mirror of
https://gitlab.archlinux.org/archlinux/infrastructure.git
synced 2024-06-09 01:26:04 +02:00
Remove the three dashes from all YAML documents
These are used to signal the start of the document in a stream of many documents. As Ansible only supports one YAML document per file this is unnecessary. About a third of our YAML documents already lacked these.
This commit is contained in:
parent
8abd2cf1fe
commit
a9e0790f53
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
arch_groups:
|
arch_groups:
|
||||||
- dev
|
- dev
|
||||||
- tu
|
- tu
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
# deploy tag 'sudo' when this changes
|
# deploy tag 'sudo' when this changes
|
||||||
sudo_users:
|
sudo_users:
|
||||||
- root
|
- root
|
||||||
|
|
|
@ -1,2 +1 @@
|
||||||
---
|
|
||||||
enable_zram_swap: true
|
enable_zram_swap: true
|
||||||
|
|
|
@ -1,3 +1,2 @@
|
||||||
---
|
|
||||||
certbot_dns_support: true
|
certbot_dns_support: true
|
||||||
geo_mirror_domain: "geo.mirror.pkgbuild.com"
|
geo_mirror_domain: "geo.mirror.pkgbuild.com"
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
enable_zram_swap: true
|
enable_zram_swap: true
|
||||||
configure_network: true
|
configure_network: true
|
||||||
dhcp: true
|
dhcp: true
|
||||||
|
|
|
@ -1,2 +1 @@
|
||||||
---
|
|
||||||
configure_network: true
|
configure_network: true
|
||||||
|
|
|
@ -1,2 +1 @@
|
||||||
---
|
|
||||||
configure_network: true
|
configure_network: true
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
archweb_db_host: "{{ hostvars['archlinux.org']['wireguard_address'] }}"
|
archweb_db_host: "{{ hostvars['archlinux.org']['wireguard_address'] }}"
|
||||||
|
|
||||||
# raise tcp window limits to 32MiB
|
# raise tcp window limits to 32MiB
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
filesystem: btrfs
|
filesystem: btrfs
|
||||||
wireguard_address: 10.0.0.16
|
wireguard_address: 10.0.0.16
|
||||||
wireguard_public_key: 8CbVXc2+FllLpZb/sv/csHzqaOOsasJlV0gmkIzhBXo=
|
wireguard_public_key: 8CbVXc2+FllLpZb/sv/csHzqaOOsasJlV0gmkIzhBXo=
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
filesystem: btrfs
|
filesystem: btrfs
|
||||||
fetchmail_user: "donate@archlinux.org"
|
fetchmail_user: "donate@archlinux.org"
|
||||||
fetchmail_delivery_cmd: "/usr/local/bin/donor_import_wrapper.sh"
|
fetchmail_delivery_cmd: "/usr/local/bin/donor_import_wrapper.sh"
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
filesystem: btrfs
|
filesystem: btrfs
|
||||||
memcached_socket: "/run/memcached/aurweb.sock"
|
memcached_socket: "/run/memcached/aurweb.sock"
|
||||||
wireguard_address: 10.0.0.2
|
wireguard_address: 10.0.0.2
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
filesystem: btrfs
|
filesystem: btrfs
|
||||||
wireguard_address: 10.0.0.17
|
wireguard_address: 10.0.0.17
|
||||||
wireguard_public_key: i65GF9BaoTDvTXLJBpZWbuu2jV3F2mc0tH16Y6cQY1g=
|
wireguard_public_key: i65GF9BaoTDvTXLJBpZWbuu2jV3F2mc0tH16Y6cQY1g=
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
filesystem: btrfs
|
filesystem: btrfs
|
||||||
wireguard_address: 10.0.0.19
|
wireguard_address: 10.0.0.19
|
||||||
wireguard_public_key: Y5sWHwa/Hy6A7ga6lOU8uD/i/ZHZEBlkw2EW/CFE4ys=
|
wireguard_public_key: Y5sWHwa/Hy6A7ga6lOU8uD/i/ZHZEBlkw2EW/CFE4ys=
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
hostname: "build.archlinux.org"
|
hostname: "build.archlinux.org"
|
||||||
network_interface: "enp195s0"
|
network_interface: "enp195s0"
|
||||||
ipv4_address: "135.181.138.48"
|
ipv4_address: "135.181.138.48"
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
filesystem: btrfs
|
filesystem: btrfs
|
||||||
ipv4_address: 157.90.255.107
|
ipv4_address: 157.90.255.107
|
||||||
wireguard_address: 10.0.0.33
|
wireguard_address: 10.0.0.33
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
filesystem: btrfs
|
filesystem: btrfs
|
||||||
ipv4_address: 168.119.240.111
|
ipv4_address: 168.119.240.111
|
