machine_setup/ansible/playbook.yaml

- hosts: all:!jail:!vm:!server
  vars:
    ansible_become: True
  roles:
    - sudo
    - doas
    - users
    - package_manager
    - zfs
    - zrepl
    - zsh
    - network
    - sshd
    - base
    - firewall
    - cpu
    - ntp
    - nvme
    - hosts
    - build
    - sound
    - graphics
    - power_management
    - gpg
    - fonts
    - alacritty
    - sway
    - emacs
    - firefox
    - chromium
    - devfs
    - ssh_client
    - sshfs
    - jail
    - fuse
    - autofs
    - exfat
    - bhyve
    - bluetooth
    - media
    - kubernetes
    - google_cloud_sdk
    - ansible
    - wireguard
    - portshaker
    - android
    - latex
    - python
    - pyenv
    - webcam
    - docker
    - vscode
    - javascript
    - launch_keyboard
    - lvfs
    - restaurant_health_rating
    - wasm
    - noise_suppression

- hosts: nat_dhcp:homeserver_nat_dhcp:mrmanager_nat_dhcp
  vars:
    ansible_become: True
  roles:
    - jail_nat_dhcp

- hosts: poudriereodo:poudrieremrmanager
  vars:
    ansible_become: True
  roles:
    - sudo # for poudboot script
    - doas
    - fstab
    - package_manager
    - zsh
    - termcap
    - sshd
    - portshaker
    - poudriere
    - poudrierenginx

- hosts: mrmanager
  vars:
    ansible_become: True
  roles:
    - sudo
    - doas
    - users
    - package_manager
    - zfs
    - zrepl
    - zsh
    - network
    - sshd
    - base
    - firewall
    - cpu
    - ntp
    - nvme
    - hosts
    - build
    - devfs
    - jail
    - bhyve
    - wireguard
    - emacs
    - mrmanager

- hosts: admin_git:public_dns
  vars:
    ansible_become: True
  roles:
    - sudo
    - doas
    - users

- hosts: public_dns
  vars:
    ansible_become: True
  roles:
    - sudo
    - doas
    - users
    - public_dns

- hosts: odolinux:odofreebsd:odowork
  vars:
    ansible_become: True
  roles:
    - linfi
    - framework_laptop

- hosts: homeserver
  vars:
    ansible_become: True
  roles:
    - homeserver

- hosts: odowork
  vars:
    ansible_become: True
  roles:
    - odowork

- hosts: sftp
  vars:
    ansible_become: True
  roles:
    - users
    - sftp

- hosts: bastion
  vars:
    ansible_become: True
  roles:
    - jail_bastion

- hosts: certificate
  vars:
    ansible_become: True
  roles:
    - jail_certificate

