Host debuginfod.archlinux.org on the geo mirrors

This should provide better download speeds outside of Europe and have
plenty of CPU cores for enabling gzip compression of debuginfo files.

group_vars/all/geo.yml

 geo_acme_dns_challenge_ns: redirect.archlinux.org
 geo_domains:
   - geo.mirror.pkgbuild.com
+  - debuginfod.archlinux.org
 geo_health_check_paths:
   geo.mirror.pkgbuild.com: /lastupdate
+  debuginfod.archlinux.org: /packages

playbooks/mirrors.yml

@@ -16,3 +16,4 @@
     - { role: fail2ban }
     - { role: wireguard }
     - { role: geo_dns, when: "'geo_mirrors' in group_names" }
+    - { role: debuginfod, when: "'geo_mirrors' in group_names" }

roles/dbscripts/templates/rsyncd.conf.proto.j2

@@ -97,7 +97,7 @@ hosts deny = *
 	comment =  debug packages
 	exclude = *
 	include = /*-debug/*** /pool /pool/*-debug/***
-	hosts allow = {{ groups['mirrors'] | map('extract', hostvars, ['ipv4_address']) | join(' ') }} {{ groups['mirrors'] | map('extract', hostvars, ['ipv6_address']) | join(' ') }} {{ hostvars['debuginfod.archlinux.org']['ipv4_address'] }} {{ hostvars['debuginfod.archlinux.org']['ipv6_address'] }}
+	hosts allow = {{ groups['mirrors'] | map('extract', hostvars, ['ipv4_address']) | join(' ') }} {{ groups['mirrors'] | map('extract', hostvars, ['ipv6_address']) | join(' ') }}
 	max connections = 0
 
 # Individual repositories

roles/debuginfod/tasks/main.yml

@@ -7,6 +7,7 @@
     name: certificate
   vars:
     domains: ["{{ debuginfod_domain }}"]
+    challenge: "{{ 'DNS-01' if 'geo_mirrors' in group_names else 'HTTP-01' }}"
   when: debuginfod_domain
 
 - name: configure debuginfod systemd service

roles/prometheus/defaults/main.yml

@@ -17,6 +17,9 @@ blackbox_targets:
     - targets: "{{ groups['geo_mirrors'] }}"
       hostname: geo.mirror.pkgbuild.com
       secure: true
+    - targets: "{{ groups['geo_mirrors'] }}"
+      hostname: debuginfod.archlinux.org
+      secure: true
     - http://{{ hostvars['monitoring.archlinux.org']['wireguard_address'] }}
     - https://accounts.archlinux.org
     - https://america.archive.pkgbuild.com
@@ -30,7 +33,6 @@ blackbox_targets:
     - https://bugs.archlinux.org
     - https://conf.archlinux.org
     - https://dashboards.archlinux.org/healthz
-    - https://debuginfod.archlinux.org
     - https://dev.archlinux.org
     - https://europe.archive.pkgbuild.com
     - https://europe.mirror.pkgbuild.com
@@ -77,6 +79,8 @@ blackbox_targets:
     - lists.archlinux.org:25
   geo_dns_geo.mirror.pkgbuild.com_a: "{{ groups['geo_mirrors'] }}"
   geo_dns_geo.mirror.pkgbuild.com_aaaa: "{{ groups['geo_mirrors'] }}"
+  geo_dns_debuginfod.archlinux.org_a: "{{ groups['geo_mirrors'] }}"
+  geo_dns_debuginfod.archlinux.org_aaaa: "{{ groups['geo_mirrors'] }}"
 matrix_metrics_endpoints:
   - homeserver
   - appservice

roles/prometheus/templates/prometheus.yml.j2

@@ -68,9 +68,11 @@ scrape_configs:
 
   - job_name: 'debuginfod'
     static_configs:
-      - targets: ['{{ hostvars['debuginfod.archlinux.org']['wireguard_address'] }}:8002']
+      {% for host in groups['geo_mirrors'] %}
+      - targets: ['{{ hostvars[host]['wireguard_address'] }}:8002']
         labels:
-          instance: "debuginfod.archlinux.org"
+          instance: "{{ host }}"
+      {% endfor %}
 
   - job_name: 'powerdns'
     static_configs:

tf-stage1/archlinux.tf

@@ -146,7 +146,7 @@ locals {
     },
     "debuginfod.archlinux.org" = {
       server_type = "cx11"
-      domain      = "debuginfod"
+      domain      = "debuginfod-old"
     }
     "buildbot.pkgbuild.com" = {
       server_type = "cx21"
@@ -371,6 +371,10 @@ locals {
       zone_id = hetznerdns_zone.pkgbuild.id
       name    = "geo.mirror"
     }
+    "debuginfod.archlinux.org" = {
+      zone_id = hetznerdns_zone.archlinux.id
+      name    = "debuginfod"
+    }
   }
 }