mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-07-17 14:04:24 +02:00
General optimations during inventory cleanup
This commit is contained in:
parent
b6ee7b9f98
commit
e4028fccf4
@ -15,7 +15,7 @@ Every business is unique, and so is CyMaIS! With a modular architecture, it adap
|
||||
With automated updates, system health checks, and security audits, CyMaIS ensures your infrastructure is always up-to-date and running smoothly. Roles such as `sys-hlth-docker-container`, `sys-hlth-btrfs`, and `sys-hlth-webserver` help monitor system integrity.
|
||||
|
||||
## Uncompromised Security 🔒
|
||||
Security is a top priority! CyMaIS includes robust security features like full-disk encryption recommendations, 2FA enforcement, encrypted server deployments (`web-app-keycloak`, `svc-db-openldap`), and secure backup solutions (`sys-bkp-remote-to-local`, `svc-sys-bkp-data-to-usb`).
|
||||
Security is a top priority! CyMaIS includes robust security features like full-disk encryption recommendations, 2FA enforcement, encrypted server deployments (`web-app-keycloak`, `svc-db-openldap`), and secure backup solutions (`sys-bkp-remote-to-local`, `svc-bkp-2-usb`).
|
||||
|
||||
## User-Friendly with Expert Support 👩💻
|
||||
No need to be a Linux or Docker expert! CyMaIS simplifies deployment with intuitive role-based automation. Documentation and community support make IT administration accessible to all experience levels.
|
||||
|
@ -10,7 +10,7 @@ Follow these guides to install and configure CyMaIS:
|
||||
|
||||
## Key Responsibilities 🔧
|
||||
- **User Management** - Configure LDAP, Keycloak, and user permissions.
|
||||
- **Security & Backups** - Set up `sys-bkp-remote-to-local`, `svc-sys-bkp-data-to-usb`, and `core-security` roles.
|
||||
- **Security & Backups** - Set up `sys-bkp-remote-to-local`, `svc-bkp-2-usb`, and `core-security` roles.
|
||||
- **Application Hosting** - Deploy services like `Nextcloud`, `Matrix`, `Gitea`, and more.
|
||||
- **Networking & VPN** - Configure `WireGuard`, `OpenVPN`, and `Nginx Reverse Proxy`.
|
||||
|
||||
|
@ -15,7 +15,7 @@ system_maintenance_lock_timeout_restart_docker: "{{system_maintenance_lock_ti
|
||||
system_maintenance_backup_services:
|
||||
- "sys-bkp-docker-to-local"
|
||||
- "svc-sys-bkp-rmt-2-loc"
|
||||
- "svc-sys-bkp-data-to-usb"
|
||||
- "svc-bkp-2-usb"
|
||||
- "sys-bkp-docker-to-local-everything"
|
||||
|
||||
### Defined Services for System Cleanup
|
||||
|
@ -1,3 +1,3 @@
|
||||
user_home_directory: /home/{{users.client.username}}/
|
||||
cloud_directory: '{{user_home_directory}}Clouds/{{cloud_fqdn}}/{{users.client.username}}/'
|
||||
application_id: desk-nextcloud-client
|
||||
application_id: desk-nextcloud
|
@ -1 +1 @@
|
||||
application_id: epson-multiprinter
|
||||
application_id: drv-epson-multiprinter
|
||||
|
@ -1 +1 @@
|
||||
application_id: intel
|
||||
application_id: drv-intel
|
||||
|
@ -1 +1 @@
|
||||
application_id: lid-switch
|
||||
application_id: drv-lid-switch
|
||||
|
@ -1 +1 @@
|
||||
application_id: msi-keyboard-color
|
||||
application_id: drv-msi-keyboard-color
|
||||
|
@ -1 +1 @@
|
||||
application_id: non-free
|
||||
application_id: drv-non-free
|
||||
|
@ -21,7 +21,7 @@ def main():
|
||||
machine_id = subprocess.run(["sha256sum", "/etc/machine-id"], capture_output=True, text=True).stdout.strip()[:64]
|
||||
print(f"machine id: {machine_id}")
|
||||
|
||||
versions_path = os.path.join(backup_to_usb_destination_path, f"{machine_id}/svc-sys-bkp-data-to-usb/")
