ansible/roles/base/tasks/freebsd.yaml

@@ -39,6 +39,18 @@
   command: cap_mkdb /etc/login.conf
   when: login_config.changed
 
+- name: Enable periodic scrub
+  community.general.sysrc:
+    name: daily_scrub_zfs_enable
+    value: "YES"
+    path: /etc/periodic.conf.local
+
+- name: Set scrub interval
+  community.general.sysrc:
+    name: daily_scrub_zfs_default_threshold
+    value: "7"
+    path: /etc/periodic.conf.local
+
 - name: Install loader.conf
   copy:
     src: "{{loader_conf}}"
@@ -122,29 +134,3 @@
       value: 65
     - name: net.inet6.ip6.hlim
       value: 65
-
-- name: Log periodic output instead of getting it as mail
-  blockinfile:
-    path: "/etc/periodic.conf.local"
-    marker: "# {mark} ANSIBLE MANAGED BLOCK log"
-    # create: true
-    mode: 0644
-    owner: root
-    group: wheel
-    block: |
-      daily_output=/var/log/daily.log
-      weekly_output=/var/log/weekly.log
-      monthly_output=/var/log/monthly.log
-
-- name: Enable periodic zfs scrub
-  when: install_zfs
-  blockinfile:
-    path: "/etc/periodic.conf.local"
-    marker: "# {mark} ANSIBLE MANAGED BLOCK zfs"
-    # create: true
-    mode: 0644
-    owner: root
-    group: wheel
-    block: |
-      daily_scrub_zfs_enable="YES"
-      daily_scrub_zfs_default_threshold="7"

ansible/roles/jail/files/fstab_bastion

@@ -1,4 +1,4 @@
 tmpfs /jail/bastion/tmp tmpfs rw,mode=777 0 0
 tmpfs /jail/bastion/var/run tmpfs rw,mode=755 0 0
 
-/jail/certificate/usr/local/etc/letsencrypt       /jail/bastion/letsencrypt     nullfs    ro,noexec     0      0
+/jail/certificate/usr/local/etc/letsencrypt/archive/stuff.fizz.buzz       /jail/bastion/stuff.fizz.buzz     nullfs    ro,noexec     0      0

ansible/roles/jail_bastion/files/nginx.conf

@@ -36,8 +36,8 @@ http {
 
         include conf.d/tls_settings.include;
         # RSA
-        ssl_certificate /letsencrypt/live/stuff.fizz.buzz/fullchain.pem;
+        ssl_certificate /stuff.fizz.buzz/fullchain1.pem;
-        ssl_certificate_key /letsencrypt/live/stuff.fizz.buzz/privkey.pem;
+        ssl_certificate_key /stuff.fizz.buzz/privkey1.pem;
 
         # Nginx by default only allows file uploads up to 1M in size
         client_max_body_size 50M;

ansible/roles/jail_bastion/tasks/freebsd.yaml

@@ -17,7 +17,7 @@
     owner: root
     group: wheel
   loop:
-    - /letsencrypt
+    - /stuff.fizz.buzz
     - /etc/rc.conf.d
     - /usr/local/etc/nginx/conf.d
 

ansible/roles/network/files/mrmanager_network.conf

@@ -3,4 +3,3 @@ ifconfig_igb0="up"
 ifconfig_igb1="up"
 ifconfig_lagg0="up laggproto failover laggport igb0 laggport igb1"
 ifconfig_lagg0_alias0="inet 74.80.180.138 netmask 255.255.255.248"
-ifconfig_lagg0_alias1="inet6 2620:11f:7001:7::2/64"

ansible/roles/network/files/mrmanager_routing.conf

@@ -1,4 +1,3 @@
 defaultrouter="74.80.180.137"
-ipv6_defaultrouter="2620:11f:7001:7::1"
 gateway_enable="YES"
 ipv6_gateway_enable="YES"

ansible/roles/portshaker/files/myrepo

@@ -5,6 +5,6 @@ if [ "$1" != '--' ]; then
 fi
 shift
 method="git"
-git_clone_uri="https://code.fizz.buzz/talexander/fizzbuzz_ports.git"
+git_clone_uri="https://code.fizz.buzz/talexander/ta_ports.git"
-git_branch="main"
+git_branch="master"
 run_portshaker_command $*

ansible/roles/poudriere/files/poudriere.d/currentznver4-default-framework-make.conf

@@ -7,12 +7,6 @@ CPUTYPE?=x86-64-v4
 CPUTYPE?=znver4
 .endif
 
-# CPU optimizations for go
-.if ${.CURDIR:M*/lang/go*}
-OPTIONS_SET+=V2
-OPTIONS_SET+=V3
-OPTIONS_SET+=V4
-.endif
 
 
 OPTIONS_SET+=OPTIMIZED_CFLAGS

ansible/roles/poudriere/files/poudriere.d/currentznver4-default-framework-pkglist

@@ -59,7 +59,6 @@ net/rsync
 net/tcpdump
 net/wireguard-tools
 net/wlvncc
-ports-mgmt/modules2tuple
 ports-mgmt/pkg
 ports-mgmt/pkg-provides
 ports-mgmt/portshaker

ansible/roles/rust/defaults/main.yaml

@@ -1,4 +1,4 @@
 # Check that rust-analyzer is valid for date on https://rust-lang.github.io/rustup-components-history/
-rust_date: "2024-09-30"
+rust_date: "2024-05-06"
 # rust_analyzer_version: 2024-04-29
 rust_analyzer_version: package

ansible/roles/rust/files/cargo_config.toml

@@ -1,12 +1,2 @@
 [target.x86_64-unknown-linux-gnu]
 rustflags = ["-C", "target-cpu=native", "-Zthreads=0"]
-
-[unstable]
-codegen-backend = true
-
-[profile.dev]
-codegen-backend = "cranelift"
-
-[profile.dev.package."*"]
-codegen-backend = "llvm"
-opt-level = 3