infrastructure/ansible/main.yml

62 lines
1.1 KiB
YAML

- hosts: all
roles:
- base
- role: geerlingguy.ntp
become: true
vars:
ntp_timezone: Europe/London
ntp_manage_config: true
- role: realorangeone.reflector
when: ansible_os_family == 'Archlinux'
- hosts: casey
roles:
- gateway
- nebula
- hosts:
- grimes
- pve-docker
roles:
- role: geerlingguy.docker
become: true
vars:
docker_install_compose: false # This role installs the binary directly, which is kinda nasty
docker_package: "{{ 'docker-ce' if ansible_os_family == 'Debian' else 'docker' }}"
docker_users:
- "{{ user }}"
- docker_cleanup
- traefik
- hosts:
- grimes
roles:
- plausible
- duplicati
- pages
- upload
- nebula
- hosts: pve-docker
roles:
- pve_docker
- grafana
- gitea
- duplicati
- yourls
- pve_nebula_route
- hosts: ingress
roles:
- role: chmduquesne.iptables_persistent
become: true
- ingress
- nebula
- hosts: pve
roles:
- role: proxmox-nag-removal
become: true
- pve
- zfs
- pve_nebula_route