Add sponsored Misaka[1] VMs for our geo mirror

Misaka responded[2] to our "Request for Sponsored VMs to Maintain Arch
Linux Geomirrors"[3] and offered a few sponsored VMs for our geo mirror.

[1] https://www.misaka.io/
[2] https://lists.archlinux.org/archives/list/arch-mirrors@lists.archlinux.org/message/TXHHMCR3BQ2I5NQE36N22WSIA56OMTB7/
[3] https://lists.archlinux.org/archives/list/arch-mirrors@lists.archlinux.org/message/V7JBNYFSO2HG4OSIXXR4PMGK7EFT7J2K/

docs/geomirrors.md

@@ -4,13 +4,18 @@ DevOps team maintain a geo mirror across the world. The Geo mirror is public fac
 
 ## Locations
 
-| Mirror                               | Location                |
-| ------------------------------------ | ----------------------- |
-| https://america.mirror.pkgbuild.com/ | Miami (United States)   |
-| https://asia.mirror.pkgbuild.com/    | Hong Kong               |
-| https://europe.mirror.pkgbuild.com/  | Prague (Czechia)        |
-| https://london.mirror.pkgbuild.com/  | London (United Kingdom) |
-| https://sydney.mirror.pkgbuild.com/  | Sydney (Australia)      |
+| Mirror                                    | Location                    |
+| ----------------------------------------- | --------------------------- |
+| https://america.mirror.pkgbuild.com/      | Miami (United States)       |
+| https://asia.mirror.pkgbuild.com/         | Hong Kong                   |
+| https://berlin.mirror.pkgbuild.com/       | Berlin (Germany)            |
+| https://europe.mirror.pkgbuild.com/       | Prague (Czechia)            |
+| https://johannesburg.mirror.pkgbuild.com/ | Johannesburg (South Africa) |
+| https://london.mirror.pkgbuild.com/       | London (United Kingdom)     |
+| https://losangeles.mirror.pkgbuild.com/   | Los Angeles (United States) |
+| https://singapore.mirror.pkgbuild.com/    | Singapore                   |
+| https://sydney.mirror.pkgbuild.com/       | Sydney (Australia)          |
+| https://taipei.mirror.pkgbuild.com/       | Taipei (Taiwan)             |
 
 ### Logical split
 The continent mirrors america, asia and europe contain the archive mirrors as well as repository mirrors. The city mirrors have just the repositories hosted.

host_vars/berlin.mirror.pkgbuild.com/misc.yml

+mirror_domain: berlin.mirror.pkgbuild.com
+ipv4_address: 45.142.247.77
+ipv4_netmask: /32
+ipv4_gateway: 100.100.0.0
+ipv6_address: 2a12:8d02:2100:10d:26a3:f0ff:fe47:bfaf
+ipv6_netmask: /64
+ipv6_gateway: fe80::1
+ipv6_ignore_ra: true
+filesystem: btrfs
+network_interface: enp3s0
+system_disks:
+  - /dev/vda
+
+wireguard_address: 10.0.0.48
+wireguard_public_key: ziVw29XM42aAD7Ur3n63Ic5vAyYO0xoxqfKKW/iBmAA=

host_vars/johannesburg.mirror.pkgbuild.com/misc.yml

+mirror_domain: johannesburg.mirror.pkgbuild.com
+ipv4_address: 102.130.49.241
+ipv4_netmask: /32
+ipv4_gateway: 100.100.0.0
+ipv6_address: 2a0b:4342:1a91:3b5:26a3:f0ff:fe49:9bf9
+ipv6_netmask: /64
+ipv6_gateway: fe80::1
+ipv6_ignore_ra: true
+filesystem: btrfs
+network_interface: enp3s0
+system_disks:
+  - /dev/vda
+
+wireguard_address: 10.0.0.49
+wireguard_public_key: iteueE5NMEMCiqItSIDWmvi5OxSBzjnNaHA8APZ9eCE=

host_vars/losangeles.mirror.pkgbuild.com/misc.yml

+mirror_domain: losangeles.mirror.pkgbuild.com
+ipv4_address: 209.209.59.11
+ipv4_netmask: /32
+ipv4_gateway: 100.100.0.0
+ipv6_address: 2a0e:6901:110:95:26a3:f0ff:fe48:999e
+ipv6_netmask: /64
+ipv6_gateway: fe80::1
+ipv6_ignore_ra: true
+filesystem: btrfs
+network_interface: enp3s0
+system_disks:
+  - /dev/vda
+
+wireguard_address: 10.0.0.50
+wireguard_public_key: E4L+960hnziPxdmp5yPLEN/J53tUqy23wg1g+N1+xx0=

