summaryrefslogtreecommitdiff
path: root/ansible/radicle.liw.fi.yml
blob: 479242db922fb2e6a0b84d90e99c8a2c21d70a14 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
- hosts: radicle.liw.fi
  remote_user: root
  become: yes
  roles:
    - role: sane_debian_system
    - role: sshd
    - role: unix_users
    - role: rust-rustup
    - role: radicle_node
  tasks:
    - name: "install convenience packages"
      apt:
        name:
          - jq
          - moreutils
          - psmisc
  vars:
    ansible_python_interpreter: /usr/bin/python3

    sane_debian_system_version: 2
    sane_debian_system_hostname: "{{ inventory_hostname }}"
    sane_debian_system_codename: bookworm
    sane_debian_system_timezone: Europe/Helsinki
    sane_debian_system_sources_lists:
      - repo: |
          deb http://security.debian.org/debian-security bookworm-security main contrib non-free
      - repo: deb http://apt.liw.fi/debian unstable main
        signing_key: "{{ apt_liw_fi_signing_key }}"

    unix_users_version: 2
    unix_users:
      - username: _rad
        comment: Radicle node

    sshd_version: 1

    radicle_node_version: 1
    radicle_node_key: "{{ lookup('pipe', 'pass radicle/radicle.liw.fi/key') }}"
    radicle_node_key_pub: "{{ lookup('pipe', 'pass radicle/radicle.liw.fi/key.pub') }}"
    radicle_node_connections:
      - nid: z6MkhfTshN2uPFBGcxBsZW7Mbof1TgkphBqr5dFTWd1hbNUq
        host: seed.liw.fi
        port: 8776
    radicle_node_repositories:
      # heartwood
      - rid: "rad:z3gqcJUoA1n9HaHKufZs5FCSGazv5"

      # pathdedup test repo
      - rid: "rad:zZnk3hS8C3WAhnv7mWcCUToCqpBs"

      # ansibleness
      - rid: "rad:z3sckw1Xm8j5URDJz1zeESHfFYDEc"

      # debian-ansible
      - rid: "rad:z3LXXus6Wu93LuSuuuSBPcFkDiyCW"

      # html-page
      - rid: "rad:z2i9UF8soK1X6L9hae8UcQPSvdHjW"

      # liw-dot-files
      - rid: "rad:z2xcsrnG8dC76bkxXsASZbWGH5N2w"

      # radicle-stress-test
      - rid: "rad:z2HXqzZMRhZUiYm33pLgYfqBgcGCj"

      # radicle-ci-broker
      - rid: "rad:zwTxygwuz5LDGBq255RA2CbNGrz8"

      # radicle-native-ci
      - rid: "rad:z3qg5TKmN83afz2fj9z3fQjU8vaYE"

      # riki
      - rid: "rad:zw9BgStPgCkdsMspzs7EGbwnXq3r"

      # wumpus hunter
      - rid: "rad:zd4kAF7rQFKbCHAdbcF6zVkx8MyN"

      # missing-dependencies
      - rid: "rad:z3PKKNstRjLYqhvGq9rxGy7LoEVr5"

      # vmdb2
      - rid: "rad:z2kxCtBwDQMPcaf9vGTNH5nYkp9qk"

      # vmdb2-web
      - rid: "rad:z2mn6wzpVAuJoeWx7TZo33nCHuDfQ"
    radicle_node_domain_name: radicle.liw.fi
    radicle_node_ci_domain_name: ci.radicle.liw.fi
    radicle_node_ci_broker_config: |
      db: /home/_rad/ci-broker.db
      report_dir: /srv/http
      default_adapter: native
      adapters:
        native:
          command: /bin/radicle-native-ci
          env:
            RADICLE_NATIVE_CI: /home/_rad/native-ci.yaml
      filters:
        - !Or
          - !And
            - !Repository "rad:zZnk3hS8C3WAhnv7mWcCUToCqpBs"
            - !AnyPatch
          - !And
            - !Repository "rad:z3gqcJUoA1n9HaHKufZs5FCSGazv5"
            - !AnyPatch
          - !And
            - !Repository "rad:zwTxygwuz5LDGBq255RA2CbNGrz8"
            - !AnyPatch
          - !And
            - !Repository "rad:z3qg5TKmN83afz2fj9z3fQjU8vaYE"
            - !AnyPatch
    radicle_node_policy: block
    radicle_node_scope: all

    # radicle_node_backup: /home/liw/data/radicle.liw.fi/.

    rust_rustup_user: _rad