Commit Graph

935 Commits

Author SHA1 Message Date
2e807d6b1b More dev scripts 2020-06-29 03:56:46 -05:00
3d11ee5a17 Add cmake 2020-06-29 03:46:26 -05:00
c291ce7f85 Install debhelper tools 2020-06-29 03:42:57 -05:00
618e0211a8 Install smartmontools
WHY THE FUCK
DOES IT WANT
TO INSTALL
POSTFIX
2020-06-28 09:06:23 -05:00
1d8ebf17dc Remove substitute tweaks
run once on all the hosts, as I already did, and you're done
2020-06-28 08:41:30 -05:00
47977063f4 Fix old substitutes, also how about we generate new fancy keys instead of old RSA ones
Also because this is clobbering my old keys help me
2020-06-28 08:36:57 -05:00
51869e069a Instead of janking read-only git bullshit, how about we actually generate some keys? 2020-06-28 08:27:46 -05:00
e898ee97b4 Remove pidgin from package list
Yeah fuck that noise
2020-06-28 07:37:03 -05:00
76e7206131 ncdu is manditory 2020-06-28 07:30:47 -05:00
172fb2a33b Install php-redis on Nextcloud
ups
2020-06-26 23:48:41 -05:00
04a538d274 Verify ownership of MC world after restore 2020-06-26 20:27:46 -05:00
cf8d063f56 Depend Minecraft on AWS creds 2020-06-26 20:26:22 -05:00
5624967fd9 Alias Matrix vhost to server name
Turns out Matrix actually sends the delegated host in the Host: field, which is probably why this fails
Interdasting
https://matrix.org/docs/spec/server_server/latest#resolving-server-names
2020-06-26 11:24:57 -05:00
7f1653d881 Stop server before recovery 2020-06-25 08:57:58 -05:00
9886ae046a Also clean up more after script end 2020-06-25 08:57:24 -05:00
6f619f2f9d Fix tar invocation 2020-06-25 08:56:43 -05:00
eef44aab43 Look in ./var for backup 2020-06-25 08:54:47 -05:00
ccdcfffcaa Force local resolution for tar
why the fuck
2020-06-25 08:51:17 -05:00
4e2732be3f Don't run the recovery script if the world exists
BIG OOPS
2020-06-25 08:50:01 -05:00
06a21f1770 ups, {{{ 2020-06-25 08:47:56 -05:00
8bdfd3936d Clean up after recoveries 2020-06-25 08:45:39 -05:00
d698f0b588 Set up a recovery script for MC servers
this shit happens to goddamn often-
2020-06-25 08:42:29 -05:00
4b9e2503d6 Bump HSTS on Nextcloud 2020-06-25 06:30:44 -05:00
68a4a21c64 Reconfigure pull timers, add defaults 2020-06-25 02:19:36 -05:00
1b618daf54 Modularize ansible-pull a bit 2020-06-25 02:16:06 -05:00
e2cee3a6fa Force move when unpacking modpack 2020-06-24 23:39:14 -05:00
5a032fe26e Redownload forge on updates
This isn't the best solution, but it works
2020-06-24 10:51:48 -05:00
847a83b209 Implement support for new naming scheme 2020-06-24 10:51:11 -05:00
2fed89bc4c Add handlers to Minecraft 2020-06-24 10:40:51 -05:00
7db2c2bbab Switch gears, use installer script 2020-06-24 10:38:24 -05:00
8e9f6a9582 Hopefully fix erroneous MultiMC pack detection 2020-06-24 10:29:58 -05:00
b044082ea1 Bump to root when stopping service
ups
2020-06-24 10:21:09 -05:00
bcf8fe1081 Stop Minecraft before knocking its feet out from under it 2020-06-24 10:19:23 -05:00
3517e71f60 Remove remnants of old pack when pushing an update 2020-06-24 10:18:09 -05:00
c8b5d97c02 Change control flow of Minecraft deployment 2020-06-24 09:33:43 -05:00
d5d6bfcf2e Unify log titles 2020-06-24 09:24:09 -05:00
ecbfdb0f4e PROPERLY qualify 2020-06-24 09:23:56 -05:00
4cdebd4b35 Properly qualify MultiMC code 2020-06-24 09:22:26 -05:00
850d0e97f8 Work on improving Minecraft deployments 2020-06-24 09:20:25 -05:00
7091be6f60 Move more vars for Gitea, polish 9iron.yml 2020-06-24 07:16:34 -05:00
b023bc1ea1 Move matrix vars into defaults 2020-06-24 07:15:05 -05:00
2bf650657e Move dokuwiki vars into defaults 2020-06-24 07:12:42 -05:00
8bb24a28ca Move NC vars into defaults, where they should be 2020-06-24 07:10:22 -05:00
f8adc3cd10 Configure backups more appropriately across servers 2020-06-23 09:52:55 -05:00
44b3b99990 Template out matrix vars a bit more nicely, make config changes 2020-06-23 09:47:48 -05:00
a26e3630f0 Work on polishout our homeserver.yaml 2020-06-23 09:40:16 -05:00
4c9e27d9a5 Make AWS S3 copy nicer 2020-06-23 08:03:16 -05:00
6f842a3464 Switch IME 2020-06-23 04:18:36 -05:00
77be60fd4d Switch UIM plugins 2020-06-23 04:09:22 -05:00
37d9f54617 Add UIM 2020-06-23 04:07:51 -05:00
2901cd8af9 Restart Minecraft servers nightly 2020-06-22 12:07:07 -05:00
429642fe6a Switch from STANDARD_IA to STANDARD for S3 backups
My retention period is actually too low for IA lol
2020-06-22 11:46:24 -05:00
c6f750d0c1 Run backups more frequently
Just had a DR tonight and I need more frequent backups than "nightly at 2am"
2020-06-22 11:36:31 -05:00
b36f351740 Fix using mc templates in matrix backup script
ups
2020-06-22 11:17:01 -05:00
2c91b8cd5d Make matrix backups 2020-06-22 11:05:56 -05:00
05dc022adb Enable embedding in grafana 2020-06-22 07:52:31 -05:00
13d2d6a77f Remove erroneous notify on an include 2020-06-22 07:23:15 -05:00
eba35a0256 Set default id server for matrix 2020-06-22 07:22:40 -05:00
