1
0
Fork 0
mirror of https://github.com/DO1JLR/ansible_playbook_servers.git synced 2024-09-14 19:53:56 +02:00
ansible_playbook_servers/site.yml
2021-09-17 00:02:30 +02:00

60 lines
2.4 KiB
YAML

---
- name: check if ansible is not to old
hosts: localhost
roles:
- {role: do1jlr.ansible_version, tags: [default, version, default, always], gather_facts: false}
- name: general roles for all hosts
hosts: all
roles:
- {role: do1jlr.base, tags: [default, packages, base]}
- {role: ranger, tags: [packages, ranger]}
- {role: bat, tags: [packages, bat], when: [ansible_os_family == 'Debian']}
- {role: unattended_upgrades, tags: [default, unattended, unattended_upgrades, security], become: true, when: ansible_distribution == 'Debian'}
- {role: do1jlr.rtl_nic_firmware, tags: [apu, rtl_nic, firmware]}
- {role: do1jlr.avahi_client, tags: [avahi, avahi_client]}
- name: user specific roles for all hosts
hosts: all
roles:
- {role: users, tags: [default, init, users, web]}
- {role: dotfiles, tags: [default, dotfiles]}
- {role: ssh_auth, tags: [default, init, users, web]}
- {role: sshd, tags: [default, init, users, sshd]}
- {role: geerlingguy.firewall, tags: [default, firewall], become: true}
- {role: robertdebock.fail2ban, tags: [default, fail2ban], become: true}
- name: deploy web config
hosts: web
roles:
- {role: do1jlr.webhost, tags: [web, webhost], become: true}
- {role: acmetool_fix, tags: [web, acmetool]}
- {role: do1jlr.acmetool, tags: [web, acmetool], become: true}
- {role: do1jlr.nginx, tags: [web, nginx]}
- {role: geerlingguy.mysql, tags: [web, git, mysql], become: true}
- {role: do1jlr.gitea, tags: [web, gitea, git]}
- {role: goaccess, tags: [web, goaccess]}
- name: deploy dns resolver
hosts: resolver
roles:
- {role: unbound, tags: [mail, unbound]}
- name: deploy mail config
hosts: mail
roles:
- {role: geerlingguy.mysql, tags: [mail, mysql, mariadb], become: true}
- {role: do1jlr.webhost, tags: [mail, webhost], become: true}
- {role: acmetool_fix, tags: [mail, acmetool]}
- {role: do1jlr.acmetool, tags: [mail, acmetool], become: true}
- {role: do1jlr.nginx, tags: [mail, nginx]}
- {role: do1jlr.mailserver_preperation, tags: [mail, mailserver_preperation, prep, mailserver]}
- {role: do1jlr.dovecot, tags: [mail, dovecot, mailserver_dovecot]}
- {role: postfix, tags: [mail, postfix]}
- {role: do1jlr.rspamd, tags: [mail, rspamd]}
- {role: do1jlr.weechat, tags: [irc, weechat]}
- name: setup luna.l3d.ch host
hosts: luna.l3d.ch
roles: []
# - {role: do1jlr.ovh_dyndns, tags: [ovh, dns, dyndns]}