Added emma play and updated roles for multi-server setup

This commit is contained in:
Jef Roosens 2025-12-21 21:43:27 +01:00
parent dc538a3971
commit 75e0f73ba8
Signed by: Jef Roosens
GPG key ID: 21FD3D77D56BAF49
10 changed files with 151 additions and 0 deletions

View file

@ -0,0 +1,33 @@
# ---
# - name: Create subvolumes on {{ fs.path }}
# block:
# - name: Create subvolume {{ fs.path }}{{ subvol.name }}
# block:
# - name: "Ensure parent directory exists"
# ansible.builtin.file:
# path: "{{ (fs.path + subvol.name) | dirname }}"
# state: directory
# - name: "Ensure subvolume exists"
# community.general.btrfs_subvolume:
# filesystem_device: "{{ fs.device | default(omit) }}"
# filesystem_label: "{{ fs.label | default(omit) }}"
# filesystem_uuid: "{{ fs.uuid | default(omit) }}"
# name: "{{ subvol.name }}"
# state: "present"
# loop: "{{ fs.subvolumes }}"
# loop_var: "subvol"
# loop: "{{ filesystems }}"
# loop_var: "fs"
- name: Ensure all BTRFS subvolumes are created
community.general.btrfs_subvolume:
filesystem_device: "{{ item.filesystem_device | default(omit) }}"
filesystem_label: "{{ item.filesystem_label | default(omit) }}"
filesystem_uuid: "{{ item.filesystem_uuid | default(omit) }}"
name: "{{ item.name }}"
recursive: true
loop: "{{ subvolumes }}"

View file

@ -0,0 +1,5 @@
ssh-rsa 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 roosensjef@gmail.com
ssh-rsa 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 roosensjef@gmail.com
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINkcCTP0IE/ANIXJJIMWEg4f5riS8uv3KuypkzQC47XN roosensjef@gmail.com

View file

@ -1,4 +1,20 @@
---
- name: Ensure ssh directory is present
file:
path: /home/debian/.ssh/
state: directory
owner: debian
group: debian
mode: '700'
- name: Ensure authorized keys are present
copy:
src: authorized_keys
dest: /home/debian/.ssh/authorized_keys
owner: debian
group: debian
mode: '600'
- name: Ensure sshd config is present
ansible.builtin.copy:
src: 'sshd_config'

View file

@ -0,0 +1,5 @@
---
- name: restart networking
service:
name: networking
state: restarted

View file

@ -0,0 +1,6 @@
---
- name: Install networking config file.
template:
src: interfaces.j2
dest: /etc/network/interfaces.d/{{ interface }}
notify: restart networking

View file

@ -0,0 +1,7 @@
auto {{ interface }}
iface {{ interface }} inet static
address {{ static_ip }}
broadcast {{ broadcast_ip }}
netmask 255.255.255.0
gateway {{ router_ip }}
dns-nameservers {{ router_ip }} 8.8.8.8