This commit is contained in:
6
ansible_bck/core.yml
Normal file
6
ansible_bck/core.yml
Normal file
@@ -0,0 +1,6 @@
|
||||
- name: homesrv01 core playbook
|
||||
hosts: all
|
||||
roles:
|
||||
- myInfra.dev.homesrv01.core
|
||||
- myInfra.ssh
|
||||
|
||||
27
ansible_bck/roles/myInfra.dev.homesrv01.core/.gitignore
vendored
Normal file
27
ansible_bck/roles/myInfra.dev.homesrv01.core/.gitignore
vendored
Normal file
@@ -0,0 +1,27 @@
|
||||
# Ansible Tower ignore list
|
||||
|
||||
# Ansible runtime and backups
|
||||
*.original
|
||||
*.tmp
|
||||
*.bkp
|
||||
*.retry
|
||||
*.*~
|
||||
|
||||
# Tower runtime roles
|
||||
roles/**
|
||||
!roles/myInfra.dev.homesrv01
|
||||
!roles/requirements.yml
|
||||
|
||||
# Try tyo avoid any plain-text passwords
|
||||
*pwd*
|
||||
*pass*
|
||||
*password*
|
||||
*.txt
|
||||
|
||||
# Exclude all binaries
|
||||
*.bin
|
||||
*.jar
|
||||
*.tar
|
||||
*.zip
|
||||
*.gzip
|
||||
*.tgz
|
||||
60
ansible_bck/roles/myInfra.dev.homesrv01.core/meta/main.yml
Normal file
60
ansible_bck/roles/myInfra.dev.homesrv01.core/meta/main.yml
Normal file
@@ -0,0 +1,60 @@
|
||||
|
||||
|
||||
|
||||
galaxy_info:
|
||||
author: your name
|
||||
description: your role description
|
||||
company: your company (optional)
|
||||
|
||||
# If the issue tracker for your role is not on github, uncomment the
|
||||
# next line and provide a value
|
||||
# issue_tracker_url: http://example.com/issue/tracker
|
||||
|
||||
# Choose a valid license ID from https://spdx.org - some suggested licenses:
|
||||
# - BSD-3-Clause (default)
|
||||
# - MIT
|
||||
# - GPL-2.0-or-later
|
||||
# - GPL-3.0-only
|
||||
# - Apache-2.0
|
||||
# - CC-BY-4.0
|
||||
license: license (GPL-2.0-or-later, MIT, etc)
|
||||
|
||||
min_ansible_version: 2.1
|
||||
|
||||
# If this a Container Enabled role, provide the minimum Ansible Container version.
|
||||
# min_ansible_container_version:
|
||||
|
||||
#
|
||||
# Provide a list of supported platforms, and for each platform a list of versions.
|
||||
# If you don't wish to enumerate all versions for a particular platform, use 'all'.
|
||||
# To view available platforms and versions (or releases), visit:
|
||||
# https://galaxy.ansible.com/api/v1/platforms/
|
||||
#
|
||||
# platforms:
|
||||
# - name: Fedora
|
||||
# versions:
|
||||
# - all
|
||||
# - 25
|
||||
# - name: SomePlatform
|
||||
# versions:
|
||||
# - all
|
||||
# - 1.0
|
||||
# - 7
|
||||
# - 99.99
|
||||
|
||||
galaxy_tags: []
