1
1
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-04-26 07:45:00 +02:00
infrastructure/docs/servers.md
2024-02-10 17:07:38 +01:00

3.5 KiB

Servers

Table of contents

[[TOC]]

gemini

Services

  • repos/sync (repos.archlinux.org)
  • sources (sources.archlinux.org)
  • archive (archive.archlinux.org)

lists.archlinux.org

Services

  • mailman

archlinux.org

Services

  • archweb (Arch's site)

aur.archlinux.org

Services

  • aurweb

bbs.archlinux.org

Services

  • bbs

phrik.archlinux.org

Services

  • phrik (irc bot) users in the phrik group defined in the hosts vars and re-used the archusers role. Users in the phrik group are allowed to restar the irc bot.

state.archlinux.org

Services

  • postgres server for terraform state

quassel.archlinux.org

Services

  • quassel core

matrix.archlinux.org

Services

  • Matrix homeserver (Synapse)
  • Matrix ↔ IRC bridge

homedir.archlinux.org

Services

  • ~/user/ webhost

accounts.archlinux.org

This server is special. It runs keycloak and is central to our unified Arch Linux account management world. It has an Ansible playbook for the keycloak service but that only installs the package and starts it but it's configured via a secondary Terraform file only for keycloak keycloak.tf. The reason for doing it this way is that Terraform support for Keycloak is much superior and it's declarative too which is great for making sure that no old config remains in the case of config changes.

So to set up this server from scratch, run:

  • cd tf-stage1
  • terraform apply
  • cd ../tf-stage2
  • terraform import keycloak_realm.master master
  • terraform apply

Services

  • keycloak

mirror.pkgbuild.com

Services

  • Regular mirror.

reproducible.archlinux.org

Rebuilderd docs

Services

  • Runs a master rebuilderd instance with two workers:
    • repro2.pkgbuild.com (Kape server with an EPYC 7702P and 256G RAM)
    • repro3.pkgbuild.com (Equinix Metal box with a Xeon E-2278G and 64G RAM)

runner1.archlinux.org

Medium-fast-ish Kape Arch Linux box.

runner3.archlinux.org

Medium-fast-ish Equinix Metal Arch Linux box.

Services

  • GitLab runner

mail.archlinux.org

Services

  • postfix (mail server)
  • rspamd
  • dovecot (imap)

monitoring.archlinux.org

Prometheus, Loki and Grafana server which collects performance/metrics and logs from our services and runs alertmanager.

Services

dashboards.archlinux.org

Prometheus, and Grafana server which receives selected performance/metrics from monitoring.archlinux.org and make them public accessible.

Services

redirect.archlinux.org

Services

  • Redirects (nginx redirects)
  • Authoritative DNS server (PowerDNS) for ACME DNS challenges
  • ping

security.archlinux.org

Services

  • security tracker

wiki.archlinux.org

Services

  • archwiki

md.archlinux.org

Online collborative markdwown editor for Arch Linux Staff.

Services

Archive Mirrors

The Arch Linux Archive is mirrored to three dedicated servers to help aid global availability.

Servers

gitlab.archlinux.org

Services

  • Gitlab