Skip to content
Snippets Groups Projects
servers.md 3.09 KiB
Newer Older
  • Learn to ignore specific revisions
  • # Servers
    
    ## Table of contents
    [[_TOC_]]
    
    ## gemini
    
    ### Services
      - repos/sync (repos.archlinux.org)
      - sources (sources.archlinux.org)
      - archive (archive.archlinux.org)
    
    ## luna
    
    ### Services
    
      - mailman
      - projects (projects.archlinux.org)
    
    
    
    ## aur.archlinux.org
    
    ### Services
      - aurweb
    
    ## bugs.archlinux.org
    
    ### Services
      - flyspray
    
    ## bbs.archlinux.org
    
    ### Services
      - bbs
    
    ## phrik.archlinux.org
    
    ### Services
       - phrik (irc bot) users in the phrik group defined in
         the hosts vars and re-used the archusers role. Users
         in the phrik group are allowed to restar the irc bot.
    
    ## dragon
    
    ### Services
      - build server
      - sogrep
    
    ## state.archlinux.org
    
    ### Services
      - postgres server for terraform state
    
    ## quassel.archlinux.org
    
    ### Services
      - quassel core
    
    ## matrix.archlinux.org
    
    ### Services
      - Matrix homeserver (Synapse)
      - Matrix ↔ IRC bridge
    
    ## homedir.archlinux.org
    
    ### Services
      - ~/user/ webhost
    
    ## accounts.archlinux.org
    
    This server is _special_. It runs keycloak and is central to our unified Arch Linux account management world.
    It has an Ansible playbook for the keycloak service but that only installs the package and starts it but it's configured via a secondary Terraform file only for keycloak `keycloak.tf`.
    The reason for doing it this way is that Terraform support for Keycloak is much superior and it's declarative too which is great for making sure that no old config remains in the case of config changes.
    
    So to set up this server from scratch, run:
    
      - `cd tf-stage1`
      - `terraform apply`
      - `cd ../tf-stage2`
      - `terraform import keycloak_realm.master master`
      - `terraform apply`
    
    ### Services
      - keycloak
    
    ## mirror.pkgbuild.com
    
    ### Services
      - Regular mirror.
    
    ## reproducible.archlinux.org
    
    [Rebuilderd docs](./docs/rebuilderd.md)
    
    ### Services
      - Runs a master [rebuilderd](https://reproducible.archlinux.org) instance two workers:
        - repro1.pkgbuild.com (packet.net Arch Linux box)
    
    ## runner2.archlinux.org
    
    Medium-fast-ish packet.net Arch Linux box.
    
    ### Services
      - GitLab runner
    
    
    ## mail.archlinux.org
    
    ### Services
      - postfix (mail server)
      - rspamd
      - dovecot (imap)
    
    
    ## monitoring.archlinux.org
    
      Prometheus and Grafana server which collects performance/metrics from our services and runs alertmanager.
    
    ### Services
      - Alertmanager
      - [Grafana](https://monitoring.archlinux.org) and [docs/grafana.md](./docs/grafana.md)
      - Prometheus
    
    ## openpgpkey.archlinux.org
    
    Hosts our gnupg open web key directory for fetching Arch Linux keyring keys over https.
    
    ### Services
      - WKD
    
    
    ## patchwork.archlinux.org
    
    ### Services
      - patchwork
    
    ## redirect.archlinux.org
    
    ### Services
      - Redirects (nginx redirects)
    
    ## security.archlinux.org
    
    ### Services
      - security tracker
    
    ## wiki.archlinux.org
    
    ### Services
      - archwiki
    
    
    
    ## Archive Mirrors
    
    The [Arch Linux Archive](https://archive.archlinux.org) is mirrored to three dedicated servers to help aid global availability.
    
    ### Servers
      - https://america.archive.pkgbuild.com
      - https://asia.archive.pkgbuild.com
      - https://europe.archive.pkgbuild.com