host_vars/singapore.mirror.pkgbuild.com/misc.yml

+mirror_domain: singapore.mirror.pkgbuild.com
+ipv4_address: 194.156.163.63
+ipv4_netmask: /32
+ipv4_gateway: 100.100.0.0
+ipv6_address: 2407:b9c0:e002:166:26a3:f0ff:fe46:6e9c
+ipv6_netmask: /64
+ipv6_gateway: fe80::1
+ipv6_ignore_ra: true
+filesystem: btrfs
+network_interface: enp3s0
+system_disks:
+  - /dev/vda
+
+wireguard_address: 10.0.0.51
+wireguard_public_key: Kzma6D82LjLZhwj4/7pLS9w660PIHnLob7jqjvBO5y8=

host_vars/taipei.mirror.pkgbuild.com/misc.yml

+mirror_domain: taipei.mirror.pkgbuild.com
+ipv4_address: 45.150.242.222
+ipv4_netmask: /32
+ipv4_gateway: 100.100.0.0
+ipv6_address: 2407:b9c0:b001:c4:26a3:f0ff:fe46:b1dc
+ipv6_netmask: /64
+ipv6_gateway: fe80::1
+ipv6_ignore_ra: true
+filesystem: btrfs
+network_interface: enp3s0
+system_disks:
+  - /dev/vda
+
+wireguard_address: 10.0.0.52
+wireguard_public_key: 9R3ZurGRt5/DT+ElMXrV89XMEdmJnfKv67shDKY4cXc=

hosts

@@ -10,20 +10,44 @@ repro3.pkgbuild.com
 runner3.archlinux.org
 sydney.mirror.pkgbuild.com
 
+[misaka]
+berlin.mirror.pkgbuild.com
+johannesburg.mirror.pkgbuild.com
+losangeles.mirror.pkgbuild.com
+singapore.mirror.pkgbuild.com
+taipei.mirror.pkgbuild.com
+
 [mirrors]
 america.mirror.pkgbuild.com
 asia.mirror.pkgbuild.com
+berlin.mirror.pkgbuild.com
 europe.mirror.pkgbuild.com
+johannesburg.mirror.pkgbuild.com
 london.mirror.pkgbuild.com
+losangeles.mirror.pkgbuild.com
 mirror.pkgbuild.com
+singapore.mirror.pkgbuild.com
+sydney.mirror.pkgbuild.com
+taipei.mirror.pkgbuild.com
+
+[geo_mirror_name_servers]
+america.mirror.pkgbuild.com
+asia.mirror.pkgbuild.com
+europe.mirror.pkgbuild.com
+london.mirror.pkgbuild.com
 sydney.mirror.pkgbuild.com
 
 [geo_mirrors]
 america.mirror.pkgbuild.com
 asia.mirror.pkgbuild.com
+berlin.mirror.pkgbuild.com
 europe.mirror.pkgbuild.com
+johannesburg.mirror.pkgbuild.com
 london.mirror.pkgbuild.com
+losangeles.mirror.pkgbuild.com
+singapore.mirror.pkgbuild.com
 sydney.mirror.pkgbuild.com
+taipei.mirror.pkgbuild.com
 
 [archive_mirrors]
 america.mirror.pkgbuild.com

misc/vaults/vault_misaka.yml

+$ANSIBLE_VAULT;1.2;AES256;super
+34633834626639323261663961303239636532366164323963313138633337643766343461616238
+3064616464616438366636376462336265373463333239330a346431373639636232363430363334
+61663339326165663837643635613132363230393063636438396631666162333830303837643535
+6333623637393763330a393935343962626161316233323163303136393463633763613239393062
+31626437656230313339343161633564656166373361316464363963666332363166366139313139
+66613631643138383034656436303166386565393666303461336132343033306332616466336138
+66356337633132313739316534343739353939393164636163323263356166303034366634646131
+32313531323430616438326638323733316262646262326564653037363364616632633432373539
+35333862323232613231663938623563373031626337313765393366343938306531306562616663
+31386165303838666135336235383961613036383564333138633038356230333438393864373266
+65653833333837303337336364346131643965313062303835393265616336326362373738663034
+32653166323636353564

playbooks/mirrors.yml

@@ -15,4 +15,4 @@
     - { role: prometheus_exporters }
     - { role: promtail }
     - { role: fail2ban }
-    - { role: geo_dns, when: "'geo_mirrors' in group_names" }
+    - { role: geo_dns, when: "'geo_mirror_name_servers' in group_names" }

