fixes - temporary, now incomplete!

.editorconfig

@@ -0,0 +1,19 @@
+# EditorConfig is awesome: https://EditorConfig.org
+
+# top-most EditorConfig file
+root = true
+
+[*]
+indent_style = space
+indent_size = 2
+end_of_line = lf
+charset = utf-8
+trim_trailing_whitespace = true
+insert_final_newline = true
+
+[Makefile]
+indent_style = tab
+tab_width = 2
+
+[*.md]
+trim_trailing_whitespace = false

.gitignore

@@ -0,0 +1 @@
+target

README.adoc

@@ -1,6 +1,6 @@
 /////
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 /////
 
@@ -132,6 +132,6 @@ $ ansible-playbook -i production site.yml
 [literal.small]
 .....
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 .....

bootstrap.adoc

@@ -1,6 +1,6 @@
 /////
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 /////
 
@@ -538,6 +538,6 @@ I decided to do a clean import, especially since I configured Dovecot in a way
 [literal.small]
 .....
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 .....

roles/_maintenance_start/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: stop some services

roles/_maintenance_stop/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: stop again services that may got started by handlers

roles/acme_back/files/dehydrated.timer

@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 [Unit]

roles/acme_back/handlers/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart dehydrated.service

roles/acme_back/meta.OK/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:

roles/acme_back/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###

roles/acme_back/templates/dehydrated.config.j2

@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 #CA="https://acme-staging.api.letsencrypt.org/directory"

roles/acme_back/templates/hook.sh.j2

@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 RSH=/usr/local/bin/{{DMZ}}

roles/acme_front/handlers/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart nginx.service

roles/acme_front/meta.OK/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:

roles/acme_front/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: ensure /srv/acme exists

roles/aur.inc/tasks/install.yml

@@ -1,9 +1,9 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
-# mandatory parameters: pkg_name, pre_cmd, aur_user
+# mandatory parameters: pkg_name, pre_cmd, aur_name, aur_home
 
 - name: AUR → {{pkg_name}} → read current version
   shell: |
@@ -14,7 +14,7 @@
 - name: AUR → {{pkg_name}} → get metadata from AurJson
   uri:
     url: https://aur.archlinux.org/rpc/?v=5&type=info&arg={{pkg_name | mandatory}}
-  connection: local
+  delegate_to: localhost
   register: aurjson
   changed_when: false
 
@@ -22,7 +22,7 @@
   get_url:
     url: https://aur.archlinux.org{{aurjson.json.results[0].URLPath}}
     dest: /tmp/
-  connection: local
+  delegate_to: localhost
   when:
     - (aurjson.json.results[0].Version != (pacmanQi.stdout | default()))
   register: aur_recipe
@@ -45,6 +45,8 @@
           args:
             chdir: /var/tmp/{{aurjson.json.results[0].PackageBase}}
           when: pre_cmd
+          environment:
+            HOME: "{{aur_home}}"
           register: debugCustom
 
         - name: AUR → {{pkg_name}} → see custom pre-processing commands’ result
@@ -86,6 +88,8 @@
                 - (pacman_output.stdout is defined)
                 - (pacman_output.stdout.find('there is nothing to do') == -1)
 
+          environment:
+            HOME: "{{aur_home}}"
           when:
             - (realVersion.stdout != (pacmanQi.stdout | default()))
 
@@ -97,7 +101,7 @@
           changed_when: false
 
   become: true
-  become_user: "{{aur_user}}"
+  become_user: "{{aur_name}}"
   when:
     - (aurjson.json.results[0].Version != (pacmanQi.stdout | default()))
 
@@ -106,6 +110,6 @@
       file:
         path: '{{aur_recipe.dest}}'
         state: absent
-      connection: local
+      delegate_to: localhost
       become: false
       changed_when: false

roles/aur.inc/tasks/main.yml

@@ -1,28 +1,61 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 # mandatory parameters:
 # - pkg_names (json-encoded list)
 # - aur_user
 
