90 Commits

Author SHA1 Message Date
Lino Silva 8f93e4249a feat: Add Reactive resume 2026-01-26 15:43:43 +00:00
Lino Silva f68ae14096 feat: Add hortusfox 2026-01-06 10:29:59 +00:00
Lino Silva b03d12bbc3 feat: Add techtinium dns nodes 2025-12-09 11:24:57 +00:00
Lino Silva ba250ae6ab feat: Add ghost and dawarich 2025-08-29 22:21:30 +01:00
Lino Silva 877b4581af feat: Add DropOSS 2025-08-06 09:44:02 +01:00
Lino Silva 82530f4248 add super-productivity 2025-06-30 11:12:02 +01:00
Lino Silva 4e52cc6883 Added convertx and nocodb 2025-06-24 23:26:04 +01:00
Lino Silva 5bfb547596 fix: Jellyfin 2025-05-12 10:15:40 +01:00
Lino Silva 73db11b853 feat: Jellyfin 2025-05-09 16:55:40 +01:00
Lino Silva e0eeab18d0 feat: Add graylog 2025-03-12 15:05:50 +00:00
Lino Silva 5d8e0effe1 Add heartbeat 2024-11-15 15:04:54 +00:00
Lino Silva 53489b5764 Add docker prune playbook 2024-11-15 11:09:13 +00:00
Lino Silva c487d5cec4 Stocks 2024-10-12 20:48:09 +01:00
Lino Silva 2e868a6015 feat: Add n8n 2024-05-09 16:45:42 +01:00
Lino Silva 44e61000c5 Added dockerfile and moved scripts 2024-03-14 11:47:02 +00:00
Lino Silva 53ebce22a8 feat: Add geoguessr 2023-09-11 09:39:43 +01:00
Lino Silva f53ad0b32f Added upsnap 2023-09-05 16:37:31 +01:00
Lino Silva fd32f290af feat: Add nginx-proxy-manager 2023-07-10 11:26:20 +01:00
Lino Silva 231b57fa6c feat: Add outline 2023-04-22 18:32:51 +01:00
Lino Silva de7f1d8b87 feat: Add minio 2023-04-22 13:14:09 +01:00
Lino Silva 71b0366977 feat: Add nextcloud 2023-04-22 10:59:28 +01:00
Lino Silva 2a19385f1d feat: Add paperless 2023-04-21 21:16:40 +01:00
Lino Silva 69b6011d2c feat: Add gitea 2023-04-21 14:19:03 +01:00
Lino Silva 7268e5e976 feat: Add vaultwarden 2023-04-21 13:24:57 +01:00
Lino Silva 99494d0d62 chore: Remove comments 2023-04-21 13:00:58 +01:00
Lino Silva 5c12cddab4 feat: Add mealie 2023-04-20 15:51:47 +01:00
Lino Silva a375049e1e feat: Arr stack 2023-04-19 18:38:25 +01:00
Lino Silva c60e378f81 feat: Change detection 2023-04-19 15:50:07 +01:00
Lino Silva 71a4005bbf feat: Changed IP for impa 2023-04-19 15:23:39 +01:00
Lino Silva d75ad58f5a feat: Added youtube-downloader 2023-04-19 15:23:26 +01:00
Lino Silva 09ddf680a7 feat: Added openvpn 2023-04-19 15:23:00 +01:00
Lino Silva 1a23832aa9 Added tautulli reverse proxy conf 2023-04-12 13:53:27 +01:00
Lino Silva 4fbe12c336 Added mastodon, tautulli 2023-04-12 13:50:33 +01:00
Lino Silva e37782b856 feat: Add folding 2023-04-04 14:32:01 +01:00
Lino Silva d48f3e739b fix: Mount ids on immich 2023-03-27 18:23:51 +01:00
Lino Silva a12b6e6c7f feat: Immich 2023-03-26 23:26:13 +01:00
Lino Silva 0ad4fd3945 fix: Enable ssh 2023-03-26 15:51:28 +01:00
Lino Silva a43c1593d9 feat: Buncha shit 2023-03-25 23:54:00 +00:00
Lino Silva fe17c6eb69 feat: Swag with reverse proxy for most services 2023-03-20 23:16:16 +00:00
Lino Silva cfecd0afd8 feat: Add swag container 2023-03-20 14:56:20 +00:00
Lino Silva fbd6e53083 feat: added argocd and arr 2023-02-13 14:58:21 +00:00
Lino Silva 5fab069837 feat: Authentik, forward auth proxy 2023-02-09 23:03:36 +00:00
Lino Silva acd49ed5d8 feat: Shit, multiple things 2023-01-31 15:37:13 +00:00
Lino Silva 51400d260b feat: Frigate db mountpoint on NFS 2023-01-04 10:23:22 +00:00
lino 8c2abd090c Merge pull request 'feat/pihole' (#2) from feat/pihole into master
Reviewed-on: #2
2023-01-03 12:03:19 +00:00
Lino Silva 5d2bd81a14 feat: wtf 2023-01-03 12:02:07 +00:00
Lino Silva c9c9861a82 feat: changed lxc to vm in k3s 2023-01-03 12:00:52 +00:00
Lino Silva e596ff0e83 feat: changed lxc to vm in k3s 2023-01-03 11:59:54 +00:00
lino 1913d6417c Updated frigate playbooks 2023-01-03 11:58:31 +00:00
lino 508e433bab feat: Frigate
Co-authored-by: Lino Silva <lino.silva@farfetch.com>
Reviewed-on: #1
2022-11-25 23:29:38 +00:00
Lino Silva 5075a3e697 Add TODO and pre-commit hook 2022-11-20 00:05:51 +00:00
Lino Silva b27354241d feat: reverse proxy and certs working 2022-11-19 23:42:06 +00:00
Lino Silva 645dacdca4 feat: Added k3s, metallb, tried adding traefik 2022-11-15 09:35:05 +00:00
lino f783d35513 Added pre-role for k3s and frigate 2022-11-10 21:01:15 +00:00
Lino Silva 9a7c540c7e added inventory 2022-11-07 22:52:11 +00:00
Lino Silva 6753d614ee k3s lxc playbook done 2022-11-07 21:18:02 +00:00
automationxpert f892029fcf Adding additional reboot (optional) (#139)
* Create reboot.yml

