mirror of
https://gitlab.archlinux.org/archlinux/infrastructure.git
synced 2025-01-18 08:06:16 +01:00
27553ab31a
With the support for network.wireguard.* credentials[1] in systemd v256[2], we can now easily avoid storing the credentials centrally in our ansible vault, which is preferable as it makes the private keys less exposed. It may also make fine-grained access easier in the future[3] as there is no longer a vault file for each server. All the keys have been rotated and the new private keys are only stored on the servers. [1] https://github.com/systemd/systemd/pull/30826 [2] https://github.com/systemd/systemd/releases/tag/v256 [3] https://gitlab.archlinux.org/archlinux/infrastructure/-/issues/64
20 lines
560 B
YAML
20 lines
560 B
YAML
hostname: "europe.mirror.pkgbuild.com"
|
|
archive_domain: "europe.archive.pkgbuild.com"
|
|
mirror_domain: "europe.mirror.pkgbuild.com"
|
|
archweb_mirrorcheck_locations: [18, 19]
|
|
ipv4_address: "89.187.191.12"
|
|
ipv4_netmask: "/26"
|
|
ipv4_gateway: "89.187.191.62"
|
|
ipv6_address: "2a02:6ea0:c237::2"
|
|
ipv6_netmask: "/128"
|
|
ipv6_gateway: "2a02:6ea0:c237::1337"
|
|
filesystem: "btrfs"
|
|
network_interface: "enp1s0f1"
|
|
system_disks:
|
|
- /dev/sda
|
|
- /dev/sdb
|
|
- /dev/sdc
|
|
raid_level: "raid5"
|
|
wireguard_address: 10.0.0.28
|
|
wireguard_public_key: 3C9yMutZJfOn2UkOhnGeM9DnLFJaeo6uTY9CGRlBZVM=
|