||||||
ipv6_address: 2a01:4f8:c010:74d4::1
|
ipv6_address: 2a01:4f8:c010:74d4::1
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
hostname: "gemini.archlinux.org"
|
hostname: "gemini.archlinux.org"
|
||||||
|
|
||||||
ipv4_address: "49.12.124.107"
|
ipv4_address: "49.12.124.107"
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
filesystem: btrfs
|
filesystem: btrfs
|
||||||
additional_addresses: ["116.203.6.156/32", "2a01:4f8:c2c:5d2d::2/64"]
|
additional_addresses: ["116.203.6.156/32", "2a01:4f8:c2c:5d2d::2/64"]
|
||||||
wireguard_address: 10.0.0.5
|
wireguard_address: 10.0.0.5
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
filesystem: btrfs
|
filesystem: btrfs
|
||||||
wireguard_address: 10.0.0.36
|
wireguard_address: 10.0.0.36
|
||||||
wireguard_public_key: iiwiHp6b9fmepXLNZ0xFMWIhF2u2a8oEpQI1TTDR4zI=
|
wireguard_public_key: iiwiHp6b9fmepXLNZ0xFMWIhF2u2a8oEpQI1TTDR4zI=
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
filesystem: btrfs
|
filesystem: btrfs
|
||||||
wireguard_address: 10.0.0.13
|
wireguard_address: 10.0.0.13
|
||||||
wireguard_public_key: 0MrXhX6fmtetZ1Rnu93+rQ8yWgOmxrwyY/hXSsy98FI=
|
wireguard_public_key: 0MrXhX6fmtetZ1Rnu93+rQ8yWgOmxrwyY/hXSsy98FI=
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
filesystem: btrfs
|
filesystem: btrfs
|
||||||
ipv4_address: 95.217.236.249
|
ipv4_address: 95.217.236.249
|
||||||
zram_fraction: 1.0
|
zram_fraction: 1.0
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
filesystem: btrfs
|
filesystem: btrfs
|
||||||
ipv4_address: 65.21.106.94
|
ipv4_address: 65.21.106.94
|
||||||
wireguard_address: 10.0.0.37
|
wireguard_address: 10.0.0.37
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
filesystem: btrfs
|
filesystem: btrfs
|
||||||
fail2ban_jails:
|
fail2ban_jails:
|
||||||
sshd: true
|
sshd: true
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
filesystem: btrfs
|
filesystem: btrfs
|
||||||
static_dns: true
|
static_dns: true
|
||||||
wireguard_address: 10.0.0.15
|
wireguard_address: 10.0.0.15
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
filesystem: btrfs
|
filesystem: btrfs
|
||||||
wireguard_address: 10.0.0.31
|
wireguard_address: 10.0.0.31
|
||||||
wireguard_public_key: eCIzf+ckdWPvJYjNaxdlLRH9kq9mfJZswA8KwCmtJgQ=
|
wireguard_public_key: eCIzf+ckdWPvJYjNaxdlLRH9kq9mfJZswA8KwCmtJgQ=
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
mirror_domain: mirror.pkgbuild.com
|
mirror_domain: mirror.pkgbuild.com
|
||||||
mirror_debug_packages: false
|
mirror_debug_packages: false
|
||||||
archweb_mirrorcheck_locations: [20, 21]
|
archweb_mirrorcheck_locations: [20, 21]
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
filesystem: btrfs
|
filesystem: btrfs
|
||||||
ipv4_address: 95.217.220.31
|
ipv4_address: 95.217.220.31
|
||||||
wireguard_address: 10.0.0.4
|
wireguard_address: 10.0.0.4
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
hostname: "archlinux-packer"
|
hostname: "archlinux-packer"
|
||||||
|
|
||||||
dhcp: true
|
dhcp: true
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
filesystem: btrfs
|
filesystem: btrfs
|
||||||
memcached_socket: "/run/memcached/patchwork.sock"
|
memcached_socket: "/run/memcached/patchwork.sock"
|
||||||
fetchmail_user: "patchwork@archlinux.org"
|
fetchmail_user: "patchwork@archlinux.org"
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
filesystem: btrfs
|
filesystem: btrfs
|
||||||
arch_users:
|
arch_users:
|
||||||
demize:
|
demize:
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
filesystem: btrfs
|
filesystem: btrfs
|
||||||
wireguard_address: 10.0.0.10
|
wireguard_address: 10.0.0.10
|
||||||
wireguard_public_key: 4SFiwJRHbGSDtEypEDhS6ar2jmwfBwthPSGHZ8XShXY=
|
wireguard_public_key: 4SFiwJRHbGSDtEypEDhS6ar2jmwfBwthPSGHZ8XShXY=
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
filesystem: btrfs
|
filesystem: btrfs
|
||||||
wireguard_address: 10.0.0.25
|
wireguard_address: 10.0.0.25