* Create reboot.sh

* Updated the Playbook and Tasks Name

Co-authored-by: Techno Tim <timothystewart6@gmail.com>
2022-11-06 05:54:29 +00:00
snoopy82481 6b37ba5e60 chore: Multiple configuration changes (#144)
Added yaml stdout for better readability, optimize ssh connections, moved become to correct section
2022-11-05 21:54:06 -05:00
Techno Tim b1fee44403 GitHub Actions Fixes (#150) 2022-11-05 19:57:36 -05:00
Techno Tim a1c7175bd1 fix(requirements.txt): Use pip-compile (#148)
* fix(requirements.txt): Use pip-compile

* fix(lint): Remove anchors from molecule since they aren't yet supported via lint

* fix(lint): Remove anchors from molecule since they aren't yet supported via lint
2022-11-05 18:37:46 -05:00
dependabot[bot] 69d3bdcd88 chore(deps): bump pyrsistent from 0.18.1 to 0.19.2 (#141)
Bumps [pyrsistent](https://github.com/tobgu/pyrsistent) from 0.18.1 to 0.19.2.
- [Release notes](https://github.com/tobgu/pyrsistent/releases)
- [Changelog](https://github.com/tobgu/pyrsistent/blob/master/CHANGES.txt)
- [Commits](https://github.com/tobgu/pyrsistent/commits)

---
updated-dependencies:
- dependency-name: pyrsistent
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-04 23:07:18 -05:00
Techno Tim 5268ef305a Revert "feat(ci): switching to self-hosted runners (#133)" (#135)
This reverts commit a840571733.
2022-10-31 18:50:34 -05:00
Techno Tim a840571733 feat(ci): switching to self-hosted runners (#133)
* feat(ci): switching to self-hosted runners

* feat(gh-actions-controller): added

* feat(gh-actions-controller): added
2022-10-31 17:56:22 -05:00
dependabot[bot] b1370406ea chore(deps): bump ansible-lint from 6.8.3 to 6.8.4 (#130)
Bumps [ansible-lint](https://github.com/ansible-community/ansible-lint) from 6.8.3 to 6.8.4.
- [Release notes](https://github.com/ansible-community/ansible-lint/releases)
- [Commits](https://github.com/ansible-community/ansible-lint/compare/v6.8.3...v6.8.4)

---
updated-dependencies:
- dependency-name: ansible-lint
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-28 17:16:35 -05:00
dependabot[bot] 12d57a07d0 chore(deps): bump ansible-lint from 6.8.2 to 6.8.3 (#129)
Bumps [ansible-lint](https://github.com/ansible-community/ansible-lint) from 6.8.2 to 6.8.3.
- [Release notes](https://github.com/ansible-community/ansible-lint/releases)
- [Commits](https://github.com/ansible-community/ansible-lint/compare/v6.8.2...v6.8.3)