c620f1d80e Remove dep on mysql for matrix
It's either postgres or sqlite
Take a guess
2020-06-22 06:39:15 -05:00
b0693c1ddd notify: restart apache
a lot
2020-06-22 06:33:57 -05:00
23c0763fce Fix our dumb proxy pass args lol 2020-06-22 06:31:58 -05:00
9ca53861a5 Actually proxypass properly 2020-06-22 05:34:01 -05:00
56057012b5 Fix accidentally breaking gitea lmao 2020-06-22 05:24:58 -05:00
124997992e Really fix it 2020-06-22 05:07:25 -05:00
c92f044a7d Fix looking for wrong config file on apache config templating 2020-06-22 05:07:11 -05:00
5f76a6d8f7 Polish up our Matrix config a bit 2020-06-22 05:03:32 -05:00
71f3269798 Fix missing quote 2020-06-22 04:44:14 -05:00
89c2025dcc More work on Matrix deployment, configure apache on 8448 2020-06-22 04:43:05 -05:00
50321bd2a2 Fix typo 2020-06-22 04:28:38 -05:00
1bcd748484 Also restart synapse
forgot about that
2020-06-22 04:10:32 -05:00
3b785e47b5 Generate turn secrets 2020-06-22 04:09:24 -05:00
e766baf63d Generate secrets for Matrix 2020-06-22 04:08:03 -05:00
46e0dff885 Fix an actual okay error where Synapse uses double curly braces in its config 2020-06-21 11:35:16 -05:00
f35e8f9eca I DIDN'T CHANGE THE SOURCE EXTENSIONS 2020-06-21 11:28:11 -05:00
24f79bc4ab They're really called fucking .yaml? Really? 2020-06-21 11:23:40 -05:00
a20efc3ca2 Fix wrong variables in loop
am good sysadmin
2020-06-21 11:17:52 -05:00
d15e44c7ea Move notify on templating configs 2020-06-21 11:12:38 -05:00
cec71cd2ad Fix typo 2020-06-21 11:05:01 -05:00
f8bf755f4f Working on more fedi stuff 2020-06-21 10:58:56 -05:00
d457ebf213 Separate out our proxy from our frontend 2020-06-21 10:50:59 -05:00
aed52c16a0 Working on more Matrix stuffs, adding creds for SES 2020-06-21 10:46:49 -05:00
73d1ebd9a2 Less clobber when grabbing certs
I bet you know where this is going
You probably don't
It's for host delegation
2020-06-21 10:24:05 -05:00
b839015b28 Add part of a matrix setup 2020-06-21 10:22:01 -05:00
bb59382d4c Remove pull tag
Fuck it, we're doing it all
2020-06-17 09:34:13 -05:00
33f5af534e Tag certain roles for pull remediation 2020-06-17 09:29:24 -05:00
62ea91fc7f Remove all references to ansiblehost 2020-06-17 09:26:13 -05:00
531b2e19dc Use proper hostname source when templating hosts
Because we turn around and invalidate nodename like immediately
2020-06-17 09:24:34 -05:00
71cfb5c2be Remove timebomb
grep -r -e 'here we go again'
2020-06-17 09:19:53 -05:00
3d91b4d752 Configure hostnames
oh boy here we go
2020-06-17 09:16:08 -05:00
8ea69fd3b4 Declare proper deps on ansible-pull role 2020-06-17 09:07:28 -05:00
c69954eeb5 Absolute our binary for ansible-pull timer
Because I guess we need to do that on 18.04
2020-06-17 09:04:20 -05:00
79102c5d0c More tweaking on that front 2020-06-17 09:03:47 -05:00
27e6cadb9a Work on switching to ansible in pull mode 2020-06-17 08:52:28 -05:00
7344050dde Fix reloading influxdb as normal user
derp
2020-06-16 10:09:16 -05:00
1ac644d8d1 Fix closing quote, rename sudoers config 2020-06-16 10:08:12 -05:00
8f15bf4f2b Make some tweaks, actually add our Ansible user 2020-06-16 10:04:54 -05:00
fe7b962ad7 Create mopidy config directory if it doesn't exist 2020-06-16 09:53:01 -05:00
ed9298fae4 Add zerotier roles to 9iron servers
I'm going to regret this, I know it
2020-06-16 09:48:07 -05:00
fa6b01b782 Add SSHD config for desktops 2020-06-16 09:42:27 -05:00
c1ad0bb498 Perms whups 2020-06-16 09:36:36 -05:00
6d05dc50d9 Add openssh server to default package list 2020-06-16 09:35:47 -05:00
f0a61e9538 Reorganize inventory, add ansible system user
Who is only used on my desktop hosts, obviously
2020-06-16 09:34:55 -05:00
f9826d2e9f Stop saying changed when I assert i386 arch 2020-06-16 09:18:14 -05:00
d3feeebb46 Stop trying to disable a news service that doesn't need disabling 2020-06-16 09:17:53 -05:00
afa7c651a8 Stop trying to configure zerotier in the wrong place 2020-06-16 09:15:48 -05:00
37a85f625f Move zerotier into its own role 2020-06-16 09:14:33 -05:00
e0169f8915 Add Zerotier to the list of things to do for desktops 2020-06-16 08:58:38 -05:00
59df24dc13 Add barrier
Sliiiiiiick
2020-06-16 08:50:26 -05:00
b8624e069f Set Mopidy volume to a much, much more reasonable level 2020-06-15 09:55:29 -05:00
1dae60f120 Actually use those spotify vars god dammit 2020-06-15 09:00:10 -05:00
4de750c106 Actually allow Mopidy to serve on an MPD socket
ups
2020-06-15 08:59:28 -05:00
160fa41d1a Make secrets less executable 2020-06-15 08:58:03 -05:00
a157988506 Make secrets secret 2020-06-15 08:56:20 -05:00
6db1c680fa Add mopidy to desktop role 2020-06-15 08:55:51 -05:00
f9a8c86b9c Separate package installation into its own task file, install mopidy stuff 2020-06-15 08:41:26 -05:00
e2d73a8427 Disable mopidy.service 2020-06-15 08:25:07 -05:00
90800438d7 Switch out MPD for Mopidy 2020-06-15 08:20:09 -05:00
7789127491 Remove Spotify adblock aliases
Well shit.
