mirror of
https://gitlab.archlinux.org/archlinux/infrastructure.git
synced 2026-09-11 15:50:32 +02:00
The sequoia cli once again changed their interface, therefore port this to the (somewhat guaranteed to be) stable sops interface. Suggested-by: David Runge <dvzrv@archlinux.org> Signed-off-by: Christian Heusel <christian@heusel.eu>
27 lines
1.0 KiB
YAML
27 lines
1.0 KiB
YAML
- name: Install rsop
|
|
pacman: name=rsop state=present
|
|
|
|
- name: Install systemd service
|
|
copy: src=bugbuddy.service dest="/etc/systemd/system/bugbuddy.service" owner=root group=root mode=0644
|
|
notify:
|
|
- Daemon reload
|
|
|
|
- name: Install conf file
|
|
template: src=bugbuddy.conf.j2 dest=/etc/conf.d/bugbuddy owner=root group=root mode=0600
|
|
|
|
- name: Install download script
|
|
copy: src=bugbuddy-download.sh dest=/usr/local/bin/bugbuddy-download owner=root group=root mode=0755
|
|
|
|
- name: Download latest bugbuddy # noqa no-changed-when
|
|
command: /usr/local/bin/bugbuddy-download --restart
|
|
|
|
- name: Start and enable daemon service
|
|
systemd_service: name=bugbuddy.service enabled=yes state=started
|
|
|
|
- name: Open bugbuddy ipv4 port for gitlab.archlinux.org
|
|
ansible.posix.firewalld: zone=wireguard state=enabled permanent=true immediate=yes
|
|
rich_rule="rule family=ipv4 source address={{ hostvars['gitlab.archlinux.org']['wireguard_address'] }} port protocol=tcp port=8080 accept"
|
|
when: configure_firewall
|
|
tags:
|
|
- firewall
|