Added emma play and updated roles for multi-server setup
This commit is contained in:
parent
dc538a3971
commit
75e0f73ba8
10 changed files with 151 additions and 0 deletions
33
roles/any.common.btrfs-subvolumes/tasks/main.yml
Normal file
33
roles/any.common.btrfs-subvolumes/tasks/main.yml
Normal file
|
|
@ -0,0 +1,33 @@
|
|||
# ---
|
||||
# - name: Create subvolumes on {{ fs.path }}
|
||||
# block:
|
||||
# - name: Create subvolume {{ fs.path }}{{ subvol.name }}
|
||||
# block:
|
||||
# - name: "Ensure parent directory exists"
|
||||
# ansible.builtin.file:
|
||||
# path: "{{ (fs.path + subvol.name) | dirname }}"
|
||||
# state: directory
|
||||
|
||||
# - name: "Ensure subvolume exists"
|
||||
# community.general.btrfs_subvolume:
|
||||
# filesystem_device: "{{ fs.device | default(omit) }}"
|
||||
# filesystem_label: "{{ fs.label | default(omit) }}"
|
||||
# filesystem_uuid: "{{ fs.uuid | default(omit) }}"
|
||||
|
||||
# name: "{{ subvol.name }}"
|
||||
# state: "present"
|
||||
|
||||
# loop: "{{ fs.subvolumes }}"
|
||||
# loop_var: "subvol"
|
||||
# loop: "{{ filesystems }}"
|
||||
# loop_var: "fs"
|
||||
|
||||
- name: Ensure all BTRFS subvolumes are created
|
||||
community.general.btrfs_subvolume:
|
||||
filesystem_device: "{{ item.filesystem_device | default(omit) }}"
|
||||
filesystem_label: "{{ item.filesystem_label | default(omit) }}"
|
||||
filesystem_uuid: "{{ item.filesystem_uuid | default(omit) }}"
|
||||
name: "{{ item.name }}"
|
||||
recursive: true
|
||||
loop: "{{ subvolumes }}"
|
||||
|
||||
5
roles/any.common.ssh/files/authorized_keys
Normal file
5
roles/any.common.ssh/files/authorized_keys
Normal file
|
|
@ -0,0 +1,5 @@
|
|||
ssh-rsa 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 roosensjef@gmail.com
|
||||
|
||||
ssh-rsa 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 roosensjef@gmail.com
|
||||
|
||||
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINkcCTP0IE/ANIXJJIMWEg4f5riS8uv3KuypkzQC47XN roosensjef@gmail.com
|
||||
|
|
@ -1,4 +1,20 @@
|
|||
---
|
||||
- name: Ensure ssh directory is present
|
||||
file:
|
||||
path: /home/debian/.ssh/
|
||||
state: directory
|
||||
owner: debian
|
||||
group: debian
|
||||
mode: '700'
|
||||
|
||||
- name: Ensure authorized keys are present
|
||||
copy:
|
||||
src: authorized_keys
|
||||
dest: /home/debian/.ssh/authorized_keys
|
||||
owner: debian
|
||||
group: debian
|
||||
mode: '600'
|
||||
|
||||
- name: Ensure sshd config is present
|
||||
ansible.builtin.copy:
|
||||
src: 'sshd_config'
|
||||
|
|
|
|||
5
roles/any.common.static-ip/handlers/main.yml
Normal file
5
roles/any.common.static-ip/handlers/main.yml
Normal file
|
|
@ -0,0 +1,5 @@
|
|||
---
|
||||
- name: restart networking
|
||||
service:
|
||||
name: networking
|
||||
state: restarted
|
||||
6
roles/any.common.static-ip/tasks/main.yml
Normal file
6
roles/any.common.static-ip/tasks/main.yml
Normal file
|
|
@ -0,0 +1,6 @@
|
|||
---
|
||||
- name: Install networking config file.
|
||||
template:
|
||||
src: interfaces.j2
|
||||
dest: /etc/network/interfaces.d/{{ interface }}
|
||||
notify: restart networking
|
||||
7
roles/any.common.static-ip/templates/interfaces.j2
Normal file
7
roles/any.common.static-ip/templates/interfaces.j2
Normal file
|
|
@ -0,0 +1,7 @@
|
|||
auto {{ interface }}
|
||||
iface {{ interface }} inet static
|
||||
address {{ static_ip }}
|
||||
broadcast {{ broadcast_ip }}
|
||||
netmask 255.255.255.0
|
||||
gateway {{ router_ip }}
|
||||
dns-nameservers {{ router_ip }} 8.8.8.8
|
||||
Loading…
Add table
Add a link
Reference in a new issue