diff --git a/ansible/inventory/host_vars/hv00.balsillie.house/nginx.yaml b/ansible/inventory/host_vars/hv00.balsillie.house/nginx.yaml index f21c72f..b42b34e 100644 --- a/ansible/inventory/host_vars/hv00.balsillie.house/nginx.yaml +++ b/ansible/inventory/host_vars/hv00.balsillie.house/nginx.yaml @@ -1,6 +1,7 @@ nginx_sites: - name: repo.balsillie.house type: site + autoindex: 'on' root: /var/www/aur - name: unifi.balsillie.house type: proxy @@ -13,4 +14,4 @@ nginx_sites: host: 127.0.0.1 port: 9443 -nginx_user: "http" \ No newline at end of file +nginx_user: "http" diff --git a/ansible/roles/aur_repo_host/tasks/main.yaml b/ansible/roles/aur_repo_host/tasks/main.yaml index 35e0960..ca1d92a 100644 --- a/ansible/roles/aur_repo_host/tasks/main.yaml +++ b/ansible/roles/aur_repo_host/tasks/main.yaml @@ -138,7 +138,7 @@ - --sign - --key - "{{ aur_repo_key_thumbprint }}" - - repo.db.tar + - home.db.tar - aurutils-{{ aurutils_pkgver }}-{{ aurutils_pkgrel }}-{{ aurutils_arch }}.pkg.tar chdir: "{{ aur_repo_dir }}/packages" changed_when: true @@ -179,7 +179,7 @@ ansible.builtin.blockinfile: path: /etc/pacman.conf block: | - [custom] + [home] SigLevel = Required TrustedOnly Server = file://{{ aur_repo_dir }}/packages create: false @@ -203,8 +203,5 @@ - name: Link the aur repo to the web root ansible.builtin.file: src: "{{ aur_repo_dir }}/packages" - dest: /var/www{{ aur_repo_dir }} + path: /var/www{{ aur_repo_dir }} state: link - owner: http - group: http - mode: "0775" diff --git a/ansible/roles/nginx/templates/nginx-site.conf.j2 b/ansible/roles/nginx/templates/nginx-site.conf.j2 index e0ad4bd..2d94771 100644 --- a/ansible/roles/nginx/templates/nginx-site.conf.j2 +++ b/ansible/roles/nginx/templates/nginx-site.conf.j2 @@ -12,6 +12,7 @@ server { ssl_certificate /etc/letsencrypt/live/{{ item.name }}/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/{{ item.name }}/privkey.pem; index index.html; + autoindex {{ item.autoindex | default('off') }}; root {{ item.root }}; location / { } diff --git a/todo/aur_repo.todo b/todo/aur_repo.todo new file mode 100644 index 0000000..cc8db0a --- /dev/null +++ b/todo/aur_repo.todo @@ -0,0 +1,9 @@ +add aur-builder sudoers entry + + aur-builder ALL = (root) NOPASSWD: /usr/bin/pacman, /usr/bin/pacsync + +add aur sync command + + sudo -u aur-builder aur sync --no-view -CnrS sonarr + +enable aur sync service/timer