ansible/ec2.yml

#!/usr/bin/env ansible-playbook
# vim:ft=ansible:
---
- hosts: ec2
  roles:
    - common
    - user
    - influxdb
- hosts: tag_www_true
  vars:
    mysql_root_password: !vault |
          $ANSIBLE_VAULT;1.1;AES256
          62316565376333396465333931356163343363663063636233653536373033396230626639613964
          3037613839373833646234626236643430393364643131610a333539373533663434373935376130
          65323365313465316635646465376665616132653832316362363535366563363863636530313666
          3036393134386131310a643734363261633166636263343538313533393738323934303137343163
          39636637643035616236663364663562366133613233313139623937313531343564
    acme_directory: "https://acme-v02.api.letsencrypt.org/directory"
    #acme_directory: "https://acme-staging-v02.api.letsencrypt.org/directory"
    acme_version: 2
    acme_webroot: "/var/www/acme"
  roles:
    - role: backups
      vars:
        backups_outdir: "/cold/backups"
    - role: postfix-null
      vars:
        postfix_hostname: "mail.9iron.club"
        postfix_domain: "9iron.club"
    - role: grafana
      vars:
        grafana_mysql_password: !vault |
          $ANSIBLE_VAULT;1.1;AES256
          65376335363732633132326630323161393861323833323631613630343262383137656138356262
          3730386139393739373738626535376636666135646463350a623331333032346434343465666234
          38393539623437376133363063633238383031326431653737346564323837343265653431633962
          6665346237666165330a643635653863356633623535383063366632336437313730626233346664
          33303465616532313339393634386166363162393661393037323835323035386663
        grafana_url: "monitor.9iron.club"
        grafana_webroot: "/var/www/grafana"
    - role: gitea
      vars: 
        gitea_mysql_password: !vault |
          $ANSIBLE_VAULT;1.1;AES256
          62353264353465316661353738666161313036373761666163663733656461316536636334386335
          6161386630663739363439383237343065333239613134610a383036373735326536386464343164
          31346337636665356630336234306534646362386663633734353166373761316139313734306630
          3364306566323666310a323034303434613237643665643637633430353437316339356463646331
          33353062343164396465326365653561626363343961326363633231303736316436643935646161
          3933353234613430373930663832643934613233383635613433
        gitea_app_name: "9iron Gitea"
        gitea_root_directory: "/cold/gitea-repositories/"
        gitea_url: "git.9iron.club"
        gitea_webroot: "/var/www/gitea"
        gitea_admin_username: "salt"
        gitea_admin_email: "rehashedsalt@cock.li"
        gitea_admin_password: !vault |
          $ANSIBLE_VAULT;1.1;AES256
          35613039646236306236363930353231303331633765303039373736626666666530323433356466
          3062633166313332643039613561303431613735396339650a376664373137643439303465376365
          35313266376539366134343562626164616666306338343538663361393964626565303331383234
          3565646664333966650a323530356664366262653763363439613534303764366436376634373639
          62303264653836656162366362316461656363353539343632616462626231643632
    - role: redirect
      vars:
        redirect_from: "9iron.club"
        redirect_to: "www.9iron.club"
        redirect_webroot: "/var/www/redirect"
    - role: gitweb
      vars:
        gitweb_repo: "https://git.9iron.club/salt/www"
        gitweb_url: "www.9iron.club"
        gitweb_webroot: "/var/www/www"
    - role: dokuwiki
      vars:
        dokuwiki_tgz: "https://download.dokuwiki.org/src/dokuwiki/dokuwiki-stable.tgz"
        dokuwiki_url: "wiki.9iron.club"
        dokuwiki_webroot: "/var/www/dokuwiki"
    - role: nextcloud
      vars:
        nextcloud_mysql_password: !vault |
          $ANSIBLE_VAULT;1.1;AES256
          37633035633563646266346264333636393931323664313166633133653461646333643731636661
          3966666665396239346662613764353333393038663762340a313236396331623061376462356437
          66373234633939393034353439393465663131303661393164303335336435653734613064663964
          3332313764623133630a393731613236373837316437653265636663666261383135636662373566
          61373135303632336237333836353764646639633735323566346366623766646266