2020-06-15 08:13:13 -05:00
384c27b017 Install Spotify 2020-06-15 07:58:27 -05:00
8860638c87 Supress more AWS stuff 2020-06-09 05:16:22 -05:00
231c704bd6 Supress errors when pushing to S3 2020-06-09 05:14:47 -05:00
73302047a4 Fix mode on authentication token 2020-06-09 01:31:45 -05:00
c3fd867197 Fix Adam deployment 2020-06-09 01:29:20 -05:00
7a1a4dfaf9 libopus0
god dammit
2020-06-09 01:19:04 -05:00
dd53ee6226 Install npm on desktops 2020-06-09 01:18:18 -05:00
65e0fed3d3 Install libopus to get adam to stop complaining 2020-06-09 01:18:02 -05:00
4316ca2e86 Oops. That needs to be a dir 2020-06-09 01:14:57 -05:00
910018e3d5 Add Adam to our server configuration 2020-06-09 01:13:19 -05:00
7793693483 Declare dependency for backup role 2020-06-08 20:23:34 -05:00
63c7af0016 Move AWS credentials to their own directory 2020-06-08 20:15:22 -05:00
7406d30191 Add backups for Minecraft instances 2020-06-08 20:10:58 -05:00
2175fe8ada Exclude logfiles in backup script 2020-06-08 08:49:39 -05:00
58d39a3f51 Do the same for Doku 2020-06-08 08:47:57 -05:00
61175feabd Actually wait let's use the URL 2020-06-08 08:47:13 -05:00
763f1d0209 Add nc- to the beginning of NC backups 2020-06-08 08:45:55 -05:00
e59ecf33ea Add AWS backups bucket
Joining the big boy club oh yeah
2020-06-08 08:45:17 -05:00
19bca26d1b Add aws-cli 2020-06-08 08:20:36 -05:00
252ff7ecf9 Fix Nextcloud not purging old backups
So THAT'S where all my space was going
2020-06-07 02:12:54 -05:00
2b52985e7f Add chromedriver 2020-06-06 07:22:41 -05:00
e6cef1d8fb Merge branch 'master' of git.9iron.club:salt/ansible 2020-06-05 08:04:21 -05:00
b1f75519ad Add terraria servers 2020-06-05 08:04:11 -05:00
f8a503ac41 Add qt5ct 2020-06-05 05:38:36 -05:00
3dc0af70d7 Disable outdated TLS versions
hopefully this fixes git
2020-06-04 19:35:59 -05:00
fa963a3adb Remove old apache2 vhosts 2020-06-04 19:14:24 -05:00
d7f34587be Roll out new cipher suites 2020-06-03 06:07:11 -05:00
8a6a53ff6e Add Minecraft serbers 2020-06-01 21:56:39 -05:00
0241a1db36 Template out systemd unit for minecraft servers 2020-06-01 21:28:09 -05:00
ac92512088 Add tree 2020-06-01 05:46:21 -05:00
9b101949d2 Minor fix in user playbook task 2020-06-01 04:55:40 -05:00
c7d674a9b0 Modularize user role, fix indentation with ansible vault secrets 2020-06-01 04:54:38 -05:00
d246ce2519 Update Gitea 2020-06-01 01:49:04 -05:00
af06462040 Restart Gitea after update 2020-06-01 01:47:25 -05:00
2f499b11b3 Add hsetroot 2020-06-01 00:49:19 -05:00
8f8c572d6d Add inkscape 2020-05-31 20:40:23 -05:00
8a1c6f167b Disable motd-news service 2020-05-31 20:31:58 -05:00
cb2763e361 Enable Syncthing on desktop machines as a systemd unit 2020-05-31 20:29:38 -05:00
13bd8547ff Add xbacklight 2020-05-31 17:34:35 -05:00
1e1c831124 Add pavucontrol-qt 2020-05-31 17:33:59 -05:00
d3b51bd56a Revert "Add dex"
This reverts commit eddfdcdf20.
2020-05-30 06:30:36 -05:00
eddfdcdf20 Add dex 2020-05-30 06:14:49 -05:00
c269582b2e Add pixelorama 2020-05-29 17:50:58 -05:00
3848e0f476 Add krita 2020-05-29 17:39:04 -05:00
dc3b476127 Add imagemagick 2020-05-28 22:42:40 -05:00
1922f75d16 Install more desktop packages 2020-05-28 21:52:53 -05:00
ea8d0764f2 Update Zoom 2020-05-26 23:40:18 -05:00
70ac8cecb1 Point ansiblehost to new config 2020-05-26 12:48:09 -05:00
db9a8d00e0 Tinker with gitea configs, enable open registration 2020-05-26 12:27:49 -05:00
6dad2e4383 Rename screens for terraria servers 2020-05-26 11:25:27 -05:00
75e14bc4e0 Add monodevelop, fix terraria backups growing eternally 2020-05-26 11:19:54 -05:00
16225dff8f Install papirus 2020-05-24 23:45:29 -05:00
63d64cd8fc Add startx session to desktop role 2020-05-24 23:24:00 -05:00
7fc422e571 Fix checking focal for wrong task 2020-05-24 23:05:45 -05:00
2f05c3d3e8 Install rice packages 2020-05-24 23:05:12 -05:00
46d5d6df79 Reorganize desktop package set 2020-05-24 23:03:15 -05:00
6585879256 Add speed ricer repo 2020-05-24 23:00:09 -05:00
8869526324 Update terraria 2020-05-23 15:30:06 -05:00
e64d318442 Fix playbook for pull-and-run cronjob 2020-05-20 12:59:33 -05:00
3bcd3a94c9 Fix ansiblehost playbook 2020-05-20 11:10:35 -05:00
b7be09de34 Fix perms on output directory in backup script 2020-05-19 12:20:24 -05:00
54f19e0619 Quote variables correctly
god dammit
2020-05-19 12:19:21 -05:00
810fccfce2 Add log function to backup script: 2020-05-19 12:14:27 -05:00
c8409a00f4 Fix perms on output directory 2020-05-19 12:12:51 -05:00
8379e2051e Lower backup interval 2020-05-19 12:10:13 -05:00
8e12cb19b2 Fix perms on backup script 2020-05-19 12:06:56 -05:00
3f15994c22 Fix cronjob syntax 2020-05-19 12:05:03 -05:00
8e1d9f6c14 Ooops, gotta become root for that 2020-05-19 12:03:32 -05:00
a94d872e79 Add backups for terraria servers 2020-05-19 12:02:30 -05:00
bdbf542083 Remove security on terraria servers
Liquid spam lmao
2020-05-18 20:21:59 -05:00
818b717a5d Remove sonata 2020-05-17 17:43:03 -05:00
bea5a72284 Bump terraria version 2020-05-16 19:48:39 -05:00
efa6a69fad Turns out that bug is actually due to an undefined difficulty, I guess 2020-05-16 17:43:11 -05:00
24a0c37427 Revert "Remove colon from terraria configs"
This reverts commit 0eb1cd1924.
