ansible/site.yml

#!/usr/bin/env ansible-playbook
# vim:ft=ansible:
---
  # Preambulatory system configuration
- import_playbook: playbooks/all.yml
- import_playbook: playbooks/all_scanner.yml
  # Platform configuration
- import_playbook: playbooks/platforms_ub2004.yml
- import_playbook: playbooks/platforms_ub2110.yml
- import_playbook: playbooks/platforms_proxmox-ve-7.yml
  # Manufacturer configuration
- import_playbook: playbooks/manufacturers_raspi.yml
- import_playbook: playbooks/manufacturers_s76.yml
  # Zerotier network configuration
- import_playbook: playbooks/tags_zt-personal.yml
  # Tags for fundamental services
- import_playbook: playbooks/tags_snmp.yml
- import_playbook: playbooks/tags_nagios.yml
  # Role (in the Netbox sense) configuration
- import_playbook: playbooks/device_roles_bastion.yml
- import_playbook: playbooks/device_roles_game.yml
- import_playbook: playbooks/device_roles_workstation.yml
  # Home configuration
- import_playbook: playbooks/home_db.yml
- import_playbook: playbooks/home_fs.yml
- import_playbook: playbooks/home_app.yml
- import_playbook: playbooks/home_game.yml
- import_playbook: playbooks/home_media.yml
- import_playbook: playbooks/home_automation.yml
  # Production configuration
- import_playbook: playbooks/prod_db.yml
- import_playbook: playbooks/prod_web.yml
- import_playbook: playbooks/prod_com.yml
- import_playbook: playbooks/prod_game.yml
  # Supplementary tags
- import_playbook: playbooks/tags_ansible.yml
- import_playbook: playbooks/tags_ansible-pull.yml
  # Housekeeping tags for one-off tasks
- import_playbook: playbooks/tags_docker-prune.yml
- import_playbook: playbooks/tags_autoreboot.yml
  # Last little bit of cleanup
- import_playbook: playbooks/cleanup.yml
Working on basics 2020-10-17 00:21:57 -05:00			`#!/usr/bin/env ansible-playbook`
			`# vim:ft=ansible:`
Taking a dump 2020-10-17 01:00:06 -05:00			`---`
Add some basic roles NYI 2020-10-17 18:06:35 -05:00			`# Preambulatory system configuration`
Move "all" configuration into its own playbook 2021-08-26 02:39:17 -05:00			`- import_playbook: playbooks/all.yml`
Configure a scanner user on all machines 2021-12-30 10:04:18 -06:00			`- import_playbook: playbooks/all_scanner.yml`
Move motd configuration to Ubuntu machines and only Ubuntu machines 2021-11-06 15:53:57 -05:00			`# Platform configuration`
			`- import_playbook: playbooks/platforms_ub2004.yml`
Add a new laptop, rebase zerotier repo 2022-01-21 16:55:10 -06:00			`- import_playbook: playbooks/platforms_ub2110.yml`
Add some backup configuration for PMX hosts 2021-11-11 13:54:11 -06:00			`- import_playbook: playbooks/platforms_proxmox-ve-7.yml`
Reorganize ALL of the playbooks 2021-08-23 20:28:18 -05:00			`# Manufacturer configuration`
			`- import_playbook: playbooks/manufacturers_raspi.yml`
Move S76 configuration to its own playbook with a couple of tasks 2021-08-23 23:21:58 -05:00			`- import_playbook: playbooks/manufacturers_s76.yml`
Reorganize playbooks to modularize Zerotier enrollment 2022-01-23 16:37:56 -06:00			`# Zerotier network configuration`
			`- import_playbook: playbooks/tags_zt-personal.yml`
Reorganize ALL of the playbooks 2021-08-23 20:28:18 -05:00			`# Tags for fundamental services`
			`- import_playbook: playbooks/tags_snmp.yml`
Refactor Nagios checks into check_by_ssh instead of NRPE I was never particularly fond of having a random one-off daemon doing my RCE. Sure, it offers some protection, but limiting my exposure to the open internet is far more ideal. I have tremendously more trust in the OpenSSH project than I do in Nagios. And for that reason, I'll be deprecating NRPE and shredding config files once these plays clean up 2021-09-07 14:27:23 -05:00			`- import_playbook: playbooks/tags_nagios.yml`
Fix not using device_roles_workstation.yml 2021-09-19 21:47:57 -05:00			`# Role (in the Netbox sense) configuration`
Add device_roles_bastion play 2021-09-19 21:49:15 -05:00			`- import_playbook: playbooks/device_roles_bastion.yml`
Deploy a new box with Fargo 2021-10-13 12:24:27 -05:00			`- import_playbook: playbooks/device_roles_game.yml`
Fix not using device_roles_workstation.yml 2021-09-19 21:47:57 -05:00			`- import_playbook: playbooks/device_roles_workstation.yml`
Decom the K8s cluster, roll all its jobs into one singular machine 2021-09-13 13:50:22 -05:00			`# Home configuration`
Add home db playbook 2021-11-08 16:44:04 -06:00			`- import_playbook: playbooks/home_db.yml`
Start reorganizing to have pi-media-1 split into vms 2021-11-09 20:53:59 -06:00			`- import_playbook: playbooks/home_fs.yml`
Make a box to move Stalin back home where he belongs 2021-11-19 20:38:20 -06:00			`- import_playbook: playbooks/home_app.yml`
Add a Minecraft server at home 2021-12-20 17:24:11 -06:00			`- import_playbook: playbooks/home_game.yml`
Decom the K8s cluster, roll all its jobs into one singular machine 2021-09-13 13:50:22 -05:00			`- import_playbook: playbooks/home_media.yml`
Add configuration for Home Assistant 2021-09-27 17:18:30 -05:00			`- import_playbook: playbooks/home_automation.yml`
Reorganize ALL of the playbooks 2021-08-23 20:28:18 -05:00			`# Production configuration`
			`- import_playbook: playbooks/prod_db.yml`
			`- import_playbook: playbooks/prod_web.yml`
Add basic Synapse server configuration 2021-10-02 22:03:22 -05:00			`- import_playbook: playbooks/prod_com.yml`
Reorganize ALL of the playbooks 2021-08-23 20:28:18 -05:00			`- import_playbook: playbooks/prod_game.yml`
			`# Supplementary tags`
Add playbook and Netbox tag to run the ansible role on a host 2021-09-24 13:03:21 -05:00			`- import_playbook: playbooks/tags_ansible.yml`
Begin a refactor of playbook naming and organization 2021-08-23 20:20:59 -05:00			`- import_playbook: playbooks/tags_ansible-pull.yml`
Reorganize ALL of the playbooks 2021-08-23 20:28:18 -05:00			`# Housekeeping tags for one-off tasks`
			`- import_playbook: playbooks/tags_docker-prune.yml`
Add automatic reboots to main playbook 2021-10-01 09:10:02 -05:00			`- import_playbook: playbooks/tags_autoreboot.yml`
Add a cleanup task to touch a file upon completion of site.yml This playbook should assure that we have a file we can use for checking when the last full play was. It being in a playbook at the tail end of site.yml is paramount, since site.yml dying will cause alarms to be set off. 2021-11-25 16:16:53 -06:00			`# Last little bit of cleanup`
			`- import_playbook: playbooks/cleanup.yml`