1
1
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2025-01-07 04:24:10 +01:00
infrastructure/group_vars/all/dyn_dns.yml
Sven-Hendrik Haase f95299917b
Add Mumble server
As per my announcement to arch-devops[1] and staff, this adds a Mumble
server for Arch Linux.

The password for the special root user SuperAdmin is automatically
generated on first launch and printed to the logs. I went ahead and
added it to the vault. It should not usually be required to login as
SuperAdmin though as long as there are user admins around.

This uses certbot for local certificates.

[1] https://lists.archlinux.org/archives/list/arch-devops@lists.archlinux.org/thread/AHAOSTGFJTLQDSXLWFORDKGR6RDVHYEI/
2024-11-26 14:30:42 +01:00

20 lines
955 B
YAML

dyn_dns_server: "{{ hostvars['redirect.archlinux.org']['ipv4_address'] }}"
dyn_dns_zones:
_acme-challenge.geo.mirror.pkgbuild.com: &acme_challenge
key: certbot
allowed_ipv4: "{{ groups['geo_mirrors'] | map('extract', hostvars, ['ipv4_address']) }}"
allowed_ipv6: "{{ groups['geo_mirrors'] | map('extract', hostvars, ['ipv6_address']) }}"
valid_qtypes: [TXT]
_acme-challenge.riscv.mirror.pkgbuild.com: *acme_challenge
sandbox.archlinux.page:
key: sandbox
allowed_ipv4: "{{ groups['gitlab_runners'] | map('extract', hostvars, ['ipv4_address']) }}"
allowed_ipv6: "{{ groups['gitlab_runners'] | map('extract', hostvars, ['ipv6_address']) }}"
valid_qtypes: [A, AAAA]
subdomains: only
_acme-challenge.mumble.archlinux.org:
key: mumble
allowed_ipv4: "{{ [hostvars['mumble.archlinux.org']['ipv4_address']] }}"
allowed_ipv6: "{{ [hostvars['mumble.archlinux.org']['ipv6_address']] }}"
valid_qtypes: [TXT]