2020-05-16 17:42:05 -05:00
f8b42e18f9 Actually fix the crashy bug? Maybe? 2020-05-16 17:41:07 -05:00
0eb1cd1924 Remove colon from terraria configs
This is a bug, turns out
2020-05-16 17:34:51 -05:00
44c5ca6ccd Fix erroneous world names for terraria servers 2020-05-16 17:08:33 -05:00
ab57cc6c4c Fix erroneous default difficulty 2020-05-16 17:04:00 -05:00
d53c5bc12c Add and sadly hardcode our terraria servers 2020-05-16 10:25:06 -05:00
bbc1093d5d Actually use our config file 2020-05-15 11:11:51 -05:00
b5970881ee Fix more ownership 2020-05-15 11:04:34 -05:00
3e6af36e93 Fix ownership 2020-05-15 11:00:45 -05:00
4d489e33f3 Hopefully fix inaccurate globbing
Or lack thereof
2020-05-15 10:58:58 -05:00
f9874ec05b Fix server move operation, mark binary as executable 2020-05-15 10:57:28 -05:00
f9ae17b34d Clean up after terraria server deployment 2020-05-15 10:55:39 -05:00
6e1bf6a467 Polish up that Terraria role some more 2020-05-15 10:49:42 -05:00
c514fb4183 Fix using a group that doesn't exist 2020-05-15 10:40:14 -05:00
a2a3b10ac9 Add a Terraria role
Time to blow shit up
2020-05-15 10:11:32 -05:00
9662013bed Fix up postfix a bit more, make it a general role 2020-05-12 12:58:03 -05:00
880920e647 Don't always reload udev ffs 2020-05-12 08:26:12 -05:00
201bca1cbc Switch up the IM client show with Pidgin 2020-05-12 08:22:21 -05:00
e4f47efed0 Add Nheko and Zim to desktop app list 2020-05-12 08:05:54 -05:00
b6cef0e28e Fix timezonectl dying
I'm retarded
2020-05-10 08:22:50 -05:00
ecee3ed4f8 Fix up our common playbook with cron handlers n stuff 2020-05-10 08:22:02 -05:00
4dec3a081f Change everything to CDT
Oh boy can't wait for this to fuck all my cronjobs
2020-05-10 08:15:09 -05:00
1411b414c9 Flesh out influxdb service some more 2020-05-10 04:18:21 -05:00
3d0b1c2b29 Fix wrong package name 2020-05-10 04:03:30 -05:00
21fa73cb22 Add influxdb to every box 2020-05-10 04:03:26 -05:00
0b55d4689e Add deps to Grafana role 2020-05-10 03:48:04 -05:00
c646e926e2 Install Netstat on all the boxen 2020-05-10 03:47:29 -05:00
cc814b3cb6 Add Grafana
WEW No fires
2020-05-10 03:30:19 -05:00
781f8f584f Add Clonezilla 2020-05-10 01:04:43 -05:00
d094d7b31c Lower retention period for NC backups 2020-05-10 00:39:51 -05:00
c56698bac8 Install Wine on desktops, alongside binfmt support 2020-05-08 22:49:33 -05:00
bb60d875be Add push creation configs for gitea 2020-05-08 02:11:34 -05:00
2d5895c76e Really for real fix exclude glob 2020-05-06 23:24:10 -05:00
ebfa2e4b92 Fix perms on config.php
This is what NC sets it to every time I change it lol
2020-05-06 23:22:35 -05:00
f337532435 Fix order of tar args in NC backup script 2020-05-06 23:21:54 -05:00
3a33549174 Fix Nextcloud multipart backups being only slightly rotated 2020-05-06 09:46:45 -05:00
c3fa85aacb Fix looking for the wrong kinda backups in dokuwiki backup script 2020-05-06 09:43:12 -05:00
7646396dac Fix order of arguments for tar 2020-05-06 07:38:00 -05:00
4c829bf782 Exclude users' trash directories when making a NC backup 2020-05-06 03:27:53 -05:00
4a7a5f4645 Add default variables for backups role 2020-05-06 02:25:21 -05:00
54d3aadb14 Improve Nextcloud backup script by removing redundant trap and recursing through symlinks for userdata 2020-05-06 02:12:17 -05:00
755249febf Move backups to using symlinks instead of hard directories
This should make reconfiguring backup outputs leagues easier
2020-05-06 02:10:26 -05:00
78e510211f Fix typo in nc backup script 2020-05-06 02:03:23 -05:00
c5574e4924 Also add a file for that udev thing I changed earlier 2020-05-06 02:01:47 -05:00
4c54833b7e Actually add that file 2020-05-06 02:01:30 -05:00
f5acd6014d Add backup script for Nextcloud 2020-05-06 01:59:17 -05:00
9da55f236c Assert more specific permissions with Nextcloud 2020-05-06 00:31:49 -05:00
7753453caa Only reload udev if we assigned new rules
Having my mouse flip out at midnight was getting old
2020-05-06 00:02:39 -05:00
f285096a5c Fix modules clobbering each other on deploy 2020-05-03 06:58:09 -05:00
07c486efca Colon 2020-05-03 06:54:03 -05:00
d61ea20b5a Fix indentation on dokuwiki task main.yml
Buggin the shit outta me man
2020-05-03 06:51:52 -05:00
52e1001cc9 Add backups for dokuwiki 2020-05-03 06:51:31 -05:00
951ca51572 Use URL for backup directory
In theory this should allow for concurrent Gitea installations with non-trampling backups
2020-05-03 06:49:23 -05:00
737ad8dec8 Rename backup script to be more self-descriptive 2020-05-03 06:47:52 -05:00
a9b6c9a88b Actually remove that last backup 2020-05-03 06:42:12 -05:00
85a3da7b6c Add backup module to Gitea 2020-05-03 06:37:58 -05:00
ed04787e9b Check for backups dir AFTER we might've changed it 2020-05-03 06:09:10 -05:00
2769a78198 Source a backuprc if we have it to allow for site-local backup storage changes 2020-05-03 06:08:36 -05:00
6440710a3e Hardcode backups directories
Unless I make these playbook-wide variables, there's no real way to configure them at runtime. Best to just hardcode them, I suppose
2020-05-03 05:48:01 -05:00
f9ad4801c5 Log to the backups directory 2020-05-03 03:08:13 -05:00
86ab23bd07 Add an untested barebones backup script wrapper 2020-05-03 03:06:16 -05:00
26a83ae2ab Add joy2key and joystick 2020-05-02 10:21:44 -05:00
ef516aca30 Or I guess we just need an operator, whatever 2020-05-02 05:58:15 -05:00
