2022-09-04 17:25:14 +02:00
|
|
|
---
|
2022-09-06 11:10:05 +02:00
|
|
|
|
2022-10-18 12:13:27 +02:00
|
|
|
- name: mount rw
|
|
|
|
|
hosts:
|
|
|
|
|
- pikvm
|
|
|
|
|
become: true
|
|
|
|
|
pre_tasks:
|
|
|
|
|
- name: mount rw
|
|
|
|
|
command: /usr/local/bin/rw
|
|
|
|
|
|
2022-09-27 10:27:00 +02:00
|
|
|
- name: cryptoraid
|
|
|
|
|
hosts:
|
|
|
|
|
- suricata
|
|
|
|
|
become: true
|
|
|
|
|
roles:
|
|
|
|
|
- cryptoraid
|
2022-10-19 11:21:27 +02:00
|
|
|
tags: raid
|
2022-09-27 10:27:00 +02:00
|
|
|
|
2022-09-20 13:51:20 +02:00
|
|
|
- name: mounts
|
|
|
|
|
hosts:
|
|
|
|
|
- suricata
|
|
|
|
|
become: true
|
|
|
|
|
roles:
|
|
|
|
|
- mounts
|
|
|
|
|
|
2022-09-20 15:02:53 +02:00
|
|
|
- name: usercfg
|
|
|
|
|
hosts:
|
|
|
|
|
- suricata
|
|
|
|
|
become: true
|
|
|
|
|
roles:
|
|
|
|
|
- usercfg
|
|
|
|
|
|
2022-09-20 13:51:20 +02:00
|
|
|
- name: pi_fan_hwpwm
|
|
|
|
|
hosts:
|
|
|
|
|
- suricata
|
|
|
|
|
become: true
|
|
|
|
|
roles:
|
|
|
|
|
- pi_fan_hwpwm
|
|
|
|
|
|
2022-10-30 15:53:51 +01:00
|
|
|
- name: docker
|
|
|
|
|
hosts:
|
|
|
|
|
- caladan
|
|
|
|
|
- narwhal
|
|
|
|
|
become: true
|
|
|
|
|
roles:
|
|
|
|
|
- docker
|
|
|
|
|
|
2022-10-30 16:32:32 +01:00
|
|
|
- name: podman
|
|
|
|
|
hosts:
|
|
|
|
|
- suricata
|
|
|
|
|
become: true
|
|
|
|
|
roles:
|
|
|
|
|
- podman
|
|
|
|
|
tags: podman
|
|
|
|
|
|
2022-10-30 15:53:51 +01:00
|
|
|
- name: common roles
|
|
|
|
|
hosts:
|
|
|
|
|
- caladan
|
|
|
|
|
- fugu
|
|
|
|
|
- narwhal
|
|
|
|
|
- snitch
|
|
|
|
|
- suricata
|
|
|
|
|
# - pikvm
|
|
|
|
|
become: true
|
|
|
|
|
roles:
|
|
|
|
|
- basic
|
|
|
|
|
- users
|
|
|
|
|
- repos
|
|
|
|
|
- sshd
|
|
|
|
|
vars:
|
|
|
|
|
users:
|
|
|
|
|
- rilla
|
|
|
|
|
- ansible
|
|
|
|
|
- builder
|
|
|
|
|
- gopass
|
|
|
|
|
- woodpecker
|
|
|
|
|
|
|
|
|
|
|
2022-09-06 11:10:05 +02:00
|
|
|
- name: quality of life tools
|
|
|
|
|
hosts:
|
|
|
|
|
- caladan
|
|
|
|
|
- fugu
|
2022-09-20 13:51:20 +02:00
|
|
|
- narwhal
|
|
|
|
|
- suricata
|
2022-09-04 17:25:14 +02:00
|
|
|
become: true
|
2022-08-30 17:27:09 +02:00
|
|
|
roles:
|
2022-09-04 18:57:47 +02:00
|
|
|
- quality_of_life
|
2022-09-04 16:52:37 +02:00
|
|
|
|
2022-09-06 11:10:05 +02:00
|
|
|
- name: wifi setup
|
|
|
|
|
hosts: snitch
|
2022-09-04 17:25:14 +02:00
|
|
|
become: true
|
2022-09-04 16:52:37 +02:00
|
|
|
roles:
|
2022-09-06 11:10:05 +02:00
|
|
|
- wifi
|
|
|
|
|
|
|
|
|
|
- name: caladan-specific things
|
|
|
|
|
hosts: caladan
|
|
|
|
|
become: true
|
|
|
|
|
roles:
|
|
|
|
|
- tinyproxy
|
2022-09-04 17:47:06 +02:00
|
|
|
|
2022-10-30 15:53:51 +01:00
|
|
|
- name: k3s
|
|
|
|
|
hosts:
|
|
|
|
|
- suricata
|
|
|
|
|
become: true
|
|
|
|
|
roles:
|
|
|
|
|
- k3s
|
|
|
|
|
tags: k3s
|
|
|
|
|
|
2022-09-06 16:11:48 +02:00
|
|
|
- name: wireguard
|
|
|
|
|
hosts:
|
|
|
|
|
- caladan
|
|
|
|
|
- fugu
|
|
|
|
|
become: true
|
|
|
|
|
roles:
|
|
|
|
|
- wireguard
|
|
|
|
|
|
2022-09-17 18:03:17 +02:00
|
|
|
- name: setup gopass
|
|
|
|
|
become: true
|
|
|
|
|
hosts:
|
|
|
|
|
- caladan
|
|
|
|
|
- fugu
|
|
|
|
|
- narwhal
|
2022-10-19 18:00:01 +02:00
|
|
|
# - pikvm
|
2022-09-17 18:03:17 +02:00
|
|
|
roles:
|
|
|
|
|
- gopass
|
2022-10-18 18:16:13 +02:00
|
|
|
|
|
|
|
|
- name: setup DAGs
|
|
|
|
|
become: true
|
|
|
|
|
hosts:
|
|
|
|
|
- pikvm
|
|
|
|
|
roles:
|
|
|
|
|
- dags
|
|
|
|
|
tags: dags
|
|
|
|
|
|
|
|
|
|
- name: set up pikvm's ssl certs
|
|
|
|
|
hosts:
|
|
|
|
|
- pikvm
|
|
|
|
|
become: true
|
|
|
|
|
vars:
|
|
|
|
|
domain: monotremata.xyz
|
2022-09-20 13:51:20 +02:00
|
|
|
|
|
|
|
|
- name: lbu commit
|
|
|
|
|
hosts:
|
|
|
|
|
- snitch
|
|
|
|
|
- suricata
|
|
|
|
|
become: true
|
2022-10-19 18:09:08 +02:00
|
|
|
post_tasks:
|
|
|
|
|
- name: lbu commit
|
|
|
|
|
lbu:
|
|
|
|
|
commit: true
|
|
|
|
|
when: ansible_distribution == "Alpine" and alpine_mode in ["diskless", "data"]
|
2022-10-18 12:13:27 +02:00
|
|
|
|
|
|
|
|
- name: mount ro
|
|
|
|
|
hosts:
|
|
|
|
|
- pikvm
|
|
|
|
|
become: true
|
|
|
|
|
post_tasks:
|
|
|
|
|
- name: mount ro
|
|
|
|
|
command: /usr/local/bin/ro
|
2022-10-30 15:53:51 +01:00
|
|
|
|
|
|
|
|
# todo:
|
|
|
|
|
# setup-apkcache and setup-lbu to use /media/mmcblk0p2
|
