2020-12-12 23:03:33 +01:00
|
|
|
---
|
2021-01-14 22:29:57 +01:00
|
|
|
- name: check if ansible is not to old
|
|
|
|
|
hosts: localhost
|
|
|
|
|
roles:
|
2021-01-31 16:50:41 +01:00
|
|
|
- {role: do1jlr.ansible_version, tags: [default, version, default, always], gather_facts: false}
|
2021-01-14 22:29:57 +01:00
|
|
|
|
2020-12-12 23:03:33 +01:00
|
|
|
|
2020-12-22 23:53:15 +01:00
|
|
|
- name: general roles for all hosts
|
2020-12-12 23:03:33 +01:00
|
|
|
hosts: all
|
|
|
|
|
roles:
|
2021-01-31 16:50:41 +01:00
|
|
|
- {role: base, tags: [default, packages, base]}
|
|
|
|
|
- {role: ranger, tags: [packages, ranger]}
|
|
|
|
|
- {role: bat, tags: [packages, bat], when: [ansible_os_family == 'Debian']}
|
|
|
|
|
- {role: unattended_upgrades, tags: [default, unattended, unattended_upgrades, security], become: true, when: ansible_distribution == 'Debian'}
|
2020-12-22 23:53:15 +01:00
|
|
|
|
|
|
|
|
- name: user specific roles for all hosts
|
|
|
|
|
hosts: all
|
|
|
|
|
roles:
|
2021-01-31 16:50:41 +01:00
|
|
|
- {role: users, tags: [default, init, users]}
|
|
|
|
|
- {role: dotfiles, tags: [default, dotfiles]}
|
|
|
|
|
- {role: ssh_auth, tags: [default, init, users]}
|
|
|
|
|
- {role: sshd, tags: [default, init, users]}
|
|
|
|
|
- {role: geerlingguy.firewall, tags: [default, firewall], become: true}
|
|
|
|
|
- {role: robertdebock.fail2ban, tags: [default, fail2ban], become: true}
|
2020-12-23 01:17:14 +01:00
|
|
|
|
|
|
|
|
- name: deploy web config
|
|
|
|
|
hosts: web
|
|
|
|
|
roles:
|
2021-02-06 23:41:53 +01:00
|
|
|
- {role: do1jlr.webhost, tags: [web, webhost]}
|
2021-01-31 16:50:41 +01:00
|
|
|
- {role: acmetool_fix, tags: [web, acmetool]}
|
2021-02-06 17:48:53 +01:00
|
|
|
- {role: do1jlr.acmetool, tags: [web, acmetool]}
|
|
|
|
|
- {role: do1jlr.nginx, tags: [web, nginx]}
|
2021-01-31 16:50:41 +01:00
|
|
|
- {role: geerlingguy.mysql, tags: [web, git, mysql]}
|
|
|
|
|
- {role: gitea, tags: [web, gitea, git]}
|
|
|
|
|
- {role: goaccess, tags: [web, goaccess]}
|
2021-01-01 02:52:42 +01:00
|
|
|
|
2021-01-02 02:03:34 +01:00
|
|
|
- name: deploy mail config
|
|
|
|
|
hosts: mail
|
|
|
|
|
roles:
|
2021-01-31 16:50:41 +01:00
|
|
|
- {role: unbound, tags: [mail, unbound]}
|
|
|
|
|
- {role: geerlingguy.mysql, tags: [mail, mysql, mariadb]}
|
|
|
|
|
- {role: acmetool_fix, tags: [mail, acmetool]}
|
2021-02-06 23:41:53 +01:00
|
|
|
- {role: do1jlr.webhost, tags: [mail, webhost]}
|
2021-02-06 17:48:53 +01:00
|
|
|
- {role: do1jlr.acmetool, tags: [mail, acmetool]}
|
|
|
|
|
- {role: do1jlr.nginx, tags: [mail, nginx]}
|
2021-01-31 16:50:41 +01:00
|
|
|
- {role: do1jlr.mailserver_preperation, tags: [mail, mailserver_preperation, prep, mailserver]}
|
|
|
|
|
- {role: do1jlr.dovecot, tags: [mail, dovecot, mailserver_dovecot]}
|
|
|
|
|
- {role: postfix, tags: [mail, postfix]}
|
|
|
|
|
- {role: do1jlr.rspamd, tags: [mail, rspamd]}
|
2021-02-01 17:10:13 +01:00
|
|
|
- {role: radicale, tags: [mail, caldav, radicale]}
|
