deploy updates

deploy.yml

@@ -8,28 +8,6 @@
     - name: mount rw
       command: /usr/local/bin/rw
 
-- name: common roles
-  hosts:
-    - caladan
-    - fugu
-    - narwhal
-    - snitch
-    - suricata
-    # - pikvm
-  become: true
-  roles:
-    - basic
-    - users
-    - repos
-    - sshd
-  vars:
-    users:
-      - rilla
-      - ansible
-      - builder
-      - gopass
-      - woodpecker
-
 - name: cryptoraid
   hosts:
     - suricata
@@ -59,6 +37,38 @@
   roles:
     - pi_fan_hwpwm
 
+- name: docker
+  hosts:
+    - suricata
+    - caladan
+    - narwhal
+  become: true
+  roles:
+    - docker
+
+- name: common roles
+  hosts:
+    - caladan
+    - fugu
+    - narwhal
+    - snitch
+    - suricata
+    # - pikvm
+  become: true
+  roles:
+    - basic
+    - users
+    - repos
+    - sshd
+  vars:
+    users:
+      - rilla
+      - ansible
+      - builder
+      - gopass
+      - woodpecker
+
+
 - name: quality of life tools
   hosts:
     - caladan
@@ -81,6 +91,14 @@
   roles:
     - tinyproxy
 
+- name: k3s
+  hosts:
+    - suricata
+  become: true
+  roles:
+    - k3s
+  tags: k3s
+
 - name: wireguard
   hosts:
     - caladan
@@ -132,3 +150,6 @@
   post_tasks:
     - name: mount ro
       command: /usr/local/bin/ro
+
+# todo:
+# setup-apkcache and setup-lbu to use /media/mmcblk0p2