|
||||||
wireguard_public_key: n11Ps2sc0Cxsi1sLaYFq7dkhlDtTnOZCGovRYbzDGR8=
|
wireguard_public_key: n11Ps2sc0Cxsi1sLaYFq7dkhlDtTnOZCGovRYbzDGR8=
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
hostname: "repro1.pkgbuild.com"
|
hostname: "repro1.pkgbuild.com"
|
||||||
|
|
||||||
ipv4_address: "147.75.81.79"
|
ipv4_address: "147.75.81.79"
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
filesystem: btrfs
|
filesystem: btrfs
|
||||||
wireguard_address: 10.0.0.6
|
wireguard_address: 10.0.0.6
|
||||||
wireguard_public_key: F2X4lMxdET35mceNtRVqSxVVbwEUVey5IjveG0yHJ0Q=
|
wireguard_public_key: F2X4lMxdET35mceNtRVqSxVVbwEUVey5IjveG0yHJ0Q=
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
hostname: "runner2.archlinux.org"
|
hostname: "runner2.archlinux.org"
|
||||||
|
|
||||||
ipv4_address: "147.75.80.217"
|
ipv4_address: "147.75.80.217"
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
hostname: "secure-runner1.archlinux.org"
|
hostname: "secure-runner1.archlinux.org"
|
||||||
|
|
||||||
ipv4_address: "116.202.134.150"
|
ipv4_address: "116.202.134.150"
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
filesystem: btrfs
|
filesystem: btrfs
|
||||||
|
|
||||||
fail2ban_jails:
|
fail2ban_jails:
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
filesystem: btrfs
|
filesystem: btrfs
|
||||||
wireguard_address: 10.0.0.11
|
wireguard_address: 10.0.0.11
|
||||||
wireguard_public_key: cRNS30527OCEgijC7FHrtdXxdNnwWsXP8F1QAoKgAFQ=
|
wireguard_public_key: cRNS30527OCEgijC7FHrtdXxdNnwWsXP8F1QAoKgAFQ=
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
filesystem: btrfs
|
filesystem: btrfs
|
||||||
memcached_socket: "/run/memcached/archwiki.sock"
|
memcached_socket: "/run/memcached/archwiki.sock"
|
||||||
|
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
arch_groups:
|
arch_groups:
|
||||||
- dev
|
- dev
|
||||||
- tu
|
- tu
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: setup Keycloak server
|
- name: setup Keycloak server
|
||||||
hosts: accounts.archlinux.org
|
hosts: accounts.archlinux.org
|
||||||
remote_user: root
|
remote_user: root
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: basic setup for all hosts
|
- name: basic setup for all hosts
|
||||||
hosts: all
|
hosts: all
|
||||||
remote_user: root
|
remote_user: root
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
- name: common playbook for archive-mirrors
|
- name: common playbook for archive-mirrors
|
||||||
hosts: archive_mirrors
|
hosts: archive_mirrors
|
||||||
remote_user: root
|
remote_user: root
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: "prepare postgres ssl hosts list"
|
- name: "prepare postgres ssl hosts list"
|
||||||
hosts: archlinux.org
|
hosts: archlinux.org
|
||||||
tasks:
|
tasks:
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: setup aur.archlinux.org
|
- name: setup aur.archlinux.org
|
||||||
hosts: aur.archlinux.org
|
hosts: aur.archlinux.org
|
||||||
remote_user: root
|
remote_user: root
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: setup bbs.archlinux.org
|
- name: setup bbs.archlinux.org
|
||||||
hosts: bbs.archlinux.org
|
hosts: bbs.archlinux.org
|
||||||
remote_user: root
|
remote_user: root
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: setup bugs.archlinux.org
|
- name: setup bugs.archlinux.org
|
||||||
hosts: bugs.archlinux.org
|
hosts: bugs.archlinux.org
|
||||||
remote_user: root
|
remote_user: root
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: setup build.archlinux.org
|
- name: setup build.archlinux.org
|
||||||
hosts: build.archlinux.org
|
hosts: build.archlinux.org
|
||||||
remote_user: root
|
remote_user: root
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
- name: setup debuginfod.archlinux.org
|
- name: setup debuginfod.archlinux.org
|
||||||
hosts: debuginfod.archlinux.org
|
hosts: debuginfod.archlinux.org
|
||||||
remote_user: root
|
remote_user: root
