# ansible

## commande ansible

***launch playbook on staging***
`ansible-playbook -i staging site.yml  --vault-password-file=.vaultpassword`

***init new role architecture***
`ansible-galaxy user_config init `

***launch ansible bootstrap***
` ansible-playbook -i nas, bootstrap.yml -u root --ask-pass`

***encrypt string***
`ansible-vault encrypt_string`


## Prerequis

- python
- sudo


## TODO


### Global Roles

- [x] system role:
  - install ansible aur module
  - soft install (zsh,vim,)

- [x] user  profil config  

- [x] ansible bootstrap
  - install python
  - install sudo
  - create user
  - copy clé RSA

- [x] samba automount role
    - géré les credential en fichier
    - initialisé les variable pour les diferent périphérique

- [x] davfs mount

- [x] VM server

- [x] syncthing role

### Workstation roles

- [x] mpd role

- [x] ansible manager
  - install ansible
  - install ansible aur module
  - clone ansible repo

- [x] workstation role
- -need to check for nvidia drver
- [x] cups
- [x] bluetooth et tlp pour laptop
  
- [x] grubtheme


### Server Roles

  - terminfo

- server role
  - [x] cron
  - [x] ssmtp

  
- [x] rsyncd role

- [x] failtoban role

- [X] nginx/php role
  - install
  - config

- [ ] dns role
    -slave/primary


- [X] mariadb role
  - install
  - config
  - (voir pouquoi l'init de mysql ne fonctionne pas dans ansible)

- [ ] tt-rss role
  - depend nginx & madiadb role
  - fail2ban jail

- [ ] gitea role
  - depend of mariadb role

- [ ] dns role
    -slave/primary

- [ ] backup role?
  - controle du reboot
    


#### global improvment

- voir pour compatibiliser debian
- variabiliser