[meta] enable traefik accesslog, use github public keys
diff --git a/ansible/on-fire-within/main.yml b/ansible/on-fire-within/main.yml
index 5bcdac53..b317d2dd 100644
--- a/ansible/on-fire-within/main.yml
+++ b/ansible/on-fire-within/main.yml
@@ -4,6 +4,12 @@
- hosts: on_fire_within
become: yes
tasks:
+ - name: Set authorized keys from GitHub
+ authorized_key:
+ user: alpha
+ state: present
+ key: https://github.com/kejadlen.keys
+
- name: Install dependencies
apt:
name:
@@ -84,9 +90,18 @@
[api]
insecure = true
+
+ [accessLog]
dest: /etc/traefik/traefik.toml
mode: 0600
+ # https://docs.syncthing.net/users/faq.html#inotify-limits
+ - name: Increase inotify limit for syncthing
+ lineinfile:
+ path: /etc/sysctl.conf
+ regexp: '^fs.inotify.max_user_watches='
+ line: fs.inotify.max_user_watches=204800
+
# The docker_compose module overwrites our existing variables, so this is a
# workaround to save off ones that we need later on in the playbook.
#