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: setup gemini.archlinux.org
|
- name: setup gemini.archlinux.org
|
||||||
hosts: gemini.archlinux.org
|
hosts: gemini.archlinux.org
|
||||||
remote_user: root
|
remote_user: root
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
- name: setup gitlab-runners
|
- name: setup gitlab-runners
|
||||||
hosts: gitlab_runners
|
hosts: gitlab_runners
|
||||||
remote_user: root
|
remote_user: root
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: setup gitlab server
|
- name: setup gitlab server
|
||||||
hosts: gitlab.archlinux.org
|
hosts: gitlab.archlinux.org
|
||||||
remote_user: root
|
remote_user: root
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: setup gluebuddy.archlinux.org
|
- name: setup gluebuddy.archlinux.org
|
||||||
hosts: gluebuddy.archlinux.org
|
hosts: gluebuddy.archlinux.org
|
||||||
remote_user: root
|
remote_user: root
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: setup Hetzner storagebox account
|
- name: setup Hetzner storagebox account
|
||||||
hosts: localhost
|
hosts: localhost
|
||||||
gather_facts: false
|
gather_facts: false
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: setup homedir.archlinux.org
|
- name: setup homedir.archlinux.org
|
||||||
hosts: homedir.archlinux.org
|
hosts: homedir.archlinux.org
|
||||||
remote_user: root
|
remote_user: root
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: setup man.archlinux.org
|
- name: setup man.archlinux.org
|
||||||
hosts: man.archlinux.org
|
hosts: man.archlinux.org
|
||||||
remote_user: root
|
remote_user: root
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: setup matrix
|
- name: setup matrix
|
||||||
hosts: matrix.archlinux.org
|
hosts: matrix.archlinux.org
|
||||||
remote_user: root
|
remote_user: root
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: setup hedgedoc server
|
- name: setup hedgedoc server
|
||||||
hosts: md.archlinux.org
|
hosts: md.archlinux.org
|
||||||
remote_user: root
|
remote_user: root
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
- name: common playbook for mirrors
|
- name: common playbook for mirrors
|
||||||
hosts: mirrors
|
hosts: mirrors
|
||||||
remote_user: root
|
remote_user: root
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: setup patchwork.archlinux.org
|
- name: setup patchwork.archlinux.org
|
||||||
hosts: patchwork.archlinux.org
|
hosts: patchwork.archlinux.org
|
||||||
remote_user: root
|
remote_user: root
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: setup phrik bot server
|
- name: setup phrik bot server
|
||||||
hosts: phrik.archlinux.org
|
hosts: phrik.archlinux.org
|
||||||
remote_user: root
|
remote_user: root
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: setup quassel server
|
- name: setup quassel server
|
||||||
hosts: quassel.archlinux.org
|
hosts: quassel.archlinux.org
|
||||||
remote_user: root
|
remote_user: root
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: common playbook for rebuilderd_workers
|
- name: common playbook for rebuilderd_workers
|
||||||
hosts: rebuilderd_workers
|
hosts: rebuilderd_workers
|
||||||
remote_user: root
|
remote_user: root
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: setup reproducible builds rebuilder
|
- name: setup reproducible builds rebuilder
|
||||||
hosts: reproducible.archlinux.org
|
hosts: reproducible.archlinux.org
|
||||||
remote_user: root
|
remote_user: root
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: setup rsync.net account
|
- name: setup rsync.net account
|
||||||
hosts: localhost
|
hosts: localhost
|
||||||
gather_facts: false
|
gather_facts: false
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: setup security.archlinux.org
|
- name: setup security.archlinux.org
|
||||||
hosts: security.archlinux.org
|
hosts: security.archlinux.org
|
||||||
remote_user: root
|
remote_user: root