|
||||
# List tags for your role here, one per line. A tag is a keyword that describes
|
||||
# and categorizes the role. Users find roles by searching for tags. Be sure to
|
||||
# remove the '[]' above, if you add tags to this list.
|
||||
#
|
||||
# NOTE: A tag is limited to a single word comprised of alphanumeric characters.
|
||||
# Maximum 20 tags per role.
|
||||
|
||||
# dependencies:
|
||||
# - role: myInfra.ssh
|
||||
# - role: myInfra.docker.portainer
|
||||
# - role: myInfra.docker.promtail
|
||||
# - role: myInfra.docker.telegraf
|
||||
# - role: myInfra.dev.homesrv01.core
|
||||
# List your role dependencies here, one per line. Be sure to remove the '[]' above,
|
||||
# if you add dependencies to this list.
|
||||
20
ansible_bck/roles/myInfra.dev.homesrv01.core/tasks/main.yml
Normal file
20
ansible_bck/roles/myInfra.dev.homesrv01.core/tasks/main.yml
Normal file
@@ -0,0 +1,20 @@
|
||||
---
|
||||
|
||||
- name: admin user - setup
|
||||
become: true
|
||||
ansible.builtin.user:
|
||||
name: admin
|
||||
shell: /bin/bash
|
||||
groups: sudo,docker
|
||||
append: yes
|
||||
|
||||
- name: Install/Update Packages
|
||||
become: true
|
||||
ansible.builtin.package:
|
||||
name:
|
||||
- git
|
||||
- curl
|
||||
state: latest
|
||||
|
||||
|
||||
|
||||
27
ansible_bck/roles/myInfra.dev.homesrv01/.gitignore
vendored
Normal file
27
ansible_bck/roles/myInfra.dev.homesrv01/.gitignore
vendored
Normal file
@@ -0,0 +1,27 @@
|
||||
# Ansible Tower ignore list
|
||||
|
||||
# Ansible runtime and backups
|
||||
*.original
|
||||
*.tmp
|
||||
*.bkp
|
||||
*.retry
|
||||
*.*~
|
||||
|
||||
# Tower runtime roles
|
||||
roles/**
|
||||
!roles/myInfra.dev.homesrv01
|
||||
!roles/requirements.yml
|
||||
|
||||
# Try tyo avoid any plain-text passwords
|
||||
*pwd*
|
||||
*pass*
|
||||
*password*
|
||||
*.txt
|
||||
|
||||
# Exclude all binaries
|
||||
*.bin
|
||||
*.jar
|
||||
*.tar
|
||||
*.zip
|
||||
*.gzip
|
||||
*.tgz
|
||||
0
ansible_bck/roles/myInfra.dev.homesrv01/README.md
Normal file
0
ansible_bck/roles/myInfra.dev.homesrv01/README.md
Normal file
60
ansible_bck/roles/myInfra.dev.homesrv01/meta/main.yml
Normal file
60
ansible_bck/roles/myInfra.dev.homesrv01/meta/main.yml
Normal file
@@ -0,0 +1,60 @@
|
||||
|
||||
|
||||
|
||||
galaxy_info:
|
||||
author: your name
|
||||
description: your role description
|
||||
company: your company (optional)
|
||||
|
||||
# If the issue tracker for your role is not on github, uncomment the
|
||||
# next line and provide a value
|
||||
# issue_tracker_url: http://example.com/issue/tracker
|
||||
|
||||
# Choose a valid license ID from https://spdx.org - some suggested licenses:
|
||||
# - BSD-3-Clause (default)
|
||||
# - MIT
|
||||
# - GPL-2.0-or-later
|
||||
# - GPL-3.0-only
|
||||
# - Apache-2.0
|
||||
# - CC-BY-4.0
|
||||
license: license (GPL-2.0-or-later, MIT, etc)
|
||||
|
||||
min_ansible_version: 2.1
|
||||
|
||||
# If this a Container Enabled role, provide the minimum Ansible Container version.
|
||||
# min_ansible_container_version:
|
||||
|
||||
#
|
||||
# Provide a list of supported platforms, and for each platform a list of versions.
|
||||
# If you don't wish to enumerate all versions for a particular platform, use 'all'.
|
||||
# To view available platforms and versions (or releases), visit:
|
||||
# https://galaxy.ansible.com/api/v1/platforms/
|
||||
#
|
||||
# platforms:
|
||||
# - name: Fedora
|
||||
# versions:
|
||||
# - all
|
||||
# - 25
|
||||
# - name: SomePlatform
|
||||
# versions:
|
||||
# - all
|
||||
# - 1.0
|
||||
# - 7
|
||||
# - 99.99
|
||||
|
||||
galaxy_tags: []