44ac75ba88 Fix unquoted string literal 2020-05-02 05:57:04 -05:00
433ebb900f Install Piper on focal 2020-05-02 05:55:40 -05:00
fb941e4297 Don't install ricing packages that don't exist 2020-05-02 05:13:16 -05:00
006f8759fe Give less of a shit about which version of PHP we install on our desktop 2020-05-02 05:00:31 -05:00
533406d69a Remove pip2
Kinda never needed it anyway
2020-05-02 04:54:14 -05:00
8b58b1fe24 Install Zoom
[shudders]
2020-05-02 04:24:23 -05:00
d43a91c04c Remove some unwanted applications on desktop role 2020-05-02 04:18:47 -05:00
770a6a1258 Turn off password requirements 2020-05-01 14:59:10 -05:00
18d4ea0b09 Clean up our Gitea role a little bit 2020-05-01 14:01:53 -05:00
add7926db5 Update links across the board to point to git.9iron 2020-04-30 13:26:16 -05:00
988246ac66 Fix not including tasks to add user 2020-04-30 13:08:15 -05:00
30bed76efe Fix keeping a ton of json in key variables 2020-04-30 12:44:26 -05:00
67f636129c Rewrite app.ini based on pregenerated one
The one on the wiki is ass and misses a couple keys that HAVE to be generated
This fixes me not being able to upload with SSH
2020-04-30 12:33:04 -05:00
75f5e0c46c Fix botched quotes in MySQL query 2020-04-30 12:08:21 -05:00
21d3d8c410 Move add user task to an import_tasks task so that we can actually notify it, use systemd daemon reloads in a copuple places 2020-04-30 11:54:27 -05:00
ab51654a1b Gotta rice those repos boys 2020-04-30 11:33:36 -05:00
b491397580 Enable creating repos through push 2020-04-30 10:57:58 -05:00
e4eabcb32e Enable cache, correct deployment profile 2020-04-30 10:47:55 -05:00
347db1aba4 Correct ROOT_URL for Gitea 2020-04-30 09:28:49 -05:00
a1d8a578b6 Fix Gitea always being on localhost instead of its own fucking domain 2020-04-30 08:40:04 -05:00
f4568e7e49 Remove pymysql
Keeps getting auth errors because it's bad or whatever
2020-04-30 08:32:14 -05:00
2d9dd4a9a7 Simplify root password assignment for MySQL 2020-04-30 08:29:24 -05:00
4c1cf35afa Turns out mysql_query is in devel lol 2020-04-30 08:16:59 -05:00
a60dbf5062 REALLY fix syntax errors 2020-04-30 08:11:55 -05:00
e3509c0d6c Really fix syntax errors 2020-04-30 08:11:33 -05:00
72e5cbe090 Fix syntax errors 2020-04-30 08:11:03 -05:00
f68c64e467 Fix gitea user not having a shell 2020-04-30 08:10:02 -05:00
0d8f6f4a97 Use MySQL query to promote new user to admin
Because that doesn't happen by default
2020-04-30 07:56:36 -05:00
bd38470bde Disable registration by default 2020-04-30 07:38:54 -05:00
0ce93e0391 Small fixes in vhost 2020-04-30 07:38:06 -05:00
30041d16e1 Shoooould be the last thing we need to configure 2020-04-30 07:26:03 -05:00
04cc076d5c Create webroot so Apache stops complaining 2020-04-30 07:20:04 -05:00
a7f2afd43a Add default user if we're generating a DB 2020-04-30 07:07:18 -05:00
2b1ed0daf1 Revert "Add Gitea default user if and only if we don't have any users"
This reverts commit aa11c3378b.
Turns out I don't have that module, nor do I care to patch my
environment.
2020-04-30 07:05:28 -05:00
aa11c3378b Add Gitea default user if and only if we don't have any users 2020-04-30 07:03:52 -05:00
9553987cc7 Fuck it we're disabling redis
Just want this thing online
2020-04-30 06:50:43 -05:00
798cb2e57d Maybe finally fix passwordless redis 2020-04-30 06:45:13 -05:00
d4e4c53b00 Restart Gitea if service changes 2020-04-30 06:45:04 -05:00
70503185cd Configure Gitea and open up Redis 2020-04-30 06:32:19 -05:00
0e9b43438b Add the right module 2020-04-30 06:21:25 -05:00
4117fef790 Add our handler under the right name 2020-04-30 06:05:54 -05:00
90e1dbea28 Why am I trying to write to etc as git? 2020-04-30 06:01:59 -05:00
181f8835e2 Use handler so that we actually have a users table when we go to add the admin 2020-04-30 05:59:10 -05:00
35138d98e1 Actually use internal token 2020-04-30 05:53:16 -05:00
c5ee46be04 Become git when adding user 2020-04-30 05:44:19 -05:00
9fd5ca7e3f Whoops. Kinda need argv there 2020-04-30 05:41:12 -05:00
1ada045fa2 Quote variables 2020-04-30 05:39:53 -05:00
661cad5c39 Make command clearer, include config, and give the git user access to his damn config file 2020-04-30 05:38:55 -05:00
2f432feb24 Create default admin user on startup 2020-04-30 05:25:35 -05:00
bdb50afcc0 Actually do what the last commit message tried to do 2020-04-30 05:21:33 -05:00
01ef37f283 Fix Gitea trying to install what has already been installed 2020-04-30 05:20:21 -05:00
a80d0fa1c4 Only deploy Gitea config if we don't already have one 2020-04-30 05:08:52 -05:00
31ea3c3e1f Add Gitea role 2020-04-30 05:06:49 -05:00
f0028cdda0 Remove speed ricer repo
Blocker for 20.04 upgrade
2020-04-27 05:45:22 -05:00
2247a9db5d More progress on GitLab installation 2020-04-26 04:50:40 -05:00
5fa716d470 More configs, give in to GitLab's directory heirarchy
It's hardcoded in SO MANY FUCKING PLACES
2020-04-26 04:33:35 -05:00
16e27e1b80 Configure Apache for GitLab 2020-04-26 04:10:08 -05:00
a9dd6b65ec Update GitLab config 2020-04-26 03:56:04 -05:00
6d1fb9d41d Add postfix role 2020-04-26 03:48:55 -05:00
4b29609901 Remove Python 2 packages 2020-04-26 02:14:02 -05:00
bbdc136c11 Fix incorrect variable naming in GitLab role 2020-04-26 02:12:29 -05:00
da95df7a88 Fix Redis filename 2020-04-26 02:10:09 -05:00
5656d7dee8 Fix Redis declaring an invalid variable 2020-04-26 02:05:41 -05:00
