Remove aurto
I never used it, and trust chaotic-aur enough for AUR things
This commit is contained in:
parent
b2f894c5da
commit
6224b8f675
7 changed files with 0 additions and 128 deletions
|
@ -22,5 +22,3 @@ pve_hosts:
|
|||
ip: 10.23.1.110
|
||||
gitea_runner:
|
||||
ip: 10.23.1.114
|
||||
aurto:
|
||||
ip: 10.23.1.106
|
||||
|
|
|
@ -14,4 +14,3 @@ qbittorrent
|
|||
restic
|
||||
renovate
|
||||
gitea-runner
|
||||
aurto
|
||||
|
|
|
@ -135,7 +135,3 @@
|
|||
- pihole
|
||||
- role: prometheus.prometheus.node_exporter
|
||||
become: true
|
||||
|
||||
- hosts: aurto
|
||||
roles:
|
||||
- aurto
|
||||
|
|
|
@ -1,43 +0,0 @@
|
|||
worker_processes auto;
|
||||
|
||||
events {
|
||||
worker_connections 1024;
|
||||
}
|
||||
|
||||
http {
|
||||
include mime.types;
|
||||
default_type application/octet-stream;
|
||||
|
||||
sendfile on;
|
||||
tcp_nopush on;
|
||||
|
||||
keepalive_timeout 65;
|
||||
|
||||
server {
|
||||
listen 80;
|
||||
|
||||
root /var/cache/pacman/aurto;
|
||||
|
||||
auth_basic "Restricted";
|
||||
auth_basic_user_file /etc/nginx/.htpasswd;
|
||||
|
||||
# gzip
|
||||
gzip on;
|
||||
gzip_types *;
|
||||
|
||||
# IP detection
|
||||
set_real_ip_from 0.0.0.0/0;
|
||||
real_ip_header X-Forwarded-For;
|
||||
|
||||
# Kick malicious clients sooner
|
||||
client_header_timeout 10s;
|
||||
client_body_timeout 10s;
|
||||
client_max_body_size 128k;
|
||||
reset_timedout_connection on;
|
||||
sendfile_max_chunk 1m;
|
||||
keepalive_timeout 65;
|
||||
|
||||
# Ensure 403s respond with 404
|
||||
error_page 403 /dev/null;
|
||||
}
|
||||
}
|
|
@ -1,5 +0,0 @@
|
|||
- name: restart nginx
|
||||
service:
|
||||
name: nginx
|
||||
state: restarted
|
||||
become: true
|
|
@ -1,44 +0,0 @@
|
|||
- name: Install aurto
|
||||
package:
|
||||
name: aurto
|
||||
become: true
|
||||
|
||||
- name: Create aurto user
|
||||
user:
|
||||
name: aurto
|
||||
system: true
|
||||
become: true
|
||||
|
||||
- name: Ensure aurto repository has the correct owner
|
||||
file:
|
||||
path: /var/cache/pacman/aurto
|
||||
state: directory
|
||||
owner: aurto
|
||||
mode: u=rwX,g=rwX,o=rX
|
||||
recurse: true
|
||||
become: true
|
||||
|
||||
- name: Update aurto user
|
||||
copy:
|
||||
content: aurto
|
||||
dest: /usr/lib/aurto/user
|
||||
mode: "0700"
|
||||
owner: aurto
|
||||
become: true
|
||||
|
||||
- name: Ensure trusted users have the correct permissions
|
||||
file:
|
||||
dest: /etc/aurto/trusted-users
|
||||
mode: "0640"
|
||||
owner: aurto
|
||||
become: true
|
||||
|
||||
- name: Allow aurto to run required commands as root
|
||||
ansible.builtin.replace:
|
||||
path: /etc/sudoers.d/50_aurto_passwordless
|
||||
regexp: ^%wheel (.+)$
|
||||
replace: aurto \1
|
||||
become: true
|
||||
|
||||
- name: Configure nginx
|
||||
include_tasks: nginx.yml
|
|
@ -1,29 +0,0 @@
|
|||
- name: Install nginx
|
||||
package:
|
||||
name: nginx
|
||||
become: true
|
||||
|
||||
- name: Enable nginx
|
||||
service:
|
||||
name: nginx
|
||||
enabled: true
|
||||
become: true
|
||||
|
||||
- name: Add a user to a password file and ensure permissions are set
|
||||
community.general.htpasswd:
|
||||
path: /etc/nginx/.htpasswd
|
||||
name: aurto
|
||||
password: aurto
|
||||
owner: http
|
||||
group: http
|
||||
mode: "600"
|
||||
become: true
|
||||
notify: restart nginx
|
||||
|
||||
- name: Nginx config
|
||||
template:
|
||||
src: files/nginx.conf
|
||||
dest: /etc/nginx/nginx.conf
|
||||
mode: "600"
|
||||
become: true
|
||||
notify: restart nginx
|
Loading…
Reference in a new issue