---
updated-dependencies:
- dependency-name: ansible-lint
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-26 21:55:42 -05:00
samerbahri98 4f3b8ec9e0 Pre-commit hooks (#125)
* feat: pre-commit

* empty

* fix: requirements.txt
2022-10-26 19:15:24 -05:00
dependabot[bot] 45ddd65e74 chore(deps): bump zipp from 3.9.0 to 3.10.0 (#128)
Bumps [zipp](https://github.com/jaraco/zipp) from 3.9.0 to 3.10.0.
- [Release notes](https://github.com/jaraco/zipp/releases)
- [Changelog](https://github.com/jaraco/zipp/blob/main/CHANGES.rst)
- [Commits](https://github.com/jaraco/zipp/compare/v3.9.0...v3.10.0)

---
updated-dependencies:
- dependency-name: zipp
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-26 19:13:53 -05:00
dependabot[bot] b2a62ea4eb chore(deps): bump ruamel-yaml-clib from 0.2.6 to 0.2.7 (#124)
Bumps [ruamel-yaml-clib](https://sourceforge.net/p/ruamel-yaml-clib/code/ci/default/tree) from 0.2.6 to 0.2.7.

---
updated-dependencies:
- dependency-name: ruamel-yaml-clib
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-22 13:37:11 -05:00
dependabot[bot] a8697edc99 chore(deps): bump oauthlib from 3.2.1 to 3.2.2 (#123)
Bumps [oauthlib](https://github.com/oauthlib/oauthlib) from 3.2.1 to 3.2.2.
- [Release notes](https://github.com/oauthlib/oauthlib/releases)
- [Changelog](https://github.com/oauthlib/oauthlib/blob/v3.2.2/CHANGELOG.rst)
- [Commits](https://github.com/oauthlib/oauthlib/compare/v3.2.1...v3.2.2)

---
updated-dependencies:
- dependency-name: oauthlib
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-18 19:20:28 -05:00
dependabot[bot] d3218f5d5c chore(deps): bump google-auth from 2.12.0 to 2.13.0 (#122)
Bumps [google-auth](https://github.com/googleapis/google-auth-library-python) from 2.12.0 to 2.13.0.
- [Release notes](https://github.com/googleapis/google-auth-library-python/releases)
- [Changelog](https://github.com/googleapis/google-auth-library-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-auth-library-python/compare/v2.12.0...v2.13.0)

---
updated-dependencies:
- dependency-name: google-auth
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-17 23:06:58 -05:00
Irakli Nadareishvili 590a8029fd Removing accidental tear-down step that is clearly a typo (#117)
Co-authored-by: Techno Tim <timothystewart6@gmail.com>
2022-10-15 14:15:25 -05:00
Techno Tim cb2fa7c441 k3s, metallb, kube-vip updates (#119)
* feat(k3s): Updated to v1.24.6+k3s1

* feat(kube-vip): Update to v0.5.5

* feat(metal-lb): Update to v0.13.6

* fix(pip): Freeze requirements

* fix(lint): Fixed ansible-lint
2022-10-15 12:23:50 -05:00
ccoane 14508ec8dc Add "collection" to the ansible-galaxy command as it will run without making changes if that collection argument is not provided. (#113) 2022-10-04 20:41:19 -05:00
Ioannis Angelakopoulos fb6c9a6866 adds colors to molecule testing in GitHub action (#109) 2022-09-28 03:48:25 +00:00
Simon Leiner d5d02280c1 Fix download-boxes.sh if no boxes are present (#106)
In case of grep not matching any line, it would return an error code
and thus stop the script. This patch sets "present_boxes" to an empty
value in case any of the commands fail.
2022-09-26 17:21:37 -05:00
Simon Leiner 57e528832b Fix role order in reset playbook (#104) 2022-09-25 12:35:36 -05:00
Ioannis Angelakopoulos cd76fa05a7 fix master taint implementation - linting problems (#95)
* add virtual-ip to certificate SAN entries

Adds the kube-vip IP as a Subject Alternative Name in the TLS cert. It is needed otherwise you cannot access the cluster.

