Skip to content
GitLab
Projects
Groups
Snippets
/
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Sign in
Toggle navigation
Menu
Open sidebar
Arch Linux
infrastructure
Commits
fb75cf7c
Verified
Commit
fb75cf7c
authored
Jun 17, 2020
by
Sven-Hendrik Haase
Browse files
Remove a lot of unnecessary tags that are already added by auto_tags.py
parent
ef4103da
Pipeline
#241
passed with stage
in 1 minute and 16 seconds
Changes
11
Pipelines
1
Hide whitespace changes
Inline
Side-by-side
playbooks/all-hosts-basic.yml
View file @
fb75cf7c
...
...
@@ -4,13 +4,13 @@
hosts
:
all
remote_user
:
root
roles
:
-
{
role
:
common
,
tags
:
[
'
common'
]
}
-
{
role
:
tools
,
tags
:
[
'
tools'
]
}
-
{
role
:
firewalld
,
tags
:
[
'
firewall'
]
}
-
{
role
:
common
}
-
{
role
:
tools
}
-
{
role
:
firewalld
}
-
{
role
:
unbound
}
# reconfiguring sshd may break the AUR on luna (unchecked)
#- { role: sshd, tags: ['sshd'] }
-
{
role
:
root_ssh
,
tags
:
[
'
root_ssh'
]
}
-
{
role
:
root_ssh
}
-
{
role
:
borg-client
,
tags
:
[
"
borg"
],
when
:
"
'borg_clients'
in
group_names"
}
-
{
role
:
zabbix-agent
,
tags
:
[
"
zabbix"
,
"
zabbix-agent"
],
when
:
"
'unmanaged'
not
in
group_names"
}
-
{
role
:
zabbix-agent
,
tags
:
[
"
zabbix"
],
when
:
"
'unmanaged'
not
in
group_names"
}
-
{
role
:
hardening
}
playbooks/apollo.yml
View file @
fb75cf7c
...
...
@@ -20,41 +20,39 @@
hosts
:
apollo.archlinux.org
remote_user
:
root
roles
:
-
{
role
:
common
,
tags
:
[
'
common'
]
}
-
{
role
:
tools
,
tags
:
[
'
tools'
]
}
-
{
role
:
sshd
,
tags
:
[
'
sshd'
]
}
-
{
role
:
root_ssh
,
tags
:
[
'
root_ssh'
]
}
-
{
role
:
common
}
-
{
role
:
tools
}
-
{
role
:
sshd
}
-
{
role
:
root_ssh
}
-
{
role
:
borg-client
,
tags
:
[
"
borg"
]
}
-
{
role
:
certbot
}
-
{
role
:
nginx
,
tags
:
[
"
nginx"
]
}
-
{
role
:
spampd
,
tags
:
[
"
mail"
,
"
spampd"
]
}
-
{
role
:
unbound
,
tags
:
[
"
mail"
,
"
unbound"
]
}
-
{
role
:
postfix
,
postfix_relayhost
:
"
orion.archlinux.org"
,
postfix_smtpd_public
:
true
,
postfix_patchwork_enabled
:
true
,
tags
:
[
"
mail"
,
"
postfix"
]
}
-
{
role
:
opendkim
,
dkim_selector
:
apollo
,
tags
:
[
'
mail'
,
"
opendkim"
]
}
-
{
role
:
postfwd
,
tags
:
[
'
mail'
,
"
postfwd"
]
}
-
{
role
:
nginx
}
-
{
role
:
spampd
,
tags
:
[
"
mail"
]
}
-
{
role
:
unbound
,
tags
:
[
"
mail"
]
}
-
{
role
:
