mirror of
https://gitlab.archlinux.org/archlinux/infrastructure.git
synced 2024-09-28 18:31:59 +02:00
35 lines
1002 B
YAML
35 lines
1002 B
YAML
---
|
|
|
|
- name: setup luna
|
|
hosts: luna.archlinux.org
|
|
remote_user: root
|
|
tasks:
|
|
- name: open firewall holes for services
|
|
ansible.posix.firewalld: service={{ item }} permanent=true state=enabled immediate=yes
|
|
with_items:
|
|
- http
|
|
- https
|
|
- rsyncd
|
|
- smtp
|
|
- git
|
|
when: configure_firewall
|
|
tags:
|
|
- firewall
|
|
|
|
- name: open firewall holes for ports
|
|
ansible.posix.firewalld: port={{ item }} permanent=true state=enabled immediate=yes
|
|
with_items:
|
|
- 6969/tcp
|
|
- 4949/tcp
|
|
when: configure_firewall
|
|
tags:
|
|
- firewall
|
|
roles:
|
|
- nginx
|
|
- rspamd
|
|
- { role: mariadb, mariadb_query_cache_type: '0', mariadb_innodb_file_per_table: True }
|
|
- { role: prometheus_exporters }
|
|
# luna is hosting mailman lists; this postfix role does not cater to this yet
|
|
# TODO: make postfix role handle mailman config?
|
|
# - { role: postfix, tags: ["postfix"], postfix_relayhost: "mail.archlinux.org" }
|