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: setup state.archlinux.org (terraform state store)
|
- name: setup state.archlinux.org (terraform state store)
|
||||||
hosts: state.archlinux.org
|
hosts: state.archlinux.org
|
||||||
remote_user: root
|
remote_user: root
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: prepare local storage directory
|
- name: prepare local storage directory
|
||||||
hosts: localhost
|
hosts: localhost
|
||||||
tasks:
|
tasks:
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: check if moreutils is installed
|
- name: check if moreutils is installed
|
||||||
pacman: name=moreutils state=present
|
pacman: name=moreutils state=present
|
||||||
|
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: ensure latest keyring
|
- name: ensure latest keyring
|
||||||
pacman:
|
pacman:
|
||||||
name: archlinux-keyring
|
name: archlinux-keyring
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
# This script is for provisioning a server for first boot.
|
# This script is for provisioning a server for first boot.
|
||||||
# Care: It is not idempotent by design.
|
# Care: It is not idempotent by design.
|
||||||
|
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: Update pacman website
|
- name: Update pacman website
|
||||||
hosts: localhost
|
hosts: localhost
|
||||||
vars:
|
vars:
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: reencrypt vault default key
|
- name: reencrypt vault default key
|
||||||
hosts: localhost
|
hosts: localhost
|
||||||
tasks:
|
tasks:
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: reencrypt vault super key
|
- name: reencrypt vault super key
|
||||||
hosts: localhost
|
hosts: localhost
|
||||||
tasks:
|
tasks:
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: fetch ssh hostkeys
|
- name: fetch ssh hostkeys
|
||||||
hosts: all
|
hosts: all
|
||||||
gather_facts: false
|
gather_facts: false
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: upgrade and reboot all hetzner servers
|
- name: upgrade and reboot all hetzner servers
|
||||||
hosts: all,!kape_servers,!packet_net
|
hosts: all,!kape_servers,!packet_net
|
||||||
max_fail_percentage: 0
|
max_fail_percentage: 0
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: setup wiki.archlinux.org
|
- name: setup wiki.archlinux.org
|
||||||
hosts: wiki.archlinux.org
|
hosts: wiki.archlinux.org
|
||||||
remote_user: root
|
remote_user: root
|
||||||
|
|
|
@ -1,3 +1,2 @@
|
||||||
---
|
|
||||||
- name: restart powerdns
|
- name: restart powerdns
|
||||||
service: name=pdns state=restarted
|
service: name=pdns state=restarted
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
- name: install powerdns
|
- name: install powerdns
|
||||||
pacman: name=powerdns state=present
|
pacman: name=powerdns state=present
|
||||||
|
|
||||||
|
|
|
@ -1,4 +1,2 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: reload alertmanager
|
- name: reload alertmanager
|
||||||
service: name=alertmanager state=reloaded
|
service: name=alertmanager state=reloaded
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: install alertmanager server
|
- name: install alertmanager server
|
||||||
pacman: name=alertmanager state=present
|
pacman: name=alertmanager state=present
|
||||||
|
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
- name: install arch-boxes-sync.sh script dependencies
|
- name: install arch-boxes-sync.sh script dependencies
|
||||||
pacman: name=curl,jq,unzip state=present
|
pacman: name=curl,jq,unzip state=present
|
||||||
|
|
||||||
|
|
|
@ -1,2 +1 @@
|
||||||
---
|
|
||||||
archbuild_fs: tmpfs
|
archbuild_fs: tmpfs
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: daemon reload
|
- name: daemon reload
|
||||||
systemd:
|
systemd:
|
||||||
daemon-reload: true
|
daemon-reload: true
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: install archbuild
|
- name: install archbuild
|
||||||
pacman:
|
pacman:
|