postfix
,
postfix_relayhost
:
"
orion.archlinux.org"
,
postfix_smtpd_public
:
true
,
postfix_patchwork_enabled
:
true
,
tags
:
[
"
mail"
]
}
-
{
role
:
opendkim
,
dkim_selector
:
apollo
,
tags
:
[
'
mail'
]
}
-
{
role
:
postfwd
,
tags
:
[
'
mail'
]
}
-
role
:
postgres
postgres_listen_addresses
:
"
*"
postgres_max_connections
:
1000
postgres_ssl
:
'
on'
postgres_shared_buffers
:
4096MB
tags
:
[
'
postgres'
]
-
{
role
:
mariadb
,
mariadb_innodb_buffer_pool_size
:
'
64M'
,
mariadb_table_open_cache
:
'
256'
,
mariadb_query_cache_type
:
'
0'
,
mariadb_innodb_file_per_table
:
True
,
tags
:
[
"
mariadb"
]
}
-
{
role
:
sudo
,
tags
:
[
'
sudo'
]
}
-
{
role
:
uwsgi
,
tags
:
[
'
uwsgi'
]
}
-
{
role
:
php-fpm
,
php_extensions
:
[
'
bcmath'
,
'
curl'
,
'
gd'
,
'
iconv'
,
'
intl'
,
'
mysqli'
,
'
pdo_pgsql'
,
'
pgsql'
,
'
sockets'
,
'
zip'
],
zend_extensions
:
[
'
opcache'
]
,
tags
:
[
"
php-fpm"
]
}
-
{
role
:
memcached
,
tags
:
[
'
memcached'
]
}
-
{
role
:
archweb
,
archweb_planet
:
true
,
tags
:
[
"
archweb"
]
}
mariadb_innodb_file_per_table
:
True
}
-
{
role
:
sudo
}
-
{
role
:
uwsgi
}
-
{
role
:
php-fpm
,
php_extensions
:
[
'
bcmath'
,
'
curl'
,
'
gd'
,
'
iconv'
,
'
intl'
,
'
mysqli'
,
'
pdo_pgsql'
,
'
pgsql'
,
'
sockets'
,
'
zip'
],
zend_extensions
:
[
'
opcache'
]
}
-
{
role
:
memcached
}
-
{
role
:
archweb
,
archweb_planet
:
true
}
-
role
:
security_tracker
security_tracker_domain
:
"
security.archlinux.org"
security_tracker_nginx_conf
:
'
/etc/nginx/nginx.d/security-tracker.conf'
security_tracker_dir
:
"
/srv/http/security-tracker"
tags
:
[
"
security_tracker"
]
-
{
role
:
mailman
,
mailman_domain
:
"
lists.archlinux.org"
,
tags
:
[
"
mailman"
]
}
-
{
role
:
patchwork
,
tags
:
[
"
patchwork"
]
}
-
{
role
:
kanboard
,
tags
:
[
"
kanboard"
]
}
-
{
role
:
zabbix-server
,
tags
:
[
"
zabbix"
,
"
zabbix-server"
]
}
-
{
role
:
grafana
,
tags
:
[
"
grafana"
]
}
-
{
role
:
archwiki
,
tags
:
[
"
archwiki"
]
}
-
{
role
:
mailman
,
mailman_domain
:
"
lists.archlinux.org"
}
-
{
role
:
patchwork
}
-
{
role
:
kanboard
}
-
{
role
:
zabbix-server
,
tags
:
[
"
zabbix"
]
}
-
{
role
:
grafana
}
-
{
role
:
archwiki
}
-
{
role
:
conf.archlinux.org
}
-
{
role
:
fail2ban
,
tags
:
[
"
fail2ban"
]
}
-
{
role
:
fail2ban
}
playbooks/aur-dev.archlinux.org.yml
View file @
fb75cf7c
...
...
