mirror of
https://gitlab.archlinux.org/archlinux/infrastructure.git
synced 2025-01-18 08:06:16 +01:00
30 lines
1.3 KiB
YAML
30 lines
1.3 KiB
YAML
- name: install required packages
|
|
pacman: name=rebuilderd,rebuilderd-website state=present
|
|
|
|
- name: create ssl cert
|
|
command: certbot certonly --email webmaster@archlinux.org --agree-tos --rsa-key-size 4096 --renew-by-default --webroot -w {{ letsencrypt_validation_dir }} -d '{{ rebuilderd_domain }}' creates='/etc/letsencrypt/live/{{ rebuilderd_domain }}/fullchain.pem'
|
|
when: 'rebuilderd_domain is defined'
|
|
|
|
- name: configure rebuilderd.conf
|
|
template: src=rebuilderd.conf.j2 dest=/etc/rebuilderd.conf owner=rebuilderd group=rebuilderd mode=0660
|
|
|
|
- name: configure rebuilderd-sync.conf
|
|
template: src=rebuilderd-sync.conf.j2 dest=/etc/rebuilderd-sync.conf owner=rebuilderd group=rebuilderd mode=0660
|
|
|
|
- name: make nginx log dir
|
|
file: path=/var/log/nginx/{{ rebuilderd_domain }} state=directory owner=root group=root mode=0755
|
|
|
|
- name: set up nginx
|
|
template: src=nginx.d.conf.j2 dest=/etc/nginx/nginx.d/rebuilderd.conf owner=root group=root mode=0644
|
|
notify:
|
|
- reload nginx
|
|
when: 'rebuilderd_domain is defined'
|
|
tags: ['nginx']
|
|
|
|
- name: enable and start rebuilderd
|
|
systemd: name=rebuilderd enabled=yes state=started
|
|
|
|
- name: enable and start rebuilderd {{ item }} timer
|
|
systemd: name=rebuilderd-sync@archlinux-{{ item }}.timer enabled=yes state=started
|
|
with_items: "{{ suites }}"
|