Add a variable that takes the SSH_CLIENT environment variable to save the
ip address of the machine actually running the playbooks. This can be used
on maintenance mode to allow in the person running the playbook and let
everybody else to see the maintenance page.

playboooks/aur-dev: Remove the intl php extension

Added maintenance mode to the aurweb role using the AUR internal mode. Also,
add the php-apcu-bc package to the list of required packages. Also running the
make required to create the translations.

We have reworked the entire tasks file to do an actual AUR installation.

Added the TU bylayws repository path and the wanted version for the TU bylaws repository.

Added a vault that contains the database password for the AUR.

Changed the playbook to add the missing php modules and add the AUR role. Also set the
domain and the git branch variables so the right version of the AUR is installed.

Moved all the systemd files to templates and also made sure every aur user
reference is using the variable. Changed the config to use the variables and
also changed the sshd config to use the ansible variables.

Made some changes to the defaults file to make the installation work.
Moved the db password to the vault, added the cache and limits variables
and also changed the username back to aur.

Renamed to aurweb

To make things consistent, rename the role to aurweb.

Jelle van der Waa authored 7 years ago and Giancarlo Razzolini committed 4 years ago

The ansible role for the Arch User Repository.

Thanks-to: Eli Schwartz <eschwartz@archlinux.org>

Now uses Github links for source/history of PKGBUILDs.

Also set zram_count to 1 because creating 48 devices on dragon is not
usable for swap. We don't need multiple devices anyway; SMP is handled
through multiple compression streams.

This never worked well as irccat seems to be buggy with joining the
devops channel. Additionally we are moving away from Zabbix for
monitoring.

Apply more security hardening, add pgp key fetching and verification for
the git repository.

Morten Linderud authored 4 years ago and Jelle van der Waa committed 4 years ago

Signed-off-by: Morten Linderud <morten@linderud.pw>

Morten Linderud authored 4 years ago and Jelle van der Waa committed 4 years ago

Signed-off-by: Morten Linderud <morten@linderud.pw>

Morten Linderud authored 4 years ago and Jelle van der Waa committed 4 years ago

Signed-off-by: Morten Linderud <morten@linderud.pw>

Morten Linderud authored 4 years ago and Jelle van der Waa committed 4 years ago

Signed-off-by: Morten Linderud <morten@linderud.pw>

https://lists.archlinux.org/pipermail/aur-general/2020-July/035822.html

Apparently the host without prio is the traffic shaped one which has been very slow for us.