Files
fedora-infra_ansible/playbooks/groups/pagure.yml
Kevin Fenzi 9717d920af anubis: rename anubis-el8 to anubis-el and see about enabling on download
Looks like the scrapers are hitting the download servers now.
So, look at setting up an anubis pod there like we did for pagure.
anubis package isn't available for epel9, so we just use the container.

Will test this with dl01 and tweak until it's working.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-22 08:50:34 -08:00

88 lines
1.8 KiB
YAML

---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "pagure:pagure_stg"
- name: Make the boxen be real for real
hosts: pagure:pagure_stg
user: root
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
roles:
- base
- rkhunter
- nagios_client
- zabbix/zabbix_agent
- hosts
- openvpn/client
- ipa/client
- sudo
- collectd/base
- postgresql_server
pre_tasks:
- import_tasks: "{{ tasks_path }}/yumrepos.yml"
handlers:
- import_tasks: "{{ handlers_path }}/restart_services.yml"
- name: Deploy pagure itself
hosts: pagure:pagure_stg
user: root
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- "{{ vars_path }}/{{ ansible_distribution }}.yml"
roles:
#
# use letsencrypt to get ssl certs
#
- role: letsencrypt
site_name: "stg.pagure.io"
certbot_bundlehost: pagure-stg02.fedoraproject.org
server_aliases:
- stg.pagure.io
- docs.stg.pagure.org
- releases.stg.pagure.org
- stg.pagure.org
tags:
- pagure.io
when: env == "pagure-staging"
- role: letsencrypt
site_name: "pagure.io"
certbot_bundlehost: pagure01.fedoraproject.org
server_aliases:
- docs.pagure.org
- lists.pagure.io
- pagure.org
- releases.pagure.org
- www.pagure.io
tags:
- pagure.io
when: env == "pagure"
# Set up for fedora-messaging
- role: rabbit/user
datacenter: rdu3
user_name: "pagure{{ env_suffix }}"
user_sent_topics:
^io\.pagure\.{{ env_short }}\..*
- pagure
- role: anubis-el
tags:
- anubis
handlers:
- import_tasks: "{{ handlers_path }}/restart_services.yml"