1
1
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-05-18 23:06:04 +02:00

Merge branch 'readme-servers-split' into 'master'

Move the "Servers" section from the readme to docs/servers.md

See merge request archlinux/infrastructure!200
This commit is contained in:
Sven-Hendrik Haase 2020-12-18 16:43:22 +00:00
commit 8d22733944
2 changed files with 139 additions and 133 deletions

134
README.md
View File

@ -147,139 +147,7 @@ The following steps should be used to update our managed servers:
## Servers
### gemini
#### Services
- repos/sync (repos.archlinux.org)
- sources (sources.archlinux.org)
- archive (archive.archlinux.org)
### luna
#### Services
- mailman
- projects (projects.archlinux.org)
### apollo
#### Services
- wiki (wiki.archlinux.org)
- archweb
- patchwork
### aur.archlinux.org
#### Services
- aurweb
### bugs.archlinux.org
#### Services
- flyspray
### bbs.archlinux.org
#### Services
- bbs
### phrik.archlinux.org
#### Services
- phrik (irc bot) users in the phrik group defined in
the hosts vars and re-used the archusers role. Users
in the phrik group are allowed to restar the irc bot.
### dragon
#### Services
- build server
- sogrep
### state.archlinux.org
#### Services
- postgres server for terraform state
### quassel.archlinux.org
#### Services
- quassel core
### matrix.archlinux.org
#### Services
- Matrix homeserver (Synapse)
- Matrix ↔ IRC bridge
### homedir.archlinux.org
#### Services
- ~/user/ webhost
### accounts.archlinux.org
This server is _special_. It runs keycloak and is central to our unified Arch Linux account management world.
It has an Ansible playbook for the keycloak service but that only installs the package and starts it but it's configured via a secondary Terraform file only for keycloak `keycloak.tf`.
The reason for doing it this way is that Terraform support for Keycloak is much superior and it's declarative too which is great for making sure that no old config remains in the case of config changes.
So to set up this server from scratch, run:
- `cd tf-stage1`
- `terraform apply`
- `cd ../tf-stage2`
- `terraform import keycloak_realm.master master`
- `terraform apply`
#### Services
- keycloak
### mirror.pkgbuild.com
#### Services
- Regular mirror.
### reproducible.archlinux.org
[Rebuilderd docs](./docs/rebuilderd.md)
#### Services
- Runs a master [rebuilderd](https://reproducible.archlinux.org) instance two workers:
- repro1.pkgbuild.com (packet.net Arch Linux box)
### runner2.archlinux.org
Medium-fast-ish packet.net Arch Linux box.
#### Services
- GitLab runner
### monitoring.archlinux.org
Prometheus and Grafana server which collects performance/metrics from our services and runs alertmanager.
#### Services
- Alertmanager
- [Grafana](https://monitoring.archlinux.org) and [docs/grafana.md](./docs/grafana.md)
- Prometheus
### openpgpkey.archlinux.org
Hosts our gnupg open web key directory for fetching Arch Linux keyring keys over https.
#### Services
- WKD
### Archive Mirrors
The [Arch Linux Archive](https://archive.archlinux.org) is mirrored to three dedicated servers to help aid global availability.
#### Servers
- https://america.archive.pkgbuild.com
- https://asia.archive.pkgbuild.com
- https://europe.archive.pkgbuild.com
This section has been moved to [docs/servers.md](docs/servers.md).
## Ansible repo workflows

138
docs/servers.md Normal file
View File

@ -0,0 +1,138 @@
# Servers
## Table of contents
[[_TOC_]]
## gemini
### Services
- repos/sync (repos.archlinux.org)
- sources (sources.archlinux.org)
- archive (archive.archlinux.org)
## luna
### Services
- mailman
- projects (projects.archlinux.org)
## apollo
### Services
- wiki (wiki.archlinux.org)
- archweb
- patchwork
## aur.archlinux.org
### Services
- aurweb
## bugs.archlinux.org
### Services
- flyspray
## bbs.archlinux.org
### Services
- bbs
## phrik.archlinux.org
### Services
- phrik (irc bot) users in the phrik group defined in
the hosts vars and re-used the archusers role. Users
in the phrik group are allowed to restar the irc bot.
## dragon
### Services
- build server
- sogrep
## state.archlinux.org
### Services
- postgres server for terraform state
## quassel.archlinux.org
### Services
- quassel core
## matrix.archlinux.org
### Services
- Matrix homeserver (Synapse)
- Matrix ↔ IRC bridge
## homedir.archlinux.org
### Services
- ~/user/ webhost
## accounts.archlinux.org
This server is _special_. It runs keycloak and is central to our unified Arch Linux account management world.
It has an Ansible playbook for the keycloak service but that only installs the package and starts it but it's configured via a secondary Terraform file only for keycloak `keycloak.tf`.
The reason for doing it this way is that Terraform support for Keycloak is much superior and it's declarative too which is great for making sure that no old config remains in the case of config changes.
So to set up this server from scratch, run:
- `cd tf-stage1`
- `terraform apply`
- `cd ../tf-stage2`
- `terraform import keycloak_realm.master master`
- `terraform apply`
### Services
- keycloak
## mirror.pkgbuild.com
### Services
- Regular mirror.
## reproducible.archlinux.org
[Rebuilderd docs](./docs/rebuilderd.md)
### Services
- Runs a master [rebuilderd](https://reproducible.archlinux.org) instance two workers:
- repro1.pkgbuild.com (packet.net Arch Linux box)
## runner2.archlinux.org
Medium-fast-ish packet.net Arch Linux box.
### Services
- GitLab runner
## monitoring.archlinux.org
Prometheus and Grafana server which collects performance/metrics from our services and runs alertmanager.
### Services
- Alertmanager
- [Grafana](https://monitoring.archlinux.org) and [docs/grafana.md](./docs/grafana.md)
- Prometheus
## openpgpkey.archlinux.org
Hosts our gnupg open web key directory for fetching Arch Linux keyring keys over https.
### Services
- WKD
## Archive Mirrors
The [Arch Linux Archive](https://archive.archlinux.org) is mirrored to three dedicated servers to help aid global availability.
### Servers
- https://america.archive.pkgbuild.com
- https://asia.archive.pkgbuild.com
- https://europe.archive.pkgbuild.com