mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-07-18 06:24:25 +02:00
Shortened service- to svc-
This commit is contained in:
parent
db384c6261
commit
575df76ec3
@ -15,7 +15,7 @@ Every business is unique, and so is CyMaIS! With a modular architecture, it adap
|
|||||||
With automated updates, system health checks, and security audits, CyMaIS ensures your infrastructure is always up-to-date and running smoothly. Roles such as `mon-bot-docker-container`, `mon-bot-btrfs`, and `mon-bot-webserver` help monitor system integrity.
|
With automated updates, system health checks, and security audits, CyMaIS ensures your infrastructure is always up-to-date and running smoothly. Roles such as `mon-bot-docker-container`, `mon-bot-btrfs`, and `mon-bot-webserver` help monitor system integrity.
|
||||||
|
|
||||||
## Uncompromised Security 🔒
|
## Uncompromised Security 🔒
|
||||||
Security is a top priority! CyMaIS includes robust security features like full-disk encryption recommendations, 2FA enforcement, encrypted server deployments (`web-app-keycloak`, `service-openldap`), and secure backup solutions (`bkp-remote-to-local`, `bkp-data-to-usb`).
|
Security is a top priority! CyMaIS includes robust security features like full-disk encryption recommendations, 2FA enforcement, encrypted server deployments (`web-app-keycloak`, `svc-openldap`), and secure backup solutions (`bkp-remote-to-local`, `bkp-data-to-usb`).
|
||||||
|
|
||||||
## User-Friendly with Expert Support 👩💻
|
## User-Friendly with Expert Support 👩💻
|
||||||
No need to be a Linux or Docker expert! CyMaIS simplifies deployment with intuitive role-based automation. Documentation and community support make IT administration accessible to all experience levels.
|
No need to be a Linux or Docker expert! CyMaIS simplifies deployment with intuitive role-based automation. Documentation and community support make IT administration accessible to all experience levels.
|
||||||
|
@ -39,7 +39,7 @@ For a complete list of role categories and detailed definitions, see:
|
|||||||
- **srv-web-composer**
|
- **srv-web-composer**
|
||||||
Aggregates multiple sub-filters into one include for your vhost.
|
Aggregates multiple sub-filters into one include for your vhost.
|
||||||
|
|
||||||
- **web-service-***
|
- **web-svc-***
|
||||||
Static‐content servers (assets, HTML, legal pages, file hosting).
|
Static‐content servers (assets, HTML, legal pages, file hosting).
|
||||||
|
|
||||||
- **web-app-***
|
- **web-app-***
|
||||||
@ -52,7 +52,7 @@ For a complete list of role categories and detailed definitions, see:
|
|||||||
- **net-***
|
- **net-***
|
||||||
Network infrastructure (DNS records, WireGuard, Let’s Encrypt entrypoints).
|
Network infrastructure (DNS records, WireGuard, Let’s Encrypt entrypoints).
|
||||||
|
|
||||||
- **service-***
|
- **svc-***
|
||||||
Docker‐deployed services that aren’t “apps” (RDBMS, LDAP, Redis, OpenLDAP).
|
Docker‐deployed services that aren’t “apps” (RDBMS, LDAP, Redis, OpenLDAP).
|
||||||
|
|
||||||
---
|
---
|
||||||
@ -111,8 +111,8 @@ For a complete list of role categories and detailed definitions, see:
|
|||||||
---
|
---
|
||||||
|
|
||||||
> **Tip:** To find a role quickly, search for its prefix:
|
> **Tip:** To find a role quickly, search for its prefix:
|
||||||
> `core-`, `gen-`, `desk-`, `srv-web-`, `web-service-`, `web-app-`,
|
> `core-`, `gen-`, `desk-`, `srv-web-`, `web-svc-`, `web-app-`,
|
||||||
> `net-`, `service-`, `monitor-`, `alert-`, `maint-`, `cln-`,
|
> `net-`, `svc-`, `monitor-`, `alert-`, `maint-`, `cln-`,
|
||||||
> `bkp-`, `update-`, `pkgmgr-`, `user-`.
|
> `bkp-`, `update-`, `pkgmgr-`, `user-`.
