Files
infrastructure/playbooks/mirrors.yml
Christian Heusel 557818871d fastly_origin: Add new role for db invalidation
We watch over the database paths with a 'systemd.path' unit and
invalidate the CDN cached files once the DBs on the origin are changed.

Fixes https://gitlab.archlinux.org/archlinux/infrastructure/-/issues/778

Signed-off-by: Christian Heusel <christian@heusel.eu>
2025-12-20 18:53:25 +01:00

20 lines
695 B
YAML

- name: Common playbook for mirrors
hosts: mirrors
remote_user: root
roles:
- { role: common }
- { role: firewalld }
- { role: wireguard }
- { role: sshd }
- { role: root_ssh }
- { role: certbot }
- { role: nginx }
- { role: syncrepo, tags: ['nginx'] }
- { role: mirrorsync }
- { role: archweb, when: archweb_mirrorcheck_locations is defined, archweb_site: false, archweb_services: false, archweb_mirrorcheck: true }
- { role: prometheus_exporters }
- { role: promtail }
- { role: fail2ban }
- { role: geo_dns, when: "'geo_mirror_name_servers' in group_names" }
- { role: fastly_origin, when: "'fastly_origins' in group_names" }