2021-10-16 16:26:14 +00:00
# Ansible
2022-05-25 23:24:56 +00:00
Catalogue of Ansible playbooks and helper scripts for server management
2023-04-11 08:22:52 +00:00
## TODO
2023-12-02 17:03:59 +00:00
- Split user provisioning to get rid of `creator` and use `atmen` as fast as possible | This should be done using two differnt playbooks, and switch user between the two
- Add configuration for `creator` to lock the account after initial provisioning, only allowing short connection with returned message
2023-04-11 08:22:52 +00:00
2023-12-05 09:02:01 +00:00
### Disable creator
Change `~/.profile` to only contain a print message and `exit 0`
Add `.hushlogin` to remove ssh login message
2022-05-25 23:24:56 +00:00
## Node configuration process
### Setup user configuration
- Create provisioning user without password and sudo
- Create tanguy user with password
- Disable root login (passwd --lock root)
### SSH Setup
- Install fail2ban
- Disable SSH password login
- Change SSH port
### Miscellaneous
- Test if unattended-upgrade is installed
2023-04-11 08:23:23 +00:00
- Disable if true
2022-05-25 23:24:56 +00:00
- Disable IPv6
- Setup hostname
### Softwares
- Install k3s with token
- Install OMV for NAS node*(s)
## Update system
- General package manager update
2022-06-11 00:27:58 +00:00
# Additional configuration
- Add label to output node on k3s to enable load balancer
2022-05-25 23:24:56 +00:00
2023-11-12 22:04:38 +00:00
# OMV configuration
## NFS configuration
- Create FS
- Enable NFS
- `subtree_check,insecure,no_root_squash,anonuid=1000,anongid=100` in NFS share extra options
