loki/ansible at web-proxy - loki - Gitea: Git with a cup of tea

Archived

This repository has been archived on 2023-02-05. You can view files and clone it, but cannot push or open issues or pull requests.

History

Wojciech Kozlowski 0c9087b84c Add shadowsocks		2019-03-20 21:21:05 +01:00
..
etc	Add shadowsocks	2019-03-20 21:21:05 +01:00
.gitignore	Add ansible playbooks	2018-12-16 00:26:14 +00:00
ansible.cfg	Add ansible playbooks	2018-12-16 00:26:14 +00:00
hosts	Add default SSH port variable	2018-12-16 11:21:37 +00:00
main.yml	Add fstrim timer to ansible play	2018-12-18 01:42:04 +00:00
python.yml	Add default SSH port variable	2018-12-16 11:21:37 +00:00
README.rst	Add MotD and fix some typos	2018-12-16 10:29:00 +00:00
root.bashrc	Small fixes for things that came up in deployment	2018-12-16 20:45:58 +00:00
secrets.def.yml	Add shadowsocks	2019-03-20 21:21:05 +01:00
ssh.yml	Add default SSH port variable	2018-12-16 11:21:37 +00:00

README.rst

Loki Ansible Playbooks
======================

Ansible playbooks for provisioning the server.

Requirements
------------

Make sure you have ``ansible`` installed.

Usage
-----

Before any provisioning

1. Copy ``secrets.def.yml`` to ``secrets.yml`` and fill out all the variables
2. Encrypt the file with

::

   ansible-vault encrypt secrets.yml

3. To run a playbook

::

   ansible-playbook --vault-id @prompt playbook.yml

From this point it is assumed you have a server which can accept SSH
connections and you have setup public key authentication.

To provision the server

1. First install ``python`` on the server which is required by ``ansible``

::

   ansible-playbook --vault-id @prompt python.yml

2. Configure the SSH daemon with a new port number and better security options

::

   ansible-playbook --vault-id @prompt ssh.yml

3. Run the remaining setup

::

   ansible-playbook --vault-id @prompt main.yml