* fixes bug with master taints (#1)

- improves taint logic

* fixes typo

* fixes formatting

* fixes undefined group['node'] if missing from hosts.ini (#2)

* fixes undefined group['node'] if missing from hosts.ini

- improves application of master taint by centralizing code

* improves molecule testing, fixes linting

* hacking at linter problems, small tweaks

- increases the metallb timeout error due to intermittent testing errors in GitHub actions

* improves context by renaming taint variable

- makes variable boolean

* fix bug

* removes linting hacks

Co-authored-by: Ioannis Angelakopoulos <ioangel@gmail.com>
2022-09-24 20:12:24 -05:00
Simon Leiner d5b37acd8a Drop support for CentOS, test Rocky and Debian in CI (#92)
* Test CentOS 7 in CI

* Drop support for CentOS, test on Rocky and Debian

* Fix reset playbook for Rocky Linux

* Fix typo

* Disable firewalld during testing

Co-authored-by: Techno Tim <timothystewart6@gmail.com>
2022-09-24 05:10:55 +00:00
Simon Leiner 5225493ca0 CI: Fix linting job for ansible-lint 6.6.0 (#96)
* CI: Fix linting job for ansible-lint 6.6.0

* Increase MetalLB timeout to mitigate CI flakiness
2022-09-23 23:28:21 -05:00
BMeach 4acbe91b6c Fix master node taints in multi node installs (#93)
* Taint master nodes if more than one node

* Kick off fork workflow tests

Co-authored-by: Techno Tim <timothystewart6@gmail.com>
2022-09-17 15:56:09 -05:00
Techno Tim f1c2f3b7dd fix(github): ignore readme updates (#94) 2022-09-17 00:18:56 -05:00
Techno Tim 76718a010c chore(docs): Updated with ansible collections install (#89)
* chore(docs): Fixing thanks section

* chore(docs): Updated with collections command
2022-09-15 02:32:34 +00:00
Simon Leiner a1ef590442 Add support for API servers on IPv6 addresses (#48)
* Remove duplicate file for deletion

* Add support for IPv6 clusters

To correctly escape IPv6 addresses when ports are used, they must be
wrapped in square brackets [1]. This patch adds support for that,
using Ansible's ipwrap filter [2].

[1]: https://datatracker.ietf.org/doc/html/rfc4038#section-5.1
[2]: http://docs.ansible.com/ansible/latest/collections/ansible/utils/docsite/filters_ipaddr.html#wrapping-ipv6-addresses-in-brackets

* Do not abort other molecule jobs on failure

* Fix cache keys for Vagrant boxes

* Molecule: Derive overrides.yml location from scenario dir

# Conflicts:
#	molecule/default/molecule.yml
#	molecule/ipv6/molecule.yml
2022-09-10 12:57:38 -05:00
Simon Leiner 9ff3bb6b87 Test single-node cluster (#78)
* Molecule: Derive overrides.yml location from scenario dir

# Conflicts:
#	molecule/default/molecule.yml
#	molecule/ipv6/molecule.yml

* Molecule: Add single_node scenario

* Fix get_nodes test for the case of empty groups
2022-09-09 11:47:26 -05:00
Techno Tim b1df9663fa fix(ansible): Fix group permissions on tmp folder (#77) 2022-09-09 03:00:54 +00:00
Vitalij Dovhanyc 58c3a61bbb add editorconfig and fix trailing whitespaces (#68)
Co-authored-by: Techno Tim <timothystewart6@gmail.com>
2022-09-07 20:00:13 -05:00
Simon Leiner 60bc09b085 Mitigate CI flakiness (#70)
* Increase SSH connection timeouts and retries

* Make MetalLB timeouts configurable

* Retry applying MetalLB CRs

* Fix location of MetalLB CRs template

* Make MetalLB wait logic more compact

* Fix typo

* retrigger 1

* retrigger 2

* retrigger 3

* retrigger 4

* retrigger 5
2022-09-07 18:47:58 -05:00
Timothy Stewart 4365a2a54b fix(ansible): fixing permissions on tmp folder 2022-09-06 19:07:09 -05:00
Simon Leiner a6b2a95b7e Test playbook using molecule (#67)
* Test cluster using molecule