|
||||||
|
|
||||||
---
|
---
|
||||||
|
@ -2,7 +2,7 @@
|
|||||||
services:
|
services:
|
||||||
{# Load Database #}
|
{# Load Database #}
|
||||||
{% if applications[application_id].docker.services.database.enabled | default(false) | bool %}
|
{% if applications[application_id].docker.services.database.enabled | default(false) | bool %}
|
||||||
{% include 'roles/service-rdbms-central/templates/services/main.yml.j2' %}
|
{% include 'roles/svc-rdbms-central/templates/services/main.yml.j2' %}
|
||||||
{% endif %}
|
{% endif %}
|
||||||
{# Load Redis #}
|
{# Load Redis #}
|
||||||
{% if applications[application_id].docker.services.redis.enabled | default(false) | bool %}
|
{% if applications[application_id].docker.services.redis.enabled | default(false) | bool %}
|
||||||
|
@ -1 +0,0 @@
|
|||||||
{% include 'roles/service-rdbms-central/templates/services/' + database_type + '.yml.j2' %}
|
|
@ -1,6 +1,6 @@
|
|||||||
---
|
---
|
||||||
# Reset both Database and Configuration Admin passwords in LDAP via LDAPI
|
# Reset both Database and Configuration Admin passwords in LDAP via LDAPI
|
||||||
# roles/service-openldap/tasks/reset_admin_passwords.yml
|
# roles/svc-openldap/tasks/reset_admin_passwords.yml
|
||||||
|
|
||||||
- name: "Query available LDAP databases"
|
- name: "Query available LDAP databases"
|
||||||
shell: |
|
shell: |
|
1
roles/svc-rdbms-central/templates/services/main.yml.j2
Normal file
1
roles/svc-rdbms-central/templates/services/main.yml.j2
Normal file
@ -0,0 +1 @@
|
|||||||
|
{% include 'roles/svc-rdbms-central/templates/services/' + database_type + '.yml.j2' %}
|
@ -1,6 +1,6 @@
|
|||||||
# defaults/
|
# defaults/
|
||||||
|
|
||||||
This directory contains default variable definition files for the `service-rdbms-mariadb` Ansible role. It centralizes all configurable values related to MariaDB deployment and can be adjusted without modifying task logic.
|
This directory contains default variable definition files for the `svc-rdbms-mariadb` Ansible role. It centralizes all configurable values related to MariaDB deployment and can be adjusted without modifying task logic.
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
@ -34,7 +34,7 @@ Defines default values for how the MariaDB database should be created.
|
|||||||
|
|
||||||
To customize any of these values without editing role defaults:
|
To customize any of these values without editing role defaults:
|
||||||
|
|
||||||
1. Create or update a playbook-level vars file (e.g. `group_vars/all/service-rdbms-mariadb.yml`).
|
1. Create or update a playbook-level vars file (e.g. `group_vars/all/svc-rdbms-mariadb.yml`).
|
||||||
2. Set the desired values, for example:
|
2. Set the desired values, for example:
|
||||||
|
|
||||||
```yaml
|
```yaml
|
@ -1,6 +1,6 @@
|
|||||||
# vars/
|
# vars/
|
||||||
|
|
||||||
This directory contains variable definition files for the `service-rdbms-mariadb` Ansible role. It centralizes all configurable values related to MariaDB deployment and can be adjusted without modifying task logic.
|
This directory contains variable definition files for the `svc-rdbms-mariadb` Ansible role. It centralizes all configurable values related to MariaDB deployment and can be adjusted without modifying task logic.
