The user for the socket was set incorrectly, fixed it.

roles/aurweb: Add the apc configuration variables

Added the apc to the php extensions on the playbook, instead of adding
it on the conf.d directory. Added the apc variables to the defaults file.

Added the templates for the apcu.ini configuration for php and for the uwsgi
config for cgit.

We need to use uwsgi for cgit hosting, so add the uwsgi role to the playbook.

Since the AUR has its own maintenance mode, there is no need for using the
maintenance role, so it was removed. Added a check on the aurweb config file
that checks for the maintenance variable and uses the variable for allowing
the ip address of the person running the playbook to access the AUR.

Add a variable that takes the SSH_CLIENT environment variable to save the
ip address of the machine actually running the playbooks. This can be used
on maintenance mode to allow in the person running the playbook and let
everybody else to see the maintenance page.

playboooks/aur-dev: Remove the intl php extension

Added maintenance mode to the aurweb role using the AUR internal mode. Also,
add the php-apcu-bc package to the list of required packages. Also running the
make required to create the translations.

We have reworked the entire tasks file to do an actual AUR installation.

Added the TU bylayws repository path and the wanted version for the TU bylaws repository.

Added a vault that contains the database password for the AUR.

Changed the playbook to add the missing php modules and add the AUR role. Also set the
domain and the git branch variables so the right version of the AUR is installed.

Moved all the systemd files to templates and also made sure every aur user
reference is using the variable. Changed the config to use the variables and
also changed the sshd config to use the ansible variables.

Made some changes to the defaults file to make the installation work.
Moved the db password to the vault, added the cache and limits variables
and also changed the username back to aur.

Renamed to aurweb

To make things consistent, rename the role to aurweb.

Jelle van der Waa authored Feb 20, 2018 and Giancarlo Razzolini committed Jul 23, 2020

The ansible role for the Arch User Repository.

Thanks-to: Eli Schwartz <eschwartz@archlinux.org>

Now uses Github links for source/history of PKGBUILDs.

Also set zram_count to 1 because creating 48 devices on dragon is not
usable for swap. We don't need multiple devices anyway; SMP is handled
through multiple compression streams.

This never worked well as irccat seems to be buggy with joining the
devops channel. Additionally we are moving away from Zabbix for
monitoring.

Apply more security hardening, add pgp key fetching and verification for
the git repository.

Morten Linderud authored Jun 30, 2020 and Jelle van der Waa committed Jul 11, 2020

Signed-off-by: Morten Linderud <morten@linderud.pw>

Morten Linderud authored Jun 30, 2020 and Jelle van der Waa committed Jul 11, 2020

Signed-off-by: Morten Linderud <morten@linderud.pw>

Morten Linderud authored Jun 30, 2020 and Jelle van der Waa committed Jul 11, 2020

Signed-off-by: Morten Linderud <morten@linderud.pw>

Morten Linderud authored Jun 17, 2020 and Jelle van der Waa committed Jul 11, 2020

Signed-off-by: Morten Linderud <morten@linderud.pw>