1232d0be2f Switch to Python 3 for MySQL role 2020-04-26 02:05:32 -05:00
4941c56254 Detect PHP configuration directory 2020-04-26 02:02:15 -05:00
60b69d52f8 Add acl to required packages
Fixes a bug later down the line
2020-04-26 01:39:40 -05:00
f036d5701e Fix quoting on variable 2020-04-26 01:28:48 -05:00
824a17ad4d Move Redis into its own role 2020-04-26 01:22:36 -05:00
58f31c403e Add filezilla
Turns out I need FTP sometimes
2020-04-23 00:27:10 -05:00
a5790b55cc Add openconnect 2020-04-22 23:13:48 -05:00
b902d6e620 Fix not being able to install Slack
Yay
2020-04-22 23:01:59 -05:00
a977534c4e Make it more clear that ansiblehost should be pulling 2020-04-22 22:55:37 -05:00
39636ef0e5 Add slack to desktop 2020-04-22 22:52:48 -05:00
579445a4b7 Give MC server more memory, add a desktop package 2020-04-21 08:17:35 -05:00
293f74e49d Quit using remote_src 2020-04-18 03:16:17 -05:00
1906213fff Make nextcloud role less verbose 2020-04-18 03:15:41 -05:00
01793908a0 Add pwgen 2020-04-18 01:29:28 -05:00
4d2454088f Add more rice stuff 2020-04-15 10:35:16 -05:00
6beafec7c3 Add Nitrogen 2020-04-15 10:00:35 -05:00
96e7d8ca57 Add a workaround for a dumb Ubuntu bug 2020-04-15 09:57:41 -05:00
7a7ce8e0d0 Move the session into /usr/share, not local
Gotta fight SDDM bugs now
2020-04-15 09:48:40 -05:00
061f971b48 Copy over an i3 .desktop entry
Because apparently my i3-gaps guy doesn't include it
2020-04-15 09:46:57 -05:00
2fb3231bc3 Add ricing packages 2020-04-15 09:17:00 -05:00
2b03b3565d Rename some blocks 2020-04-15 09:01:11 -05:00
dcd53412ee Clean up cruft in desktop play 2020-04-15 08:59:19 -05:00
498bb75416 Add ricing repo 2020-04-15 08:58:13 -05:00
a1ca574f41 Make MOTD nuking more aggressive, add user role to localhost
Oopsie. Turns out my new VM didn't pull my dotfiles down.
2020-04-15 08:34:32 -05:00
71d1efe21c Add xdotool 2020-03-27 08:12:02 -05:00
98590d3aae Sort Minecraft server.properties, add missing file 2020-03-26 10:22:30 -05:00
40ab5434c6 Disable MOTD stuff
Cosmetic, yes, but annoying. Very annoying.
2020-03-26 10:00:22 -05:00
f856ca4fe6 Change restart condition for Minecraft server to always
With so many mods, it's possible for it to exit "cleanly"
2020-03-25 08:30:03 -05:00
b86c81add2 Polish up Minecraft server unit, reduce restart delay 2020-03-25 08:29:09 -05:00
43f0c3591c Add mupen 2020-03-25 06:57:45 -05:00
661b441dd3 Put P2 deps back into localansible 2020-03-23 04:28:34 -05:00
0ba9143a18 Reduce redundancy between ansible host roles 2020-03-23 02:31:54 -05:00
4ca00eaa3e Add Pulseeffects 2020-03-23 02:28:22 -05:00
f50eb1d0c8 Add Dolphin repo 2020-03-21 23:01:01 -05:00
e1c3a19b17 Add filelight 2020-03-21 22:41:18 -05:00
78a244f389 Add Kubuntu stuffs to desktop roles 2020-03-21 22:35:53 -05:00
4e57697906 Generalize pull role, apply it to desktop machines 2020-03-21 22:29:36 -05:00
3708b8f254 Rename desktop playbook 2020-03-21 22:21:25 -05:00
bbc2894d28 Add qbittorrent
New I was forgetting something
2020-03-20 06:07:32 -05:00
5b2fbaad4b Merge branch 'master' of gitlab.com:rehashedsalt/ansible 2020-03-16 18:00:12 -05:00
79fc6be3eb Remove erroneous dictionary entry 2020-03-16 18:00:01 -05:00
5f8cf52979 Add python3-usb 2020-03-16 17:23:12 -05:00
bb28e696cb Add a few android tools to desktops 2020-03-16 05:45:41 -05:00
f9c190c7b2 Fix redirects, change Minecraft port on botaniapack-1 2020-03-12 00:08:18 -05:00
bb481aceb3 Add another Minecraft server 2020-03-09 07:00:20 -05:00
221baa0910 Add pyqt5 to desktop role 2020-03-07 16:58:26 -06:00
4348fb2e6f Replace audacity with Cantata 2020-03-04 04:22:33 -06:00
ad10b482e8 Add more python packages
python dev wew
2020-03-04 03:02:35 -06:00
ba5681be97 Add appdirs for Python3 deps 2020-03-04 00:44:11 -06:00
56953be6a9 Add python venv 2020-03-03 16:59:57 -06:00
cbc37e7dd4 Add units to desktop 2020-03-02 05:51:31 -06:00
9ccc2b154b Add earlyoom
Defaults are good
2020-03-01 01:52:07 -06:00
6956324d6b Use latest version of PHP in Apache, whatever it is 2020-02-29 03:03:55 -06:00
d13e3f33ba Add php-xml to desktop packages 2020-02-29 03:02:38 -06:00
fef58fdc60 Install PHP on desktops
I KNOW
I know
I need it for dev
2020-02-28 04:12:03 -06:00
430fe1199c Remove unused themes
BREEZY BOI
2020-02-27 17:18:28 -06:00
8cc6688469 Migrate domains, reorganize websites so that they actually leverage sites-available and sites-enabled 2020-02-27 05:16:02 -06:00
968ca2eeaf Switch repo for gitweb, fix apache handler
God dammit Ubuntu
2020-02-26 19:10:21 -06:00
3a02792e3b Use handlers for Apache restarts, reorganize Minecraft tasks 2020-02-26 18:53:20 -06:00
e7623b6c77 Add handlers for apache, defaults for Minecraft 2020-02-26 18:43:51 -06:00
a206c16f43 Add service install, enable by default 2020-02-24 00:18:41 -06:00
eb5c6a62b0 Add Minecraft server role 2020-02-23 23:45:11 -06:00
884ed33ab6 Install more dictionaries and use a smaller one by default
lol
2020-02-23 03:24:39 -06:00
175b36c3ed Add wamerican-insane dictionary to playbook
I'm having an aneurism
2020-02-23 00:30:13 -06:00
363c11b2c1 Merge branch 'master' of gitlab.com:rehashedsalt/ansible 2020-02-22 16:35:28 -06:00
d657cccf05 Add a couple more packages 2020-02-22 16:35:01 -06:00
c82a60771b Add openvpn to desktop role 2020-02-20 20:23:59 -06:00
886ba76ea9 Fix ansiblehost role?
