docs/ssh-hostkeys.txt

@@ -64,6 +64,15 @@
 256 MD5:46:23:93:5c:db:68:8e:a3:0a:eb:cb:18:13:94:73:dc root@archlinux-packer (ED25519)
 3072 MD5:13:8f:2f:f6:c6:90:10:6b:ee:e8:66:e5:60:ef:d8:f8 root@archlinux-packer (RSA)
 
+# bugbuddy.archlinux.org
+256 SHA256:W48E9liL/BWU71lLYZJhlS8AGZR1pM7H77O0zFkbnnE root@archlinux-packer (ECDSA)
+256 SHA256:uQhXRN2O7Az5leFjhEcaKiHOk6/Rx+h8J2XIzf/VzlQ root@archlinux-packer (ED25519)
+3072 SHA256:S4ASUzOKMIpkVMwtrcIhJZprajE5JE/Aq/P/tAphqOY root@archlinux-packer (RSA)
+
+256 MD5:6d:35:ad:ef:f6:2c:ca:ad:7f:75:bb:36:60:ad:aa:cd root@archlinux-packer (ECDSA)
+256 MD5:02:38:35:e8:5c:62:dc:56:29:be:fb:1c:96:2c:17:4c root@archlinux-packer (ED25519)
+3072 MD5:0a:a1:a1:44:4e:65:8b:10:f3:54:83:eb:17:41:f1:0c root@archlinux-packer (RSA)
+
 # bugs.archlinux.org
 1024 SHA256:c8CCzrXjPnUEi0d0B2yLzMWK935TyjzoCOdcP12BwEM root@archlinux-packer (DSA)
 256 SHA256:z9CfWniDILraPxPn4e8Sao/vaAseI29KyXEhGU3sNRk root@archlinux-packer (ECDSA)

host_vars/bugbuddy.archlinux.org/misc

+filesystem: btrfs
+wireguard_address: 10.0.0.43
+wireguard_public_key: vtu2TM79djeQQA0qqPVuZHxSHz8hdHQ1P15ONF6zSx4=

host_vars/bugbuddy.archlinux.org/vault_wireguard.yml

+$ANSIBLE_VAULT;1.1;AES256
+36623330313366306639313763636132616435633030616363383733386663373966396466396532
+6239386539646333383436653435613731323666346365310a363663353436323562353930336662
+31303162656166333165303966346137363266393763383463633636623330373966376537623433
+3432353931333031610a663365653431356536343861363964323861366130636161633461323165
+65633966386166663064393830333061633466313033356538643466323138346531313838663133
+31356665323935316165633836636436316137356565323930393766623661393334306139343061
+37646266373236643332333736326264333866396137623237383361333362333832326161636461
+31616262616538643233

hosts

@@ -109,6 +109,7 @@ accounts.archlinux.org
 archlinux.org
 aur.archlinux.org
 bbs.archlinux.org
+bugbuddy.archlinux.org
 bugs.archlinux.org
 dashboards.archlinux.org
 debuginfod.archlinux.org

playbooks/bugbuddy.archlinux.org.yml

+- name: Setup bugbuddy.archlinux.org
+  hosts: bugbuddy.archlinux.org
+  remote_user: root
+  roles:
+    - { role: common }
+    - { role: firewalld }
+    - { role: wireguard }
+    - { role: sshd }
+    - { role: root_ssh }
+    - { role: prometheus_exporters }
+    - { role: promtail }
+    - { role: fail2ban }

tf-stage1/archlinux.tf

@@ -64,6 +64,10 @@ locals {
       server_type = "cx21"
       domain      = "bbs"
     }
+    "bugbuddy.archlinux.org" = {
+      server_type = "cx11"
+      domain      = "bugbuddy"
+    }
     "bugs.archlinux.org" = {
       server_type = "cx11"
       domain      = "bugs"