roles/prometheus/defaults/main.yml

@@ -40,6 +40,7 @@ blackbox_targets:
     - https://asia.mirror.pkgbuild.com
     - https://aur.archlinux.org
     - https://bbs.archlinux.org
+    - https://berlin.mirror.pkgbuild.com
     - https://bugs.archlinux.org
     - https://conf.archlinux.org
     - https://dashboards.archlinux.org/healthz
@@ -48,8 +49,10 @@ blackbox_targets:
     - https://europe.mirror.pkgbuild.com
     - https://gitlab.archlinux.org
     - https://ipxe.archlinux.org
+    - https://johannesburg.mirror.pkgbuild.com
     - https://lists.archlinux.org
     - https://london.mirror.pkgbuild.com
+    - https://losangeles.mirror.pkgbuild.com
     - https://mailman.archlinux.org
     - https://man.archlinux.org
     - https://master-key.archlinux.org
@@ -78,9 +81,11 @@ blackbox_targets:
     - https://rfc.archlinux.page
     - https://security.archlinux.org
     - https://signstar.archlinux.page/
+    - https://singapore.mirror.pkgbuild.com
     - https://sources.archlinux.org
     - https://static.conf.archlinux.org/README.md
     - https://sydney.mirror.pkgbuild.com
+    - https://taipei.mirror.pkgbuild.com
     - https://terms.archlinux.org
     - https://tu-bylaws.aur.archlinux.org
     - https://whatcanidofor.archlinux.org
@@ -97,12 +102,12 @@ blackbox_targets:
   smtp_starttls:
     - mail.archlinux.org:25
     - lists.archlinux.org:25
-  geo_dns_geo.mirror.pkgbuild.com_a: "{{ groups['geo_mirrors'] }}"
-  geo_dns_geo.mirror.pkgbuild.com_aaaa: "{{ groups['geo_mirrors'] }}"
-  geo_dns_geo.mirror.pkgbuild.com_https: "{{ groups['geo_mirrors'] }}"
-  geo_dns_riscv.mirror.pkgbuild.com_a: "{{ groups['geo_mirrors'] }}"
-  geo_dns_riscv.mirror.pkgbuild.com_aaaa: "{{ groups['geo_mirrors'] }}"
-  geo_dns_riscv.mirror.pkgbuild.com_https: "{{ groups['geo_mirrors'] }}"
+  geo_dns_geo.mirror.pkgbuild.com_a: "{{ groups['geo_mirror_name_servers'] }}"
+  geo_dns_geo.mirror.pkgbuild.com_aaaa: "{{ groups['geo_mirror_name_servers'] }}"
+  geo_dns_geo.mirror.pkgbuild.com_https: "{{ groups['geo_mirror_name_servers'] }}"
+  geo_dns_riscv.mirror.pkgbuild.com_a: "{{ groups['geo_mirror_name_servers'] }}"
+  geo_dns_riscv.mirror.pkgbuild.com_aaaa: "{{ groups['geo_mirror_name_servers'] }}"
+  geo_dns_riscv.mirror.pkgbuild.com_https: "{{ groups['geo_mirror_name_servers'] }}"
 matrix_metrics_endpoints:
   - homeserver
   - appservice

roles/prometheus/templates/prometheus.yml.j2

@@ -80,7 +80,7 @@ scrape_configs:
 
   - job_name: 'powerdns'
     static_configs:
-      {% for host in groups['geo_mirrors'] + [geo_acme_dns_challenge_ns] %}
+      {% for host in groups['geo_mirror_name_servers'] + [geo_acme_dns_challenge_ns] %}
       - targets: ['{{ hostvars[host]['wireguard_address'] }}:8081']
         labels:
           instance: "{{ host }}"

tf-stage1/archlinux.tf

@@ -361,6 +361,11 @@ locals {
       ipv6_address = "2a02:6ea0:d605::2"
       http3        = true
     }
+    "berlin.mirror" = {
+      ipv4_address = "45.142.247.77"
+      ipv6_address = "2a12:8d02:2100:10d:26a3:f0ff:fe47:bfaf"
+      http3        = true
+    }
     "europe.mirror" = {
       ipv4_address = "89.187.191.12"
       ipv6_address = "2a02:6ea0:c237::2"
@@ -371,16 +376,36 @@ locals {
       ipv6_address = "2a02:6ea0:c237::2"
       http3        = true
     }
+    "johannesburg.mirror" = {
+      ipv4_address = "102.130.49.241"
+      ipv6_address = "2a0b:4342:1a91:3b5:26a3:f0ff:fe49:9bf9"
+      http3        = true
+    }
     "london.mirror" = {
       ipv4_address = "185.73.44.89"
       ipv6_address = "2001:ba8:0:4030::2"
       http3        = true
     }
+    "losangeles.mirror" = {
+      ipv4_address = "209.209.59.11"
+      ipv6_address = "2a0e:6901:110:95:26a3:f0ff:fe48:999e"
+      http3        = true
+    }
+    "singapore.mirror" = {
+      ipv4_address = "194.156.163.63"
+      ipv6_address = "2407:b9c0:e002:166:26a3:f0ff:fe46:6e9c"
+      http3        = true
+    }
     "sydney.mirror" = {
       ipv4_address = "147.75.48.159"
       ipv6_address = "2604:1380:40f1:6a00::1"
       http3        = true
     }
+    "taipei.mirror" = {
+      ipv4_address = "45.150.242.222"
+      ipv6_address = "2407:b9c0:b001:c4:26a3:f0ff:fe46:b1dc"
+      http3        = true
+    }
     repro2 = {
       ipv4_address = "212.102.38.209"
       ipv6_address = "2a02:6ea0:c238::2"