Hopefully?
2020-02-20 06:00:58 -06:00
08e81dea25 Minor semantic change in gitweb role 2020-02-20 05:31:11 -06:00
3ab2f9b425 Migrate gitweb 2020-02-20 05:29:27 -06:00
f2237a8e00 Migrate nextcloud 2020-02-20 05:28:39 -06:00
9f2d80ffdb Migrate dokuwiki role 2020-02-20 05:27:49 -06:00
b77975c199 Migrate redirect to new https behavior 2020-02-20 05:27:03 -06:00
85b0b2e139 Only attempt to fulfill the challenge if we have to 2020-02-20 05:25:46 -06:00
e5a5f5efcd Also maybe https should use a directory that actually exists
Holy fuck
2020-02-20 04:32:30 -06:00
092e9ae470 Use a more PATH-dependent mv command in https
Dude what
I get through all this complex ACME configuration and misplace fucking mv of all things
2020-02-20 04:28:29 -06:00
e44a6126c8 Have the https role do all the config changing
Hopefully this should cut down on erroneous changes
2020-02-20 04:19:03 -06:00
d41b4ebbdf Turn upgrade fields in apt modules into strings
This fixes a small but annoying warning
2020-02-20 04:02:01 -06:00
e8b77345f7 Have redirect clean up its webroot when it finishes 2020-02-20 03:58:18 -06:00
508d7889ba Fix permissions with https keys and certs 2020-02-20 03:56:51 -06:00
e8cd7dc58a Do the same for gitweb role 2020-02-20 03:51:13 -06:00
cb4cb59f32 Remove force from ansiblehost cloning
Really not required
2020-02-20 03:50:19 -06:00
75ae2367d4 Separate module enable tasks in apache-php, enable headers 2020-02-20 03:49:06 -06:00
0f8ed190b7 Fix dokuwiki role clobbering existing installs
WHOOPS THAT'S KINDA BAD OH FUCK
2020-02-20 03:21:04 -06:00
1a8b0ff6be Add another desktop program 2020-02-18 02:53:12 -06:00
9ad7a4b5ec Add DokuWiki role
It deploys without issue, naisu
2020-02-18 02:39:55 -06:00
b2c402b97e Try to fix ansiblehost cronjob by setting HOME 2020-02-17 21:51:27 -06:00
b5ca563b6e Add more programs to desktop role
See, this is why I have to make it a role
I lose track of all this shit over time
2020-02-17 21:10:11 -06:00
a6173db75f Add more packages to desktop role 2020-02-17 20:28:38 -06:00
c1d31742a8 Add desktop setup role
Assumes a Kubuntu full installation
2020-02-17 16:15:45 -06:00
4b4e0c81cb Separate vault passwords from the playbooks, fix ansibleupdate cronjob
Again
2020-02-14 15:40:31 -06:00
b54f52b47b Merge branch 'master' of gitlab.com:rehashedsalt/ansible 2020-02-14 03:18:24 -06:00
bbdaf54af1 Use absolute path on ansiblehost role cronjob
Ups
2020-02-14 03:18:11 -06:00
5034285ac2 Change ansiblehost role to rerun every 12 hours instead of 24
This renews certs at about the requested rate
Hopefully it doesn't break anything. I'm using LTS instances so it should be fine but you never know
2020-02-11 14:43:25 -06:00
9313f26fcb Add local Ansible setup role
Run with -K
2020-02-11 14:42:44 -06:00
bc1b618c05 More instances of bad variable naming 2020-02-11 04:25:42 -06:00
93fad9ab5c God fucking dammit 2020-02-11 04:22:50 -06:00
55cbc1eb2d Fix more bad variables from that copy
Oof
2020-02-11 04:20:25 -06:00
1ee8485b40 Remove leftovers from shamelessly copying a role
Whoops
2020-02-11 04:18:14 -06:00
728a6e4771 Add simple redirect role
And furnish that one, too
2020-02-11 04:16:57 -06:00
18627fbf39 Add simple git web deploy role
And, of course, furnish it
2020-02-11 04:06:29 -06:00
90fcbf7cbc Move Apache-PHP to its own role, set up dependencies 2020-02-10 01:19:59 -06:00
685a20bca6 Move SSL-required package into https role 2020-02-10 01:05:38 -06:00
0758ac1908 Remove key from MySql role 2020-02-10 01:02:36 -06:00
3e52a522f3 Generalize https setup into its own role 2020-02-10 00:50:56 -06:00
427804d68b Log cronjob on ansiblehost role 2020-02-08 01:44:06 -06:00
f8c152ebc1 Add fullchain to configs 2020-02-06 14:14:56 -06:00
ec2216a4cb Fix quoting on cronjob 2020-02-06 04:05:34 -06:00
ae29a7f870 Remove deprecated NameVirtualHost 2020-02-06 03:57:35 -06:00
7a1010f389 Fix typo in cronjob minute 2020-02-06 03:47:10 -06:00
96b7f55e63 Set up Nextcloud cronjob 2020-02-06 03:44:37 -06:00
cffd0b38bb Enable strict transport security 2020-02-06 03:22:38 -06:00
67373adcaf Add php configs, also add an unused mysql config 2020-02-06 03:17:15 -06:00
331005ab24 Change nextcloud db name 2020-02-06 01:42:12 -06:00
fc7f10a9e6 Let's uh... actually use the variable we set 2020-02-06 01:16:54 -06:00
777a9d86a0 Quote creds and modes in ansiblehost tasks 2020-02-06 01:01:18 -06:00
65ae3dd958 I guess we're installing both versions of pip and boto 2020-02-06 00:59:21 -06:00
e707695692 Create more appropriate Nextcloud directory 2020-02-06 00:53:47 -06:00
4e650f80c2 Prune unused files and the workstation role 2020-02-06 00:46:14 -06:00
ada9a5b8c1 Remove sizes from Nextcloud keys
They default to 4096, and I don't want to have to bump them up as necessary
2020-02-06 00:45:01 -06:00
34675072e8 Downgrade Python packages
I guess??