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
@ -24,6 +24,6 @@ galaxy_info:
|
|||||||
issue_tracker_url: https://s.veen.world/cymaisissues
|
issue_tracker_url: https://s.veen.world/cymaisissues
|
||||||
documentation: https://s.veen.world/cymais
|
documentation: https://s.veen.world/cymais
|
||||||
dependencies:
|
dependencies:
|
||||||
- web-service-legal
|
- web-svc-legal
|
||||||
- web-service-assets
|
- web-svc-assets
|
||||||
- web-app-portfolio
|
- web-app-portfolio
|
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
- name: "include service-rdbms-central"
|
- name: "include svc-rdbms-central"
|
||||||
include_role:
|
include_role:
|
||||||
name: service-rdbms-central
|
name: svc-rdbms-central
|
||||||
|
|
||||||
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
||||||
include_role:
|
include_role:
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
- name: "include service-rdbms-central"
|
- name: "include svc-rdbms-central"
|
||||||
include_role:
|
include_role:
|
||||||
name: service-rdbms-central
|
name: svc-rdbms-central
|
||||||
|
|
||||||
- name: "include role for {{application_id}} to receive certs & do modification routines"
|
- name: "include role for {{application_id}} to receive certs & do modification routines"
|
||||||
include_role:
|
include_role:
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
- name: "include service-rdbms-central"
|
- name: "include svc-rdbms-central"
|
||||||
include_role:
|
include_role:
|
||||||
name: service-rdbms-central
|
name: svc-rdbms-central
|
||||||
|
|
||||||
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
||||||
include_role:
|
include_role:
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
- name: "include service-rdbms-central"
|
- name: "include svc-rdbms-central"
|
||||||
include_role:
|
include_role:
|
||||||
name: service-rdbms-central
|
name: svc-rdbms-central
|
||||||
|
|
||||||
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
||||||
include_role:
|
include_role:
|
||||||
|
@ -7,9 +7,9 @@
|
|||||||
state: present
|
state: present
|
||||||
when: run_once_docker_discourse is not defined
|
when: run_once_docker_discourse is not defined
|
||||||
|
|
||||||
- name: "include service-rdbms-central"
|
- name: "include svc-rdbms-central"
|
||||||
include_role:
|
include_role:
|
||||||
name: service-rdbms-central
|
name: svc-rdbms-central
|
||||||
when: run_once_docker_discourse is not defined
|
when: run_once_docker_discourse is not defined
|
||||||
|
|
||||||
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
||||||
|
@ -8,7 +8,7 @@ Enhance your sales and service processes with EspoCRM, an open-source CRM featur
|
|||||||
|
|
||||||
This Ansible role deploys EspoCRM using Docker. It handles:
|
This Ansible role deploys EspoCRM using Docker. It handles:
|
||||||
|
|
||||||
- MariaDB database provisioning via the `service-rdbms-central` role
|
- MariaDB database provisioning via the `svc-rdbms-central` role
|
||||||
- Nginx domain setup with WebSocket and reverse-proxy configuration
|
- Nginx domain setup with WebSocket and reverse-proxy configuration
|
||||||
- Environment variable management through Jinja2 templates
|
- Environment variable management through Jinja2 templates
|
||||||
- Docker Compose orchestration for **web**, **daemon**, and **websocket** services
|
- Docker Compose orchestration for **web**, **daemon**, and **websocket** services
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
- name: "include service-rdbms-central"
|
- name: "include svc-rdbms-central"
|
||||||
include_role:
|
include_role:
|
||||||
name: service-rdbms-central
|
name: svc-rdbms-central
|
||||||
|
|
||||||
- name: "Include setup for domain '{{ domain }}'"
|
- name: "Include setup for domain '{{ domain }}'"
|
||||||
include_role:
|
include_role:
|
||||||
|
@ -21,4 +21,4 @@ galaxy_info:
|
|||||||
run_after:
|
run_after:
|
||||||
- web-app-matomo
|
- web-app-matomo
|
||||||
- web-app-keycloak
|
- web-app-keycloak
|
||||||
- service-openldap
|
- svc-openldap
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
- name: "include service-rdbms-central"
|
- name: "include svc-rdbms-central"
|
||||||
include_role:
|
include_role:
|
||||||
name: service-rdbms-central
|
name: svc-rdbms-central
|
||||||
|
|
||||||
- name: "create {{ friendica_host_ldap_config }}"
|
- name: "create {{ friendica_host_ldap_config }}"
|
||||||
template:
|
template:
|
||||||
|
@ -22,4 +22,4 @@ galaxy_info:
|
|||||||
- web-app-matomo