* Fix detection of first control node

* Include --flannel-iface and --node-ip as k3s arguments

* Store logs of k3s-init.service as GitHub job artifacts
2022-09-03 10:36:28 -05:00
Timothy Stewart 3c36dc8bfd fix(ansible): use k3s kubectl 2022-09-02 11:07:17 -05:00
531 changed files with 28538 additions and 764 deletions
+9 -1
View File
@@ -1,3 +1,11 @@
--- ---
exclude_paths:
# default paths
- ".cache/"
- ".github/"
- "test/fixtures/formatting-before/"
- "test/fixtures/formatting-prettier/"
skip_list: skip_list:
- 'fqcn-builtins' - "fqcn-builtins"
- "name[play]"
+13
View File
@@ -0,0 +1,13 @@
root = true
[*]
indent_style = space
indent_size = 2
charset = utf-8
trim_trailing_whitespace = true
insert_final_newline = true
end_of_line = lf
max_line_length = off
[Makefile]
indent_style = tab
[*.go]
indent_style = tab
-3
View File
@@ -1,3 +0,0 @@
---
github: timothystewart6
patreon: technotim
-77
View File
@@ -1,77 +0,0 @@
<!-- It's a good idea to check this post first for general troubleshooting https://github.com/techno-tim/k3s-ansible/discussions/19 -->
<!--- Provide a general summary of the issue in the Title above -->
## Expected Behavior
<!--- Tell us what should happen -->
## Current Behavior
<!--- Tell us what happens instead of the expected behavior -->
## Steps to Reproduce
<!--- reproduce this bug. Include code to reproduce, if relevant -->
1.
2.
3.
4.
## Context (variables)
<!--- please include which OS, along with the variables used when running the playbook -->
Operating system:
Hardware:
### Variables Used
`all.yml`
```yml
k3s_version: ""
ansible_user: NA
systemd_dir: ""
flannel_iface: ""
apiserver_endpoint: ""
k3s_token: "NA"
extra_server_args: ""
extra_agent_args: ""
kube_vip_tag_version: ""
metal_lb_speaker_tag_version: ""
metal_lb_controller_tag_version: ""
metal_lb_ip_range: ""
```
### Hosts
`host.ini`
```ini
[master]
IP.ADDRESS.ONE
IP.ADDRESS.TWO
IP.ADDRESS.THREE
[node]
IP.ADDRESS.FOUR
IP.ADDRESS.FIVE
[k3s_cluster:children]
master
node
```
## Possible Solution
<!--- Not obligatory, but suggest a fix/reason for the bug, -->
- [ ] I've checked the [General Troubleshooting Guide](https://github.com/techno-tim/k3s-ansible/discussions/20)
-14
View File
@@ -1,14 +0,0 @@
# Proposed Changes
<!--- Provide a general summary of your changes -->
-
-
-
## Checklist
- [ ] Tested locally
- [ ] Ran `site.yml` playbook
- [ ] Ran `reset.yml` playbook
- [ ] Did not add any unnecessary changes
- [ ] 🚀
-11
View File
@@ -1,11 +0,0 @@
---
version: 2
updates:
- package-ecosystem: "pip"
directory: "/"
schedule:
interval: "daily"
rebase-strategy: "auto"
ignore:
- dependency-name: "*"
update-types: ["version-update:semver-major"]
-30
View File
@@ -1,30 +0,0 @@
---
name: Linting
on:
pull_request:
push:
branches:
- master
jobs:
ansible-lint:
name: YAML Lint + Ansible Lint
runs-on: ubuntu-latest
steps:
- name: Check out the codebase
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # 3.0.2
- name: Set up Python 3.x
uses: actions/setup-python@b55428b1882923874294fa556849718a1d7f2ca5 #4.0.2
with:
python-version: '3.x'
- name: Install test dependencies
run: pip3 install yamllint ansible-lint ansible
- name: Run yamllint
run: yamllint .
- name: Run ansible-lint
run: ansible-lint
-69
View File
@@ -1,69 +0,0 @@
---
name: Test
on:
pull_request:
push:
branches:
- master
jobs:
vagrant:
name: Vagrant
runs-on: macos-12
env:
HOMEBREW_NO_INSTALL_CLEANUP: 1
VAGRANT_CWD: ${{ github.workspace }}/vagrant
steps:
- name: Check out the codebase
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # 3.0.2
- name: Install Ansible
run: brew install ansible
- name: Install role dependencies
run: ansible-galaxy install -r collections/requirements.yml
- name: Configure VirtualBox
run: >-
sudo mkdir -p /etc/vbox &&
echo "* 192.168.30.0/24" | sudo tee -a /etc/vbox/networks.conf > /dev/null
- name: Cache Vagrant boxes
uses: actions/cache@fd5de65bc895cf536527842281bea11763fefd77 # 3.0.8
with:
path: |
~/.vagrant.d/boxes
key: vagrant-boxes-${{ hashFiles('**/Vagrantfile') }}
restore-keys: |
vagrant-boxes
- name: Create virtual machines
run: vagrant up
timeout-minutes: 10
- name: Provision cluster using Ansible