@@ -13,7 +13,7 @@
-
{
role
:
mariadb
,
mariadb_innodb_buffer_pool_size
:
'
64M'
,
mariadb_table_open_cache
:
'
256'
,
mariadb_query_cache_type
:
'
0'
,
mariadb_innodb_file_per_table
:
True
}
-
{
role
:
sudo
}
-
{
role
:
php-fpm
,
php_extensions
:
[
'
apcu'
,
'
iconv'
,
'
intl'
,
'
mysqli'
],
zend_extensions
:
[
'
opcache'
]
,
tags
:
[
"
php-fpm"
]
}
-
{
role
:
php-fpm
,
php_extensions
:
[
'
apcu'
,
'
iconv'
,
'
intl'
,
'
mysqli'
],
zend_extensions
:
[
'
opcache'
]
}
-
{
role
:
borg-client
,
tags
:
[
"
borg"
]
}
-
{
role
:
postfix
,
tags
:
[
"
postfix"
],
postfix_relayhost
:
"
orion.archlinux.org"
}
-
{
role
:
fail2ban
,
tags
:
[
"
fail2ban"
]
}
-
{
role
:
postfix
,
postfix_relayhost
:
"
orion.archlinux.org"
}
-
{
role
:
fail2ban
}
playbooks/bbs.archlinux.org.yml
View file @
fb75cf7c
...
...
@@ -13,8 +13,8 @@
-
{
role
:
mariadb
,
mariadb_innodb_buffer_pool_size
:
'
64M'
,
mariadb_table_open_cache
:
'
256'
,
mariadb_query_cache_type
:
'
0'
,
mariadb_innodb_file_per_table
:
True
}
-
{
role
:
sudo
}
-
{
role
:
php-fpm
,
php_extensions
:
[
'
apcu'
,
'
iconv'
,
'
intl'
,
'
mysqli'
],
zend_extensions
:
[
'
opcache'
]
,
tags
:
[
"
php-fpm"
]
}
-
{
role
:
fluxbb
,
tags
:
[
"
fluxbb"
]
}
-
{
role
:
php-fpm
,
php_extensions
:
[
'
apcu'
,
'
iconv'
,
'
intl'
,
'
mysqli'
],
zend_extensions
:
[
'
opcache'
]
}
-
{
role
:
fluxbb
}
-
{
role
:
borg-client
,
tags
:
[
"
borg"
]
}
-
{
role
:
postfix
,
tags
:
[
"
postfix"
],
postfix_relayhost
:
"
orion.archlinux.org"
}
-
{
role
:
fail2ban
,
tags
:
[
"
fail2ban"
]
}
-
{
role
:
postfix
,
postfix_relayhost
:
"
orion.archlinux.org"
}
-
{
role
:
fail2ban
}
playbooks/bugs.archlinux.org.yml
View file @
fb75cf7c
...
...
@@ -13,8 +13,8 @@
-
{
role
:
mariadb
,
mariadb_innodb_buffer_pool_size
:
'
64M'
,
mariadb_table_open_cache
:
'
256'
,
mariadb_query_cache_type
:
'
0'
,
mariadb_innodb_file_per_table
:
True
}
-
{
role
:
sudo
}
-
{
role
:
php-fpm
,
php_extensions
:
[
'
apcu'
,
'
iconv'
,
'
intl'
,
'
mysqli'
],
zend_extensions
:
[
'
opcache'
]
,
tags
:
[
"
php-fpm"
]
}
-
{
role
:
flyspray
,
tags
:
[
"
flyspray"
]
}
-
{
role
:
php-fpm
,
php_extensions
:
[
'
apcu'
,
'
iconv'
,
'
intl'
,
'
mysqli'
],
zend_extensions
:
[
'
opcache'
]
}
-
{
role
:
flyspray
}
-
{
role
:
borg-client
,
tags
:
[
"
borg"
]
}
-
{
role
:
postfix
,
tags
:
[
"
postfix"
],
postfix_relayhost
:
"
orion.archlinux.org"
}
-
{
role
:
fail2ban
,
tags
:
[
"
fail2ban"
]
}
-
{
role
:
postfix
,
postfix_relayhost
:
"
orion.archlinux.org"
}
-
{
role
:
fail2ban
}
playbooks/dragon.yml
View file @
fb75cf7c
...
...