- hosts: momlaptop
  vars:
    ansible_become: True
  roles:
    - jail_momlaptop
Minimal shell setup for colo server. 2023-05-28 03:10:44 +00:00			`- hosts: all:!jail:!vm:!server`
Add an initial sudo role. 2022-10-09 22:51:41 +00:00			`vars:`
			`ansible_become: True`
			`roles:`
Add DNS over TLS. 2022-12-15 03:36:12 +00:00			`- sudo`
Add a doas role for both FreeBSD and Linux. 2023-05-04 04:54:52 +00:00			`- doas`
cleanup 2022-12-03 22:22:53 +00:00			`- users`
Uncomment playbook. 2023-07-01 20:40:05 +00:00			`- package_manager`
			`- zfs`
			`- zrepl`
			`- zsh`
			`- network`
			`- sshd`
			`- base`
			`- firewall`
			`- cpu`
			`- ntp`
			`- nvme`
			`- hosts`
			`- build`
			`- sound`
			`- graphics`
Disable usb autosuspend for keyboard and mouse. USB auto suspend seems to only happen when the devices are plugged in at boot (which generally means when my laptop is connected to the dock before boot) but it is very annoying because some keypresses get lost and my mouse does not work unless I click first. 2023-08-16 19:10:50 +00:00			`- power_management`
Uncomment playbook. 2023-07-01 20:40:05 +00:00			`- gpg`
			`- fonts`
			`- alacritty`
			`- sway`
			`- emacs`
			`- firefox`
Add a role to configure chromium to run on Vulkan. 2024-09-25 02:22:13 +00:00			`- chromium`
Uncomment playbook. 2023-07-01 20:40:05 +00:00			`- devfs`
			`- ssh_client`
			`- sshfs`
			`- jail`
			`- fuse`
			`- autofs`
			`- exfat`
			`- bhyve`
			`- bluetooth`
			`- media`
			`- kubernetes`
			`- google_cloud_sdk`
			`- ansible`
			`- wireguard`
			`- portshaker`
			`- android`
			`- latex`
Add a python role. 2023-12-25 20:26:42 +00:00			`- python`
Uncomment playbook. 2023-07-01 20:40:05 +00:00			`- pyenv`
			`- webcam`
			`- docker`
			`- vscode`
Install nvm and yarn for javascript/typescript development. 2023-05-29 23:26:30 +00:00			`- javascript`
Install system76 tools. 2023-09-09 21:08:36 +00:00			`- launch_keyboard`
Add a lvfs role for Linux. 2023-09-10 22:28:32 +00:00			`- lvfs`
Add restaurant_health_rating. 2023-11-16 18:20:18 +00:00			`- restaurant_health_rating`
Add wasm role. 2023-12-24 05:56:25 +00:00			`- wasm`
Add support for noise suppression on Linux using rnnoise. This uses: https://github.com/werman/noise-suppression-for-voice . 2024-04-29 14:47:28 +00:00			`- noise_suppression`
Start a jail_nat_dhcp role for the nat_dhcp jail. 2022-12-03 01:39:52 +00:00
Set up the nat_dhcp jail for mrmanager. 2023-05-29 02:36:31 +00:00			`- hosts: nat_dhcp:homeserver_nat_dhcp:mrmanager_nat_dhcp`
Start a jail_nat_dhcp role for the nat_dhcp jail. 2022-12-03 01:39:52 +00:00			`vars:`
			`ansible_become: True`
			`roles:`
			`- jail_nat_dhcp`
Move poudriere to inside a VM. 2022-12-10 22:55:44 +00:00
Set up poudriere on mrmanager. 2023-05-29 04:13:57 +00:00			`- hosts: poudriereodo:poudrieremrmanager`
Move poudriere to inside a VM. 2022-12-10 22:55:44 +00:00			`vars:`
			`ansible_become: True`
			`roles:`
Set up poudriere on mrmanager. 2023-05-29 04:13:57 +00:00			`- sudo # for poudboot script`
Set up zsh on poudriere. This is to save a better command history. 2024-08-11 16:56:35 +00:00			`- doas`
Set up poudriere on mrmanager. 2023-05-29 04:13:57 +00:00			`- fstab`
Set up poudriere to build pkgbase. 2024-02-11 19:59:55 +00:00			`- package_manager`
Set up zsh on poudriere. This is to save a better command history. 2024-08-11 16:56:35 +00:00			`- zsh`
Set up home server. 2024-04-22 21:23:20 +00:00			`- termcap`
Set up zsh on poudriere. This is to save a better command history. 2024-08-11 16:56:35 +00:00			`- sshd`
Move poudriere to inside a VM. 2022-12-10 22:55:44 +00:00			`- portshaker`
			`- poudriere`
Set up nginx for poudriere. 2023-05-29 17:14:53 +00:00			`- poudrierenginx`
Minimal shell setup for colo server. 2023-05-28 03:10:44 +00:00
			`- hosts: mrmanager`
			`vars:`
			`ansible_become: True`
			`roles:`
			`- sudo`
			`- doas`
			`- users`
Add a script to update git aurutil packages. 2023-07-14 17:18:49 +00:00			`- package_manager`
			`- zfs`
			`- zrepl`
			`- zsh`
			`- network`
			`- sshd`
			`- base`
Add firewall to mrmanager. 2023-05-28 20:01:02 +00:00			`- firewall`
Add a script to update git aurutil packages. 2023-07-14 17:18:49 +00:00			`- cpu`
			`- ntp`
			`- nvme`
			`- hosts`
			`- build`
			`- devfs`
			`- jail`
			`- bhyve`
			`- wireguard`
			`- emacs`
			`- mrmanager`
Add the admin_git jail. This jail hosts the git repo used for the kubernetes cluster manifests. It lives in a jail instead of inside a git website hosted inside kubernetes because it is needed for the bootstrapping process, creating a chicken-and-egg type of scenario. I figure I can set up mirroring of the git repo to a hosted git website for publishing. 2023-06-17 21:35:09 +00:00
Configure public_dns jail. 2023-06-18 19:21:16 +00:00			`- hosts: admin_git:public_dns`
Add the admin_git jail. This jail hosts the git repo used for the kubernetes cluster manifests. It lives in a jail instead of inside a git website hosted inside kubernetes because it is needed for the bootstrapping process, creating a chicken-and-egg type of scenario. I figure I can set up mirroring of the git repo to a hosted git website for publishing. 2023-06-17 21:35:09 +00:00			`vars:`
			`ansible_become: True`
			`roles:`
			`- sudo`
			`- doas`
			`- users`
Configure public_dns jail. 2023-06-18 19:21:16 +00:00
			`- hosts: public_dns`
			`vars:`
			`ansible_become: True`
			`roles:`
			`- sudo`
			`- doas`
			`- users`
			`- public_dns`
Disable systemd-udev-settle on Linux on framework laptop. 2023-09-14 17:33:33 +00:00
Add a work machine to ansible. 2024-01-01 02:29:38 +00:00			`- hosts: odolinux:odofreebsd:odowork`
Disable systemd-udev-settle on Linux on framework laptop. 2023-09-14 17:33:33 +00:00			`vars:`
			`ansible_become: True`
			`roles:`
Set up a linux VM for running wifi. 2024-10-11 00:29:06 +00:00			`- linfi`
Disable systemd-udev-settle on Linux on framework laptop. 2023-09-14 17:33:33 +00:00			`- framework_laptop`
TEMP: Add the freebsd_update_server role to odofreebsd for development. 2023-09-01 20:42:31 +00:00
Add a script to decrypt and mount disks on the home server. 2023-11-18 19:55:19 +00:00			`- hosts: homeserver`
			`vars:`
			`ansible_become: True`
			`roles:`
			`- homeserver`
Add a work-specific role. 2024-01-07 19:43:10 +00:00
			`- hosts: odowork`
			`vars:`
			`ansible_become: True`
			`roles:`
			`- odowork`
Add sftp jail. 2024-07-01 03:02:23 +00:00
			`- hosts: sftp`
			`vars:`
			`ansible_become: True`
			`roles:`
			`- users`
			`- sftp`

Add bastion and certificate jails. 2024-07-02 02:01:07 +00:00			`- hosts: bastion`
			`vars:`
			`ansible_become: True`
			`roles:`
			`- jail_bastion`

			`- hosts: certificate`
			`vars:`
			`ansible_become: True`
			`roles:`
			`- jail_certificate`
Add jail for momlaptop. 2024-08-15 01:25:49 +00:00
			`- hosts: momlaptop`
			`vars:`
			`ansible_become: True`
			`roles:`
			`- jail_momlaptop`