Salt
bad192e93e
I was never particularly fond of having a random one-off daemon doing my RCE. Sure, it offers some protection, but limiting my exposure to the open internet is far more ideal. I have tremendously more trust in the OpenSSH project than I do in Nagios. And for that reason, I'll be deprecating NRPE and shredding config files once these plays clean up
26 lines
991 B
YAML
Executable File
26 lines
991 B
YAML
Executable File
#!/usr/bin/env ansible-playbook
|
|
# vim:ft=ansible:
|
|
---
|
|
# Preambulatory system configuration
|
|
- import_playbook: playbooks/all.yml
|
|
# Manufacturer configuration
|
|
- import_playbook: playbooks/manufacturers_raspi.yml
|
|
- import_playbook: playbooks/manufacturers_s76.yml
|
|
# Tags for fundamental services
|
|
- import_playbook: playbooks/tags_zerotier.yml
|
|
- import_playbook: playbooks/tags_snmp.yml
|
|
- import_playbook: playbooks/tags_nagios.yml
|
|
- import_playbook: playbooks/tags_nagios-nrpe.yml
|
|
# Device roles
|
|
- import_playbook: playbooks/device_roles_pik8s-storage.yml
|
|
- import_playbook: playbooks/device_roles_pik8s.yml
|
|
- import_playbook: playbooks/device_roles_workstation.yml
|
|
# Production configuration
|
|
- import_playbook: playbooks/prod_db.yml
|
|
- import_playbook: playbooks/prod_web.yml
|
|
- import_playbook: playbooks/prod_game.yml
|
|
# Supplementary tags
|
|
- import_playbook: playbooks/tags_ansible-pull.yml
|
|
# Housekeeping tags for one-off tasks
|
|
- import_playbook: playbooks/tags_docker-prune.yml
|