-- name: AUR → base-devel needed while building
-  become: false
-  command: |
-    pacman -S --noconfirm --noprogressbar --asdeps --needed base-devel
+- name: AUR → read (or create) requested HOME while running AUR tasks
+  shell: |
+    case "$aur_requested_home" in
+    '') printf '%s' "$HOME" ;;
+    '!mktemp') sudo -u "$aur_user_name" mktemp -d /tmp/AUR-TEMP-HOME-XXXX ;;
+    *) printf '%s' "$aur_requested_home" ;;
+    esac
+  environment:
+    aur_requested_home: "{{(aur_user is mapping) | ternary(aur_user.home, '')}}"
+    aur_user_name: "{{(aur_user is mapping) | ternary(aur_user.name, aur_user)}}"
+  register: requestedHome
   changed_when: false
 
-- name: AUR → proceed with installation
+- name: AUR → run AUR tasks
   block:
-    - name: AUR → installation
-      include_tasks: install.yml
-      vars:
-        pkg_name: "{{(item is mapping) | ternary(item.pkg, item)}}"
-        pre_cmd: "{{(item is mapping) | ternary(item.pre, '')}}"
-      with_items: "{{packages}}"
-  always:
-    - name: AUR → remove base-devel and dependencies
-      shell: |
-        pacman -Rns --noconfirm --noprogressbar $(pacman -Qtdqg base-devel) || true
+
+    - name: AUR → see effective HOME
+      debug:
+        var: requestedHome
+      changed_when: false
+
+    - name: AUR → base-devel needed while building
+      become: false
+      command: |
+        pacman -S --noconfirm --noprogressbar --asdeps --needed base-devel
+      changed_when: false
+
+    - name: AUR → proceed with installation
+      block:
+        - name: AUR → installation
+          include_tasks: install.yml
+          vars:
+            aur_name: "{{(aur_user is mapping) | ternary(aur_user.name, aur_user)}}"
+            aur_home: "{{requestedHome.stdout}}"
+            pkg_name: "{{(item is mapping) | ternary(item.pkg, item)}}"
+            pre_cmd: "{{(item is mapping) | ternary(item.pre, '')}}"
+          with_items: "{{packages}}"
+      always:
+        - name: AUR → remove base-devel and dependencies
+          shell: |
+            pacman -Rns --noconfirm --noprogressbar base-devel || true
+          changed_when: false
+
+  always:
+    - name: AUR → remove temporary HOME
+      file:
+        path: "{{requestedHome.stdout}}"
+        state: absent
+      when:
+        - (aur_user is mapping)
+        - (aur_user.home == '!mktemp')
       changed_when: false

roles/cleanupdate/meta.OK/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:

roles/cleanupdate/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###

roles/ddclient.inc/meta.OK/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:

roles/ddclient.inc/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###

roles/ddclient_FreeDNS_example/handlers/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart ddclient@fdns.service

roles/ddclient_FreeDNS_example/meta.OK/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:

roles/ddclient_FreeDNS_example/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: initialize the ddclient software

roles/ddclient_HE_example/handlers/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart ddclient@henet.service

roles/ddclient_HE_example/meta.OK/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:

roles/ddclient_HE_example/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: initialize the ddclient software

roles/dmz_dotclear_front/handlers/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart nginx.service

roles/dmz_dotclear_front/meta.OK/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:

roles/dmz_dotclear_front/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: make sure the path to dotclear exists
@@ -13,7 +13,7 @@
   get_url:
     url: 'http://download.dotclear.org/latest.tar.gz'
     dest: /tmp/
-  connection: local
+  delegate_to: localhost
   register: targz
   changed_when: false
 

roles/dmz_dotclear_front/templates/config.php.j2

@@ -1,6 +1,6 @@
 <?php
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 if (!defined('DC_RC_PATH')) { return; }

roles/dmz_dotclear_front/templates/ldap_auth.php.j2

@@ -1,6 +1,6 @@
 <?php
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 # https://fr.dotclear.org/documentation/2.0/resources/authentication

roles/dmz_exim/handlers/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart spamassassin-update.timer

roles/dmz_exim/meta.OK/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:

roles/dmz_exim/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
@@ -498,10 +498,9 @@
     marker: '  # {mark} LMTP transport'
     block: |
       lmtp_transport:
-        driver = smtp
-        protocol = lmtp
-        rcpt_include_affixes
-        port = 24
+        driver = lmtp
+        socket = /run/shared_sockets/lmtp
+        timeout = 1m
     insertbefore: '^# This transport is used'
   notify:
     - restart exim.service