@@ -4,15 +4,15 @@
hosts
:
dragon.archlinux.org
remote_user
:
root
roles
:
-
{
role
:
common
,
tags
:
[
'
common'
]
}
-
{
role
:
tools
,
tags
:
[
'
tools'
]
}
-
{
role
:
sshd
,
tags
:
[
'
sshd'
]
}
-
{
role
:
common
}
-
{
role
:
tools
}
-
{
role
:
sshd
}
-
{
role
:
unbound
}
-
{
role
:
root_ssh
,
tags
:
[
'
root_ssh'
]
}
-
{
role
:
archusers
,
tags
:
[
'
archusers'
]
}
-
{
role
:
sudo
,
tags
:
[
'
sudo'
,
'
archusers'
]
}
-
{
role
:
syncrepo
,
tags
:
[
'
syncrepo'
]
}
-
{
role
:
sogrep
,
tags
:
[
'
sogrep'
]
}
-
{
role
:
archbuild
,
tags
:
[
'
archbuild'
]
}
-
{
role
:
arch-boxes
,
tags
:
[
'
arch-boxes'
]
}
-
{
role
:
root_ssh
}
-
{
role
:
archusers
}
-
{
role
:
sudo
,
tags
:
[
'
archusers'
]
}
-
{
role
:
syncrepo
}
-
{
role
:
sogrep
}
-
{
role
:
archbuild
}
-
{
role
:
arch-boxes
}
-
{
role
:
docker-image
}
playbooks/gitlab-runners.yml
View file @
fb75cf7c
...
...
@@ -4,7 +4,7 @@
remote_user
:
root
roles
:
-
{
role
:
common
}
-
{
role
:
firewalld
,
tags
:
[
'
firewall'
]
}
-
{
role
:
firewalld
}
-
{
role
:
sshd
}
-
{
role
:
root_ssh
}
-
{
role
:
gitlab-runner
}
playbooks/homedir.archlinux.org.yml
View file @
fb75cf7c
...
...
@@ -11,6 +11,6 @@
-
{
role
:
certbot
}
-
{
role
:
nginx
}
-
{
role
:
archusers
}
-
{
role
:
public_html
,
public_domain
:
"
pkgbuild.com"
,
tags
:
[
'
public_html'
,
'
nginx'
]
}
-
{
role
:
public_html
,
public_domain
:
"
pkgbuild.com"
,
tags
:
[
'
nginx'
]
}
-
{
role
:
borg-client
,
tags
:
[
"
borg"
]
}
-
{
role
:
zabbix-agent
,
tags
:
[
"
zabbix"
]
}
playbooks/matrix.archlinux.org.yml
View file @
fb75cf7c
...
...
@@ -20,6 +20,6 @@
postgres_effective_cache_size
:
3GB
-
role
:
postfix
postfix_relayhost
:
"
orion.archlinux.org"
-
{
role
:
matrix
,
tags
:
[
'
matrix'
]
}
-
{
role
:
matrix
}
-
{
role
:
zabbix-agent
,
tags
:
[
"
zabbix"
]
}
-
{
role
:
fail2ban
,
tags
:
[
"
fail2ban"
]
}
-
{
role
:
fail2ban
}
playbooks/orion.yml
View file @
fb75cf7c
...
...
@@ -7,27 +7,27 @@
archweb_db_host
:
'
apollo.archlinux.org'
dbscripts_commit
:
'
20191022'
roles
:
-
{
role
:
common
,
tags
:
[
'
common'
]
}
-
{
role
:
tools
,
tags
:
[
'
tools'
]
}
-
{
role
:
sshd
,
tags
:
[
'
sshd'
]
}
-
{
role
:
root_ssh
,
tags
:
[
'
root_ssh'
]
}
-
{
role
:
common
}
-
{
role
:
tools
}
-
{
role
:
sshd
}
-
{
role
:
root_ssh
}
-
{
role
:
borg-client
,
tags
:
[
'
borg'
]
}
-
{
role
:
opendkim
,
dkim_selector
:
orion
,
tags
:
[
'
mail'
]
}
-
{
role
:
dovecot
,
tags
:
[
'
mail'
,
"
dovecot"
]
}
-
{
role
:
spampd
,
tags
:
[
"
mail"
,
"
spampd"
]
}
-
{
role
:
postgrey
,
tags
:
[
"
mail"
,
"
postgrey"
]
}
-
{
role
