General optimations during inventory cleanup

This commit is contained in:
Kevin Veen-Birkenbach 2025-07-14 13:02:06 +02:00
parent b6ee7b9f98
commit e4028fccf4
No known key found for this signature in database
GPG Key ID: 44D8F11FD62F878E
30 changed files with 27 additions and 26 deletions

View File

@ -15,7 +15,7 @@ Every business is unique, and so is CyMaIS! With a modular architecture, it adap
With automated updates, system health checks, and security audits, CyMaIS ensures your infrastructure is always up-to-date and running smoothly. Roles such as `sys-hlth-docker-container`, `sys-hlth-btrfs`, and `sys-hlth-webserver` help monitor system integrity.
## Uncompromised Security 🔒
Security is a top priority! CyMaIS includes robust security features like full-disk encryption recommendations, 2FA enforcement, encrypted server deployments (`web-app-keycloak`, `svc-db-openldap`), and secure backup solutions (`sys-bkp-remote-to-local`, `svc-sys-bkp-data-to-usb`).
Security is a top priority! CyMaIS includes robust security features like full-disk encryption recommendations, 2FA enforcement, encrypted server deployments (`web-app-keycloak`, `svc-db-openldap`), and secure backup solutions (`sys-bkp-remote-to-local`, `svc-bkp-2-usb`).
## User-Friendly with Expert Support 👩‍💻
No need to be a Linux or Docker expert! CyMaIS simplifies deployment with intuitive role-based automation. Documentation and community support make IT administration accessible to all experience levels.

View File

@ -10,7 +10,7 @@ Follow these guides to install and configure CyMaIS:
## Key Responsibilities 🔧
- **User Management** - Configure LDAP, Keycloak, and user permissions.
- **Security & Backups** - Set up `sys-bkp-remote-to-local`, `svc-sys-bkp-data-to-usb`, and `core-security` roles.
- **Security & Backups** - Set up `sys-bkp-remote-to-local`, `svc-bkp-2-usb`, and `core-security` roles.
- **Application Hosting** - Deploy services like `Nextcloud`, `Matrix`, `Gitea`, and more.
- **Networking & VPN** - Configure `WireGuard`, `OpenVPN`, and `Nginx Reverse Proxy`.

View File

@ -15,7 +15,7 @@ system_maintenance_lock_timeout_restart_docker: "{{system_maintenance_lock_ti
system_maintenance_backup_services:
- "sys-bkp-docker-to-local"
- "svc-sys-bkp-rmt-2-loc"
- "svc-sys-bkp-data-to-usb"
- "svc-bkp-2-usb"
- "sys-bkp-docker-to-local-everything"
### Defined Services for System Cleanup

View File

@ -1,3 +1,3 @@
user_home_directory: /home/{{users.client.username}}/
cloud_directory: '{{user_home_directory}}Clouds/{{cloud_fqdn}}/{{users.client.username}}/'
application_id: desk-nextcloud-client
application_id: desk-nextcloud

View File

@ -1 +1 @@
application_id: epson-multiprinter
application_id: drv-epson-multiprinter

View File

@ -1 +1 @@
application_id: intel
application_id: drv-intel

View File

@ -1 +1 @@
application_id: lid-switch
application_id: drv-lid-switch

View File

@ -1 +1 @@
application_id: msi-keyboard-color
application_id: drv-msi-keyboard-color

View File

@ -1 +1 @@
application_id: non-free
application_id: drv-non-free

View File

@ -21,7 +21,7 @@ def main():
machine_id = subprocess.run(["sha256sum", "/etc/machine-id"], capture_output=True, text=True).stdout.strip()[:64]
print(f"machine id: {machine_id}")
versions_path = os.path.join(backup_to_usb_destination_path, f"{machine_id}/svc-sys-bkp-data-to-usb/")
versions_path = os.path.join(backup_to_usb_destination_path, f"{machine_id}/svc-bkp-2-usb/")
print(f"versions path: {versions_path}")
if not os.path.isdir(versions_path):

View File

@ -0,0 +1,5 @@
- name: "reload svc-bkp-2-usb.cymais.service"
systemd:
name: svc-bkp-2-usb.cymais.service
state: reloaded
daemon_reload: yes

View File

@ -1,6 +1,6 @@
- name: Copy backup script to the scripts directory
copy:
src: svc-sys-bkp-data-to-usb.python
src: svc-bkp-2-usb.python
dest: "{{ backup_to_usb_script_path }}"
owner: root
group: root
@ -8,9 +8,9 @@
- name: Copy systemd service to systemd directory
template:
src: svc-sys-bkp-data-to-usb.service.j2
dest: /etc/systemd/system/svc-sys-bkp-data-to-usb.cymais.service
src: svc-bkp-2-usb.service.j2
dest: /etc/systemd/system/svc-bkp-2-usb.cymais.service
owner: root
group: root
mode: '0644'
notify: reload svc-sys-bkp-data-to-usb.cymais.service
notify: reload svc-bkp-2-usb.cymais.service

View File

@ -1,6 +1,6 @@
backup_to_usb_script_path: /usr/local/sbin/svc-sys-bkp-data-to-usb.python
backup_to_usb_script_path: /usr/local/sbin/svc-bkp-2-usb.python
backup_to_usb_destination: '{{backup_to_usb_mount}}{{backup_to_usb_destination_subdirectory}}'
backups_folder_path: '{{backup_to_usb_destination}}'
systemctl_mount_service_name: '{{ backup_to_usb_mount | trim(''/'') | replace(''/'',
''-'') }}.mount'
application_id: svc-sys-bkp-data-to-usb
application_id: svc-bkp-2-usb

View File

@ -1,4 +1,4 @@
# System Swapfile Role
# System Swapfile
## Description

View File

@ -0,0 +1 @@
application_id: svc-opt-swapfile

View File

@ -1,5 +0,0 @@
- name: "reload svc-sys-bkp-data-to-usb.cymais.service"
systemd:
name: svc-sys-bkp-data-to-usb.cymais.service
state: reloaded
daemon_reload: yes

View File

@ -1 +0,0 @@
application_id: util-desk-office-tools

View File

@ -1,4 +1,4 @@
# util-desk-office-tools Role
# Office Tools
## Description
@ -6,7 +6,7 @@ This Ansible role installs a comprehensive suite of office productivity tools on
## Overview
The `util-desk-office-tools` role uses the `community.general.pacman` module to:
The `util-desk-office` role uses the `community.general.pacman` module to:
1. Install **Chromium** (web browser)
2. Install **Thunderbird** (email and RSS client)

View File

@ -17,7 +17,7 @@ galaxy_info:
- editor
repository: "https://github.com/kevinveenbirkenbach/cymais"
issue_tracker_url: "https://github.com/kevinveenbirkenbach/cymais/issues"
documentation: "https://github.com/kevinveenbirkenbach/cymais/tree/main/roles/util-desk-office-tools"
documentation: "https://github.com/kevinveenbirkenbach/cymais/tree/main/roles/util-desk-office"
min_ansible_version: "2.9"
platforms:
- name: Archlinux

View File

@ -0,0 +1 @@
application_id: util-desk-office