athens-school/Ansible
4
0
Fork 0
Code Issues 3 Pull Requests Packages Projects Releases Wiki Activity
Catalogue of Ansible playbooks and helper scripts for server management
12 Commits 3 Branches 0 Tags 96 KiB
05cb4ceb48
Go to file
Tanguy Herbron 05cb4ceb48 Remove legacy scripts and tasks
2022-06-11 02:31:29 +02:00
gitlab Update gitlab role + add misc role 2022-02-14 01:02:14 +01:00
inventory Add inventory hierarchy and temporary hosts 2022-06-11 02:30:35 +02:00
k3s-ansible@8e7081243b Add k3s-ansible playbook from Jeff Geerling 2022-06-11 02:22:02 +02:00
misc Update gitlab role + add misc role 2022-02-14 01:02:14 +01:00
node-configuration Add basic playbook for node setup 2022-05-26 01:24:56 +02:00
wireguard@11883d85c9 Add wireguard playbook repository 2022-06-11 02:28:30 +02:00
backup.yml Update gitlab role + add misc role 2022-02-14 01:02:14 +01:00
init.yml Add basic playbook for node setup 2022-05-26 01:24:56 +02:00
k3s_install_tmp Add install steps for k3s 2022-02-04 00:19:45 +01:00
README.md Add additional step to README 2022-06-11 02:27:58 +02:00

README.md

Ansible

Catalogue of Ansible playbooks and helper scripts for server management

Node configuration process

Setup user configuration

  • Create provisioning user without password and sudo
  • Create tanguy user with password
  • Disable root login (passwd --lock root)

SSH Setup

  • Install fail2ban
  • Disable SSH password login
  • Change SSH port

Miscellaneous

  • Test if unattended-upgrade is installed
  • Disable if true
  • Disable IPv6
  • Setup hostname

Softwares

  • Install k3s with token
  • Install OMV for NAS node*(s)

Update system

  • General package manager update

Additional configuration

  • Add label to output node on k3s to enable load balancer

Notes

Running the configuration for a node without inventory

ansible-playbook init.yml -i <ips-separated-by-commas> -u creator --private-key <path-to-ssh-key> --ask-become --extra-vars '{"hostname": "foo"}'

Running the configuration for a node with inventory

  • Add node to inventory
  • Add node to virgin group
  • Run following command
ansible-playbook init.yml -i inventory --limit virgin