# Since Ansible sets up _all_ machines, it is sufficient to run it only
# once (i.e, for a single node - we are choosing control1 here)
run: vagrant provision control1 --provision-with ansible
timeout-minutes: 25
- name: Set up kubectl on the host
run: brew install kubectl &&
mkdir -p ~/.kube &&
vagrant ssh control1 --command "cat ~/.kube/config" > ~/.kube/config
- name: Show cluster nodes
run: kubectl describe -A nodes
- name: Show cluster pods
run: kubectl describe -A pods
- name: Test cluster
run: $VAGRANT_CWD/test_cluster.py --verbose --locals
timeout-minutes: 5
- name: Destroy virtual machines
if: always() # do this even if a step before has failed
run: vagrant destroy --force
+2 -1
View File
@@ -1 +1,2 @@
.vagrant .env/
*.log
+21
View File
@@ -0,0 +1,21 @@
---
repos:
- repo: https://github.com/pre-commit/pre-commit-hooks
rev: v4.3.0
hooks:
- id: requirements-txt-fixer
- id: sort-simple-yaml
- id: detect-private-key
- repo: https://github.com/adrienverge/yamllint.git
rev: v1.28.0
hooks:
- id: yamllint
args: [-c=.yamllint]
- repo: https://github.com/ansible-community/ansible-lint.git
rev: v6.8.2
hooks:
- id: ansible-lint
- repo: https://github.com/shellcheck-py/shellcheck-py
rev: v0.8.0.4
hooks:
- id: shellcheck
+7
View File
@@ -0,0 +1,7 @@
{
"prettier.bracketSpacing": false,
"ansible.python.interpreterPath": "/usr/local/bin/python3",
"files.associations": {
"*.yaml": "home-assistant"
}
}
+20
View File
@@ -0,0 +1,20 @@
FROM ubuntu:20.04 as base
ENV ANSIBLE_VERSION 2.9.17
RUN apt-get update; \
apt-get install -y gcc python3 sshpass; \
apt-get install -y python3-pip; \
apt-get clean all
RUN pip3 install --upgrade pip; \
pip3 install "ansible==${ANSIBLE_VERSION}"; \
pip3 install ansible;
FROM base as update
WORKDIR /ansible
COPY collections/requirements.yml ./collections/requirements.yml
COPY ansible.cfg .
RUN ansible-galaxy collection install -r collections/requirements.yml
COPY . .
+20 -19
View File
@@ -16,21 +16,26 @@ If you want more context on how this works, see:
Build a Kubernetes cluster using Ansible with k3s. The goal is easily install a HA Kubernetes cluster on machines running: Build a Kubernetes cluster using Ansible with k3s. The goal is easily install a HA Kubernetes cluster on machines running:
- [X] Debian - [x] Debian (tested on version 11)
- [X] Ubuntu - [x] Ubuntu (tested on version 22.04)
- [X] CentOS - [x] Rocky (tested on version 9)
on processor architecture: on processor architecture:
- [X] x64 - [x] x64
- [X] arm64 - [x] arm64
- [X] armhf - [x] armhf
## ✅ System requirements ## ✅ System requirements
- Deployment environment must have Ansible 2.4.0+. If you need a quick primer on Ansible [you can check out my docs and setting up Ansible](https://docs.technotim.live/posts/ansible-automation/). - Deployment environment must have Ansible 2.4.0+. If you need a quick primer on Ansible [you can check out my docs and setting up Ansible](https://docs.technotim.live/posts/ansible-automation/).
- [`netaddr` package](https://pypi.org/project/netaddr/) must be available to Ansible. If you have installed Ansible via apt, this is already taken care of. If you have installed Ansible via `pip`, make sure to install `netaddr` into the respective virtual environment.
- `server` and `agent` nodes should have passwordless SSH access, if not you can supply arguments to provide credentials `--ask-pass --ask-become-pass` to each command. - `server` and `agent` nodes should have passwordless SSH access, if not you can supply arguments to provide credentials `--ask-pass --ask-become-pass` to each command.
- You will also need to install collections that this playbook uses by running `ansible-galaxy collection install -r ./collections/requirements.yml`
## 🚀 Getting Started ## 🚀 Getting Started
### 🍴 Preparation ### 🍴 Preparation
@@ -71,7 +76,7 @@ If needed, you can also edit `inventory/my-cluster/group_vars/all.yml` to match
Start provisioning of the cluster using the following command: Start provisioning of the cluster using the following command:
```bash ```bash
ansible-playbook site.yml -i inventory/my-cluster/hosts.ini ansible-playbook site.yml -i inventory/my-cluster/hosts.ini --ask-become-pass --ask-vault-pass
``` ```
