Lay some groundwork for soyuz

README.md

@@ -52,3 +52,7 @@ certbot certonly --email webmaster@archlinux.org --agree-tos --rsa-key-size 4096
 - build server (pkgbuild.com)
 - releng
 - torrent tracker
+- sogrep
+- /~user/ webhost
+- irc bot (phrik)
+- quassel core

host_vars/soyuz.archlinux.org

+---
+ipv4_address: "TBD"
+ipv6_address: "TBD/128"
+ipv4_gateway: "TBD"
+ipv6_gateway: "fe80::1"
+filesystem: btrfs
+
+# TODO: fill in IP addresses

hosts

@@ -6,3 +6,6 @@ vostok.archlinux.org
 
 [apollo]
 apollo.archlinux.org
+
+[soyuz]
+soyuz.archlinux.org

playbooks/soyuz-provision.yml

+---
+
+# This script is for provisioning a server for first boot.
+# Care: It is not idempotent by design.
+
+- name: provision soyuz
+  hosts: soyuz
+  remote_user: root
+  vars:
+    - hostname: soyuz
+  roles:
+    - install_arch

playbooks/soyuz.yml

+---
+
+- name: setup soyuz
+  hosts: soyuz
+  remote_user: root
+  roles:
+    - { role: common, tags: ['common'] }
+    - { role: tools, tags: ['tools'] }
+    - { role: sshd, tags: ['sshd'] }
+    - { role: root_ssh, tags: ['root_ssh'] }
+    - { role: borg-client, backup_host: "borg@vostok.archlinux.org", backup_dir: "/backup/soyuz", postgres_backup_dir: None, tags: ['borg'] }
+    - { role: archusers, tags: ['archusers'] }
+    - { role: nginx, letsencrypt_validation_dir: "/var/lib/letsencrypt", tags: ["nginx"] }
+    - { role: sudo, tags: ['sudo', 'archusers'] }
+    - { role: postgres, tags: ['postgres'] }

playbooks/vostok.yml

@@ -8,4 +8,4 @@
     - tools
     - sshd
     - root_ssh
-    - { role: borg-server, backup_dir: "/backup", backup_clients: ["orion", "apollo"] }
+    - { role: borg-server, backup_dir: "/backup", backup_clients: ["orion", "apollo", "soyuz"] }