roles/dmz_haproxy/handlers/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart haproxy.service

roles/dmz_haproxy/meta.OK/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:

roles/dmz_haproxy/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###

roles/dmz_haproxy/templates/haproxy.conf.j2

@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 global

roles/dmz_ihmgit_front/handlers/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart nginx.service

roles/dmz_ihmgit_front/meta.OK/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:

roles/dmz_ihmgit_front/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: configure nginx for Gitea

roles/dmz_ihmldap/handlers/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart nginx.service

roles/dmz_ihmldap/meta.OK/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:

roles/dmz_ihmldap/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###

roles/dmz_motion_front/handlers/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart nginx.service

roles/dmz_motion_front/meta.OK/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:

roles/dmz_motion_front/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: create a directory for the Motion web page

roles/dmz_movim_front/handlers/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart movim.service

roles/dmz_movim_front/meta.OK/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:

roles/dmz_movim_front/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###

roles/dmz_nextcloud_front/handlers/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart nginx.service

roles/dmz_nextcloud_front/meta.OK/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:

roles/dmz_nextcloud_front/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: configure Nginx for Nextcloud

roles/dmz_nextcloud_front/templates/nginx_lool.j2

@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 # Nextcloud BUG

roles/dmz_nextcloud_front/templates/nginx_nextcloud.j2

@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 # https://docs.nextcloud.com/server/12/admin_manual/installation/nginx.html

roles/dmz_nginx/handlers/main.yml

@@ -1,10 +1,10 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: create tmpfiles
-  command: systemd-tmpfiles --create
+  command: systemd-tmpfiles --create /etc/tmpfiles.d/run_http.conf
 
 - name: restart nginx.service
   systemd:

roles/dmz_nginx/meta.OK/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:

roles/dmz_nginx/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
@@ -10,13 +10,13 @@
     msg: nginx
 ### ⇐ UPSTREAM BEGIN ###
 
-- name: install software
-  package:
-    name: "{{item}}"
-    state: present
-  with_items:
+#- name: install software
+#  package:
+#    name: "{{item}}"
+#    state: present
+#  with_items:
 #    - nginx-mainline # nginx-mainline must now be built from official PKGBUILD :-(
-    - php-fpm
+#    - php-fpm
 
 ### UPSTREAM END ⇒ ###
 - name: merge upstream
@@ -226,7 +226,7 @@
     - user
     - group
     - 'listen.group'
-  
+
 - name: set the PID file path for php-fpm
   lineinfile:
     path: /etc/php/php-fpm.conf

roles/dmz_nginx/templates/00.http.inc.j2

@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 location / {

roles/dmz_nginx/templates/10.conf.j2

@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 client_max_body_size {{http_max_upload}};

roles/dmz_nginx/templates/filters.inc.j2

@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 location ~ (?i)(?<!{{http_pfx_dotclear}}/)admin|(?<!{{http_pfx_lam}}/templates/)login|(?<!{{http_pfx_dotclear}}/admin/)auth(?!or) {

roles/dmz_nginx/templates/php-fast.inc.j2

@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 # http://wiki.nginx.org/Pitfalls#Passing_Uncontrolled_Requests_to_PHP

roles/dmz_nginx/templates/php-full.inc.j2

@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 # function /php...(doc_root /... prefix /... script /... pathinfo) {

roles/dmz_prosody_front/handlers/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart prosody.service

roles/dmz_prosody_front/meta.OK/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:

roles/dmz_prosody_front/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###

roles/dmz_prosody_front/templates/xep0363_http_upload.php.j2

@@ -1,6 +1,6 @@
 <?php
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 /*

roles/dmz_wallabag_front/handlers/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart nginx.service

roles/dmz_wallabag_front/meta.OK/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:

roles/dmz_wallabag_front/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###

roles/dotclear_back/meta.OK/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:

roles/dotclear_back/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: PostgreSQL user for dotClear

roles/dovecot/handlers/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart dovecot.service

roles/dovecot/meta.OK/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:

roles/dovecot/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###

roles/dovecot/templates/dovecot-ldap-passdb.conf.j2

@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 # This file is opened as root, so it should be owned by root and mode 0600.

