playbooks/repos.sandbox.archlinux.org.yml

host_vars/repos.sandbox.archlinux.org/misc

+filesystem: btrfs
+ipv4_address: 157.90.246.108

hosts

@@ -127,6 +127,7 @@ patchwork.archlinux.org
 phrik.archlinux.org
 quassel.archlinux.org
 redirect.archlinux.org
+repos.sandbox.archlinux.org
 reproducible.archlinux.org
 security.archlinux.org
 state.archlinux.org

playbooks/repos.sandbox.archlinux.org.yml

+- name: Setup repos.sandbox.archlinux.org
+  hosts: repos.sandbox.archlinux.org
+  remote_user: root
+  vars:
+    skip_rsync: true
+  roles:
+    - { role: common }
+    - { role: tools }
+    - { role: firewalld }
+    - { role: sshd }
+    - { role: root_ssh }
+    - { role: sudo, tags: ['archusers'] }
+    - { role: certbot }
+    - { role: nginx }
+    - { role: archusers }
+    - { role: dbscripts, repos_domain: "repos.sandbox.archlinux.org", repos_rsync_domain: "rsync.sandbox.archlinux.org", svntogit_repos: "/srv/svntogit/repos", tags: ['archusers'] }

roles/dbscripts/handlers/main.yml

+- name: Daemon reload
+  systemd:
+    daemon-reload: true

roles/dbscripts/tasks/main.yml

@@ -219,11 +219,13 @@
 - name: Configure gen_rsyncd.conf.pl
   template: src=gen_rsyncd.conf.pl dest=/etc/rsyncd-conf-genscripts/gen_rsyncd.conf.pl owner=root group=root mode=0700
   no_log: true
+  when: skip_rsync is not defined
 
 - name: Generate mirror config
   command: /etc/rsyncd-conf-genscripts/gen_rsyncd.conf.pl
   register: gen_rsyncd
   changed_when: "gen_rsyncd.rc == 0"
+  when: skip_rsync is not defined
 
 - name: Install svnlog
   copy: src=svnlog dest=/usr/local/bin/svnlog owner=root group=root mode=0755

tf-stage1/archlinux.tf

@@ -291,22 +291,23 @@ locals {
   # Example:
   # dev                      = { value = "www", ttl = 3600 }
   archlinux_org_cname = {
-    archive       = { value = "gemini" }
-    dev           = { value = "www" }
-    g2kjxsblac7x  = { value = "gv-i5y6mnrelvpfiu.dv.googlehosted.com." }
-    ipxe          = { value = "www" }
-    mailman       = { value = "redirect" }
-    packages      = { value = "www" }
-    ping          = { value = "redirect" }
-    planet        = { value = "www" }
-    repos         = { value = "gemini" }
-    rsync         = { value = "gemini" }
-    sources       = { value = "gemini" }
-    "static.conf" = { value = "redirect" }
-    status        = { value = "stats.uptimerobot.com." }
-    svn           = { value = "gemini" }
-    coc           = { value = "redirect" }
-    git           = { value = "redirect" }
+    archive         = { value = "gemini" }
+    dev             = { value = "www" }
+    g2kjxsblac7x    = { value = "gv-i5y6mnrelvpfiu.dv.googlehosted.com." }
+    ipxe            = { value = "www" }
+    mailman         = { value = "redirect" }
+    packages        = { value = "www" }
+    ping            = { value = "redirect" }
+    planet          = { value = "www" }
+    repos           = { value = "gemini" }
+    rsync           = { value = "gemini" }
+    "rsync.sandbox" = { value = "repos.sandbox" }
+    sources         = { value = "gemini" }
+    "static.conf"   = { value = "redirect" }
+    status          = { value = "stats.uptimerobot.com." }
+    svn             = { value = "gemini" }
+    coc             = { value = "redirect" }
+    git             = { value = "redirect" }
 
     # MTA-STS
     mta-sts               = { value = "mail" }
@@ -636,7 +637,7 @@ resource "hcloud_volume" "repos-git" {
   delete_protection = true
 }
 
-resource "hcloud_volume" "repos.sandbox" {
+resource "hcloud_volume" "repos_sandbox" {
   name              = "repos.sandbox"
   size              = 500
   server_id         = hcloud_server.machine["repos.sandbox.archlinux.org"].id