custom remote repo working

ansible/inventory/host_vars/hv00.balsillie.house/nginx.yaml

@@ -1,6 +1,7 @@
 nginx_sites:
   - name: repo.balsillie.house
     type: site
+    autoindex: 'on'
     root: /var/www/aur
   - name: unifi.balsillie.house
     type: proxy
@@ -13,4 +14,4 @@ nginx_sites:
       host: 127.0.0.1
       port: 9443
 
-nginx_user: "http"
+nginx_user: "http"

ansible/roles/aur_repo_host/tasks/main.yaml

@@ -138,7 +138,7 @@
           - --sign
           - --key
           - "{{ aur_repo_key_thumbprint }}"
-          - repo.db.tar
+          - home.db.tar
           - aurutils-{{ aurutils_pkgver }}-{{ aurutils_pkgrel }}-{{ aurutils_arch }}.pkg.tar
         chdir: "{{ aur_repo_dir }}/packages"
       changed_when: true
@@ -179,7 +179,7 @@
       ansible.builtin.blockinfile:
         path: /etc/pacman.conf
         block: |
-          [custom]
+          [home]
           SigLevel = Required TrustedOnly
           Server = file://{{ aur_repo_dir }}/packages
         create: false
@@ -203,8 +203,5 @@
 - name: Link the aur repo to the web root
   ansible.builtin.file:
     src: "{{ aur_repo_dir }}/packages"
-    dest: /var/www{{ aur_repo_dir }}
+    path: /var/www{{ aur_repo_dir }}
     state: link
-    owner: http
-    group: http
-    mode: "0775"

ansible/roles/nginx/templates/nginx-site.conf.j2

@@ -12,6 +12,7 @@ server {
     ssl_certificate     /etc/letsencrypt/live/{{ item.name }}/fullchain.pem;
     ssl_certificate_key /etc/letsencrypt/live/{{ item.name }}/privkey.pem;
     index index.html;
+    autoindex {{ item.autoindex | default('off') }};
     root {{ item.root }};
     location / {
     }

todo/aur_repo.todo

@@ -0,0 +1,9 @@
+add aur-builder sudoers entry
+
+    aur-builder ALL = (root) NOPASSWD: /usr/bin/pacman, /usr/bin/pacsync
+
+add aur sync command
+
+    sudo -u aur-builder aur sync --no-view -CnrS sonarr
+
+enable aur sync service/timer