mirror/ infrastructure
1
1
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-06-02 14:16:07 +02:00
Code Issues
879 Commits 21 Branches 0 Tags 17 MiB
Commit Graph

125 Commits

Author SHA1 Message Date
Jan Alexander Steffens (heftig) 3bf7507695
Update soyuz' oidentd setup 
Currently needs custom versions of quassel (for oidentd-strict) and
oidentd (for forwarding).

Expect quassel to switch to forwarding as well once their identserver
implementation lands.
 2018-05-22 12:35:06 +02:00
Jelle van der Waa 6250430a61 Fix unresolved conflict 2018-05-15 20:35:09 +02:00
Jelle van der Waa fc5758266c archweb-dev: update staging 
Update to konami code removed commit
 2018-05-13 13:22:18 +02:00
Jelle van der Waa 26d114afd3 staging: update to latest major release 2018-05-11 21:36:39 +02:00
Jelle van der Waa c7d18df7ee staging: update archweb to the next pre release 2018-05-10 17:18:46 +02:00
Jelle van der Waa 74a4650fae staging: Enable postfix for mail delivery 
Make the mail server address configurable in Ansible for archweb, to
spot the difference between error mails on staging and production.
 2018-05-10 16:54:49 +02:00
Jelle van der Waa 424ebd2eef nymeria: use new domain for archweb staging env 2018-05-01 20:46:12 +02:00
Jelle van der Waa 3c6c145edb Create nymeria playbook for Archweb staging 
nymeria.archlinux.org will be a staging ground for Archweb where it can
be tested.
 2018-05-01 20:46:12 +02:00
Florian Pritz fc785c7e5a
Update dbscripts 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-04-09 09:39:24 +02:00
Florian Pritz 5b52fed9d5 playbooks/all-hosts-basic: Remove old comment regarding borg-client 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-03-24 20:37:33 +01:00
Bartłomiej Piotrowski b9aac3c0eb Use sgp.mirror as build server 2018-03-24 20:13:40 +01:00
Phillip Smith ef9f4b831d tag firewall with "firewall" instead of "firewalld" 2018-03-08 09:49:13 +11:00
Phillip Smith 59807399ed initial commit of firewalld role and tasks 2018-03-06 08:46:24 +11:00
Florian Pritz e28df1c7a1
php: Load opcache extension 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-03-03 15:12:28 +01:00
Giancarlo Razzolini a40d6e1f98
Fix typo in the tags for the archwiki role 2018-03-02 22:31:22 -03:00
Giancarlo Razzolini bf43586686
Add the archwiki role to the apollo playbook 
Added the archwiki role to the apollo playbook and also added the intl extension to the
php-fpm role.
 2018-03-02 19:57:44 -03:00
Florian Pritz 6a2f69cff2
Remove double quote of postgres_listen_addresses 
Already quoted in the new config template.

Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-03-02 13:17:43 +01:00
Florian Pritz 6c3d7ffe06
Update dbscripts version to latest 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-03-02 12:45:26 +01:00
Jelle van der Waa a2c4c9d3f4 orion: disable archweb_donor_import timer 
A new archweb release has not been made yet with the donor import
integration.
 2018-02-25 20:38:08 +01:00
Jelle van der Waa 8ec94d3e1b Add donor import service 
Add donor import service, which imports donors from a maildir directory
in /home/donate/. The emails are dumped using a script on orion which
calls doveadm to create a directory with exported emails.
 2018-02-25 20:33:11 +01:00
Florian Pritz ea7a38feb4
playbooks/fetch-borg-keys.yml: Encrypt keys with GPG 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-01-10 21:02:25 +01:00
Florian Pritz 13ad123a84
Add playbook to fetch borg crypto keys 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2018-01-02 16:38:43 +01:00
Bartłomiej Piotrowski 69a91b0574 mirrors: drop reduntant tags 2017-12-07 17:21:51 +01:00
Florian Pritz 425f4263d8 Deploy basic config on nymeria and dragon 
Mostly interesting for root_ssh.

Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2017-11-20 21:32:02 +01:00
Bartłomiej Piotrowski e5b461e31a Add role for mirroring archlinux32 2017-11-15 12:50:32 +01:00
Florian Pritz b0fe6a3a2c
Add missing tags to vostok playbook 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2017-10-20 22:43:05 +02:00
Florian Pritz c9f245a325
Add borg-client role to all-hosts-basic playbook 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2017-10-20 22:40:46 +02:00
Bartłomiej Piotrowski efeeff759c nginx: set default letsencrypt_validation_dir value 2017-10-20 14:24:07 +02:00
Bartłomiej Piotrowski 3370c39bb0 hosts: rename sgp.mirror to sgp 2017-10-20 14:24:07 +02:00
Florian Pritz c0c12767e9
Enable zabbix-agent for mirrors 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2017-09-11 15:12:45 +02:00
Florian Pritz 891e729c8d borg-client: Adapt for FQDN 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2017-09-06 20:52:42 +02:00
Florian Pritz 89eade3dda
mirrors: Deploy mirrorchecker 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2017-09-06 20:07:00 +02:00
Florian Pritz 388f3b14c9
apollo: Dynamically build postgres_ssl_hosts list 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2017-09-06 20:06:15 +02:00
Giancarlo Razzolini 3231e370c4
playbooks: Change all the hosts names to FQDN. 
We have changed our ansible configuration and policy to only use
fully qualified domain names for hostnames. Update the playbooks
to use them.
 2017-09-05 15:33:05 -03:00
Florian Pritz 71cd6fff20
Consolidate installation playbook 
Hostnames are now set in host_vars and the same playbook is used for
all hosts. If one host needs to be reinstalled the playbook can be run
with "--limit $hostname".

Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2017-09-05 20:08:39 +02:00
Bartłomiej Piotrowski 61ac2a661b Configure Mexican mirror 2017-09-05 14:29:11 +02:00
Bartłomiej Piotrowski 2586c1c477 common: run on all hosts 2017-09-04 12:52:02 +02:00
Florian Pritz 05c21eb144
orion: Make postfix listen publicly 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2017-09-03 14:30:42 +02:00
Florian Pritz 7c85b76c9c Move mail server to orion 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2017-09-02 14:59:26 +02:00
Florian Pritz 02bc587ebe
soyuz: Add arch-boxes role 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2017-08-22 16:13:18 +02:00
Florian Pritz f2bc1c185f
Add grafana 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2017-08-12 18:20:41 +02:00
Florian Pritz a71c3ea29a
Add unbound 
Spamassassin on apollo tries to connect to a local dns resolver, but
can't which leads to long timeouts. Flyspray sends mail via SMTP which
goes through SA and thus each request that sends a mail will also block
for a long time.

Fix this by adding unbound as a local resolver which is needed for
proper performance of SA since public resolvers are often blocked by
blacklists because they send too many requests.

Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2017-07-09 20:51:19 +02:00
Bartłomiej Piotrowski 02f1ea4d42 Drop disable-abs playbook 2017-07-04 21:48:35 +02:00
Florian Pritz 215c95fa37 apollo: Remove dovecot 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2017-07-03 15:59:20 +02:00
Florian Pritz 105fdfade9 postfix: Add support for patchwork 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2017-07-03 15:52:40 +02:00
Florian Pritz 1275d26210 postfix: Decouple smtpd and full mail server 
Signed-off-by: Florian Pritz <bluewind@xinu.at>
 2017-07-02 19:53:22 +02:00
Jelle van der Waa e88ccc2c09 phrik: add phrik user and group 
Add phrik group and user, add demize to the phrik group
 2017-06-30 20:09:57 +02:00
Bartłomiej Piotrowski e3d3162492 disable-abs: Remove /srv/abs recursively 2017-05-31 12:29:27 +02:00
Bartłomiej Piotrowski 337f6057e9 disable-abs: Skip dbscripts update while disabling ABS 2017-05-31 12:29:27 +02:00
Bartłomiej Piotrowski 6e858403c6 orion: Pin dbscripts to latest commit 2017-05-30 19:08:07 +02:00