Draft: schleuder: create role

This MR relates to #178

added 1 commit

• e55b342b - schleuder: create role

Compare with previous version

resolved all threads

TODO:

• update settings in /etc/schleuder/schleuder.yml
  • add variable for api.valid_api_keys
  • configure SMTP
• update settings in /etc/schleuder/list-defaults.yml
• create api key for schleuder-cli and add it to /etc/schleuder/schleuder.yml
• add the variable api_keys as list of api keys to a vault file

We decided in #archlinux-security not to include the schleuder new_api_keycommend for the schleuder-cli api key in the role, but rather generate it ourselves. turns out it is just a 32 randm char string.

changed the description

added 2 commits

• 558fb815 - schleuder: create role
• c03e15d8 - schleuder: write main config file

Compare with previous version

added 1 commit

• 95d9c225 - schleuder: write main config file

Compare with previous version

added 2 commits

• 8de19a0a - schleuder: create role
• 05a9e1b0 - schleuder: write main config file

Compare with previous version

added 2 commits

• b11d0346 - schleuder: create role
• 7771e148 - schleuder: write main config file

Compare with previous version

added 2 commits

• ac458ba8 - schleuder: write main config file
• 3a178b0b - schleuder: write list-defaults config file

Compare with previous version

added 1 commit

• 901d01db - schleuder: write list-defaults config file

Compare with previous version

I'm not sure putting everything here is worth the trouble. Normally we would keep most of it in the file and only use variables when needed. Hmm, I'm unsure about this.

Since I didn't know which values we wanted and which not I decided to put all values from the default-lists.yml in the file and most of the values from the schleuder.yml (excep paths).

I'm fine with moving some of them back into the file, if I know what we need to configure.

We also want schleuder-web, no?

Hm not sure. I haven't packaged or even looked at schleuder-web. The schleuder documentation says you need either schleuder-cli or schleuder-web to administrate the lists. If wanted I can look into schleuder-web, but I'm not sure if we should "block" this MR by that. I can also easily add it later.

The security team won't get access to the cli, so having schleuder-web would make sense I guess.

added 3 commits

• a9791f56 - schleuder: create role
• 49312ef5 - schleuder: write main config file
• ab887c22 - schleuder: write list-defaults config file

Compare with previous version

added 15 commits

• ab887c22...200df4f8 - 12 commits from branch archlinux:master
• 76a9f437 - schleuder: create role
• b5628836 - schleuder: write main config file
• 164162c6 - schleuder: write list-defaults config file

Compare with previous version

This has stalled, so closing this for now. We can reopen it later if needed.

closed