01/02: berlin: Set up anonip for every log file.

[Ricardo Wurmus]

rekado pushed a commit to branch master
in repository maintenance.

commit d7405844fdc326170c22a0010db0af142d7c8632
Author: Ricardo Wurmus <rekado@elephly.net>
AuthorDate: Sun Jul 3 14:52:10 2022 +0200

    berlin: Set up anonip for every log file.
    
    * hydra/berlin.scm (anonip-service): New procedure.
    [services]: Add anonip services for all web server log files.
---
 hydra/berlin.scm | 21 +++++++++++++++++++--
 1 file changed, 19 insertions(+), 2 deletions(-)

diff --git a/hydra/berlin.scm b/hydra/berlin.scm
index 46c1131..ded3a18 100644
--- a/hydra/berlin.scm
+++ b/hydra/berlin.scm
@@ -1,7 +1,7 @@
 ;; OS configuration for "berlin", the frontend of the compile farm
 ;; hosted at the MDC.
 ;; Copyright © 2016-2022 Ludovic Courtès <ludo@gnu.org>
-;; Copyright © 2017, 2018, 2019, 2020, 2021 Ricardo Wurmus <rekado@elephly.net>
+;; Copyright © 2017, 2018, 2019, 2020, 2021, 2022 Ricardo Wurmus 
<rekado@elephly.net>
 ;; Copyright © 2019, 2021 Julien Lepiller <julien@lepiller.eu>
 ;; Copyright © 2020, 2021 Florian Pelz <pelzflorian@pelzflorian.de>
 ;; Copyright © 2020, 2021 Mathieu Othacehe <othacehe@gnu.org>
@@ -17,7 +17,7 @@
              (srfi srfi-1)
              (ice-9 match))
 (use-service-modules avahi base databases dns monitoring networking admin
-                     rsync shepherd ssh vpn)
+                     rsync shepherd ssh vpn web)
 (use-package-modules admin base certs databases emacs linux mail monitoring
                      ssh tls tor vim package-management
                      version-control
@@ -228,6 +228,12 @@ Happy hacking!\n"))
                     %common-btrfs-options)))
     (dependencies (list @root))))
 
+(define (anonip-service file)
+  (service anonip-service-type
+           (anonip-configuration
+            (input (format #false "/var/run/anonip/~a" file))
+            (output (format #false "/var/log/anonip/~a" file)))))
+
 
 (operating-system
   (host-name "berlin.guix.gnu.org")
@@ -482,6 +488,17 @@ Happy hacking!\n"))
                           (allowed-ips '("10.0.0.12/32")))))))
 
              (append
+                 (map anonip-service
+                      '("http.access.log"
+                        "https.access.log"
+                        "disarchive.access.log"
+                        "dump-guix-gnu-org.https.access.log"
+                        "qualif.access.log"
+                        "bootstrappable.access.log"
+                        "bootstrappable.https.access.log"
+                        "workflows-guix-info.access.log"
+                        "workflows-guix-info.https.access.log"
+                        "issues-guix-gnu-org.https.access.log"))
                  (website-services)
                  (frontend-services %sysadmins
                                     ;; Make sure we get enough build users.