unneded modules. 2020-12-21 20:38:24 +01:00			`- { role: common }`
			`- { role: sshd }`
			`- { role: root_ssh }`
			`- { role: borg_client, tags: ["borg"] }`
			`- { role: certbot }`
			`- { role: nginx }`
Split the postfix role into a role for mail.a.o and the clients The role for the clients is named postfix_null (per [1]) and it's much simpler and cleaner than the postfix role. I hope can cleanup the postfix role at a later date. [1] http://www.postfix.org/STANDARD_CONFIGURATION_README.html#null_client 2021-07-09 22:29:11 +02:00			`- { role: postfix_null }`
mariadb: Move two common variables out of playbooks Default query_cache_type to 0 and innodb_file_per_table to true. 2021-08-18 01:57:42 +02:00			`- { role: mariadb }`
playbooks/wiki: Created a playbook for wiki.archlinux.org Created a playbook for the new wiki.archlinux.org machine, based on the apollo playbook. Removed from php_fpm the unneded modules. 2020-12-21 20:38:24 +01:00			`- { role: sudo }`
archwiki: Update to PHP8 PHP7 will likely be removed from the repos soon[1]. Time to upgrade! :) [1] https://archlinux.org/todo/php-7-retiredment/ 2022-01-22 11:43:20 +01:00			`- { role: php_fpm, php_extensions: ['bcmath', 'curl', 'gd', 'iconv', 'intl', 'mysqli', 'sockets', 'zip'], zend_extensions: ['opcache'] }`
playbooks/wiki: Created a playbook for wiki.archlinux.org Created a playbook for the new wiki.archlinux.org machine, based on the apollo playbook. Removed from php_fpm the unneded modules. 2020-12-21 20:38:24 +01:00			`- { role: memcached }`
			`- { role: archwiki }`
			`- { role: fail2ban }`
			`- { role: prometheus_exporters }`
Implement centralized logging Fix #263 2021-02-26 22:14:05 +01:00			`- { role: promtail }`