zlopez/ansible
1
0
Fork 0
forked from infra/ansible
Code Pull requests Activity

copr-rpmeta: hostnames added + birthday production

Browse source
This commit is contained in:
Jiri Kyjovsky 2026-04-01 13:13:47 +02:00
commit 5b71b2f834
6 changed files with 22 additions and 58 deletions
Download patch file Download diff file Expand all files Collapse all files

4
inventory/cloud
View file

@ -33,8 +33,8 @@ copr-keygen.aws.fedoraproject.org
copr-keygen-dev.aws.fedoraproject.org
#copr-be-dev.cloud.fedoraproject.org
copr-dist-git-dev.fedorainfracloud.org
3.209.163.181
23.20.56.165
rpmeta.stg.fedoraproject.org
rpmeta.fedoraproject.org
f42-test.fedorainfracloud.org
f43-test.fedorainfracloud.org
f44-test.fedorainfracloud.org

21
inventory/group_vars/copr_rpmeta_aws
View file

@ -2,23 +2,21 @@
copr_machine_type: rpmeta
copr_hostbase: copr-rpmeta
rpmeta_hostname: "23.20.56.165"
rpmeta_hostname: rpmeta.fedoraproject.org
rpmeta_port: 44882
rpmeta_model_name: xgboost
rpmeta_hf_repo_base: https://huggingface.co/fedora-copr/rpmeta/resolve
rpmeta_hf_model_ref: v2025.12.24
# consumed by roles/copr/certbot
# Let's Encrypt requires a domain name — disabled until DNS is set up
#letsencrypt:
# certificates:
# rpmeta.fedoraproject.org:
# challenge_dir: /var/www/html
# domains:
# - rpmeta.fedoraproject.org
# mail: copr-devel@lists.fedorahosted.org
# predefined_deploy_script: nginx
letsencrypt:
certificates:
rpmeta.fedoraproject.org:
challenge_dir: /var/www/html
domains:
- rpmeta.fedoraproject.org
mail: copr-devel@lists.fedorahosted.org
predefined_deploy_script: nginx
tcp_ports: [22, 80, 443,
# node_exporter/prometheus
@ -28,4 +26,3 @@ services_disabled: false
notes: |
Production instance for RPMeta build duration prediction service.
DNS not yet configured — using IP address directly.

21
inventory/group_vars/copr_rpmeta_dev_aws
View file

@ -2,23 +2,21 @@
copr_machine_type: rpmeta
copr_hostbase: copr-rpmeta-dev
rpmeta_hostname: "3.209.163.181"
rpmeta_hostname: rpmeta.stg.fedoraproject.org
rpmeta_port: 44882
rpmeta_model_name: xgboost
rpmeta_hf_repo_base: https://huggingface.co/fedora-copr/rpmeta/resolve
rpmeta_hf_model_ref: v2025.12.24
# consumed by roles/copr/certbot
# Let's Encrypt requires a domain name — disabled until DNS is set up
#letsencrypt:
# certificates:
# rpmeta.stg.fedoraproject.org:
# challenge_dir: /var/www/html
# domains:
# - rpmeta.stg.fedoraproject.org
# mail: copr-devel@lists.fedorahosted.org
# predefined_deploy_script: nginx
letsencrypt:
certificates:
rpmeta.stg.fedoraproject.org:
challenge_dir: /var/www/html
domains:
- rpmeta.stg.fedoraproject.org
mail: copr-devel@lists.fedorahosted.org
predefined_deploy_script: nginx
tcp_ports: [22, 80, 443,
# node_exporter/prometheus
@ -28,4 +26,3 @@ services_disabled: false
notes: |
Staging instance for RPMeta build duration prediction service.
Production instance will be added once DNS is configured.

4
inventory/inventory
View file

@ -866,10 +866,10 @@ copr-dist-git-dev.aws.fedoraproject.org
copr-dist-git-dev.fedorainfracloud.org
[copr_rpmeta_aws]
23.20.56.165
rpmeta.fedoraproject.org birthday=yes
[copr_rpmeta_dev_aws]
3.209.163.181
rpmeta.stg.fedoraproject.org
[copr_aws:children]
copr_front_aws

6
playbooks/groups/copr-rpmeta.yml
View file

@ -29,8 +29,6 @@
- "/srv/private/ansible/vars.yml"
pre_tasks:
- meta: end_play
when: birthday is defined
- import_tasks: "{{ tasks_path }}/yumrepos.yml"
tasks:
@ -45,10 +43,6 @@
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
pre_tasks:
- meta: end_play
when: birthday is defined
roles:
- base
- nagios_client

24
roles/copr/rpmeta/templates/nginx/rpmeta.conf.j2
View file

@ -1,4 +1,3 @@
{% if letsencrypt is defined %}
server {
listen 80;
listen [::]:80;
@ -57,26 +56,3 @@ server {
allow all;
}
}
{% else %}
server {
listen 80;
listen [::]:80;
server_name {{ rpmeta_hostname }};
location / {
proxy_pass http://127.0.0.1:{{ rpmeta_port | default(44882) }};
proxy_http_version 1.1;
proxy_set_header Connection "";
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_connect_timeout 60s;
proxy_send_timeout 60s;
proxy_read_timeout 60s;
}
}
{% endif %}