2020-02-06 00:43:43 -06:00
4f0908b245 Apply ansiblehost to inventory, fix syntax error 2020-02-06 00:38:04 -06:00
60acdbc9cb Use blocks to cut down on repeat code in user role 2020-02-06 00:35:06 -06:00
6eacfb3ba4 Remove cockpit user from common role 2020-02-06 00:34:01 -06:00
84949100f3 Remove cockpit role 2020-02-06 00:33:24 -06:00
129cc13848 Repurpose old ansiblehost role
It's now an automatic pullinator
2020-02-06 00:32:31 -06:00
9cf24c1acc Fix permissions on Nextcloud webroot 2020-02-06 00:20:43 -06:00
c2d9a3786f Correct some Apache configs 2020-02-06 00:01:26 -06:00
cbb84598b9 Set up a database for nextcloud 2020-02-05 23:56:41 -06:00
35fd9dd3ab Basic MySQL configuration 2020-02-05 23:43:22 -06:00
823b9bb060 Depend on it 2020-02-05 23:29:50 -06:00
3fa61ca850 Add barebones MySQL role
Which we are going to immediately flesh out
2020-02-05 23:29:39 -06:00
9781ad8426 Fix typo, only generate cert if necessary 2020-02-05 23:19:07 -06:00
67e428dd41 Whoops, got the keys mixed up 2020-02-05 23:01:06 -06:00
6612541a7b Copy over SSL configs after certification, fix using the wrong keys 2020-02-05 22:59:14 -06:00
230d8a2a92 Fix some bad Apache configs, set up ability for apache to nab its keys
Getting there, step by step
2020-02-05 22:48:21 -06:00
d0794d9abc Remove unnecessary directory 2020-02-05 22:35:15 -06:00
db2bf21579 Got modded mc on the brain; fixed two typos 2020-02-05 22:30:30 -06:00
8906a0ea1e Improve apache configs, enable modules 2020-02-05 22:28:03 -06:00
6b0a86128d Add execute bit for directories
Whups
2020-02-05 22:14:35 -06:00
ef7b4db3eb Fix removing the wrong archive file 2020-02-05 22:12:56 -06:00
9145796033 Fix typo 2020-02-05 22:10:25 -06:00
0a4eb939bd Refactor variable names, get SSL ready 2020-02-05 22:09:35 -06:00
2e28ff2dbc Use remote_src PROPERLY 2020-02-05 21:58:04 -06:00
fecd02cbba Use remote_src properly 2020-02-05 21:57:12 -06:00
4975ed3ffd Use an archive Nextcloud actually provides 2020-02-05 21:56:33 -06:00
f9d69fe220 Work a bit more on that Apache setup 2020-02-05 21:54:30 -06:00
96a9671052 Refactor a little bit 2020-02-05 21:26:03 -06:00
9e14dc5426 Create well-known directory
So close now
2020-02-05 21:13:04 -06:00
2437728f94 Maybe set up PKI fully? Probably not 2020-02-05 21:06:44 -06:00
02e5164eed Add disfunctional Nextcloud role 2020-02-05 20:23:20 -06:00
34ab9cc8d2 Fix another package name error for libnotify-bin
I'm on the fuckin ball today
2019-10-11 19:50:24 -05:00
f334d65d80 Fix apt_repository in workstation role
Whoops, that doesn't take a list
2019-10-11 19:49:08 -05:00
7599a1fddd Add blueman, correct pip package 2019-10-11 19:33:14 -05:00
258047afb7 Add local-workstation playbook and role 2019-10-11 19:12:00 -05:00
2bb29965bd Reorganize user salt creation
This now allows for easier home directory imports
Gonna whip up a playbook to initialize a fresh Ubuntu install on my workstations
2019-10-11 16:37:18 -05:00
86562b3ccc Reorganize, add cockpit role 2019-10-11 14:08:22 -05:00
52fd78e28b Disallow duplicates for all given roles 2019-10-03 03:54:46 -05:00
9ee50492c2 Force ansible repo clone
Changes on this host don't matter; it's not supposed to have commit rights so local changes are invalid anyway
2019-09-15 02:34:29 -05:00
4f5fe365fc Fix bootstrapping, use https URL for ansible scripts 2019-09-15 02:30:46 -05:00
8f7f53e96c Remove template yaml 2019-09-15 02:03:00 -05:00
1d3369fcb0 Split userlogon and ansible role tasks, switch apt packages to python3 2019-09-15 01:38:16 -05:00
cb3d94db94 Remove role interdependencies 2019-09-15 01:26:37 -05:00
4775944fc0 Install Ansible via pip for the Ansible host 2019-09-15 01:08:35 -05:00
963f43aeeb Add Ansible key to deployment
Kinda need that for an Ansible host
2019-09-15 00:49:01 -05:00
b8238a062d Lots: Add a new Ansible role, prepare for an EC2 inventory migration 2019-09-15 00:39:47 -05:00
3823f7a47f Babby's first playbooks 2019-09-14 11:49:23 -05:00
f462019c83 Actually add Ansible files 2019-08-30 14:13:34 -05:00