machine_setup/ansible/playbook.yaml

- hosts: all:!jail:!vm:!server
  vars:
    ansible_become: True
  roles:
    - sudo
    - doas
    - users
    # - package_manager
    # - zfs
    # - zrepl
    # - zsh
    # - network
    # - sshd
    # - base
    # - firewall
    # - cpu
    # - ntp
    # - nvme
    # - hosts
    # - build
    # - sound
    # - graphics
    # - gpg
    # - fonts
    # - alacritty
    # - sway
    # - emacs
    # - firefox
    # - devfs
    # - ssh_client
    # - sshfs
    # - jail
    # - fuse
    # - autofs
    # - exfat
    # - bhyve
    # - bluetooth
    # - media
    # - kubernetes
    # - google_cloud_sdk
    # - ansible
    # - wireguard
    # - portshaker
    # - poudriere
    # - android
    # - latex
    # - pyenv
    # - webcam
    # - docker
    # - vscode
    - javascript

- hosts: nat_dhcp:homeserver_nat_dhcp:mrmanager_nat_dhcp
  vars:
    ansible_become: True
  roles:
    - jail_nat_dhcp

- hosts: poudriereodo:poudrieremrmanager
  vars:
    ansible_become: True
  roles:
    - sudo # for poudboot script
    - fstab
    - portshaker
    - poudriere
    - poudrierenginx

- hosts: mrmanager
  vars:
    ansible_become: True
  roles:
    - sudo
    - doas
    - users
    - package_manager
    - zfs
    - zrepl
    - zsh
    - network
    - sshd
    - base
    - firewall
    - cpu
    - ntp
    - nvme
    - hosts
    - build
    - devfs
    - jail
    - bhyve
    - wireguard
    - plainmacs
    - mrmanager

- hosts: admin_git:public_dns
  vars:
    ansible_become: True
  roles:
    - sudo
    - doas
    - users

- hosts: public_dns
  vars:
    ansible_become: True
  roles:
    - sudo
    - doas
    - users
    - public_dns
Minimal shell setup for colo server. 2023-05-27 23:10:44 -04:00			`- hosts: all:!jail:!vm:!server`
Add an initial sudo role. 2022-10-09 18:51:41 -04:00			`vars:`
			`ansible_become: True`
			`roles:`
Add DNS over TLS. 2022-12-14 22:36:12 -05:00			`- sudo`
Add a doas role for both FreeBSD and Linux. 2023-05-04 00:54:52 -04:00			`- doas`
cleanup 2022-12-03 17:22:53 -05:00			`- users`
Install nvm and yarn for javascript/typescript development. 2023-05-29 19:26:30 -04:00			`# - package_manager`
			`# - zfs`
			`# - zrepl`
			`# - zsh`
			`# - network`
			`# - sshd`
			`# - base`
			`# - firewall`
			`# - cpu`
			`# - ntp`
			`# - nvme`
			`# - hosts`
			`# - build`
			`# - sound`
			`# - graphics`
			`# - gpg`
			`# - fonts`
			`# - alacritty`
			`# - sway`
			`# - emacs`
			`# - firefox`
			`# - devfs`
			`# - ssh_client`
			`# - sshfs`
			`# - jail`
			`# - fuse`
			`# - autofs`
			`# - exfat`
			`# - bhyve`
			`# - bluetooth`
			`# - media`
			`# - kubernetes`
			`# - google_cloud_sdk`
			`# - ansible`
			`# - wireguard`
			`# - portshaker`
			`# - poudriere`
			`# - android`
			`# - latex`
			`# - pyenv`
			`# - webcam`
			`# - docker`
			`# - vscode`
			`- javascript`
Start a jail_nat_dhcp role for the nat_dhcp jail. 2022-12-02 20:39:52 -05:00
Set up the nat_dhcp jail for mrmanager. 2023-05-28 22:36:31 -04:00			`- hosts: nat_dhcp:homeserver_nat_dhcp:mrmanager_nat_dhcp`
Start a jail_nat_dhcp role for the nat_dhcp jail. 2022-12-02 20:39:52 -05:00			`vars:`
			`ansible_become: True`
			`roles:`
			`- jail_nat_dhcp`
Move poudriere to inside a VM. 2022-12-10 17:55:44 -05:00
Set up poudriere on mrmanager. 2023-05-29 00:13:57 -04:00			`- hosts: poudriereodo:poudrieremrmanager`
Move poudriere to inside a VM. 2022-12-10 17:55:44 -05:00			`vars:`
			`ansible_become: True`
			`roles:`
Set up poudriere on mrmanager. 2023-05-29 00:13:57 -04:00			`- sudo # for poudboot script`
			`- fstab`
Move poudriere to inside a VM. 2022-12-10 17:55:44 -05:00			`- portshaker`
			`- poudriere`
Set up nginx for poudriere. 2023-05-29 13:14:53 -04:00			`- poudrierenginx`
Minimal shell setup for colo server. 2023-05-27 23:10:44 -04:00
			`- hosts: mrmanager`
			`vars:`
			`ansible_become: True`
			`roles:`
			`- sudo`
			`- doas`
			`- users`
			`- package_manager`
			`- zfs`
			`- zrepl`
			`- zsh`
			`- network`
			`- sshd`
Add the base role to mrmanager. 2023-05-28 13:18:56 -04:00			`- base`
Add firewall to mrmanager. 2023-05-28 16:01:02 -04:00			`- firewall`
Add AMD cpu role for mrmanager. 2023-05-28 16:51:17 -04:00			`- cpu`
Add the ntp, nvme, hosts, and build roles. 2023-05-28 17:30:41 -04:00			`- ntp`
			`- nvme`
			`- hosts`
			`- build`
Add devfs, jail, bhyve, and wireguard for mrmanager. 2023-05-28 17:44:14 -04:00			`- devfs`
			`- jail`
			`- bhyve`
			`- wireguard`
Install plainmacs on mrmanager. 2023-05-30 19:45:49 -04:00			`- plainmacs`
Proxy arp. 2023-06-17 13:19:41 -04:00			`- mrmanager`
Add the admin_git jail. This jail hosts the git repo used for the kubernetes cluster manifests. It lives in a jail instead of inside a git website hosted inside kubernetes because it is needed for the bootstrapping process, creating a chicken-and-egg type of scenario. I figure I can set up mirroring of the git repo to a hosted git website for publishing. 2023-06-17 17:35:09 -04:00
Configure public_dns jail. 2023-06-18 15:21:16 -04:00			`- hosts: admin_git:public_dns`
Add the admin_git jail. This jail hosts the git repo used for the kubernetes cluster manifests. It lives in a jail instead of inside a git website hosted inside kubernetes because it is needed for the bootstrapping process, creating a chicken-and-egg type of scenario. I figure I can set up mirroring of the git repo to a hosted git website for publishing. 2023-06-17 17:35:09 -04:00			`vars:`
			`ansible_become: True`
			`roles:`
			`- sudo`
			`- doas`
			`- users`
Configure public_dns jail. 2023-06-18 15:21:16 -04:00
			`- hosts: public_dns`
			`vars:`
			`ansible_become: True`
			`roles:`
			`- sudo`
			`- doas`
			`- users`
			`- public_dns`