:
unbound
,
tags
:
[
"
mail"
,
"
unbound"
]
}
-
{
role
:
postfwd
,
tags
:
[
'
mail'
,
"
postfwd"
]
}
-
{
role
:
dovecot
}
-
{
role
:
spampd
,
tags
:
[
"
mail"
]
}
-
{
role
:
postgrey
,
tags
:
[
"
mail"
]
}
-
{
role
:
unbound
,
tags
:
[
"
mail"
]
}
-
{
role
:
postfwd
,
tags
:
[
'
mail'
]
}
-
{
role
:
postfix
,
postfix_server
:
true
,
postfix_smtpd_public
:
true
,
tags
:
[
'
mail'
]
}
-
{
role
:
archusers
,
tags
:
[
'
archusers'
]
}
-
{
role
:
archusers
}
-
{
role
:
certbot
}
-
{
role
:
nginx
,
tags
:
[
"
nginx"
]
}
-
{
role
:
dbscripts
,
repos_domain
:
"
repos.archlinux.org"
,
repos_rsync_domain
:
"
rsync.archlinux.org"
,
svntogit_repos
:
"
/srv/svntogit/repos"
,
postgres_ssl
:
'
on'
,
tags
:
[
'
dbscripts'
,
'
archusers'
]
}
-
{
role
:
nginx
}
-
{
role
:
dbscripts
,
repos_domain
:
"
repos.archlinux.org"
,
repos_rsync_domain
:
"
rsync.archlinux.org"
,
svntogit_repos
:
"
/srv/svntogit/repos"
,
postgres_ssl
:
'
on'
,
tags
:
[
'
archusers'
]
}
-
sogrep
-
{
role
:
sudo
,
tags
:
[
'
sudo'
,
'
archusers'
]
}
-
{
role
:
archweb
,
archweb_site
:
false
,
archweb_services
:
true
,
archweb_donor_import
:
true
,
archweb_mirrorcheck_locations
:
[
5
,
6
]
,
tags
:
[
'
archweb'
]
}
-
{
role
:
sources
,
sources_domain
:
"
sources.archlinux.org"
,
sources_dir
:
"
/srv/sources"
,
tags
:
[
'
sources'
]
}
-
{
role
:
archive
,
archive_domain
:
"
archive.archlinux.org"
,
archive_dir
:
"
/srv/archive"
,
tags
:
[
'
archive'
]
}
-
{
role
:
sudo
,
tags
:
[
'
archusers'
]
}
-
{
role
:
archweb
,
archweb_site
:
false
,
archweb_services
:
true
,
archweb_donor_import
:
true
,
archweb_mirrorcheck_locations
:
[
5
,
6
]
}
-
{
role
:
sources
,
sources_domain
:
"
sources.archlinux.org"
,
sources_dir
:
"
/srv/sources"
}
-
{
role
:
archive
,
archive_domain
:
"
archive.archlinux.org"
,
archive_dir
:
"
/srv/archive"
}
-
{
role
:
hefur
,
ftp_iso_dir
:
'
/srv/ftp/iso'
,
tags
:
[
'
torrenttracker'
]}
-
wkd
-
{
role
:
fail2ban
,
tags
:
[
"
fail2ban"
]
}
-
{
role
:
fail2ban
}
playbooks/vostok.yml
View file @
fb75cf7c
...
...
@@ -4,9 +4,9 @@
hosts
:
vostok.archlinux.org
remote_user
:
root
roles
:
-
{
role
:
common
,
tags
:
[
'
common'
]
}
-
{
role
:
tools
,
tags
:
[
'
tools'
]
}
-
{
role
:
sshd
,
tags
:
[
'
sshd'
]
}
-
{
role
:
common
}
-
{
role
:
tools
}
-
{
role
:
sshd
}
-
{
role
:
unbound
}
-
{
role
:
root_ssh
,
tags
:
[
'
root_ssh'
]
}
-
{
role
:
root_ssh
}
-
{
role
:
borg-server
,
backup_dir
:
"
/backup"
,
backup_clients
:
"
{{
groups['borg_clients']
}}"
,
tags
:
[
"
borg"
]
}
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment
