mirror of
https://gitlab.archlinux.org/archlinux/infrastructure.git
synced 2026-08-06 09:32:58 +02:00
Christian Heusel
3be315866e
In order to update the data on https://archlinux.org/master-keys/ there is a pacman hook for archweb, which is only installed if `archweb_pgp_import` is set to true. Signed-off-by: Christian Heusel <christian@heusel.eu>
33 lines
1.1 KiB
YAML
33 lines
1.1 KiB
YAML
- name: Prepare postgres ssl hosts list
|
|
hosts: archlinux.org
|
|
tasks:
|
|
- name: Assign ipv4 addresses to fact postgres_hosts4
|
|
set_fact: postgres_hosts4="{{ [repos4] | union(detected_ips) }}"
|
|
vars:
|
|
repos4: "{{ hostvars['repos.archlinux.org']['wireguard_address'] }}/32"
|
|
detected_ips: "{{ groups['mirrors'] | map('extract', hostvars, ['wireguard_address']) | select() | map('regex_replace', '^(.+)$', '\\1/32') | list }}"
|
|
tags: ["postgres", "firewall"]
|
|
|
|
- name: Setup archlinux.org
|
|
hosts: archlinux.org
|
|
remote_user: root
|
|
roles:
|
|
- { role: common }
|
|
- { role: sshd }
|
|
- { role: root_ssh }
|
|
- { role: borg_client, tags: ["borg"] }
|
|
- { role: nginx }
|
|
- { role: postfix_null }
|
|
- role: postgres
|
|
postgres_listen_addresses: "localhost, {{ wireguard_address }}"
|
|
postgres_firewalld_zone: wireguard
|
|
- { role: sudo }
|
|
- { role: uwsgi }
|
|
- { role: memcached }
|
|
- { role: fetchmail }
|
|
- { role: archweb, archweb_planet: true, archweb_pgp_import: true }
|
|
- { role: fail2ban }
|
|
- { role: prometheus_exporters }
|
|
- { role: promtail }
|
|
- { role: wireguard }
|