Go to file
2019-04-09 17:39:04 +02:00
group_vars add vault file 2019-04-09 17:39:04 +02:00
host_vars add new role skel 2019-04-09 16:33:56 +02:00
roles add new role skel 2019-04-09 16:33:56 +02:00
.gitignore add vault file 2019-04-09 17:39:04 +02:00
ansible.cfg add config forward ssh-agent 2018-12-01 19:11:33 +01:00
bootstrap.yml improve bootstrap 2019-04-09 16:34:35 +02:00
global.yml add global playbook 2019-04-09 17:03:13 +02:00
production modif inventory file 2019-04-09 16:35:56 +02:00
README.md add vault file 2019-04-09 17:39:04 +02:00
server.yml add global playbook 2019-04-09 17:03:13 +02:00
site.yml add global playbook 2019-04-09 17:03:13 +02:00
staging modif inventory file 2019-04-09 16:35:56 +02:00
workstation.yml add global playbook 2019-04-09 17:03:13 +02:00

ansible

commande ansible

launch playbook on staging ansible-playbook -i staging site.yml --vault-password-file=.vaultpassword

init new role architecture ansible-galaxy user_config init

launch ansible bootstrap ansible-playbook -i nas, bootstrap.yml -u root --ask-pass

*** encrypt string** ansible-vault encrypt_string

Prerequis

  • python
  • sudo

TODO

Global Roles

  • system role:

    • install ansible aur module
    • soft install (zsh,vim,)
  • user profil config

  • ansible bootstrap

    • install python
    • install sudo
    • create user
    • copy clé RSA
  • samba automount role

    • géré les credential en fichier
    • initialisé les variable pour les diferent périphérique
  • davfs mount

  • VM server

  • syncthing role

Workstation roles

  • mpd role

  • ansible manager

    • install ansible
    • install ansible aur module
    • clone ansible repo
  • workstation role

    • cups
    • bluetooth et tlp pour laptop
    • install wm software
    • install worstation software (firefox keepass,pulseaudio,ncmpcc)
  • grubtheme

Server Roles

  • [server role]

    • cron
    • ssmtp
    • controle du reboot
  • rsyncd role

  • backup role?

  • ssmtp role

  • nginx/php role

    • install
    • config
  • mariadb role

    • install
    • config
    • backup
  • tt-rss role

    • depend nginx & madiadb role
  • gitea role

    • depend of mariadb role
  • dns role -slave/primary

  • failtoban role

global improvment

  • voir pour compatibiliser debian
  • variabiliser