|
- web-app-matomo
|
||||||
- web-app-keycloak
|
- web-app-keycloak
|
||||||
- web-app-mailu
|
- web-app-mailu
|
||||||
- service-openldap
|
- svc-openldap
|
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
- name: "include service-rdbms-central"
|
- name: "include svc-rdbms-central"
|
||||||
include_role:
|
include_role:
|
||||||
name: service-rdbms-central
|
name: svc-rdbms-central
|
||||||
|
|
||||||
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
||||||
include_role:
|
include_role:
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
- name: "include service-rdbms-central"
|
- name: "include svc-rdbms-central"
|
||||||
include_role:
|
include_role:
|
||||||
name: service-rdbms-central
|
name: svc-rdbms-central
|
||||||
|
|
||||||
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
||||||
include_role:
|
include_role:
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
- name: "include service-rdbms-central"
|
- name: "include svc-rdbms-central"
|
||||||
include_role:
|
include_role:
|
||||||
name: service-rdbms-central
|
name: svc-rdbms-central
|
||||||
|
|
||||||
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
||||||
include_role:
|
include_role:
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
- name: "include service-rdbms-central"
|
- name: "include svc-rdbms-central"
|
||||||
include_role:
|
include_role:
|
||||||
name: service-rdbms-central
|
name: svc-rdbms-central
|
||||||
|
|
||||||
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
||||||
include_role:
|
include_role:
|
||||||
|
@ -21,4 +21,4 @@ galaxy_info:
|
|||||||
class: "fa-solid fa-lock"
|
class: "fa-solid fa-lock"
|
||||||
run_after:
|
run_after:
|
||||||
- web-app-matomo
|
- web-app-matomo
|
||||||
- service-openldap
|
- svc-openldap
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
- name: "include service-rdbms-central"
|
- name: "include svc-rdbms-central"
|
||||||
include_role:
|
include_role:
|
||||||
name: service-rdbms-central
|
name: svc-rdbms-central
|
||||||
|
|
||||||
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
||||||
include_role:
|
include_role:
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
- name: "include service-rdbms-central"
|
- name: "include svc-rdbms-central"
|
||||||
include_role:
|
include_role:
|
||||||
name: service-rdbms-central
|
name: svc-rdbms-central
|
||||||
|
|
||||||
- name: Set nginx_docker_reverse_proxy_extra_configuration based on applications[application_id].public_api_activated
|
- name: Set nginx_docker_reverse_proxy_extra_configuration based on applications[application_id].public_api_activated
|
||||||
set_fact:
|
set_fact:
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
- name: "Include service-rdbms-central"
|
- name: "Include svc-rdbms-central"
|
||||||
include_role:
|
include_role:
|
||||||
name: service-rdbms-central
|
name: svc-rdbms-central
|
||||||
when: run_once_docker_mailu is not defined
|
when: run_once_docker_mailu is not defined
|
||||||
|
|
||||||
- name: "Include role srv-web-proxy-domain for {{ application_id }}"
|
- name: "Include role srv-web-proxy-domain for {{ application_id }}"
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
- name: "include service-rdbms-central"
|
- name: "include svc-rdbms-central"
|
||||||
include_role:
|
include_role:
|
||||||
name: service-rdbms-central
|
name: svc-rdbms-central
|
||||||
|
|
||||||
- name: "Include setup for domain '{{ domain }}'"
|
- name: "Include setup for domain '{{ domain }}'"
|
||||||
include_role:
|
include_role:
|
||||||
|
@ -19,4 +19,4 @@ galaxy_info:
|
|||||||
logo:
|
logo:
|
||||||
class: "fa-solid fa-chart-line"
|
class: "fa-solid fa-chart-line"
|
||||||
run_after:
|
run_after:
|
||||||
- "service-rdbms-postgres"
|
- "svc-rdbms-postgres"
|
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
- name: "include service-rdbms-central"
|
- name: "include svc-rdbms-central"
|
||||||
include_role:
|
include_role:
|
||||||
name: service-rdbms-central
|
name: svc-rdbms-central
|
||||||
when: run_once_docker_matomo is not defined
|
when: run_once_docker_matomo is not defined
|
||||||
|
|
||||||
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
||||||
|
@ -6,7 +6,7 @@
|
|||||||
# - database_password
|
# - database_password
|
||||||
- name: "create {{database_name}} database"
|
- name: "create {{database_name}} database"
|
||||||
include_role:
|
include_role:
|
||||||
name: service-rdbms-postgres
|
name: svc-rdbms-postgres
|
||||||
