machine_setup/ansible/playbook.yaml

- hosts: all:!jail:!vm:!server
  vars:
    ansible_become: True
  roles:
    - sudo
    - doas
    - users
    - package_manager
    - zfs
    - zrepl
    - zsh
    - network
    - sshd
    - base
    - firewall
    - cpu
    - ntp
    - nvme
    - hosts
    - build
    - sound
    - graphics
    - power_management
    - gpg
    - fonts
    - alacritty
    - sway
    - emacs
    - firefox
    - devfs
    - ssh_client
    - sshfs
    - jail
    - fuse
    - autofs
    - exfat
    - bhyve
    - bluetooth
    - media
    - kubernetes
    - google_cloud_sdk
    - ansible
    - wireguard
    - portshaker
    - poudriere
    - android
    - latex
    - pyenv
    - webcam
    - docker
    - vscode
    - javascript
    - launch_keyboard
    - lvfs

- hosts: nat_dhcp:homeserver_nat_dhcp:mrmanager_nat_dhcp
  vars:
    ansible_become: True
  roles:
    - jail_nat_dhcp

- hosts: poudriereodo:poudrieremrmanager
  vars:
    ansible_become: True
  roles:
    - sudo # for poudboot script
    - fstab
    - portshaker
    - poudriere
    - poudrierenginx
    - freebsd_update_server

- hosts: mrmanager
  vars:
    ansible_become: True
  roles:
    - sudo
    - doas
    - users
    - package_manager
    - zfs
    - zrepl
    - zsh
    - network
    - sshd
    - base
    - firewall
    - cpu
    - ntp
    - nvme
    - hosts
    - build
    - devfs
    - jail
    - bhyve
    - wireguard
    - emacs
    - mrmanager

- hosts: admin_git:public_dns
  vars:
    ansible_become: True
  roles:
    - sudo
    - doas
    - users

- hosts: public_dns
  vars:
    ansible_become: True
  roles:
    - sudo
    - doas
    - users
    - public_dns

- hosts: odolinux:odofreebsd
  vars:
    ansible_become: True
  roles:
    - framework_laptop

- hosts: odofreebsd
  vars:
    ansible_become: True
  roles:
    - freebsd_update_server    

