mirror of
https://gitlab.archlinux.org/archlinux/infrastructure.git
synced 2024-05-05 21:06:02 +02:00
4112bdf9fd
yaml: truthy value should be one of [false, true] (truthy) yaml: wrong indentation: expected 4 but found 2 (indentation) yaml: too few spaces before comment (comments) yaml: missing starting space in comment (comments) yaml: too many blank lines (1 > 0) (empty-lines) yaml: too many spaces after colon (colons) yaml: comment not indented like content (comments-indentation) yaml: no new line character at the end of file (new-line-at-end-of-file) load-failure: Failed to load or parse file parser-error: couldn't resolve module/action 'hosts'. This often indicates a misspelling, missing collection, or incorrect module path.
41 lines
1.5 KiB
YAML
41 lines
1.5 KiB
YAML
---
|
|
|
|
- name: "prepare postgres ssl hosts list"
|
|
hosts: archlinux.org
|
|
tasks:
|
|
- name: assign ipv4 addresses to fact postgres_ssl_hosts4
|
|
set_fact: postgres_ssl_hosts4="{{ [gemini4] + detected_ips }}"
|
|
vars:
|
|
gemini4: "{{ hostvars['gemini.archlinux.org']['ipv4_address'] }}/32"
|
|
detected_ips: "{{ groups['mirrors'] | map('extract', hostvars, ['ipv4_address']) | select() | map('regex_replace', '^(.+)$', '\\1/32') | list }}"
|
|
tags: ["postgres", "firewall"]
|
|
- name: assign ipv6 addresses to fact postgres_ssl_hosts6
|
|
set_fact: postgres_ssl_hosts6="{{ [gemini6] + detected_ips }}"
|
|
vars:
|
|
gemini6: "{{ hostvars['gemini.archlinux.org']['ipv6_address'] }}/128"
|
|
detected_ips: "{{ groups['mirrors'] | map('extract', hostvars, ['ipv6_address']) | select() | map('regex_replace', '^(.+)$', '\\1/128') | list }}"
|
|
tags: ["postgres", "firewall"]
|
|
|
|
- name: setup archlinux.org
|
|
hosts: archlinux.org
|
|
remote_user: root
|
|
roles:
|
|
- { role: common }
|
|
- { role: tools }
|
|
- { role: sshd }
|
|
- { role: root_ssh }
|
|
- { role: borg_client, tags: ["borg"] }
|
|
- { role: certbot }
|
|
- { role: nginx }
|
|
- { role: postfix, postfix_relayhost: "mail.archlinux.org" }
|
|
- role: postgres
|
|
postgres_listen_addresses: "*"
|
|
postgres_ssl: 'on'
|
|
- { role: sudo }
|
|
- { role: uwsgi }
|
|
- { role: memcached }
|
|
- { role: fetchmail }
|
|
- { role: archweb, archweb_planet: true }
|
|
- { role: fail2ban }
|
|
- { role: prometheus_exporters }
|