        nextcloud_tarbz2: "https://download.nextcloud.com/server/releases/nextcloud-18.0.0.tar.bz2"
        nextcloud_url: "nc.9iron.club"
        nextcloud_webroot: "/var/www/nextcloud"
- hosts: tag_minecraft_ultreload
  roles:
    - role: backups
    - role: minecraft
      vars:
        mcname: "ftbult-reloaded-smp"
        mczip: "https://media.forgecdn.net/files/2746/974/FTBUltimateReloadedServer_1.8.0.zip"
        mcforge: "1.12.2-14.23.5.2846"
        mcmotd: "Going back to the roots edition"
        mcport: 25565
        mcgamemode: 0
- hosts: tag_ansiblehost_true
  roles:
    - ansiblehost
Change shebang of ansible-playbook Yeah, it's turning out that that's more often in /usr/local/bin. Guess why 2019-09-15 01:24:44 -05:00			`#!/usr/bin/env ansible-playbook`
Actually add Ansible files 2019-08-30 14:13:34 -05:00			`# vim:ft=ansible:`
			`---`
Remove role interdependencies 2019-09-15 01:26:37 -05:00			`- hosts: ec2`
Babby's first playbooks 2019-09-14 11:49:23 -05:00			`roles:`
			`- common`
Add disfunctional Nextcloud role 2020-02-05 20:23:20 -06:00			`- user`
Install influxdb after common That last one's kind of more important 2020-05-10 08:15:27 -05:00			`- influxdb`
Add Minecraft server role 2020-02-23 23:45:11 -06:00			`- hosts: tag_www_true`
Add disfunctional Nextcloud role 2020-02-05 20:23:20 -06:00			`vars:`
Basic MySQL configuration 2020-02-05 23:43:22 -06:00			`mysql_root_password: !vault \|`
			`$ANSIBLE_VAULT;1.1;AES256`
			`62316565376333396465333931356163343363663063636233653536373033396230626639613964`
			`3037613839373833646234626236643430393364643131610a333539373533663434373935376130`
			`65323365313465316635646465376665616132653832316362363535366563363863636530313666`
			`3036393134386131310a643734363261633166636263343538313533393738323934303137343163`
			`39636637643035616236663364663562366133613233313139623937313531343564`
We're switchin to prod! 2020-02-06 01:12:23 -06:00			`acme_directory: "https://acme-v02.api.letsencrypt.org/directory"`
			`#acme_directory: "https://acme-staging-v02.api.letsencrypt.org/directory"`
Add disfunctional Nextcloud role 2020-02-05 20:23:20 -06:00			`acme_version: 2`
Add acme_webroot to main playbook 2020-02-20 04:21:29 -06:00			`acme_webroot: "/var/www/acme"`
Scope variables in main playbook a bit better 2020-02-10 01:29:59 -06:00			`roles:`
Make backups local to hosts This actually allows for host-specific changes 2020-05-06 02:18:52 -05:00			`- role: backups`
			`vars:`
			`backups_outdir: "/cold/backups"`
Fix up postfix a bit more, make it a general role 2020-05-12 12:58:03 -05:00			`- role: postfix-null`
			`vars:`
Change outbound hostname 2020-05-12 13:10:12 -05:00			`postfix_hostname: "mail.9iron.club"`
Fix up postfix a bit more, make it a general role 2020-05-12 12:58:03 -05:00			`postfix_domain: "9iron.club"`
Add Grafana WEW No fires 2020-05-10 03:30:19 -05:00			`- role: grafana`
			`vars:`
			`grafana_mysql_password: !vault \|`
			`$ANSIBLE_VAULT;1.1;AES256`
Change grafana db password Turns out newlines are real bad 2020-05-10 08:05:59 -05:00			`65376335363732633132326630323161393861323833323631613630343262383137656138356262`
			`3730386139393739373738626535376636666135646463350a623331333032346434343465666234`
			`38393539623437376133363063633238383031326431653737346564323837343265653431633962`
			`6665346237666165330a643635653863356633623535383063366632336437313730626233346664`
			`33303465616532313339393634386166363162393661393037323835323035386663`
Add Grafana WEW No fires 2020-05-10 03:30:19 -05:00			`grafana_url: "monitor.9iron.club"`
			`grafana_webroot: "/var/www/grafana"`
Ensure we deploy Gitea before anything else Would be kind of embarassing if a later role got caught because it tried to access a git repo that didn't exist 2020-05-01 14:10:12 -05:00			`- role: gitea`
			`vars:`
			`gitea_mysql_password: !vault \|`
			`$ANSIBLE_VAULT;1.1;AES256`
			`62353264353465316661353738666161313036373761666163663733656461316536636334386335`
			`6161386630663739363439383237343065333239613134610a383036373735326536386464343164`
			`31346337636665356630336234306534646362386663633734353166373761316139313734306630`
