computer-playbook/playbook.yml

291 lines
5.8 KiB
YAML

---
- name: general host setup
hosts: all
become: true
roles:
- system-security
- system-update
- native-journalctl
- native-disc-space-check
- native-free-disc-space
- native-btrfs-health-check
- name: setup standard wireguard hosts
hosts: wireguard_hosts
become: true
roles:
- native-wireguard
- name: setup wireguard hosts behind firewall\nat
hosts: wireguard_behind_firewall_hosts
become: true
roles:
- native-wireguard-behind-firewall
# Native Webserver Roles
- name: setup homepages
hosts: homepage_hosts
become: true
roles:
- role: native-homepage
vars:
domain: "{{top_domain}}"
- name: setup redirect hosts
hosts: redirect_hosts
become: true
roles:
- role: native-https-redirect
vars:
domain_mappings: "{{redirect_domain_mappings}}"
# Docker Roles
- name: setup nextcloud hosts
hosts: nextcloud_hosts
become: true
roles:
- role: docker-nextcloud
vars:
domain: cloud.{{top_domain}}
http_port: 8001
- name: setup gitea hosts
hosts: gitea_hosts
become: true
roles:
- role: docker-gitea
vars:
domain: git.{{top_domain}}
http_port: 8002
ssh_port: 2201
run_mode: prod
- name: setup wordpress hosts
hosts: wordpress_hosts
become: true
roles:
- role: docker-wordpress
vars:
domains: "{{wordpress_domains}}"
http_port: 8003
- name: setup mediawiki hosts
hosts: mediawiki_hosts
become: true
roles:
- role: docker-mediawiki
vars:
domain: wiki.{{top_domain}}
http_port: 8004
- name: setup mybb hosts
hosts: mybb_hosts
become: true
roles:
- role: docker-mybb
vars:
domain: forum.{{top_domain}}
http_port: 8005
- name: setup turn server
hosts: turn_server_hosts
become: true
roles:
- role: docker-turn-server
- name: setup yourls hosts
hosts: yourls_hosts
become: true
roles:
- role: docker-yourls
vars:
domain: s.{{top_domain}}
http_port: 8006
- name: setup mailu hosts
hosts: mailu_hosts
become: true
roles:
- role: docker-mailu
vars:
domain: "mail.{{top_domain}}"
http_port: 8007
- name: setup elk hosts
hosts: elk_hosts
become: true
roles:
- role: docker-elk
vars:
domain: "elk.{{top_domain}}"
http_port: 8008
- name: setup mastodon hosts
hosts: mastodon_hosts
become: true
roles:
- role: docker-mastodon
vars:
domain: "mastodon.{{top_domain}}"
http_port: 8009
stream_port: 4001
- name: setup pixelfed hosts
hosts: pixelfed_hosts
become: true
roles:
- role: docker-pixelfed
vars:
domain: pixelfed.{{top_domain}}
http_port: 8010
- name: setup peertube hosts
hosts: peertube_hosts
become: true
roles:
- role: docker-peertube
vars:
domain: peertube.{{top_domain}}
http_port: 8011
- name: setup bigbluebutton hosts
hosts: bigbluebutton_hosts
become: true
roles:
- role: docker-bigbluebutton
vars:
domain: bbb.{{top_domain}}
- name: setup funkwhale hosts
hosts: funkwhale_hosts
become: true
roles:
- role: docker-funkwhale
vars:
domain: funkwhale.{{top_domain}}
http_port: 8012
- name: setup roulette-wheel hosts
hosts: roulette_wheel_hosts
become: true
roles:
- role: docker-roulette-wheel
vars:
domain: roulette.{{top_domain}}
http_port: 8013
- name: setup akaunting hosts
hosts: akaunting_hosts
become: true
roles:
- role: docker-akaunting
vars:
domain: akaunting.{{top_domain}}
http_port: 8080
# Backup Roles
- name: setup replica backup hosts
hosts: replica_backup_hosts
become: true
roles:
- role: native-pull-primary-backups
## PC services
- name: general host setup
hosts: all
become: true
roles:
- system-pacman
- collection-administrator-base
- driver-non-free
- name: application-wireguard
hosts: application_wireguard_hosts
become: true
roles:
- application-wireguard
- name: collection-office
hosts: collection_officetools_hosts
become: true
roles:
- collection-office
- name: collection-designer
hosts: collection_designer_hosts
become: true
roles:
- collection-designer
- name: collection-torrent
hosts: collection_torrent_hosts
become: true
roles:
- collection-torrent
- name: collection-streamer
hosts: collection_streamer_hosts
become: true
roles:
- collection-streamer
- name: collection-bluray-player
hosts: collection_bluray_player_hosts
become: true
roles:
- collection-bluray-player
- name: driver-intel
hosts: intel_hosts
become: true
roles:
- driver-intel
- name: application-latex
hosts: latex_hosts
become: true
roles:
- application-latex
- name: GNOME setup
hosts: gnome_hosts
become: true
roles:
- system-gnome
- name: setup msi rgb keyboard
hosts: msi_perkeyrgb_hosts
become: true
roles:
- driver-msi-perkeyrgb
- name: setup ssh hosts
hosts: ssh_hosts
become: false
roles:
- application-ssh
- name: setup swapfile hosts
hosts: swapfile_hosts
become: false
roles:
- system-swapfile
- name: setup gaming hosts
hosts: gaming_hosts
become: true
roles:
- collection-games
- name: setup entertainment hosts
hosts: entertainment_hosts
become: true
roles:
- collection-entertainment
- name: setup multiprinter hosts
hosts: epson_multiprinter_hosts
become: true
roles:
- driver-epson-multiprinter
- name: setup torbrowser hosts
hosts: torbrowser_hosts
become: true
roles:
- application-torbrowser
- name: setup nextcloud
hosts: nextcloud_hosts
become: true
roles:
- application-nextcloud
- name: setup docker
hosts: docker_hosts
become: true
roles:
- application-docker