Since after enabling lockdown you cannot change the file anymore until reboot,
change the tmpfile setting to use ! and run only at boot time. This makes
systemd-tmpfiles --create command to not fail, since it cannot write to the lockdown
file.

https://bugs.archlinux.org/task/65366



Signed-off-by: Florian Pritz <bluewind@xinu.at>

https://bugs.archlinux.org/task/65366



Signed-off-by: Florian Pritz <bluewind@xinu.at>

Christian Rebischke authored 5 years ago and Jelle van der Waa committed 5 years ago

Make sure to use {{ variable }} instead of {{variable}}.
Also we need to ensure git is instaled when using the git module.

Update to version with zst package compatibility

Signed-off-by: Jelle van der Waa <jelle@vdwaa.nl>

Earlier it would only snapshot the top dir which resulted in some awkward moments when another btrfs drive that was mounted to /home was empty in the backups because snapshots only snapshot the topmost device in the tree.

Added a host_vars entry for aur-dev.archlinux.org.

Robin Broda authored 5 years ago and Sven-Hendrik Haase committed 5 years ago

Signed-off-by: Sven-Hendrik Haase <svenstaro@gmail.com>

Signed-off-by: Jelle van der Waa <jelle@archlinux.org>

Those who should know about the details on this were notified by email.

Initial playbook for AUR dev

Create a separate VPS for aur-dev so we can test new AUR role and also new AUR deployments
without breaking main AUR.

Created a new variable called archweb_allowed_hosts that allows ipxe.archlinux.org
to be served under archweb. We make sure on the nginx template that only a small subset
of the locations is served with weaker ciphers.

Restored the alternate domains variable, otherwise the maintenace mode role would not run.

Changed the nginx template to handle includes and also reworked the way the dict is used, by using
the dict2items filter on the template directly. We also have create a custom template for ipxe.archlinux.org
using weaker ciphers.

roles/archweb: Rework the variables so we get rid of the alternate_domains and create a new dict for custom ngnix templates

Removed the alternate domains variable and now we use the dict directly inside the nginx template. Also create a dict containing
the domains and custom templates for each of them. Right now we only have a custom template for ipxe.archlinux.org.