After deployment control plane will be accessible via virtual ip-address which is defined in inventory/group_vars/all.yml as `apiserver_endpoint` After deployment control plane will be accessible via virtual ip-address which is defined in inventory/group_vars/all.yml as `apiserver_endpoint`
@@ -82,7 +87,7 @@ After deployment control plane will be accessible via virtual ip-address which i
ansible-playbook reset.yml -i inventory/my-cluster/hosts.ini ansible-playbook reset.yml -i inventory/my-cluster/hosts.ini
``` ```
>You should also reboot these nodes due to the VIP not being destroyed > You should also reboot these nodes due to the VIP not being destroyed
## ⚙️ Kube Config ## ⚙️ Kube Config
@@ -100,19 +105,15 @@ See the commands [here](https://docs.technotim.live/posts/k3s-etcd-ansible/#test
Be sure to see [this post](https://github.com/techno-tim/k3s-ansible/discussions/20) on how to troubleshoot common problems Be sure to see [this post](https://github.com/techno-tim/k3s-ansible/discussions/20) on how to troubleshoot common problems
### 🔷 Vagrant
You may want to kickstart your k3s cluster by using Vagrant to quickly build you all needed VMs with one command.
Head to the `vagrant` subfolder and type `vagrant up` to get your environment setup.
After the VMs have got build, deploy k3s using the Ansible playbook `site.yml` by the
`vagrant provision --provision-with ansible` command.
## Thanks 🤝 ## Thanks 🤝
This repo is really standing on the shoulders of giants. To all those who have contributed. This repo is really standing on the shoulders of giants. Thank you to all those who have contributed and tanks to these repos for code and ideas:
Thanks to these repos for code and ideas:
- [k3s-io/k3s-ansible](https://github.com/k3s-io/k3s-ansible) - [k3s-io/k3s-ansible](https://github.com/k3s-io/k3s-ansible)
- [geerlingguy/turing-pi-cluster](https://github.com/geerlingguy/turing-pi-cluster) - [geerlingguy/turing-pi-cluster](https://github.com/geerlingguy/turing-pi-cluster)
- [212850a/k3s-ansible](https://github.com/212850a/k3s-ansible) - [212850a/k3s-ansible](https://github.com/212850a/k3s-ansible)
## TODO
- https://docs.k3s.io/installation/kube-dashboard
- https://www.phillipsj.net/posts/k3s-enable-nfs-storage/
+23 -10
View File
@@ -1,12 +1,25 @@
[defaults] [defaults]
nocows = True nocows = True
roles_path = ./roles roles_path = ./roles
inventory = ./hosts.ini inventory = ./inventory/my-cluster/hosts.ini
stdout_callback = yaml
interpreter_python = auto_silent
remote_tmp = $HOME/.ansible/tmp remote_tmp = $HOME/.ansible/tmp
local_tmp = $HOME/.ansible/tmp local_tmp = $HOME/.ansible/tmp
pipelining = True timeout = 60
become = True host_key_checking = False
host_key_checking = False deprecation_warnings = False
deprecation_warnings = False callback_whitelist = profile_tasks
callback_whitelist = profile_tasks log_path = ./ansible.log
[privilege_escalation]
become = True
[ssh_connection]
scp_if_ssh = smart
retries = 3
ssh_args = -o ControlMaster=auto -o ControlPersist=30m -o Compression=yes -o ServerAliveInterval=15s
pipelining = True
control_path = %(directory)s/%%h-%%r
host_key_checking = False
+3
View File
@@ -1,4 +1,7 @@
--- ---
collections: collections:
- name: ansible.utils
- name: community.general - name: community.general
- name: ansible.posix - name: ansible.posix
- name: kubernetes.core
- name: community.docker
-3
View File
@@ -1,3 +0,0 @@
#!/bin/bash
ansible-playbook site.yml -i inventory/my-cluster/hosts.ini
-3
View File
@@ -1,3 +0,0 @@
/*
!.gitignore
!sample/
+431
View File
@@ -0,0 +1,431 @@
---
k3s_version: v1.24.6+k3s1
# this is the user that has ssh access to these machines
ansible_user: lino
systemd_dir: /etc/systemd/system
# Set your timezone
system_timezone: "Europe/Lisbon"
# apiserver_endpoint is virtual ip-address which will be configured on each master
apiserver_endpoint: "10.0.3.1"
# k3s_token is required masters can talk together securely
# this token should be alpha numeric only
k3s_token: "7qXiuKpSY9uLwdVSNSnEF5RkttoERixCpc2EVJW7vh7Ws4NMN3"
# The IP on which the node is reachable in the cluster.
# Here, a sensible default is provided, you can still override
# it for each of your hosts, though.
k3s_node_ip: '{{ ansible_facts[flannel_iface]["ipv4"]["address"] }}'
# Disable the taint manually by setting: k3s_master_taint = false
k3s_master_taint: false
