infrastructure/playbooks/aur.archlinux.org.yml

---

- name: setup aur.archlinux.org
  hosts: aur.archlinux.org
  remote_user: root
  roles:
    - { role: common }
    - { role: sshd, sshd_enable_includes: true }
    - { role: root_ssh }
    - { role: prometheus_exporters }
    - { role: promtail }
    - { role: certbot }
    - { role: nginx }
    - { role: mariadb, mariadb_innodb_buffer_pool_size: '1G' }
    - { role: sudo }
    - { role: php_fpm, php_extensions: ['iconv', 'memcached', 'mysqli', 'pdo_mysql'], zend_extensions: ['opcache'] }
    - { role: memcached }
    - { role: uwsgi }
    - { role: borg_client, tags: ["borg"] }
    - { role: postfix_null }
    - { role: fail2ban }
    - { role: aurweb }
    - { role: wireguard }
playbooks/aur: Rename the aur playbook file and add the missing roles The original aur playbook file was missing a lot of the roles that were added for the aur-dev playbook. Add them and renamed the file too. 2020-02-11 20:43:59 +01:00			`---`

			`- name: setup aur.archlinux.org`
			`hosts: aur.archlinux.org`
			`remote_user: root`
			`roles:`
			`- { role: common }`
playbooks: Remove tags from AUR playbooks and sync aur/aur-dev Removed tags from playbooks, since they are auto-generated and also synced the aur.archlinux.org playbook with aur-dev.archlinux.org one. 2020-07-23 16:56:11 +02:00			`- { role: sshd, sshd_enable_includes: true }`
playbooks/aur: Rename the aur playbook file and add the missing roles The original aur playbook file was missing a lot of the roles that were added for the aur-dev playbook. Add them and renamed the file too. 2020-02-11 20:43:59 +01:00			`- { role: root_ssh }`
Introduce prometheus exporters role for collection Add a new role called prometheus_exporters which should be run on every machine we have and starts different collectors depending on what group the machine is in. Currently supported our the gitlab runner exporter, rebuilder textcollector, mysqld-exporter, borg textcollector and an node/arch exporter. The arch exporter monitors the security status and pacman out of date packages gauge. 2020-08-31 18:18:53 +02:00			`- { role: prometheus_exporters }`
Implement centralized logging Fix #263 2021-02-26 22:14:05 +01:00			`- { role: promtail }`
playbooks/aur: Rename the aur playbook file and add the missing roles The original aur playbook file was missing a lot of the roles that were added for the aur-dev playbook. Add them and renamed the file too. 2020-02-11 20:43:59 +01:00			`- { role: certbot }`
			`- { role: nginx }`
mariadb: Move two common variables out of playbooks Default query_cache_type to 0 and innodb_file_per_table to true. 2021-08-18 01:57:42 +02:00			`- { role: mariadb, mariadb_innodb_buffer_pool_size: '1G' }`
playbooks/aur: Rename the aur playbook file and add the missing roles The original aur playbook file was missing a lot of the roles that were added for the aur-dev playbook. Add them and renamed the file too. 2020-02-11 20:43:59 +01:00			`- { role: sudo }`
fix E106 'Role name <role> does not match ``^[a-z][a-z0-9_]+$`` pattern' 2020-08-18 19:15:22 +02:00			`- { role: php_fpm, php_extensions: ['iconv', 'memcached', 'mysqli', 'pdo_mysql'], zend_extensions: ['opcache'] }`
playbooks: Remove tags from AUR playbooks and sync aur/aur-dev Removed tags from playbooks, since they are auto-generated and also synced the aur.archlinux.org playbook with aur-dev.archlinux.org one. 2020-07-23 16:56:11 +02:00			`- { role: memcached }`
			`- { role: uwsgi }`
fix E106 'Role name <role> does not match ``^[a-z][a-z0-9_]+$`` pattern' 2020-08-18 19:15:22 +02:00			`- { role: borg_client, tags: ["borg"] }`
Split the postfix role into a role for mail.a.o and the clients The role for the clients is named postfix_null (per [1]) and it's much simpler and cleaner than the postfix role. I hope can cleanup the postfix role at a later date. [1] http://www.postfix.org/STANDARD_CONFIGURATION_README.html#null_client 2021-07-09 22:29:11 +02:00			`- { role: postfix_null }`
playbooks: Remove tags from AUR playbooks and sync aur/aur-dev Removed tags from playbooks, since they are auto-generated and also synced the aur.archlinux.org playbook with aur-dev.archlinux.org one. 2020-07-23 16:56:11 +02:00			`- { role: fail2ban }`
			`- { role: aurweb }`
WireGuard all hosts This is meant as a internal authenticated and encrypted network which we can use for internal services, we don't want to expose to the internet or when encryption is desired but not easily implementable. 2021-07-06 19:47:22 +02:00			`- { role: wireguard }`