			`3364306566323666310a323034303434613237643665643637633430353437316339356463646331`
			`33353062343164396465326365653561626363343961326363633231303736316436643935646161`
			`3933353234613430373930663832643934613233383635613433`
			`gitea_app_name: "9iron Gitea"`
			`gitea_root_directory: "/cold/gitea-repositories/"`
			`gitea_url: "git.9iron.club"`
			`gitea_webroot: "/var/www/gitea"`
			`gitea_admin_username: "salt"`
			`gitea_admin_email: "rehashedsalt@cock.li"`
			`gitea_admin_password: !vault \|`
			`$ANSIBLE_VAULT;1.1;AES256`
			`35613039646236306236363930353231303331633765303039373736626666666530323433356466`
			`3062633166313332643039613561303431613735396339650a376664373137643439303465376365`
			`35313266376539366134343562626164616666306338343538663361393964626565303331383234`
			`3565646664333966650a323530356664366262653763363439613534303764366436376634373639`
			`62303264653836656162366362316461656363353539343632616462626231643632`
Move roles around on main host Which is currently misroled but whatever 2020-02-11 04:26:24 -06:00			`- role: redirect`
			`vars:`
Migrate domains, reorganize websites so that they actually leverage sites-available and sites-enabled 2020-02-27 05:16:02 -06:00			`redirect_from: "9iron.club"`
			`redirect_to: "www.9iron.club"`
Move roles around on main host Which is currently misroled but whatever 2020-02-11 04:26:24 -06:00			`redirect_webroot: "/var/www/redirect"`
Reorganize roles in ec2 playbook 2020-02-20 05:26:32 -06:00			`- role: gitweb`
			`vars:`
Update links across the board to point to git.9iron 2020-04-30 13:26:16 -05:00			`gitweb_repo: "https://git.9iron.club/salt/www"`
Migrate domains, reorganize websites so that they actually leverage sites-available and sites-enabled 2020-02-27 05:16:02 -06:00			`gitweb_url: "www.9iron.club"`
Switch repo for gitweb, fix apache handler God dammit Ubuntu 2020-02-26 19:10:21 -06:00			`gitweb_webroot: "/var/www/www"`
Add DokuWiki role It deploys without issue, naisu 2020-02-18 02:39:55 -06:00			`- role: dokuwiki`
			`vars:`
			`dokuwiki_tgz: "https://download.dokuwiki.org/src/dokuwiki/dokuwiki-stable.tgz"`
Migrate domains, reorganize websites so that they actually leverage sites-available and sites-enabled 2020-02-27 05:16:02 -06:00			`dokuwiki_url: "wiki.9iron.club"`
Add DokuWiki role It deploys without issue, naisu 2020-02-18 02:39:55 -06:00			`dokuwiki_webroot: "/var/www/dokuwiki"`
Scope variables in main playbook a bit better 2020-02-10 01:29:59 -06:00			`- role: nextcloud`
			`vars:`
			`nextcloud_mysql_password: !vault \|`
Set up a database for nextcloud 2020-02-05 23:56:41 -06:00			`$ANSIBLE_VAULT;1.1;AES256`
			`37633035633563646266346264333636393931323664313166633133653461646333643731636661`
			`3966666665396239346662613764353333393038663762340a313236396331623061376462356437`
			`66373234633939393034353439393465663131303661393164303335336435653734613064663964`
			`3332313764623133630a393731613236373837316437653265636663666261383135636662373566`
			`61373135303632336237333836353764646639633735323566346366623766646266`
Scope variables in main playbook a bit better 2020-02-10 01:29:59 -06:00			`nextcloud_tarbz2: "https://download.nextcloud.com/server/releases/nextcloud-18.0.0.tar.bz2"`
Migrate domains, reorganize websites so that they actually leverage sites-available and sites-enabled 2020-02-27 05:16:02 -06:00			`nextcloud_url: "nc.9iron.club"`
Scope variables in main playbook a bit better 2020-02-10 01:29:59 -06:00			`nextcloud_webroot: "/var/www/nextcloud"`
Deploy Minecraft after core services 2020-05-01 14:17:28 -05:00			`- hosts: tag_minecraft_ultreload`
			`roles:`
Make backups local to hosts This actually allows for host-specific changes 2020-05-06 02:18:52 -05:00			`- role: backups`
Deploy Minecraft after core services 2020-05-01 14:17:28 -05:00			`- role: minecraft`
			`vars:`
			`mcname: "ftbult-reloaded-smp"`
			`mczip: "https://media.forgecdn.net/files/2746/974/FTBUltimateReloadedServer_1.8.0.zip"`
			`mcforge: "1.12.2-14.23.5.2846"`
			`mcmotd: "Going back to the roots edition"`
			`mcport: 25565`
			`mcgamemode: 0`
Add half a gitlab script 2020-04-18 03:15:46 -05:00			`- hosts: tag_ansiblehost_true`
			`roles:`
			`- ansiblehost`