Skip to content
GitLab
Menu
Projects
Groups
Snippets
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Sign in
Toggle navigation
Menu
Open sidebar
Arch Linux
infrastructure
Commits
1853b360
Verified
Commit
1853b360
authored
Dec 29, 2020
by
Giancarlo Razzolini
Browse files
playbooks: Remove apollo playbook
Removed the apollo playbook.
parent
dee3a100
Changes
1
Show whitespace changes
Inline
Side-by-side
playbooks/apollo.yml
deleted
100644 → 0
View file @
dee3a100
---
-
name
:
"
prepare
postgres
ssl
hosts
list"
hosts
:
apollo.archlinux.org
tasks
:
-
name
:
assign ipv4 addresses to fact postgres_ssl_hosts4
set_fact
:
postgres_ssl_hosts4="{{ [gemini4] + detected_ips }}"
vars
:
gemini4
:
"
{{
hostvars['gemini.archlinux.org']['ipv4_address']
}}/32"
detected_ips
:
"
{{
groups['mirrors']
|
map('extract',
hostvars,
['ipv4_address'])
|
select()
|
map('regex_replace',
'^(.+)$',
'
\\
1/32')
|
list
}}"
tags
:
[
"
postgres"
,
"
firewall"
]
-
name
:
assign ipv6 addresses to fact postgres_ssl_hosts6
set_fact
:
postgres_ssl_hosts6="{{ [gemini6] + detected_ips }}"
vars
:
gemini6
:
"
{{
hostvars['gemini.archlinux.org']['ipv6_address']
}}/128"
detected_ips
:
"
{{
groups['mirrors']
|
map('extract',
hostvars,
['ipv6_address'])
|
select()
|
map('regex_replace',
'^(.+)$',
'
\\
1/128')
|
list
}}"
tags
:
[
"
postgres"
,
"
firewall"
]
-
name
:
setup apollo
hosts
:
apollo.archlinux.org
remote_user
:
root
roles
:
-
{
role
:
common
}
-
{
role
:
tools
}
-
{
role
:
sshd
}
-
{
role
:
root_ssh
}
-
{
role
:
borg_client
,
tags
:
[
"
borg"
]
}
-
{
role
:
certbot
}
-
{
role
:
nginx
}
-
{
role
:
rspamd
,
tags
:
[
"
mail"
]
}
-
{
role
:
unbound
,
tags
:
[
"
mail"
]
}
-
{
role
:
postfix
,
postfix_relayhost
:
"
mail.archlinux.org"
,
postfix_smtpd_public
:
true
,
postfix_patchwork_enabled
:
true
,
tags
:
[
"
mail"
]
}
-
{
role
:
postfwd
,
tags
:
[
'
mail'
]
}
-
role
:
postgres
postgres_listen_addresses
:
"
*"
postgres_max_connections
:
1000
postgres_ssl
:
'
on'
postgres_shared_buffers
:
4096MB
-
{
role
:
mariadb
,
mariadb_query_cache_type
:
'
0'
,
mariadb_innodb_file_per_table
:
True
}
-
{
role
:
sudo
}
-
{
role
:
uwsgi
}
-
{
role
:
php_fpm
,
php_extensions
:
[
'
bcmath'
,
'
curl'
,
'
gd'
,
'
iconv'
,
'
intl'
,
'
mysqli'
,
'
pdo_pgsql'
,
'
pgsql'
,
'
sockets'
,
'
zip'
],
zend_extensions
:
[
'
opcache'
]
}
-
{
role
:
memcached
}
-
{
role
:
archweb
,
archweb_planet
:
true
}
-
role
:
security_tracker
security_tracker_domain
:
"
security.archlinux.org"
security_tracker_nginx_conf
:
'
/etc/nginx/nginx.d/security-tracker.conf'
security_tracker_dir
:
"
/srv/http/security-tracker"
-
{
role
:
mailman
,
mailman_domain
:
"
lists.archlinux.org"
}
-
{
role
:
patchwork
}
-
{
role
:
grafana
}
-
{
role
:
archwiki
}
-
{
role
:
conf_archlinux
}
-
{
role
:
fail2ban
}
-
{
role
:
prometheus_exporters
}
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment