Compare commits
5 Commits
8e5034a393
...
46df8ec65c
Author | SHA1 | Date | |
---|---|---|---|
|
46df8ec65c | ||
|
16c7c06931 | ||
|
913d2e9f15 | ||
|
bb66c9a907 | ||
|
5331552759 |
@ -39,18 +39,6 @@
|
|||||||
command: cap_mkdb /etc/login.conf
|
command: cap_mkdb /etc/login.conf
|
||||||
when: login_config.changed
|
when: login_config.changed
|
||||||
|
|
||||||
- name: Enable periodic scrub
|
|
||||||
community.general.sysrc:
|
|
||||||
name: daily_scrub_zfs_enable
|
|
||||||
value: "YES"
|
|
||||||
path: /etc/periodic.conf.local
|
|
||||||
|
|
||||||
- name: Set scrub interval
|
|
||||||
community.general.sysrc:
|
|
||||||
name: daily_scrub_zfs_default_threshold
|
|
||||||
value: "7"
|
|
||||||
path: /etc/periodic.conf.local
|
|
||||||
|
|
||||||
- name: Install loader.conf
|
- name: Install loader.conf
|
||||||
copy:
|
copy:
|
||||||
src: "{{loader_conf}}"
|
src: "{{loader_conf}}"
|
||||||
@ -134,3 +122,29 @@
|
|||||||
value: 65
|
value: 65
|
||||||
- name: net.inet6.ip6.hlim
|
- name: net.inet6.ip6.hlim
|
||||||
value: 65
|
value: 65
|
||||||
|
|
||||||
|
- name: Log periodic output instead of getting it as mail
|
||||||
|
blockinfile:
|
||||||
|
path: "/etc/periodic.conf.local"
|
||||||
|
marker: "# {mark} ANSIBLE MANAGED BLOCK log"
|
||||||
|
# create: true
|
||||||
|
mode: 0644
|
||||||
|
owner: root
|
||||||
|
group: wheel
|
||||||
|
block: |
|
||||||
|
daily_output=/var/log/daily.log
|
||||||
|
weekly_output=/var/log/weekly.log
|
||||||
|
monthly_output=/var/log/monthly.log
|
||||||
|
|
||||||
|
- name: Enable periodic zfs scrub
|
||||||
|
when: install_zfs
|
||||||
|
blockinfile:
|
||||||
|
path: "/etc/periodic.conf.local"
|
||||||
|
marker: "# {mark} ANSIBLE MANAGED BLOCK zfs"
|
||||||
|
# create: true
|
||||||
|
mode: 0644
|
||||||
|
owner: root
|
||||||
|
group: wheel
|
||||||
|
block: |
|
||||||
|
daily_scrub_zfs_enable="YES"
|
||||||
|
daily_scrub_zfs_default_threshold="7"
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
tmpfs /jail/bastion/tmp tmpfs rw,mode=777 0 0
|
tmpfs /jail/bastion/tmp tmpfs rw,mode=777 0 0
|
||||||
tmpfs /jail/bastion/var/run tmpfs rw,mode=755 0 0
|
tmpfs /jail/bastion/var/run tmpfs rw,mode=755 0 0
|
||||||
|
|
||||||
/jail/certificate/usr/local/etc/letsencrypt/archive/stuff.fizz.buzz /jail/bastion/stuff.fizz.buzz nullfs ro,noexec 0 0
|
/jail/certificate/usr/local/etc/letsencrypt /jail/bastion/letsencrypt nullfs ro,noexec 0 0
|
||||||
|
@ -36,8 +36,8 @@ http {
|
|||||||
|
|
||||||
include conf.d/tls_settings.include;
|
include conf.d/tls_settings.include;
|
||||||
# RSA
|
# RSA
|
||||||
ssl_certificate /stuff.fizz.buzz/fullchain1.pem;
|
ssl_certificate /letsencrypt/live/stuff.fizz.buzz/fullchain.pem;
|
||||||
ssl_certificate_key /stuff.fizz.buzz/privkey1.pem;
|
ssl_certificate_key /letsencrypt/live/stuff.fizz.buzz/privkey.pem;
|
||||||
|
|
||||||
# Nginx by default only allows file uploads up to 1M in size
|
# Nginx by default only allows file uploads up to 1M in size
|
||||||
client_max_body_size 50M;
|
client_max_body_size 50M;
|
||||||
|
@ -17,7 +17,7 @@
|
|||||||
owner: root
|
owner: root
