ansible/site.yml

#!/usr/bin/env ansible-playbook
# vim:ft=ansible:
---
  # Preambulatory system configuration
- hosts: all
  tasks:
    - name: collect service facts
      service_facts:
      tags: [ always ]
  roles:
    - role: common
      tags: [ common ]
    - role: adminuser
      tags: [ adminuser, common ]
    - role: docker
      tags: [ docker, common, skip-pull ]
    - role: motd
      vars:
        motd_watch_services_extra:
          - apache2
          - docker
          - kubelet
          - php7.4-fpm
          - postgresql
      tags: [ motd, common ]
    - role: sshd
      vars:
        sshd:
          AcceptEnv: "LANG LC_*"
          ChallengeResponseAuthentication: no
          Compression: yes
          PasswordAuthentication: no
          PermitRootLogin: no
          PrintMotd: no
          PubkeyAuthentication: yes
          Subsystem: "sftp  /usr/lib/openssh/sftp-server"
          UsePAM: yes
          X11Forwarding: no
      tags: [ sshd, common ]
  # Fundamental daemon configuration
- import_playbook: playbooks/zerotier.yml
- import_playbook: playbooks/snmp.yml
- import_playbook: playbooks/nrpe.yml
  # Application configuration
- import_playbook: playbooks/db.yml
- import_playbook: playbooks/web.yml
- import_playbook: playbooks/game.yml
- import_playbook: playbooks/pis.yml
- import_playbook: playbooks/pistorage.yml
- import_playbook: playbooks/pik8s.yml
- import_playbook: playbooks/desktop.yml
  # Background task configuration
- import_playbook: playbooks/ansible-pull.yml
  # Housekeeping
- import_playbook: playbooks/docker-prune.yml
Working on basics 2020-10-17 00:21:57 -05:00			`#!/usr/bin/env ansible-playbook`
			`# vim:ft=ansible:`
Taking a dump 2020-10-17 01:00:06 -05:00			`---`
Add some basic roles NYI 2020-10-17 18:06:35 -05:00			`# Preambulatory system configuration`
Working on basics 2020-10-17 00:21:57 -05:00			`- hosts: all`
Allow for dynamic tagging of ansible-pull hosts 2021-08-07 17:09:20 -05:00			`tasks:`
			`- name: collect service facts`
			`service_facts:`
			`tags: [ always ]`
Working on basics 2020-10-17 00:21:57 -05:00			`roles:`
			`- role: common`
Taking a dump 2020-10-17 01:00:06 -05:00			`tags: [ common ]`
Add administrative user role 2021-02-26 10:07:57 -06:00			`- role: adminuser`
			`tags: [ adminuser, common ]`
Docker goes on everything 2021-08-07 16:55:28 -05:00			`- role: docker`
			`tags: [ docker, common, skip-pull ]`
Unify motd definition 2021-08-07 16:52:19 -05:00			`- role: motd`
			`vars:`
			`motd_watch_services_extra:`
			`- apache2`
			`- docker`
			`- kubelet`
			`- php7.4-fpm`
			`- postgresql`
			`tags: [ motd, common ]`
Add SSHD role, tighten things down 2021-03-11 08:04:57 -06:00			`- role: sshd`
			`vars:`
			`sshd:`
			`AcceptEnv: "LANG LC_*"`
			`ChallengeResponseAuthentication: no`
			`Compression: yes`
			`PasswordAuthentication: no`
			`PermitRootLogin: no`
			`PrintMotd: no`
			`PubkeyAuthentication: yes`
			`Subsystem: "sftp /usr/lib/openssh/sftp-server"`
			`UsePAM: yes`
			`X11Forwarding: no`
			`tags: [ sshd, common ]`
Add docker-prune playbook 2021-08-15 00:59:08 -05:00			`# Fundamental daemon configuration`
Testing some SNMP stuff 2021-08-08 13:36:52 -05:00			`- import_playbook: playbooks/zerotier.yml`
			`- import_playbook: playbooks/snmp.yml`
Add NRPE role, provision checks for it 2021-08-15 14:24:35 -05:00			`- import_playbook: playbooks/nrpe.yml`
Add docker-prune playbook 2021-08-15 00:59:08 -05:00			`# Application configuration`
Add game1.thefuck.how, separate playbooks out 2020-12-21 01:18:32 -06:00			`- import_playbook: playbooks/db.yml`
			`- import_playbook: playbooks/web.yml`
Run playbooks for gameservers last among remote boxes Just reorganizing. Playbooks should configure the stack from bottom -> top and from highest -> lowest priority 2020-12-24 09:54:53 -06:00			`- import_playbook: playbooks/game.yml`
Separate out Pi roles, reorganize inventory, deploy docker to all pis indiscriminately 2021-02-25 12:56:48 -06:00			`- import_playbook: playbooks/pis.yml`
Add pi-storage-2 2021-05-25 15:35:50 -05:00			`- import_playbook: playbooks/pistorage.yml`
Set up mass storage Pi, run it before k8s inits 2021-02-28 19:50:49 -06:00			`- import_playbook: playbooks/pik8s.yml`
Separate out Pi roles, reorganize inventory, deploy docker to all pis indiscriminately 2021-02-25 12:56:48 -06:00			`- import_playbook: playbooks/desktop.yml`
Add docker-prune playbook 2021-08-15 00:59:08 -05:00			`# Background task configuration`
Allow for dynamic tagging of ansible-pull hosts 2021-08-07 17:09:20 -05:00			`- import_playbook: playbooks/ansible-pull.yml`
Add docker-prune playbook 2021-08-15 00:59:08 -05:00			`# Housekeeping`
			`- import_playbook: playbooks/docker-prune.yml`