||||||
name:
|
name:
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
archive_user_name: 'archive'
|
archive_user_name: 'archive'
|
||||||
archive_user_home: '/home/archive'
|
archive_user_home: '/home/archive'
|
||||||
archive_repo: '{{ archive_user_home }}/archive-uploader'
|
archive_repo: '{{ archive_user_home }}/archive-uploader'
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: install archivetools package
|
- name: install archivetools package
|
||||||
pacman: name=archivetools state=present
|
pacman: name=archivetools state=present
|
||||||
|
|
||||||
|
|
|
@ -1,3 +1 @@
|
||||||
---
|
|
||||||
|
|
||||||
archive_dir: '/srv/archive'
|
archive_dir: '/srv/archive'
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: create ssl cert
|
- name: create ssl cert
|
||||||
include_role:
|
include_role:
|
||||||
name: certificate
|
name: certificate
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
archmanweb_dir: '/srv/http/archmanweb'
|
archmanweb_dir: '/srv/http/archmanweb'
|
||||||
archmanweb_cache_dir: '{{ archmanweb_dir }}/cache'
|
archmanweb_cache_dir: '{{ archmanweb_dir }}/cache'
|
||||||
archmanweb_domain: 'man.archlinux.org'
|
archmanweb_domain: 'man.archlinux.org'
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
- name: create ssl cert
|
- name: create ssl cert
|
||||||
include_role:
|
include_role:
|
||||||
name: certificate
|
name: certificate
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: create Arch Linux-specific groups
|
- name: create Arch Linux-specific groups
|
||||||
group: name="{{ item }}" state=present system=no
|
group: name="{{ item }}" state=present system=no
|
||||||
with_items: "{{ arch_groups }}"
|
with_items: "{{ arch_groups }}"
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
archweb_dir: '/srv/http/archweb'
|
archweb_dir: '/srv/http/archweb'
|
||||||
archweb_domain: 'archlinux.org'
|
archweb_domain: 'archlinux.org'
|
||||||
archweb_alternate_domains: ['www.archlinux.org', 'master-key.archlinux.org', 'dev.archlinux.org', 'packages.archlinux.org', 'ipxe.archlinux.org', 'planet.archlinux.org']
|
archweb_alternate_domains: ['www.archlinux.org', 'master-key.archlinux.org', 'dev.archlinux.org', 'packages.archlinux.org', 'ipxe.archlinux.org', 'planet.archlinux.org']
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: daemon reload
|
- name: daemon reload
|
||||||
systemd:
|
systemd:
|
||||||
daemon-reload: true
|
daemon-reload: true
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
- name: run maintenance mode
|
- name: run maintenance mode
|
||||||
include_role:
|
include_role:
|
||||||
name: maintenance
|
name: maintenance
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
archwiki_dir: '/srv/http/archwiki'
|
archwiki_dir: '/srv/http/archwiki'
|
||||||
archwiki_domain: 'wiki.archlinux.org'
|
archwiki_domain: 'wiki.archlinux.org'
|
||||||
archwiki_nginx_conf: '/etc/nginx/nginx.d/archwiki.conf'
|
archwiki_nginx_conf: '/etc/nginx/nginx.d/archwiki.conf'
|
||||||
|
|
|
@ -1,5 +1,3 @@
|
||||||
---
|
|
||||||
|
|
||||||
- name: restart php-fpm@archwiki
|
- name: restart php-fpm@archwiki
|
||||||
service: name=php-fpm@{{ archwiki_user }} state=restarted
|
service: name=php-fpm@{{ archwiki_user }} state=restarted
|
||||||
|
|
||||||
|
|
|
@ -1,3 +1,2 @@
|
||||||
---
|
|
||||||
dependencies:
|
dependencies:
|
||||||
- role: nginx
|
- role: nginx
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
- name: run maintenance mode
|
- name: run maintenance mode
|
||||||
include_role:
|
include_role:
|
||||||
name: maintenance
|
name: maintenance
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
aurweb_asgi_bind: '127.0.0.1:8000'
|
aurweb_asgi_bind: '127.0.0.1:8000'
|
||||||
|
|
||||||
aurweb_domain: 'aur.archlinux.org'
|
aurweb_domain: 'aur.archlinux.org'
|
||||||
|
|
Some files were not shown because too many files have changed in this diff Show More
Loading…
Reference in New Issue