[[TOC]]
- archive (archive.archlinux.org)
- mailman
- archweb (Arch's site)
- aurweb
- SSH bastion/jump host for accessing resources which need static incoming IP. The server has a floating IPv4 assigned in Hetzner - see vault_umea. Once a tunnel is setup using
ssh -D1080 root@bastion.archlinux.orgsee FoxyProxy Docs on how to setup for required domain.
- bbs
- phrik (irc bot) users in the phrik group defined in the hosts vars and re-used the archusers role. Users in the phrik group are allowed to restar the irc bot.
- postgres server for terraform state
- quassel core
- Matrix homeserver (Synapse)
- Matrix ↔ IRC bridge
- ~/user/ webhost
This server is special. It runs keycloak and is central to our unified Arch Linux account management world.
It has an Ansible playbook for the keycloak service but that only installs the package and starts it but it's configured via a secondary Terraform file only for keycloak keycloak.tf.
The reason for doing it this way is that Terraform support for Keycloak is much superior and it's declarative too which is great for making sure that no old config remains in the case of config changes.
So to set up this server from scratch, run:
cd tf-stage1terraform applycd ../tf-stage2terraform import keycloak_realm.master masterterraform apply
- keycloak
- Regular mirror, that also serves as a backend for the Fastly CDN mirror.
- Runs a master rebuilderd instance
with these workers:
- repro4.pkgbuild.com (Proxmox VM with 16vCores and 192G RAM - 2 workers)
- GitLab runner
- GitLab runner
- postfix (mail server)
- rspamd
- dovecot (imap)
Prometheus, Loki and Grafana server which collects performance/metrics and logs from our services and runs alertmanager.
- Alertmanager
- Grafana and docs/grafana.md
- Prometheus
- Mumble
Prometheus, and Grafana server which receives selected performance/metrics from monitoring.archlinux.org and make them public accessible.
- Grafana and docs/grafana.md
- Prometheus
- Redirects (nginx redirects)
- Authoritative DNS server (PowerDNS) for ACME DNS challenges
- ping
- repos/sync (repos.archlinux.org)
- sources (sources.archlinux.org)
- security tracker
- archwiki
Online collborative markdwown editor for Arch Linux Staff.
The Arch Linux Archive is mirrored to the following dedicated servers to help aid global availability.
- GitLab
- buildbtw production
- buildbtw staging
- buildbtw dev (review apps)
- finance dashboards