mirror of
https://gitlab.archlinux.org/archlinux/infrastructure.git
synced 2026-08-06 11:13:08 +02:00
Kristian Klausen
09cb1c3ed4
There is no reason for not offering (and using it ourselves) rsync mirroring over TLS these days which provides encryption, authentication and integrity. As the pacman database files are unsigned this also provides some protection against MITM tampering. Fix #298
40 lines
1.3 KiB
YAML
40 lines
1.3 KiB
YAML
mirrorsync_mirrors:
|
|
archive:
|
|
hosts: "{{ groups['archive_mirrors'] }}"
|
|
source: rsync://{{ hostvars['archive.archlinux.org']['wireguard_address'] }}/archive
|
|
tls: false
|
|
target: /srv/archive
|
|
last_update_url: https://archive.archlinux.org/repos/last/lastupdate
|
|
last_update_dst: lastupdate
|
|
delay_updates: false
|
|
debug:
|
|
hosts: "{{ groups['geo_mirrors'] + ['debuginfod.archlinux.org'] }}"
|
|
source: rsync://rsync.archlinux.org/debug_packages
|
|
target: /srv/ftp
|
|
last_update_url: https://rsync.archlinux.org/lastupdate
|
|
last_update_dst: lastupdate
|
|
rsync_options:
|
|
- --include="*-debug/***"
|
|
- --include="pool/"
|
|
- --include="pool/*-debug/***"
|
|
- --exclude="*"
|
|
repo:
|
|
hosts: "{{ groups['mirrors'] + ['build.archlinux.org'] }}"
|
|
source: rsync://rsync.archlinux.org/ftp_tier1
|
|
target: /srv/ftp
|
|
last_update_url: https://rsync.archlinux.org/lastupdate
|
|
last_update_dst: lastupdate
|
|
save_lastsync: true
|
|
rsync_options:
|
|
- --exclude="/other"
|
|
- --exclude="/sources"
|
|
- --exclude="*-debug/"
|
|
riscv:
|
|
hosts: "{{ groups['geo_mirrors'] }}"
|
|
mirror_domain: riscv.mirror.pkgbuild.com
|
|
source: rsync://archriscv.felixc.at/archriscv
|
|
tls: false
|
|
target: /srv/riscv
|
|
last_update_url: https://archriscv.felixc.at/.status/lastupdate.txt
|
|
last_update_dst: .status/lastupdate.txt
|