|
||||
# List tags for your role here, one per line. A tag is a keyword that describes
|
||||
# and categorizes the role. Users find roles by searching for tags. Be sure to
|
||||
# remove the '[]' above, if you add tags to this list.
|
||||
#
|
||||
# NOTE: A tag is limited to a single word comprised of alphanumeric characters.
|
||||
# Maximum 20 tags per role.
|
||||
|
||||
# dependencies:
|
||||
# - role: myInfra.dev.homesrv01.core
|
||||
# - role: myInfra.docker.portainer
|
||||
# - role: myInfra.docker.promtail
|
||||
# - role: myInfra.docker.telegraf
|
||||
# - role: myInfra.dev.homesrv01.core
|
||||
# List your role dependencies here, one per line. Be sure to remove the '[]' above,
|
||||
# if you add dependencies to this list.
|
||||
12
ansible_bck/roles/myInfra.dev.homesrv01/tasks/main.yml
Normal file
12
ansible_bck/roles/myInfra.dev.homesrv01/tasks/main.yml
Normal file
@@ -0,0 +1,12 @@
|
||||
---
|
||||
- name: docker - music volume
|
||||
community.docker.docker_volume:
|
||||
name: music
|
||||
driver: local
|
||||
driver_options:
|
||||
type: none
|
||||
device: /mnt/media@sshfs:nas.lan/music
|
||||
o: bind
|
||||
|
||||
|
||||
|
||||
27
ansible_bck/roles/myInfra.ssh/.gitignore
vendored
Normal file
27
ansible_bck/roles/myInfra.ssh/.gitignore
vendored
Normal file
@@ -0,0 +1,27 @@
|
||||
# Ansible Tower ignore list
|
||||
|
||||
# Ansible runtime and backups
|
||||
*.original
|
||||
*.tmp
|
||||
*.bkp
|
||||
*.retry
|
||||
*.*~
|
||||
|
||||
# Tower runtime roles
|
||||
roles/**
|
||||
!roles/myInfra.dev.homesrv01
|
||||
!roles/requirements.yml
|
||||
|
||||
# Try tyo avoid any plain-text passwords
|
||||
*pwd*
|
||||
*pass*
|
||||
*password*
|
||||
*.txt
|
||||
|
||||
# Exclude all binaries
|
||||
*.bin
|
||||
*.jar
|
||||
*.tar
|
||||
*.zip
|
||||
*.gzip
|
||||
*.tgz
|
||||
0
ansible_bck/roles/myInfra.ssh/README.md
Normal file
0
ansible_bck/roles/myInfra.ssh/README.md
Normal file
11
ansible_bck/roles/myInfra.ssh/handlers/main.yml
Normal file
11
ansible_bck/roles/myInfra.ssh/handlers/main.yml
Normal file
@@ -0,0 +1,11 @@
|
||||
---
|
||||
- name: SSH - Restart Service
|
||||
become: true
|
||||
ansible.builtin.service:
|
||||
daemon_reload: true
|
||||
name: ssh
|
||||
enabled: true
|
||||
state: restarted
|
||||
|
||||
|
||||
|
||||
60
ansible_bck/roles/myInfra.ssh/meta/main.yml
Normal file
60
ansible_bck/roles/myInfra.ssh/meta/main.yml
Normal file
@@ -0,0 +1,60 @@
|
||||
|
||||
|
||||
|
||||
galaxy_info:
|
||||
author: your name
|
||||
description: your role description
|
||||
company: your company (optional)
|
||||
|
||||
# If the issue tracker for your role is not on github, uncomment the
|
||||
# next line and provide a value
|
||||
# issue_tracker_url: http://example.com/issue/tracker
|
||||
|
||||
# Choose a valid license ID from https://spdx.org - some suggested licenses:
|
||||
# - BSD-3-Clause (default)
|
||||
# - MIT
|
||||
# - GPL-2.0-or-later
|
||||
# - GPL-3.0-only
|
||||
# - Apache-2.0
|
||||
# - CC-BY-4.0
|
||||
license: license (GPL-2.0-or-later, MIT, etc)
|
||||
|
||||
min_ansible_version: 2.1
|
||||
|
||||
# If this a Container Enabled role, provide the minimum Ansible Container version.
|
||||
# min_ansible_container_version:
|
||||
|
||||
#
|
||||
# Provide a list of supported platforms, and for each platform a list of versions.
|
||||
# If you don't wish to enumerate all versions for a particular platform, use 'all'.
|
||||
# To view available platforms and versions (or releases), visit:
|
||||
# https://galaxy.ansible.com/api/v1/platforms/
|
||||
#
|
||||
# platforms:
|
||||
# - name: Fedora
|
||||
# versions:
|
||||
# - all
|
||||
# - 25
|
||||
# - name: SomePlatform
|
||||
# versions:
|
||||
# - all
|
||||
# - 1.0
|
||||
# - 7
|
||||
# - 99.99
|
||||
|
||||
galaxy_tags: []
|
||||
# List tags for your role here, one per line. A tag is a keyword that describes
|
||||
# and categorizes the role. Users find roles by searching for tags. Be sure to
|
||||
# remove the '[]' above, if you add tags to this list.
|
||||
#
|
||||
# NOTE: A tag is limited to a single word comprised of alphanumeric characters.
|
||||
# Maximum 20 tags per role.
|
||||
|
||||
# dependencies:
|
||||
# - role: myInfra.journald
|
||||
# - role: myInfra.docker.portainer
|
||||
# - role: myInfra.docker.promtail
|
||||
# - role: myInfra.docker.telegraf
|
||||
# - role: myInfra.dev.homesrv01.core
|
||||
# List your role dependencies here, one per line. Be sure to remove the '[]' above,
|
||||
# if you add dependencies to this list.
|
||||
30
ansible_bck/roles/myInfra.ssh/tasks/main.yml
Normal file
30
ansible_bck/roles/myInfra.ssh/tasks/main.yml
Normal file
@@ -0,0 +1,30 @@
|
||||
---
|
||||
- name: Install/Update openssh-server
|
||||
become: true
|
||||
ansible.builtin.package:
|
||||
name:
|
||||
- openssh-server
|
||||
state: latest
|
||||
|
||||
|
||||
- name: SSH - Setup & Config
|
||||
copy:
|
||||
dest: /etc/ssh/sshd_config.d/10-myLimbo.conf
|
||||
content: |
|
||||
###################################################################
|
||||
|
||||
# maintained by myInfra.dev.homesrv01 ansible role
|
||||
# https://git.limbosolutions.com/marcio.fernandes/homesrv01.dev.lan
|
||||
|
||||
####################################################################
|
||||
|
||||
PermitRootLogin no
|
||||
PasswordAuthentication no
|
||||
|
||||
notify:
|
||||
- SSH - Restart Service
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user