Update custom ports location.

This is based on https://bjorn3.github.io/2023/10/31/progress-report-oct-2023.html.

ansible/roles/base/tasks/freebsd.yaml

@@ -39,18 +39,6 @@
   command: cap_mkdb /etc/login.conf
   when: login_config.changed
 
-- name: Enable periodic scrub
-  community.general.sysrc:
-    name: daily_scrub_zfs_enable
-    value: "YES"
-    path: /etc/periodic.conf.local
-
-- name: Set scrub interval
-  community.general.sysrc:
-    name: daily_scrub_zfs_default_threshold
-    value: "7"
-    path: /etc/periodic.conf.local
-
 - name: Install loader.conf
   copy:
     src: "{{loader_conf}}"
@@ -134,3 +122,29 @@
       value: 65
     - name: net.inet6.ip6.hlim
       value: 65
+
+- name: Log periodic output instead of getting it as mail
+  blockinfile:
+    path: "/etc/periodic.conf.local"
+    marker: "# {mark} ANSIBLE MANAGED BLOCK log"
+    # create: true
+    mode: 0644
+    owner: root
+    group: wheel
+    block: |
+      daily_output=/var/log/daily.log
+      weekly_output=/var/log/weekly.log
+      monthly_output=/var/log/monthly.log
+
+- name: Enable periodic zfs scrub
+  when: install_zfs
+  blockinfile:
+    path: "/etc/periodic.conf.local"
+    marker: "# {mark} ANSIBLE MANAGED BLOCK zfs"
+    # create: true
+    mode: 0644
+    owner: root
+    group: wheel
+    block: |
+      daily_scrub_zfs_enable="YES"
+      daily_scrub_zfs_default_threshold="7"

ansible/roles/jail/files/fstab_bastion

@@ -1,4 +1,4 @@
 tmpfs /jail/bastion/tmp tmpfs rw,mode=777 0 0
 tmpfs /jail/bastion/var/run tmpfs rw,mode=755 0 0
 
-/jail/certificate/usr/local/etc/letsencrypt/archive/stuff.fizz.buzz       /jail/bastion/stuff.fizz.buzz     nullfs    ro,noexec     0      0
+/jail/certificate/usr/local/etc/letsencrypt       /jail/bastion/letsencrypt     nullfs    ro,noexec     0      0

ansible/roles/jail_bastion/files/nginx.conf

@@ -36,8 +36,8 @@ http {
 
         include conf.d/tls_settings.include;
         # RSA
-        ssl_certificate /stuff.fizz.buzz/fullchain1.pem;
-        ssl_certificate_key /stuff.fizz.buzz/privkey1.pem;
+        ssl_certificate /letsencrypt/live/stuff.fizz.buzz/fullchain.pem;
+        ssl_certificate_key /letsencrypt/live/stuff.fizz.buzz/privkey.pem;
 
         # Nginx by default only allows file uploads up to 1M in size
         client_max_body_size 50M;

ansible/roles/jail_bastion/tasks/freebsd.yaml

@@ -17,7 +17,7 @@
     owner: root
     group: wheel
   loop:
-    - /stuff.fizz.buzz
+    - /letsencrypt
     - /etc/rc.conf.d
     - /usr/local/etc/nginx/conf.d
 

ansible/roles/network/files/mrmanager_network.conf

@@ -3,3 +3,4 @@ ifconfig_igb0="up"
 ifconfig_igb1="up"
 ifconfig_lagg0="up laggproto failover laggport igb0 laggport igb1"
 ifconfig_lagg0_alias0="inet 74.80.180.138 netmask 255.255.255.248"
+ifconfig_lagg0_alias1="inet6 2620:11f:7001:7::2/64"

ansible/roles/network/files/mrmanager_routing.conf

@@ -1,3 +1,4 @@
 defaultrouter="74.80.180.137"
+ipv6_defaultrouter="2620:11f:7001:7::1"
 gateway_enable="YES"
 ipv6_gateway_enable="YES"

ansible/roles/portshaker/files/myrepo

@@ -5,6 +5,6 @@ if [ "$1" != '--' ]; then
 fi
 shift
 method="git"
-git_clone_uri="https://code.fizz.buzz/talexander/ta_ports.git"
-git_branch="master"
+git_clone_uri="https://code.fizz.buzz/talexander/fizzbuzz_ports.git"
+git_branch="main"
 run_portshaker_command $*

ansible/roles/poudriere/files/poudriere.d/currentznver4-default-framework-make.conf

@@ -7,6 +7,12 @@ CPUTYPE?=x86-64-v4
 CPUTYPE?=znver4
 .endif
 
+# CPU optimizations for go
+.if ${.CURDIR:M*/lang/go*}
+OPTIONS_SET+=V2
+OPTIONS_SET+=V3
+OPTIONS_SET+=V4
+.endif
 
 
 OPTIONS_SET+=OPTIMIZED_CFLAGS

ansible/roles/poudriere/files/poudriere.d/currentznver4-default-framework-pkglist

@@ -59,6 +59,7 @@ net/rsync
 net/tcpdump
 net/wireguard-tools
 net/wlvncc
+ports-mgmt/modules2tuple
 ports-mgmt/pkg
 ports-mgmt/pkg-provides
 ports-mgmt/portshaker

ansible/roles/rust/defaults/main.yaml

@@ -1,4 +1,4 @@
 # Check that rust-analyzer is valid for date on https://rust-lang.github.io/rustup-components-history/
-rust_date: "2024-05-06"
+rust_date: "2024-09-30"
 # rust_analyzer_version: 2024-04-29
 rust_analyzer_version: package

ansible/roles/rust/files/cargo_config.toml

@@ -1,2 +1,12 @@
 [target.x86_64-unknown-linux-gnu]
 rustflags = ["-C", "target-cpu=native", "-Zthreads=0"]
+
+[unstable]
+codegen-backend = true
+
+[profile.dev]
+codegen-backend = "cranelift"
+
+[profile.dev.package."*"]
+codegen-backend = "llvm"
+opt-level = 3