servers.md 3.59 KB
Newer Older
1
2
3
4
5
6
7
8
9
10
11
12
# Servers

## Table of contents
[[_TOC_]]

## gemini

### Services
  - repos/sync (repos.archlinux.org)
  - sources (sources.archlinux.org)
  - archive (archive.archlinux.org)

Kristian Klausen's avatar
Kristian Klausen committed
13
## lists.archlinux.org
14
15
16
17
18

### Services

  - mailman

19
## archlinux.org
20
21

### Services
22
  - archweb (Arch's site)
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103

## aur.archlinux.org

### Services
  - aurweb

## bugs.archlinux.org

### Services
  - flyspray

## bbs.archlinux.org

### Services
  - bbs

## phrik.archlinux.org

### Services
   - phrik (irc bot) users in the phrik group defined in
     the hosts vars and re-used the archusers role. Users
     in the phrik group are allowed to restar the irc bot.

## state.archlinux.org

### Services
  - postgres server for terraform state

## quassel.archlinux.org

### Services
  - quassel core

## matrix.archlinux.org

### Services
  - Matrix homeserver (Synapse)
  - Matrix ↔ IRC bridge

## homedir.archlinux.org

### Services
  - ~/user/ webhost

## accounts.archlinux.org

This server is _special_. It runs keycloak and is central to our unified Arch Linux account management world.
It has an Ansible playbook for the keycloak service but that only installs the package and starts it but it's configured via a secondary Terraform file only for keycloak `keycloak.tf`.
The reason for doing it this way is that Terraform support for Keycloak is much superior and it's declarative too which is great for making sure that no old config remains in the case of config changes.

So to set up this server from scratch, run:

  - `cd tf-stage1`
  - `terraform apply`
  - `cd ../tf-stage2`
  - `terraform import keycloak_realm.master master`
  - `terraform apply`

### Services
  - keycloak

## mirror.pkgbuild.com

### Services
  - Regular mirror.

## reproducible.archlinux.org

[Rebuilderd docs](./docs/rebuilderd.md)

### Services
  - Runs a master [rebuilderd](https://reproducible.archlinux.org) instance two workers:
    - repro1.pkgbuild.com (packet.net Arch Linux box)

## runner2.archlinux.org

Medium-fast-ish packet.net Arch Linux box.

### Services
  - GitLab runner

104
105
106
107
108
109
## mail.archlinux.org

### Services
  - postfix (mail server)
  - rspamd
  - dovecot (imap)
110
111
112

## monitoring.archlinux.org

113
  Prometheus, Loki and Grafana server which collects performance/metrics and logs from our services and runs alertmanager.
114
115
116
117
118
119

### Services
  - Alertmanager
  - [Grafana](https://monitoring.archlinux.org) and [docs/grafana.md](./docs/grafana.md)
  - Prometheus

120
121
122
123
124
125
126
127
## dashboards.archlinux.org

Prometheus, and Grafana server which receives selected performance/metrics from monitoring.archlinux.org and make them public accessible.

### Services
  - [Grafana](https://dashboards.archlinux.org) and [docs/grafana.md](./docs/grafana.md)
  - Prometheus

128
129
130
131
132
133
134
135
136
## patchwork.archlinux.org

### Services
  - patchwork

## redirect.archlinux.org

### Services
  - Redirects (nginx redirects)
137
  - Authoritative DNS server (PowerDNS) for ACME DNS challenges
138
  - ping
139
140
141
142
143
144
145
146
147
148
149

## security.archlinux.org

### Services
  - security tracker

## wiki.archlinux.org

### Services
  - archwiki

150
151
152
153
## md.archlinux.org

  Online collborative markdwown editor for Arch Linux Staff.

Kristian Klausen's avatar
Kristian Klausen committed
154
155
156
157
158
159
160
161
## mailman3.archlinux.org

This server runs mailman3 as mailman2 and mailman3 can't be installed on the same server. The HTTP and LMTP traffic is routed over WireGuard from lists.archlinux.org.

### Services

  - mailman3

162
163
### Services
  - [hedgedoc](https://hedgedoc.org/)
164
165
166
167
168
169
170
171
172

## Archive Mirrors

The [Arch Linux Archive](https://archive.archlinux.org) is mirrored to three dedicated servers to help aid global availability.

### Servers
  - https://america.archive.pkgbuild.com
  - https://asia.archive.pkgbuild.com
  - https://europe.archive.pkgbuild.com