when: applications | is_feature_enabled('central_database',application_id)
|
when: applications | is_feature_enabled('central_database',application_id)
|
||||||
|
|
||||||
- name: "include seed-database-to-backup.yml"
|
- name: "include seed-database-to-backup.yml"
|
||||||
|
@ -8,9 +8,9 @@
|
|||||||
bridges: "{{ bridges_configuration | filter_enabled_bridges(applications[application_id].plugins) }}"
|
bridges: "{{ bridges_configuration | filter_enabled_bridges(applications[application_id].plugins) }}"
|
||||||
changed_when: false
|
changed_when: false
|
||||||
|
|
||||||
- name: "include service-rdbms-central"
|
- name: "include svc-rdbms-central"
|
||||||
include_role:
|
include_role:
|
||||||
name: service-rdbms-central
|
name: svc-rdbms-central
|
||||||
|
|
||||||
- name: "include role for {{application_id}} to receive certs & do modification routines"
|
- name: "include role for {{application_id}} to receive certs & do modification routines"
|
||||||
include_role:
|
include_role:
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
- name: "include service-rdbms-central"
|
- name: "include svc-rdbms-central"
|
||||||
include_role:
|
include_role:
|
||||||
name: service-rdbms-central
|
name: svc-rdbms-central
|
||||||
|
|
||||||
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
||||||
include_role:
|
include_role:
|
||||||
|
@ -22,5 +22,5 @@ galaxy_info:
|
|||||||
- web-app-matomo
|
- web-app-matomo
|
||||||
- web-app-keycloak
|
- web-app-keycloak
|
||||||
- web-app-mailu
|
- web-app-mailu
|
||||||
- service-openldap
|
- svc-openldap
|
||||||
- service-rdbms-postgres
|
- svc-rdbms-postgres
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
- name: "include service-rdbms-central"
|
- name: "include svc-rdbms-central"
|
||||||
include_role:
|
include_role:
|
||||||
name: service-rdbms-central
|
name: svc-rdbms-central
|
||||||
|
|
||||||
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
||||||
include_role:
|
include_role:
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
- name: "include service-rdbms-central"
|
- name: "include svc-rdbms-central"
|
||||||
include_role:
|
include_role:
|
||||||
name: service-rdbms-central
|
name: svc-rdbms-central
|
||||||
|
|
||||||
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
||||||
include_role:
|
include_role:
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
- name: "include service-rdbms-central"
|
- name: "include svc-rdbms-central"
|
||||||
include_role:
|
include_role:
|
||||||
name: service-rdbms-central
|
name: svc-rdbms-central
|
||||||
|
|
||||||
- name: "include tasks setup-domain.yml with {{domains | get_domain(application_id)}}"
|
- name: "include tasks setup-domain.yml with {{domains | get_domain(application_id)}}"
|
||||||
include_tasks: setup-domain.yml
|
include_tasks: setup-domain.yml
|
||||||
|
@ -32,4 +32,4 @@ galaxy_info:
|
|||||||
- web-app-collabora
|
- web-app-collabora
|
||||||
- web-app-keycloak
|
- web-app-keycloak
|
||||||
- web-app-mastodon
|
- web-app-mastodon
|
||||||
- service-rdbms-mariadb
|
- svc-rdbms-mariadb
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
- name: "include service-rdbms-central"
|
- name: "include svc-rdbms-central"
|
||||||
include_role:
|
include_role:
|
||||||
name: service-rdbms-central
|
name: svc-rdbms-central
|
||||||
|
|
||||||
- name: "create {{ nextcloud_host_config_additives_directory }}"
|
- name: "create {{ nextcloud_host_config_additives_directory }}"
|
||||||
file:
|
file:
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
- name: "include service-rdbms-central"
|
- name: "include svc-rdbms-central"
|
||||||
include_role:
|
include_role:
|
||||||
name: service-rdbms-central
|
name: svc-rdbms-central
|
||||||
|
|
||||||
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
- name: "include role srv-web-proxy-domain for {{application_id}}"
|
||||||
include_role:
|
include_role:
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
---
|
---
|
||||||
- name: "include service-rdbms-central"
|
- name: "include svc-rdbms-central"
|
||||||
include_role:
|
include_role:
|
||||||
name: service-rdbms-central
|
name: svc-rdbms-central
|
||||||
|
|
||||||
- name: "include create-domains.yml for peertube"
|
- name: "include create-domains.yml for peertube"
|
||||||
include_tasks: create-domains.yml
|
include_tasks: create-domains.yml
|
||||||
|
Some files were not shown because too many files have changed in this diff Show More
Loading…
x
Reference in New Issue
Block a user