orion.yml 889 Bytes
Newer Older
1
2
3
---

- name: setup orion
4
  hosts: orion.archlinux.org
5
6
  remote_user: root
  roles:
7
8
9
10
    - { role: common }
    - { role: tools }
    - { role: sshd }
    - { role: root_ssh }
Florian Pritz's avatar
Florian Pritz committed
11
    - { role: borg-client, tags: ['borg'] }
12
    - { role: opendkim, dkim_selector: orion, tags: ['mail'] }
13
14
15
16
    - { role: dovecot }
    - { role: spampd, tags: ["mail"] }
    - { role: unbound, tags: ["mail"] }
    - { role: postfwd, tags: ['mail'] }
17
    - { role: postfix, postfix_server: true, postfix_smtpd_public: true, tags: ['mail'] }
18
    - { role: archusers }
19
    - { role: certbot }
20
    - { role: nginx }
Florian Pritz's avatar
Florian Pritz committed
21
    - sogrep
22
    - { role: sudo, tags: ['archusers'] }
23
    - { role: archweb, archweb_site: false, archweb_services: false, archweb_donor_import: true, archweb_mirrorcheck_locations: [5, 6] }
24
    - { role: hefur, ftp_iso_dir: '/srv/ftp/iso', tags: ['torrenttracker']}
25
    - wkd
26
    - { role: fail2ban }