Kevin Morris authored 3 years ago and Evangelos Foutras committed 3 years ago

[foutrelis: add vault variables described in !532]

Signed-off-by: Kevin Morris <kevr@0cost.org>
Signed-off-by: Evangelos Foutras <evangelos@foutrelis.com>

The two secrets: vault_aurweb_{secret,postmaster}

Kevin Morris authored 3 years ago and Kristian Klausen committed 3 years ago

Signed-off-by: Kevin Morris <kevr@0cost.org>

[1] aurweb!233

Set the aurweb_location configuration so aur-dev emails have the correct
links in the registration url. Add new dependencies to the aurweb role
for the aurweb-notify script to be able to run on the pu branch.

The mirrors.kernel.org mirror seems to have network issues for us from
aur.archlinux.org which makes the aurweb-aurblup service fail from time
to time. Switch to our own mirror as we are in control.

Leonidas Spyropoulos authored 4 years ago and Morten Linderud committed 4 years ago

Fixes #68997

Signed-off-by: Leonidas Spyropoulos <artafinde@gmail.com>
Signed-off-by: Morten Linderud <morten@linderud.pw>

The fingerprints for the RSA and ECDSA key were swapped, fixed them.

Added the new ssh host keys fingerprints to the config.

For security reasons, switch to using a socket for memcached on aurweb.

Added a smartgit_socket option to the defaults. Reworked the tasks package
installation to look cleaner and also separated the cgit and git package installations
so we can trigger uwsgi reloads on updates. Changed the tubylaws repo update variable
to trigger the bylaws changes only when the tubylaws repository change, not the aurweb
one. Added tasks to install the apcu configuration, cgit uwsgi ini file, cgit rc file and
smartgit uwsgi ini file. Trigger an uwsgi reload in case the cgit-aurweb or git packages
change. Also added a few missing options to the aurweb configuration file. Rework the nginx
configuration file to use the cgit and smartgit uwsgi services.

Since the AUR has its own maintenance mode, there is no need for using the
maintenance role, so it was removed. Added a check on the aurweb config file
that checks for the maintenance variable and uses the variable for allowing
the ip address of the person running the playbook to access the AUR.

Moved all the systemd files to templates and also made sure every aur user
reference is using the variable. Changed the config to use the variables and
also changed the sshd config to use the ansible variables.

To make things consistent, rename the role to aurweb.

Jelle van der Waa authored 7 years ago and Giancarlo Razzolini committed 4 years ago

The ansible role for the Arch User Repository.

Thanks-to: Eli Schwartz <eschwartz@archlinux.org>