- name: Setup gemini.archlinux.org
  hosts: gemini.archlinux.org
  remote_user: root
  vars:
    archweb_db_host: "{{ hostvars['archlinux.org']['wireguard_address'] }}"
  vars_files:
    - ../misc/vaults/vault_archive.yml
  roles:
    - { role: common }
    - { role: tools }
    - { role: firewalld }
    - { role: wireguard }
    - { role: sshd }
    - { role: root_ssh }
    - { role: borg_client, tags: ['borg'] }
    - { role: sudo, tags: ['archusers'] }
    - { role: certbot }
    - { role: nginx }
    - { role: archusers }
    - { role: dbscripts, repos_domain: "repos.archlinux.org", repos_rsync_domain: "rsync.archlinux.org", tags: ['archusers'] }
    - { role: arch_boxes_sync }
    - { role: archweb, archweb_site: false, archweb_services: true, archweb_mirrorcheck_locations: [5, 6] }
    - { role: sources, sources_domain: "sources.archlinux.org", sources_dir: "/srv/sources" }
    - { role: archive }
    - { role: archive_web }
    - { role: postfix_null }
    - { role: fail2ban }
    - { role: prometheus_exporters }
    - { role: promtail }