roles/dovecot/templates/dovecot.conf.j2

@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ## Dovecot configuration file (/usr/share/doc/dovecot/example-config)
@@ -51,15 +51,15 @@ service imap-login {
   }
 }
 service lmtp {
-  #unix_listener /run/shared_sockets/lmtp {
-  #  mode = 0666
-  #}
+  unix_listener /run/shared_sockets/lmtp {
+    mode = 0666
+  }
   # Create inet listener only if you can't use the above UNIX socket
   # https://yalis.fr/git/yves/home-server/issues/6
-  inet_listener lmtp {
-    address = {{SafeZone_IP}}
-    port = 24
-  }
+  #inet_listener lmtp {
+  #  address = {{SafeZone_IP}}
+  #  port = 24
+  #}
 }
 service imap {
 }
@@ -75,8 +75,8 @@ service auth-worker {
 #  # For example: mode=0660, group=vmail and global mail_access_groups=vmail
 #  unix_listener dict {
 #    #mode = 0600
-#    #user = 
-#    #group = 
+#    #user =
+#    #group =
 #  }
 #}
 

roles/etckeeper.inc/tasks/init.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: install etckeeper

roles/etckeeper.inc/tasks/local.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: store /etc changes

roles/etckeeper.inc/tasks/merge.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: switch Git to run

roles/etckeeper.inc/tasks/upstream.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: switch Git to master

roles/front/files/DMZ.nspawn

@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 [Exec]

roles/front/files/nspawn_override.conf

@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 [Unit]

roles/front/meta.OK/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:

roles/front/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
@@ -40,10 +40,10 @@
   shell: >
     pacstrap -c -d {{front_dir}}
     $(
-    pacman -Qg base
-    | grep -vE
-    ' (bzip2|dhcpcd|gzip|licenses|linux|lvm2|mdadm|pciutils|reiserfsprogs|systemd-sysvcompat|texinfo|usbutils|xfsprogs)$'
-    | cut -d' ' -f2
+    LANG=C pacman -Si base
+    | sed -nr 's/^Depends[^:]*: *//;t ok;b;: ok;s/ +/\n/g;p;q'
+    | grep -vxE
+    'bzip2|dhcpcd|gzip|licenses|linux|lvm2|mdadm|pciutils|reiserfsprogs|systemd-sysvcompat|texinfo|usbutils|xfsprogs'
     )
     busybox openssh python etckeeper
   args:
@@ -55,6 +55,8 @@
     arch-chroot {{front_dir}} /usr/bin/busybox --install
   args:
     creates: "{{front_dir}}/usr/bin/ash"
+  when:
+    - (arch.changed)
 
 - name: … but not for some binaries
   file:

roles/front/templates/DMZ.j2

@@ -2,7 +2,7 @@
 # $1: bash script; $2…: arguments (bash -c "…script…" 'bash' …arguments…)
 #
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 cmd="$1"; shift

roles/front/vars/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 front_dir: /var/lib/machines/{{DMZ}}

roles/front_run/handlers/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart DMZ

roles/front_run/meta.OK/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:

roles/front_run/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: start systemd-nspawn@{{DMZ}}.service

roles/ihmgit_back/handlers/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart gitea.service

roles/ihmgit_back/meta.OK/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:

roles/ihmgit_back/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
@@ -44,7 +44,7 @@
 - name: create Gitea configuration file
   file:
     path: /etc/gitea/app.ini
-    state: file
+    state: touch
 
 - name: make sure the Gitea user owns its work-directories
   file:

roles/init/files/bin/.etc_checkroot.inc

@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 if [ ${0:0:1} == / ]; then

roles/init/files/bin/etc_start_upstream

@@ -1,6 +1,6 @@
 #!/bin/bash
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 . "$(dirname "$0")/.etc_checkroot.inc"

roles/init/files/bin/etc_stop_local

@@ -1,6 +1,6 @@
 #!/bin/bash
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 . "$(dirname "$0")/.etc_checkroot.inc"

roles/init/files/bin/etc_stop_upstream

@@ -1,6 +1,6 @@
 #!/bin/bash
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 . "$(dirname "$0")/.etc_checkroot.inc"

roles/init/tasks/main.yml

@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 # WARNING: This file may be used inside a mounted chroot.

roles/init/templates/etc_init.j2

@@ -1,6 +1,6 @@
 #!/bin/bash
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 . "$(dirname "$0")/.etc_checkroot.inc"