1
1
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-11-10 02:01:41 +01:00
Commit Graph

24 Commits

Author SHA1 Message Date
Evangelos Foutras
19ee76d74c
geo_dns: support geo domains with subset of hosts
Useful if we wanted to create a Geo-based archive consisting of machines
in the archive_mirrors group (though this will likely not happen because
it'd break archlinux-repro due to the ~4 hour sync delay).
2022-08-21 04:44:46 +03:00
Evangelos Foutras
eb2d54bbce
Re-enable asia.mirror.pkgbuild.com for Geo duties
Its disks were migrated to a new server (prompted by an unsolvable issue
with the previous box's network interface; might have been a mobo issue).
2022-08-01 15:53:22 +03:00
Evangelos Foutras
034acc666a
tf-stage1: add state.archlinux.org to machines
There's a bit of a chicken and egg situation here but it's preferable to
manage the server's attributes the same way as all of the cloud servers.
2022-07-18 12:51:02 +03:00
Evangelos Foutras
b6675db5e6
Add new mirrors in Seoul and Sydney 2022-07-10 12:42:15 +03:00
Kristian Klausen
6159b411a1
Add new domain for project documentation (archlinux.page)
We want non-DevOps to be able to deploy project documentation (ex:
repod) with GitLab Pages and a separate domain was considered the only
sensible solution due to security issues[1].

[1] https://github.blog/2013-04-09-yummy-cookies-across-domains/
2022-07-03 13:21:40 +02:00
Evangelos Foutras
563b8de274
Sort geo mirrors in hosts and take asia off for now
asia.mirror.pkgbuild.com has been offline for 12 days so far while we
wait for a NIC replacement. Should have taken it out of DNS NS duties
earlier but better late than never.
2022-05-29 23:42:26 +03:00
Evangelos Foutras
5007c1a85e
tf-stage1: allow setting the NS TTL of geo domains
When adding a new geo domain or doing other testing, we would want to
use a low TTL to allow for making quick changes to the configuration.
2022-05-16 14:20:55 +03:00
Evangelos Foutras
afb582b108
geomirror: extract acme dns challenge into new role
- add the new role to redirect.archlinux.org
- release mirror.pkgbuild.com of all DNS duties
2022-05-14 14:22:32 +03:00
Evangelos Foutras
7944981197
tf-stage1: use template for geo domains NS records 2022-05-14 14:20:43 +03:00
Evangelos Foutras
60fb4494fa
tf-stage1: version bump of terraform providers
New hcloud adds protection fields to servers, volumes and floating IPs.
2022-04-23 03:28:28 +03:00
Evangelos Foutras
551c6735bf
tf-stage1/templates: default keep_disk to true
Gives the option to downgrade a server in the future, similar to the
default on Hetzner's Cloud Console ("CPU and RAM only").
2022-03-05 15:25:21 +02:00
Evangelos Foutras
1872310ace
Create Hetzner cloud servers in Falkenstein (Germany)
Sven considers this location to have higher capacity and reliability.
2021-11-20 23:30:11 +02:00
Evangelos Foutras
508905fd56
Create Hetzner cloud servers in Nuremberg (Germany)
Follow-up to [1]; while most of our cloud servers are in Helsinki, the
latency from most of Europe is lower when accessing servers in Germany.

Pinging from multiple locations using ping.pe, the latency to Nuremberg
from most locations appears to be 10-20ms lower (compared to Helsinki).

[1] https://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/500
2021-11-20 17:12:47 +02:00
Kristian Klausen
baf46f370a Create Hetzner cloud servers in Helsinki (Finland)
With Hetzner now having a datacenter in the US[1], we don't want to
accidentally create a server in the US, so let's always create them in
Helsinki where most of our cloud servers are.

[1] https://www.hetzner.com/news/11-21-usa-cloud/
2021-11-05 14:30:40 +00:00
Frederik Schwan
38dc229288
improve terraform handling of virtual machine domains
machine.domain has been an mandatory attribute which creates
<domain>.archlinux.org entries automagically. For migrations this can be
a problem if <domain>.archlinux.org supposed to point to a different
machine. Adding the new machine with the same domain leads to additional
DNS entries. The DNS ends up pointing to both machines in this case.
By making the domain attribute optional for machines, we allow the new
machines to be created without any domain pointing to them.
2021-01-25 14:56:08 +01:00
Frederik Schwan
b122032369
add fixes to minimize changes introduced by !241 2020-12-31 02:26:40 +01:00
Kristian Klausen
77d2c7b317 tf-stage1/archlinux: Drop MTA-STS, MX, SPF and TLS-RPT templating
We need to keep the balance between automation and readability.
2020-12-31 01:00:30 +00:00
Kristian Klausen
f02c9674fd tf-stage1/archlinux: Refactor MTA-STS, MX, SPF and TLS-RPT logic 2020-12-31 01:00:30 +00:00
Kristian Klausen
676136e792 tf-stage1/archlinux: Move most al.org TXT to a variable to ease management 2020-12-31 01:00:30 +00:00
Frederik Schwan
45805763e7
fixups to minimize terraform state changes while applying !238 2020-12-28 02:14:12 +01:00
Kristian Klausen
fc13e31a69
tf-stage1/archlinux: Switch archlinux_org_gitlab_pages to a map 2020-12-28 01:23:01 +01:00
Kristian Klausen
91196b5abe
tf-stage1/archlinux: Use a local variable for archlinux_org_gitlab_pages 2020-12-28 01:23:00 +01:00
Kristian Klausen
b08787d2e8
tf-stage1/archlinux: Use a local variable for archlinux_org_cname 2020-12-28 01:22:59 +01:00
Frederik Schwan
b7af352722
move handling of machines into variables 2020-12-28 01:22:58 +01:00