2016-06-04 12:42:28 +02:00
|
|
|
---
|
|
|
|
|
2017-09-06 20:06:15 +02:00
|
|
|
- name: gather mirror facts
|
|
|
|
hosts: mirrors
|
|
|
|
tasks: []
|
|
|
|
|
|
|
|
- name: "prepare postgres ssl hosts list"
|
|
|
|
hosts: apollo.archlinux.org
|
|
|
|
tasks:
|
|
|
|
- set_fact: postgres_ssl_hosts="{{ [orion4] + [orion6] + detected_ips}}"
|
|
|
|
vars:
|
|
|
|
orion4: "{{ hostvars['orion.archlinux.org']['ipv4_address'] }}{{ hostvars['orion.archlinux.org']['ipv4_netmask'] }}"
|
|
|
|
orion6: "{{ hostvars['orion.archlinux.org']['ipv6_address'] }}{{ hostvars['orion.archlinux.org']['ipv6_netmask'] }}"
|
|
|
|
detected_ips: "{{ groups['mirrors'] | map('extract', hostvars, ['ansible_default_ipv4', 'address']) | map('regex_replace', '^(.*)$', '\\1/32') | list}}"
|
|
|
|
tags: ["postgres"]
|
|
|
|
|
2016-06-04 12:49:59 +02:00
|
|
|
- name: setup apollo
|
2017-09-05 20:33:05 +02:00
|
|
|
hosts: apollo.archlinux.org
|
2016-06-04 12:42:28 +02:00
|
|
|
remote_user: root
|
|
|
|
roles:
|
2016-06-29 03:38:13 +02:00
|
|
|
- { role: common, tags: ['common'] }
|
|
|
|
- { role: tools, tags: ['tools'] }
|
|
|
|
- { role: sshd, tags: ['sshd'] }
|
|
|
|
- { role: root_ssh, tags: ['root_ssh'] }
|
2017-09-06 20:43:44 +02:00
|
|
|
- { role: borg-client, tags: ["borg"] }
|
2017-10-17 13:43:04 +02:00
|
|
|
- { role: nginx, tags: ["nginx"] }
|
2016-06-29 03:38:13 +02:00
|
|
|
- { role: planet, planet_domain: "planet.archlinux.org", planet_dir: "/srv/http/planet", tags: ["planet"] }
|
2016-09-18 17:35:16 +02:00
|
|
|
- { role: spampd, tags: ["mail", "spampd"] }
|
2017-07-09 20:51:19 +02:00
|
|
|
- { role: unbound, tags: ["mail", "unbound"] }
|
2017-02-12 13:38:05 +01:00
|
|
|
- { role: postfix, postfix_server: false, postfix_smtpd_public: true, postfix_patchwork_enabled: true, tags: ["mail", "postfix"] }
|
2016-07-18 16:57:50 +02:00
|
|
|
- { role: opendkim, dkim_selector: apollo, tags: ['mail', "opendkim"] }
|
2016-07-18 14:12:31 +02:00
|
|
|
- { role: postfwd, tags: ['mail', "postfwd"] }
|
2016-12-30 20:15:36 +01:00
|
|
|
- { role: postgres, postgres_listen_addresses: "'*'", postgres_max_connections: 1000, postgres_ssl: 'on', postgres_shared_buffers: 4096MB,
|
2017-09-06 20:06:15 +02:00
|
|
|
tags: ['postgres'] }
|
2017-01-17 21:17:36 +01:00
|
|
|
- { role: mariadb, mariadb_innodb_buffer_pool_size: '64M', mariadb_table_open_cache: '256', mariadb_query_cache_type: '0',
|
|
|
|
mariadb_innodb_file_per_table: True, tags: ["mariadb"] }
|
2016-12-20 19:08:18 +01:00
|
|
|
- { role: sudo, tags: ['sudo'] }
|
2016-12-21 11:34:11 +01:00
|
|
|
- { role: uwsgi, tags: ['uwsgi'] }
|
2017-03-20 15:07:55 +01:00
|
|
|
- { role: php-fpm, php_extensions: ['bcmath', 'curl', 'gd', 'iconv', 'mysqli', 'pdo_pgsql', 'pgsql', 'sockets', 'zip'], tags: ["php-fpm"] }
|
2016-12-30 20:15:36 +01:00
|
|
|
- { role: memcached, tags: ['memcached'] }
|
2016-12-30 01:22:09 +01:00
|
|
|
- { role: archweb, tags: ["archweb"] }
|
2016-12-20 19:08:18 +01:00
|
|
|
- { role: security_tracker, security_tracker_domain: "security.archlinux.org", security_tracker_dir: "/srv/http/security-tracker", tags: ["security_tracker"] }
|
2017-01-17 21:17:36 +01:00
|
|
|
- { role: flyspray, tags: ["flyspray"] }
|
2017-02-08 17:48:58 +01:00
|
|
|
- { role: mailman, mailman_domain: "lists.archlinux.org", tags: ["mailman"] }
|
2017-02-09 13:32:20 +01:00
|
|
|
- { role: patchwork, tags: ["patchwork"] }
|
2017-03-04 20:53:21 +01:00
|
|
|
- { role: kanboard, tags: ["kanboard"] }
|
2017-03-19 23:54:02 +01:00
|
|
|
- { role: zabbix-server, tags: ["zabbix", "zabbix-server"] }
|
2017-08-12 18:20:41 +02:00
|
|
|
- { role: grafana, tags: ["grafana"] }
|