machine_setup/ansible/playbook.yaml

- hosts: all:!jail:!vm:!server
  vars:
    ansible_become: True
  roles:
    - sudo
    - doas
    - users
    - package_manager
    - zfs
    - zrepl
    - zsh
    - network
    - sshd
    - base
    - firewall
    - cpu
    - ntp
    - nvme
    - hosts
    - build
    - sound
    - graphics
    - gpg
    - fonts
    - alacritty
    - sway
    - emacs
    - firefox
    - devfs
    - ssh_client
    - sshfs
    - jail
    - fuse
    - autofs
    - exfat
    - bhyve
    - bluetooth
    - media
    - kubernetes
    - google_cloud_sdk
    - ansible
    - wireguard
    - portshaker
    - poudriere
    - android
    - latex
    - pyenv
    - webcam
    - docker
    - vscode
    - javascript

- hosts: nat_dhcp:homeserver_nat_dhcp:mrmanager_nat_dhcp
  vars:
    ansible_become: True
  roles:
    - jail_nat_dhcp

- hosts: poudriereodo:poudrieremrmanager
  vars:
    ansible_become: True
  roles:
    - sudo # for poudboot script
    - fstab
    - portshaker
    - poudriere
    - poudrierenginx

- hosts: mrmanager
  vars:
    ansible_become: True
  roles:
    - sudo
    - doas
    - users
    - package_manager
    - zfs
    - zrepl
    - zsh
    - network
    - sshd
    - base
    - firewall
    - cpu
    - ntp
    - nvme
    - hosts
    - build
    - devfs
    - jail
    - bhyve
    - wireguard
    - emacs
    - mrmanager

- hosts: admin_git:public_dns
  vars:
    ansible_become: True
  roles:
    - sudo
    - doas
    - users

- hosts: public_dns
  vars:
    ansible_become: True
  roles:
    - sudo
    - doas
    - users
    - public_dns
Minimal shell setup for colo server. 2023-05-27 23:10:44 -04:00			`- hosts: all:!jail:!vm:!server`
Add an initial sudo role. 2022-10-09 18:51:41 -04:00			`vars:`
			`ansible_become: True`
			`roles:`
Add DNS over TLS. 2022-12-14 22:36:12 -05:00			`- sudo`
Add a doas role for both FreeBSD and Linux. 2023-05-04 00:54:52 -04:00			`- doas`
cleanup 2022-12-03 17:22:53 -05:00			`- users`
Uncomment playbook. 2023-07-01 16:40:05 -04:00			`- package_manager`
			`- zfs`
			`- zrepl`
			`- zsh`
			`- network`
			`- sshd`
			`- base`
			`- firewall`
			`- cpu`
			`- ntp`
			`- nvme`
			`- hosts`
			`- build`
			`- sound`
			`- graphics`
			`- gpg`
			`- fonts`
			`- alacritty`
			`- sway`
			`- emacs`
			`- firefox`
			`- devfs`
			`- ssh_client`
			`- sshfs`
			`- jail`
			`- fuse`
			`- autofs`
			`- exfat`
			`- bhyve`
			`- bluetooth`
			`- media`
			`- kubernetes`
			`- google_cloud_sdk`
			`- ansible`
			`- wireguard`
			`- portshaker`
			`- poudriere`
			`- android`
			`- latex`
			`- pyenv`
			`- webcam`
			`- docker`
			`- vscode`
Install nvm and yarn for javascript/typescript development. 2023-05-29 19:26:30 -04:00			`- javascript`
Start a jail_nat_dhcp role for the nat_dhcp jail. 2022-12-02 20:39:52 -05:00
Set up the nat_dhcp jail for mrmanager. 2023-05-28 22:36:31 -04:00			`- hosts: nat_dhcp:homeserver_nat_dhcp:mrmanager_nat_dhcp`
Start a jail_nat_dhcp role for the nat_dhcp jail. 2022-12-02 20:39:52 -05:00			`vars:`
			`ansible_become: True`
			`roles:`
			`- jail_nat_dhcp`
Move poudriere to inside a VM. 2022-12-10 17:55:44 -05:00
Set up poudriere on mrmanager. 2023-05-29 00:13:57 -04:00			`- hosts: poudriereodo:poudrieremrmanager`
Move poudriere to inside a VM. 2022-12-10 17:55:44 -05:00			`vars:`
			`ansible_become: True`
			`roles:`
Set up poudriere on mrmanager. 2023-05-29 00:13:57 -04:00			`- sudo # for poudboot script`
			`- fstab`
Move poudriere to inside a VM. 2022-12-10 17:55:44 -05:00			`- portshaker`
			`- poudriere`
Set up nginx for poudriere. 2023-05-29 13:14:53 -04:00			`- poudrierenginx`
Minimal shell setup for colo server. 2023-05-27 23:10:44 -04:00
			`- hosts: mrmanager`
			`vars:`
			`ansible_become: True`
			`roles:`
			`- sudo`
			`- doas`
			`- users`
Add a script to update git aurutil packages. 2023-07-14 13:18:49 -04:00			`- package_manager`
			`- zfs`
			`- zrepl`
			`- zsh`
			`- network`
			`- sshd`
			`- base`
Add firewall to mrmanager. 2023-05-28 16:01:02 -04:00			`- firewall`
Add a script to update git aurutil packages. 2023-07-14 13:18:49 -04:00			`- cpu`
			`- ntp`
			`- nvme`
			`- hosts`
			`- build`
			`- devfs`
			`- jail`
			`- bhyve`
			`- wireguard`
			`- emacs`
			`- mrmanager`
Add the admin_git jail. This jail hosts the git repo used for the kubernetes cluster manifests. It lives in a jail instead of inside a git website hosted inside kubernetes because it is needed for the bootstrapping process, creating a chicken-and-egg type of scenario. I figure I can set up mirroring of the git repo to a hosted git website for publishing. 2023-06-17 17:35:09 -04:00
Configure public_dns jail. 2023-06-18 15:21:16 -04:00			`- hosts: admin_git:public_dns`
Add the admin_git jail. This jail hosts the git repo used for the kubernetes cluster manifests. It lives in a jail instead of inside a git website hosted inside kubernetes because it is needed for the bootstrapping process, creating a chicken-and-egg type of scenario. I figure I can set up mirroring of the git repo to a hosted git website for publishing. 2023-06-17 17:35:09 -04:00			`vars:`
			`ansible_become: True`
			`roles:`
			`- sudo`
			`- doas`
			`- users`
Configure public_dns jail. 2023-06-18 15:21:16 -04:00
			`- hosts: public_dns`
			`vars:`
			`ansible_become: True`
			`roles:`
			`- sudo`
			`- doas`
			`- users`
			`- public_dns`