- hosts: freebsdupdatemrmanager
  vars:
    ansible_become: True
  roles:
    - sudo # for poudboot script
    - doas
    - fstab
    - build
    - freebsd_update_server
Minimal shell setup for colo server. 2023-05-28 03:10:44 +00:00			`- hosts: all:!jail:!vm:!server`
Add an initial sudo role. 2022-10-09 22:51:41 +00:00			`vars:`
			`ansible_become: True`
			`roles:`
Add DNS over TLS. 2022-12-15 03:36:12 +00:00			`- sudo`
Add a doas role for both FreeBSD and Linux. 2023-05-04 04:54:52 +00:00			`- doas`
cleanup 2022-12-03 22:22:53 +00:00			`- users`
Uncomment playbook. 2023-07-01 20:40:05 +00:00			`- package_manager`
			`- zfs`
			`- zrepl`
			`- zsh`
			`- network`
			`- sshd`
			`- base`
			`- firewall`
			`- cpu`
			`- ntp`
			`- nvme`
			`- hosts`
			`- build`
			`- sound`
			`- graphics`
Disable usb autosuspend for keyboard and mouse. USB auto suspend seems to only happen when the devices are plugged in at boot (which generally means when my laptop is connected to the dock before boot) but it is very annoying because some keypresses get lost and my mouse does not work unless I click first. 2023-08-16 19:10:50 +00:00			`- power_management`
Uncomment playbook. 2023-07-01 20:40:05 +00:00			`- gpg`
			`- fonts`
			`- alacritty`
			`- sway`
			`- emacs`
			`- firefox`
			`- devfs`
			`- ssh_client`
			`- sshfs`
			`- jail`
			`- fuse`
			`- autofs`
			`- exfat`
			`- bhyve`
			`- bluetooth`
			`- media`
			`- kubernetes`
			`- google_cloud_sdk`
			`- ansible`
			`- wireguard`
			`- portshaker`
			`- poudriere`
			`- android`
			`- latex`
			`- pyenv`
			`- webcam`
			`- docker`
			`- vscode`
Install nvm and yarn for javascript/typescript development. 2023-05-29 23:26:30 +00:00			`- javascript`
Install system76 tools. 2023-09-09 21:08:36 +00:00			`- launch_keyboard`
Add a lvfs role for Linux. 2023-09-10 22:28:32 +00:00			`- lvfs`
Start a jail_nat_dhcp role for the nat_dhcp jail. 2022-12-03 01:39:52 +00:00
Set up the nat_dhcp jail for mrmanager. 2023-05-29 02:36:31 +00:00			`- hosts: nat_dhcp:homeserver_nat_dhcp:mrmanager_nat_dhcp`
Start a jail_nat_dhcp role for the nat_dhcp jail. 2022-12-03 01:39:52 +00:00			`vars:`
			`ansible_become: True`
			`roles:`
			`- jail_nat_dhcp`
Move poudriere to inside a VM. 2022-12-10 22:55:44 +00:00
Set up poudriere on mrmanager. 2023-05-29 04:13:57 +00:00			`- hosts: poudriereodo:poudrieremrmanager`
Move poudriere to inside a VM. 2022-12-10 22:55:44 +00:00			`vars:`
			`ansible_become: True`
			`roles:`
Set up poudriere on mrmanager. 2023-05-29 04:13:57 +00:00			`- sudo # for poudboot script`
			`- fstab`
Move poudriere to inside a VM. 2022-12-10 22:55:44 +00:00			`- portshaker`
			`- poudriere`
Set up nginx for poudriere. 2023-05-29 17:14:53 +00:00			`- poudrierenginx`
Check out the freebsd-update-build git repo. 2023-09-01 20:41:34 +00:00			`- freebsd_update_server`
Minimal shell setup for colo server. 2023-05-28 03:10:44 +00:00
			`- hosts: mrmanager`
			`vars:`
			`ansible_become: True`
			`roles:`
			`- sudo`
			`- doas`
			`- users`
Add a script to update git aurutil packages. 2023-07-14 17:18:49 +00:00			`- package_manager`
			`- zfs`
			`- zrepl`
			`- zsh`
			`- network`
			`- sshd`
			`- base`
Add firewall to mrmanager. 2023-05-28 20:01:02 +00:00			`- firewall`
Add a script to update git aurutil packages. 2023-07-14 17:18:49 +00:00			`- cpu`
			`- ntp`
			`- nvme`
			`- hosts`
			`- build`
			`- devfs`
			`- jail`
			`- bhyve`
			`- wireguard`
			`- emacs`
			`- mrmanager`
Add the admin_git jail. This jail hosts the git repo used for the kubernetes cluster manifests. It lives in a jail instead of inside a git website hosted inside kubernetes because it is needed for the bootstrapping process, creating a chicken-and-egg type of scenario. I figure I can set up mirroring of the git repo to a hosted git website for publishing. 2023-06-17 21:35:09 +00:00
Configure public_dns jail. 2023-06-18 19:21:16 +00:00			`- hosts: admin_git:public_dns`
Add the admin_git jail. This jail hosts the git repo used for the kubernetes cluster manifests. It lives in a jail instead of inside a git website hosted inside kubernetes because it is needed for the bootstrapping process, creating a chicken-and-egg type of scenario. I figure I can set up mirroring of the git repo to a hosted git website for publishing. 2023-06-17 21:35:09 +00:00			`vars:`
			`ansible_become: True`
			`roles:`
			`- sudo`
			`- doas`
			`- users`
Configure public_dns jail. 2023-06-18 19:21:16 +00:00
			`- hosts: public_dns`
			`vars:`
			`ansible_become: True`
			`roles:`
			`- sudo`
			`- doas`
			`- users`
			`- public_dns`
Disable systemd-udev-settle on Linux on framework laptop. 2023-09-14 17:33:33 +00:00
			`- hosts: odolinux:odofreebsd`
			`vars:`
			`ansible_become: True`
			`roles:`
			`- framework_laptop`
TEMP: Add the freebsd_update_server role to odofreebsd for development. 2023-09-01 20:42:31 +00:00
			`- hosts: odofreebsd`
			`vars:`
			`ansible_become: True`
			`roles:`
Set up a separate FreeBSD update VM. It seems to compile the ports kernel modules into the OS, I need to be running the same kernel version as I am building, so I am putting it into its own VM. 2023-09-07 20:13:32 +00:00			`- freebsd_update_server`

			`- hosts: freebsdupdatemrmanager`
			`vars:`
			`ansible_become: True`
			`roles:`
			`- sudo # for poudboot script`
			`- doas`
			`- fstab`
			`- build`
			`- freebsd_update_server`