infrastructure/ansible/main.yml

- hosts: all
  roles:
    - base
    - role: geerlingguy.ntp
      become: true
      vars:
        ntp_timezone: Europe/London
        ntp_manage_config: true
    - role: realorangeone.reflector
      when: ansible_os_family == 'Archlinux'

- hosts: casey
  roles:
    - gateway
    - nebula

- hosts:
    - grimes
    - pve-docker
  roles:
    - role: geerlingguy.docker
      become: true
      vars:
        docker_install_compose: false  # This role installs the binary directly, which is kinda nasty
        docker_package: "{{ 'docker-ce' if ansible_os_family == 'Debian' else 'docker' }}"
        docker_users:
          - "{{ user }}"
    - docker_cleanup
    - traefik

- hosts:
    - grimes
  roles:
    - plausible
    - duplicati
    - pages
    - upload
    - nebula

- hosts: pve-docker
  roles:
    - pve_docker
    - grafana
    - gitea
    - duplicati
    - yourls

- hosts: ingress
  roles:
    - role: chmduquesne.iptables_persistent
      become: true
    - ingress
    - nebula

- hosts: pve
  roles:
    - role: proxmox-nag-removal
      become: true
    - pve
    - zfs
COnfigure SSH bastion 2019-12-08 15:55:19 +00:00			`- hosts: all`
Install NTP 2019-12-08 21:17:30 +00:00			`roles:`
Merge SSH into base role 2020-05-23 10:58:09 +01:00			`- base`
Install ntp from galaxy 2020-03-02 19:45:16 +00:00			`- role: geerlingguy.ntp`
			`become: true`
			`vars:`
			`ntp_timezone: Europe/London`
Allow NTP role to manage config Hopefully this closes the port 2020-10-24 17:36:39 +01:00			`ntp_manage_config: true`
Conditionally run reflector role rather than manually defining which machines run arch 2020-08-19 18:58:58 +01:00			`- role: realorangeone.reflector`
			`when: ansible_os_family == 'Archlinux'`
COnfigure SSH bastion 2019-12-08 15:55:19 +00:00
			`- hosts: casey`
			`roles:`
Define haproxy config 2019-12-08 16:47:28 +00:00			`- gateway`
Init some skeleton nebula stuff 2021-01-25 21:53:04 +00:00			`- nebula`
Internalise SSH config and make it generic to all hosts 2020-01-28 20:39:42 +00:00
Make `grimes` a docker host 2020-04-26 13:44:06 +01:00			`- hosts:`
Init new web server on Linode I'll terraform it later, honest! 2020-12-04 23:02:19 +00:00			`- grimes`
Provision docker VM 2020-12-28 15:57:44 +00:00			`- pve-docker`
Internalise SSH config and make it generic to all hosts 2020-01-28 20:39:42 +00:00			`roles:`
Use ansible galaxy to install docker 2020-03-02 19:37:11 +00:00			`- role: geerlingguy.docker`
			`become: true`
			`vars:`
			`docker_install_compose: false # This role installs the binary directly, which is kinda nasty`
Make `grimes` a docker host 2020-04-26 13:44:06 +01:00			`docker_package: "{{ 'docker-ce' if ansible_os_family == 'Debian' else 'docker' }}"`
Use ansible galaxy to install docker 2020-03-02 19:37:11 +00:00			`docker_users:`
			`- "{{ user }}"`
Update ansible-lint Required a lot of renaming :( 2020-09-26 17:53:47 +01:00			`- docker_cleanup`
Convert watchtower into its own role 2020-04-23 21:51:01 +01:00			`- traefik`
Install docker on new server 2020-07-12 19:21:27 +01:00
Move plausible to new server 2020-12-05 12:33:50 +00:00			`- hosts:`
			`- grimes`
			`roles:`
			`- plausible`
Install duplicati on grimes Makes backing up website things a bit easier 2020-12-07 18:09:29 +00:00			`- duplicati`
Add traefik pages Add it ready for the migration in future 2021-01-16 23:29:55 +00:00			`- pages`
Move `upload` to `grimes` 2021-01-28 14:04:55 +00:00			`- upload`
Provision remaining nebula instances 2021-01-30 20:46:49 +00:00			`- nebula`
Move plausible to new server 2020-12-05 12:33:50 +00:00
Move docker containers to new PVE container 2021-01-09 18:02:17 +00:00			`- hosts: pve-docker`
Make `grimes` a docker host 2020-04-26 13:44:06 +01:00			`roles:`
Move docker containers to new PVE container 2021-01-09 18:02:17 +00:00			`- pve_docker`
Install grafana and link it to HA 2020-08-07 11:52:15 +01:00			`- grafana`
Replace gitlab with gitea Leave gitlab in place for a bit in case I need to get at data 2021-01-18 20:14:38 +00:00			`- gitea`
Install duplicati on PVE docker machine Requires some changes to how private IPs are specified, which I really need to clean up at some point! 2021-01-20 21:38:01 +00:00			`- duplicati`
Deploy yourls 2021-01-22 21:29:27 +00:00			`- yourls`
Host website outside home 2020-04-26 14:26:48 +01:00
Install and provision wireguard client on ingress server 2020-12-21 18:24:35 +00:00			`- hosts: ingress`
			`roles:`
Enable unsafe routing to PVE network over nebula 2021-01-30 22:59:56 +00:00			`- role: chmduquesne.iptables_persistent`
			`become: true`
Install and provision wireguard client on ingress server 2020-12-21 18:24:35 +00:00			`- ingress`
Provision remaining nebula instances 2021-01-30 20:46:49 +00:00			`- nebula`
Add roles to handle PVE nag and repos 2021-01-09 23:21:35 +00:00
			`- hosts: pve`
			`roles:`
			`- role: proxmox-nag-removal`
			`become: true`
			`- pve`
Decommission `walker` Kimsufi is just too annoying of a host. Everything has either been moved off, killed, or has further plans. 2021-01-28 18:56:39 +00:00			`- zfs`