machine_setup/ansible/playbook.yaml

- hosts: all:!jail:!vm:!server
  vars:
    ansible_become: True
  roles:
    - sudo
    - doas
    - users
    - package_manager
    - zfs
    - zrepl
    - zsh
    - network
    - sshd
    - base
    - firewall
    - cpu
    - ntp
    - nvme
    - hosts
    - build
    - sound
    - graphics
    - power_management
    - gpg
    - fonts
    - alacritty
    - sway
    - emacs
    - firefox
    - devfs
    - ssh_client
    - sshfs
    - jail
    - fuse
    - autofs
    - exfat
    - bhyve
    - bluetooth
    - media
    - kubernetes
    - google_cloud_sdk
    - ansible
    - wireguard
    - portshaker
    - poudriere
    - android
    - latex
    - pyenv
    - webcam
    - docker
    - vscode
    - javascript

- hosts: nat_dhcp:homeserver_nat_dhcp:mrmanager_nat_dhcp
  vars:
    ansible_become: True
  roles:
    - jail_nat_dhcp

- hosts: poudriereodo:poudrieremrmanager
  vars:
    ansible_become: True
  roles:
    - sudo # for poudboot script
    - fstab
    - portshaker
    - poudriere
    - poudrierenginx

- hosts: mrmanager
  vars:
    ansible_become: True
  roles:
    - sudo
    - doas
    - users
    - package_manager
    - zfs
    - zrepl
    - zsh
    - network
    - sshd
    - base
    - firewall
    - cpu
    - ntp
    - nvme
    - hosts
    - build
    - devfs
    - jail
    - bhyve
    - wireguard
    - emacs
    - mrmanager

- hosts: admin_git:public_dns
  vars:
    ansible_become: True
  roles:
    - sudo
    - doas
    - users

- hosts: public_dns
  vars:
    ansible_become: True
  roles:
    - sudo
    - doas
    - users
    - public_dns
Minimal shell setup for colo server. 2023-05-28 03:10:44 +00:00			`- hosts: all:!jail:!vm:!server`
Add an initial sudo role. 2022-10-09 22:51:41 +00:00			`vars:`
			`ansible_become: True`
			`roles:`
Add DNS over TLS. 2022-12-15 03:36:12 +00:00			`- sudo`
Add a doas role for both FreeBSD and Linux. 2023-05-04 04:54:52 +00:00			`- doas`
cleanup 2022-12-03 22:22:53 +00:00			`- users`
Uncomment playbook. 2023-07-01 20:40:05 +00:00			`- package_manager`
			`- zfs`
			`- zrepl`
			`- zsh`
			`- network`
			`- sshd`
			`- base`
			`- firewall`
			`- cpu`
			`- ntp`
			`- nvme`
			`- hosts`
			`- build`
			`- sound`
			`- graphics`
Disable usb autosuspend for keyboard and mouse. USB auto suspend seems to only happen when the devices are plugged in at boot (which generally means when my laptop is connected to the dock before boot) but it is very annoying because some keypresses get lost and my mouse does not work unless I click first. 2023-08-16 19:10:50 +00:00			`- power_management`
Uncomment playbook. 2023-07-01 20:40:05 +00:00			`- gpg`
			`- fonts`
			`- alacritty`
			`- sway`
			`- emacs`
			`- firefox`
			`- devfs`
			`- ssh_client`
			`- sshfs`
			`- jail`
			`- fuse`
			`- autofs`
			`- exfat`
			`- bhyve`
			`- bluetooth`
			`- media`
			`- kubernetes`
			`- google_cloud_sdk`
			`- ansible`
			`- wireguard`
			`- portshaker`
			`- poudriere`
			`- android`
			`- latex`
			`- pyenv`
			`- webcam`
			`- docker`
			`- vscode`
Install nvm and yarn for javascript/typescript development. 2023-05-29 23:26:30 +00:00			`- javascript`
Start a jail_nat_dhcp role for the nat_dhcp jail. 2022-12-03 01:39:52 +00:00
Set up the nat_dhcp jail for mrmanager. 2023-05-29 02:36:31 +00:00			`- hosts: nat_dhcp:homeserver_nat_dhcp:mrmanager_nat_dhcp`
Start a jail_nat_dhcp role for the nat_dhcp jail. 2022-12-03 01:39:52 +00:00			`vars:`
			`ansible_become: True`
			`roles:`
			`- jail_nat_dhcp`
Move poudriere to inside a VM. 2022-12-10 22:55:44 +00:00
Set up poudriere on mrmanager. 2023-05-29 04:13:57 +00:00			`- hosts: poudriereodo:poudrieremrmanager`
Move poudriere to inside a VM. 2022-12-10 22:55:44 +00:00			`vars:`
			`ansible_become: True`
			`roles:`
Set up poudriere on mrmanager. 2023-05-29 04:13:57 +00:00			`- sudo # for poudboot script`
			`- fstab`
Move poudriere to inside a VM. 2022-12-10 22:55:44 +00:00			`- portshaker`
			`- poudriere`
Set up nginx for poudriere. 2023-05-29 17:14:53 +00:00			`- poudrierenginx`
Minimal shell setup for colo server. 2023-05-28 03:10:44 +00:00
			`- hosts: mrmanager`
			`vars:`
			`ansible_become: True`
			`roles:`
			`- sudo`
			`- doas`
			`- users`
Add a script to update git aurutil packages. 2023-07-14 17:18:49 +00:00			`- package_manager`
			`- zfs`
			`- zrepl`
			`- zsh`
			`- network`
			`- sshd`
			`- base`
Add firewall to mrmanager. 2023-05-28 20:01:02 +00:00			`- firewall`
Add a script to update git aurutil packages. 2023-07-14 17:18:49 +00:00			`- cpu`
			`- ntp`
			`- nvme`
			`- hosts`
			`- build`
			`- devfs`
			`- jail`
			`- bhyve`
			`- wireguard`
			`- emacs`
			`- mrmanager`
Add the admin_git jail. This jail hosts the git repo used for the kubernetes cluster manifests. It lives in a jail instead of inside a git website hosted inside kubernetes because it is needed for the bootstrapping process, creating a chicken-and-egg type of scenario. I figure I can set up mirroring of the git repo to a hosted git website for publishing. 2023-06-17 21:35:09 +00:00
Configure public_dns jail. 2023-06-18 19:21:16 +00:00			`- hosts: admin_git:public_dns`
Add the admin_git jail. This jail hosts the git repo used for the kubernetes cluster manifests. It lives in a jail instead of inside a git website hosted inside kubernetes because it is needed for the bootstrapping process, creating a chicken-and-egg type of scenario. I figure I can set up mirroring of the git repo to a hosted git website for publishing. 2023-06-17 21:35:09 +00:00			`vars:`
			`ansible_become: True`
			`roles:`
			`- sudo`
			`- doas`
			`- users`
Configure public_dns jail. 2023-06-18 19:21:16 +00:00
			`- hosts: public_dns`
			`vars:`
			`ansible_become: True`
			`roles:`
			`- sudo`
			`- doas`
			`- users`
			`- public_dns`