|
||||
versions_path = os.path.join(backup_to_usb_destination_path, f"{machine_id}/svc-bkp-2-usb/")
|
||||
print(f"versions path: {versions_path}")
|
||||
|
||||
if not os.path.isdir(versions_path):
|
5
roles/svc-bkp-2-usb/handlers/main.yml
Normal file
5
roles/svc-bkp-2-usb/handlers/main.yml
Normal file
@ -0,0 +1,5 @@
|
||||
- name: "reload svc-bkp-2-usb.cymais.service"
|
||||
systemd:
|
||||
name: svc-bkp-2-usb.cymais.service
|
||||
state: reloaded
|
||||
daemon_reload: yes
|
@ -1,6 +1,6 @@
|
||||
- name: Copy backup script to the scripts directory
|
||||
copy:
|
||||
src: svc-sys-bkp-data-to-usb.python
|
||||
src: svc-bkp-2-usb.python
|
||||
dest: "{{ backup_to_usb_script_path }}"
|
||||
owner: root
|
||||
group: root
|
||||
@ -8,9 +8,9 @@
|
||||
|
||||
- name: Copy systemd service to systemd directory
|
||||
template:
|
||||
src: svc-sys-bkp-data-to-usb.service.j2
|
||||
dest: /etc/systemd/system/svc-sys-bkp-data-to-usb.cymais.service
|
||||
src: svc-bkp-2-usb.service.j2
|
||||
dest: /etc/systemd/system/svc-bkp-2-usb.cymais.service
|
||||
owner: root
|
||||
group: root
|
||||
mode: '0644'
|
||||
notify: reload svc-sys-bkp-data-to-usb.cymais.service
|
||||
notify: reload svc-bkp-2-usb.cymais.service
|
@ -1,6 +1,6 @@
|
||||
backup_to_usb_script_path: /usr/local/sbin/svc-sys-bkp-data-to-usb.python
|
||||
backup_to_usb_script_path: /usr/local/sbin/svc-bkp-2-usb.python
|
||||
backup_to_usb_destination: '{{backup_to_usb_mount}}{{backup_to_usb_destination_subdirectory}}'
|
||||
backups_folder_path: '{{backup_to_usb_destination}}'
|
||||
systemctl_mount_service_name: '{{ backup_to_usb_mount | trim(''/'') | replace(''/'',
|
||||
''-'') }}.mount'
|
||||
application_id: svc-sys-bkp-data-to-usb
|
||||
application_id: svc-bkp-2-usb
|
@ -1,4 +1,4 @@
|
||||
# System Swapfile Role
|
||||
# System Swapfile
|
||||
|
||||
## Description
|
||||
|
1
roles/svc-opt-swapfile/vars/main.yml
Normal file
1
roles/svc-opt-swapfile/vars/main.yml
Normal file
@ -0,0 +1 @@
|
||||
application_id: svc-opt-swapfile
|
@ -1,5 +0,0 @@
|
||||
- name: "reload svc-sys-bkp-data-to-usb.cymais.service"
|
||||
systemd:
|
||||
name: svc-sys-bkp-data-to-usb.cymais.service
|
||||
state: reloaded
|
||||
daemon_reload: yes
|
@ -1 +0,0 @@
|
||||
application_id: util-desk-office-tools
|
@ -1,4 +1,4 @@
|
||||
# util-desk-office-tools Role
|
||||
# Office Tools
|
||||
|
||||
## Description
|
||||
|
||||
@ -6,7 +6,7 @@ This Ansible role installs a comprehensive suite of office productivity tools on
|
||||
|
||||
## Overview
|
||||
|
||||
The `util-desk-office-tools` role uses the `community.general.pacman` module to:
|
||||
The `util-desk-office` role uses the `community.general.pacman` module to:
|
||||
|
||||
1. Install **Chromium** (web browser)
|
||||
2. Install **Thunderbird** (email and RSS client)
|
@ -17,7 +17,7 @@ galaxy_info:
|
||||
- editor
|
||||
repository: "https://github.com/kevinveenbirkenbach/cymais"
|
||||
issue_tracker_url: "https://github.com/kevinveenbirkenbach/cymais/issues"
|
||||
documentation: "https://github.com/kevinveenbirkenbach/cymais/tree/main/roles/util-desk-office-tools"
|
||||
documentation: "https://github.com/kevinveenbirkenbach/cymais/tree/main/roles/util-desk-office"
|
||||
min_ansible_version: "2.9"
|
||||
platforms:
|
||||
- name: Archlinux
|
1
roles/util-desk-office/vars/main.yml
Normal file
1
roles/util-desk-office/vars/main.yml
Normal file
@ -0,0 +1 @@
|
||||
application_id: util-desk-office
|
Loading…
x
Reference in New Issue
Block a user