1
1
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-05-26 22:26:03 +02:00
infrastructure/playbooks/reproducible.archlinux.org.yml
Kristian Klausen 664deb67ab WireGuard all hosts
This is meant as a internal authenticated and encrypted network which we
can use for internal services, we don't want to expose to the internet
or when encryption is desired but not easily implementable.
2021-07-06 20:58:15 +00:00

20 lines
461 B
YAML

---
- name: setup reproducible builds rebuilder
hosts: reproducible.archlinux.org
remote_user: root
roles:
- { role: common }
- { role: tools }
- { role: firewalld }
- { role: wireguard }
- { role: sshd }
- { role: root_ssh }
- { role: borg_client, tags: ["borg"] }
- { role: certbot }
- { role: nginx }
- { role: rebuilderd }
- { role: prometheus_exporters }
- { role: promtail }
- { role: fail2ban }