|
||||||
group: wheel
|
group: wheel
|
||||||
loop:
|
loop:
|
||||||
- /stuff.fizz.buzz
|
- /letsencrypt
|
||||||
- /etc/rc.conf.d
|
- /etc/rc.conf.d
|
||||||
- /usr/local/etc/nginx/conf.d
|
- /usr/local/etc/nginx/conf.d
|
||||||
|
|
||||||
|
@ -3,3 +3,4 @@ ifconfig_igb0="up"
|
|||||||
ifconfig_igb1="up"
|
ifconfig_igb1="up"
|
||||||
ifconfig_lagg0="up laggproto failover laggport igb0 laggport igb1"
|
ifconfig_lagg0="up laggproto failover laggport igb0 laggport igb1"
|
||||||
ifconfig_lagg0_alias0="inet 74.80.180.138 netmask 255.255.255.248"
|
ifconfig_lagg0_alias0="inet 74.80.180.138 netmask 255.255.255.248"
|
||||||
|
ifconfig_lagg0_alias1="inet6 2620:11f:7001:7::2/64"
|
||||||
|
@ -1,3 +1,4 @@
|
|||||||
defaultrouter="74.80.180.137"
|
defaultrouter="74.80.180.137"
|
||||||
|
ipv6_defaultrouter="2620:11f:7001:7::1"
|
||||||
gateway_enable="YES"
|
gateway_enable="YES"
|
||||||
ipv6_gateway_enable="YES"
|
ipv6_gateway_enable="YES"
|
||||||
|
@ -5,6 +5,6 @@ if [ "$1" != '--' ]; then
|
|||||||
fi
|
fi
|
||||||
shift
|
shift
|
||||||
method="git"
|
method="git"
|
||||||
git_clone_uri="https://code.fizz.buzz/talexander/ta_ports.git"
|
git_clone_uri="https://code.fizz.buzz/talexander/fizzbuzz_ports.git"
|
||||||
git_branch="master"
|
git_branch="main"
|
||||||
run_portshaker_command $*
|
run_portshaker_command $*
|
||||||
|
@ -7,6 +7,12 @@ CPUTYPE?=x86-64-v4
|
|||||||
CPUTYPE?=znver4
|
CPUTYPE?=znver4
|
||||||
.endif
|
.endif
|
||||||
|
|
||||||
|
# CPU optimizations for go
|
||||||
|
.if ${.CURDIR:M*/lang/go*}
|
||||||
|
OPTIONS_SET+=V2
|
||||||
|
OPTIONS_SET+=V3
|
||||||
|
OPTIONS_SET+=V4
|
||||||
|
.endif
|
||||||
|
|
||||||
|
|
||||||
OPTIONS_SET+=OPTIMIZED_CFLAGS
|
OPTIONS_SET+=OPTIMIZED_CFLAGS
|
||||||
|
@ -59,6 +59,7 @@ net/rsync
|
|||||||
net/tcpdump
|
net/tcpdump
|
||||||
net/wireguard-tools
|
net/wireguard-tools
|
||||||
net/wlvncc
|
net/wlvncc
|
||||||
|
ports-mgmt/modules2tuple
|
||||||
ports-mgmt/pkg
|
ports-mgmt/pkg
|
||||||
ports-mgmt/pkg-provides
|
ports-mgmt/pkg-provides
|
||||||
ports-mgmt/portshaker
|
ports-mgmt/portshaker
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
# Check that rust-analyzer is valid for date on https://rust-lang.github.io/rustup-components-history/
|
# Check that rust-analyzer is valid for date on https://rust-lang.github.io/rustup-components-history/
|
||||||
rust_date: "2024-05-06"
|
rust_date: "2024-09-30"
|
||||||
# rust_analyzer_version: 2024-04-29
|
# rust_analyzer_version: 2024-04-29
|
||||||
rust_analyzer_version: package
|
rust_analyzer_version: package
|
||||||
|
@ -1,2 +1,12 @@
|
|||||||
[target.x86_64-unknown-linux-gnu]
|
[target.x86_64-unknown-linux-gnu]
|
||||||
rustflags = ["-C", "target-cpu=native", "-Zthreads=0"]
|
rustflags = ["-C", "target-cpu=native", "-Zthreads=0"]
|
||||||
|
|
||||||
|
[unstable]
|
||||||
|
codegen-backend = true
|
||||||
|
|
||||||
|
[profile.dev]
|
||||||
|
codegen-backend = "cranelift"
|
||||||
|
|
||||||
|
[profile.dev.package."*"]
|
||||||
|
codegen-backend = "llvm"
|
||||||
|
opt-level = 3
|
||||||
|
Loading…
Reference in New Issue
Block a user