1
1
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-09-20 10:41:47 +02:00
Commit Graph

45 Commits

Author SHA1 Message Date
Phillip Smith
59807399ed initial commit of firewalld role and tasks 2018-03-06 08:46:24 +11:00
Florian Pritz
e28df1c7a1
php: Load opcache extension
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2018-03-03 15:12:28 +01:00
Giancarlo Razzolini
a40d6e1f98
Fix typo in the tags for the archwiki role 2018-03-02 22:31:22 -03:00
Giancarlo Razzolini
bf43586686
Add the archwiki role to the apollo playbook
Added the archwiki role to the apollo playbook and also added the intl extension to the
php-fpm role.
2018-03-02 19:57:44 -03:00
Florian Pritz
6a2f69cff2
Remove double quote of postgres_listen_addresses
Already quoted in the new config template.

Signed-off-by: Florian Pritz <bluewind@xinu.at>
2018-03-02 13:17:43 +01:00
Bartłomiej Piotrowski
efeeff759c nginx: set default letsencrypt_validation_dir value 2017-10-20 14:24:07 +02:00
Florian Pritz
891e729c8d borg-client: Adapt for FQDN
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-09-06 20:52:42 +02:00
Florian Pritz
388f3b14c9
apollo: Dynamically build postgres_ssl_hosts list
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-09-06 20:06:15 +02:00
Giancarlo Razzolini
3231e370c4
playbooks: Change all the hosts names to FQDN.
We have changed our ansible configuration and policy to only use
fully qualified domain names for hostnames. Update the playbooks
to use them.
2017-09-05 15:33:05 -03:00
Florian Pritz
7c85b76c9c Move mail server to orion
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-09-02 14:59:26 +02:00
Florian Pritz
f2bc1c185f
Add grafana
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-08-12 18:20:41 +02:00
Florian Pritz
a71c3ea29a
Add unbound
Spamassassin on apollo tries to connect to a local dns resolver, but
can't which leads to long timeouts. Flyspray sends mail via SMTP which
goes through SA and thus each request that sends a mail will also block
for a long time.

Fix this by adding unbound as a local resolver which is needed for
proper performance of SA since public resolvers are often blocked by
blacklists because they send too many requests.

Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-07-09 20:51:19 +02:00
Florian Pritz
215c95fa37 apollo: Remove dovecot
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-07-03 15:59:20 +02:00
Florian Pritz
105fdfade9 postfix: Add support for patchwork
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-07-03 15:52:40 +02:00
Florian Pritz
1275d26210 postfix: Decouple smtpd and full mail server
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-07-02 19:53:22 +02:00
Florian Pritz
49d5d34165 Deploy zabbix-agent to all hosts
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-04-01 10:45:13 +02:00
Florian Pritz
e81946203c
zabbix-agent: Fix agent server on apollo
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-03-20 16:20:29 +01:00
Florian Pritz
9ca0aacb19 php: Adapt php.ini for zabbix frontend
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-03-20 15:17:24 +01:00
Florian Pritz
964e8bd0c1 Enable zabbix roles on apollo
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-03-20 15:17:24 +01:00
Florian Pritz
5054193cbf Add kanbord
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-03-05 00:31:06 +01:00
Florian Pritz
79d2812249 php: Add iconv, gd, pdo_pgsql for kanboard
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-03-04 20:51:51 +01:00
Giancarlo Razzolini
b23cf257a7
playbooks/apollo: Add the patchwork role to apollo 2017-02-09 10:34:08 -02:00
Florian Pritz
791144b9ea
mailman: Add redirect for mailman.archlinux.org
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-02-08 17:48:58 +01:00
Florian Pritz
81196f5e61
Backup mysql databases
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-02-07 20:13:34 +01:00
Florian Pritz
9283dfdb79 php-fpm: Merge settings from apollo
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2017-02-07 16:36:43 +01:00
Giancarlo Razzolini
4f1748fd94
playbooks/apollo: Add the php-fpm, mariadb and flyspray roles. 2017-02-06 15:44:33 -02:00
Giancarlo Razzolini
6cdb06165c
playbooks/apollo: Change to use the new netmask variable 2017-01-01 18:13:54 -02:00
Giancarlo Razzolini
c9c9230290
playbooks/apollo: Fix the mask on orion ipv4 address passed to postgres role 2016-12-30 19:33:50 -02:00
Giancarlo Razzolini
0b9f68aba3
playbooks/apollo: Add ssl to postgres and give orion permission to login. Also add memcached role 2016-12-30 17:15:36 -02:00
Giancarlo Razzolini
f4b276c888
playbooks: Add the archweb role to apollo and change the orion role to use the new default variables, with a global db host variable 2016-12-29 22:22:09 -02:00
Giancarlo Razzolini
4aecc99885
playbooks/apollo: Added missing uwsgi role. 2016-12-21 08:34:11 -02:00
Giancarlo Razzolini
45dc25b0d0
playbooks/apollo: Added the sudo role and the security_tracker role. Also changes the posgres to include the new variables.
roles/postgres: Merged the new configuration (from 9.6) and added two new variables for making it easier to test the role on a vm/container.
2016-12-20 16:08:18 -02:00
Florian Pritz
d00b7a636e
Add spampd to apollo
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2016-09-18 17:35:16 +02:00
Sven-Hendrik Haase
8480d6fb53
Add postgres role and use it on apollo
Signed-off-by: Sven-Hendrik Haase <svenstaro@gmail.com>
2016-09-12 11:54:33 +02:00
Florian Pritz
0d2ea540df
apollo: Fix typo in opendkim tag name
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2016-07-18 16:57:50 +02:00
Florian Pritz
b9cb1e5ff9
apollo: Add dedicated role tags for postfix and opendkim
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2016-07-18 14:12:43 +02:00
Florian Pritz
f1dec70194
apollo: Add dovecot and postfwd
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2016-07-18 14:12:31 +02:00
Florian Pritz
b238f13c95 apollo: Fix order of opendkim role
Needs to be after postfix since it uses the postfix group for some files

Signed-off-by: Florian Pritz <bluewind@xinu.at>
2016-07-11 15:29:47 +02:00
Florian Pritz
ac518769ef apollo: Enable postfix and opendkim
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2016-07-11 15:29:47 +02:00
Sven-Hendrik Haase
e1406014c3
Add planet role to apollo for planet.archlinux.org 2016-06-29 03:38:13 +02:00
Sven-Hendrik Haase
e138650a0f Rename ssh_keys to root_ssh 2016-06-18 00:23:03 +02:00
Sven-Hendrik Haase
e8c06b36ea borg-client: Propery postgres backup 2016-06-05 16:10:32 +02:00
Sven-Hendrik Haase
59924c98a4 Fix some typos 2016-06-04 14:59:09 +02:00
Sven-Hendrik Haase
2afc2a0509 Fix wrong name 2016-06-04 12:49:59 +02:00
Sven-Hendrik Haase
08d9fe0d0d Add apollo config 2016-06-04 12:42:28 +02:00