# these arguments are recommended for servers as well as agents:
extra_args: >-
--flannel-iface={{ flannel_iface }}
--node-ip={{ k3s_node_ip }}
# change these to your liking, the only required are: --disable servicelb, --tls-san {{ apiserver_endpoint }}
extra_server_args: >-
{{ extra_args }}
{{ '--node-taint node-role.kubernetes.io/master=true:NoSchedule' if k3s_master_taint else '' }}
--tls-san {{ apiserver_endpoint }}
--disable servicelb
--disable traefik
extra_agent_args: >-
{{ extra_args }}
# image tag for kube-vip
kube_vip_tag_version: "v0.5.5"
# image tag for metal lb
metal_lb_speaker_tag_version: "v0.13.6"
metal_lb_controller_tag_version: "v0.13.6"
# metallb ip range for load balancer
metal_lb_ip_range: "10.0.4.1-10.0.4.254"
lxc_password: !vault |
$ANSIBLE_VAULT;1.1;AES256
38303735306236303463613632623161643633663631303931396564346565666236643562316264
6533643331306364653564653763356537303932313531350a393261643137636232616335376461
66383966333765626539363561613361393665616333303964373761356166623766663232303063
3138353333373935660a383230393330646538303933336366383736643333623663333934663131
3064
proxmox_api_password: !vault |
$ANSIBLE_VAULT;1.1;AES256
35376334616332386130656335663736343337396532663266383934643632363664646631653935
6533343936353734343761343465646365616130643130360a316234333036303738663566666364
61653638373830383733323563373862346662363339656632643661336533363162616435616531
6331326462356366320a303331616366356333306638386130666538633833623162653934616338
3566
traefik_http_auth_user: !vault |
$ANSIBLE_VAULT;1.1;AES256
38323532616336373939646333613338626431363466633631343162636235623563393135653231
3961383965356631613164303566393632323938386664360a373037616335643662613564353130
30353832376431633834336234386161313062373437613132623733646166303639313364373637
3933626639646536320a303163353835633837356530613931346165353939363235373561333836
39366266303064393334383835323330353934643862323330343337393761353166393333376131
33303439393531303031653361393530313930363039646566613831373366326432653634653165
313735383263623836363030386531613033
cloudflare_api_key: !vault |
$ANSIBLE_VAULT;1.1;AES256
38363363386466666266613930386237623430646531303734613863306530666530376433633339
3166373361393839363439326661396136616637393865630a666637366132643035343832666335
33376139643533313730313135653064393239316162376339653965313366643565643664666534
6631393564333230370a303634643030346166383235643666356164393232643832333238313664
38346161306138653735303861646638653830633938326566663136393862643264353437623963
3462616435653132623563316231343739333761653365333437
dns_cloudflare_api_key: !vault |
$ANSIBLE_VAULT;1.1;AES256
61306235353261303235646331356666643339393164333762303730646563646633626466306436
6565303031366262303161323536323236613861373536330a346564306238633461363765623030
33343566363163623532386463616431313865316563616162336633353162316134363266363263
6331353838343662380a303565643337653164613637323131363037613861306535326538333030
64313165343933343535623731393536396332613336316239363764653565346535666531656433
6131646439656638323561643264613834356662363332323835
dns_cloudflare_email: cloudflare@lino.cooking
cloudflare_ddns_api_key: !vault |
$ANSIBLE_VAULT;1.1;AES256
32353865663337376239333232376630616436643435343862346164353466356563623930386461
3132306361653330356663613534626463373133616132620a313161316137313838666534313737
34336161373334356630326432626139666566316663373630656538333331656461373631613931
6364313538663464350a343061383835663264616238353965656635343564306635303830343266
38396530393133646133643232363061386265373234373832656135393764346462666566656264
3635316261393863393736383132386133313666306234343666
homeassistant_pwd: !vault |
$ANSIBLE_VAULT;1.1;AES256
34623865646265653733666136316164303765633036616464626133306339393032336465613735
3139333561366530383535363834316138303338313030390a306561366265643737623833633837
31353332646635353339373937393134376566643539363563613061393731623931643931336566
3039626631643930650a393163643534353731316261376638643736623232366431396136313666
37613864396630306335626532633832653633346465316332356236393239653063393630323461
3862316639643265373166373330333936303233383333653362
gameyfin_pwd: !vault |
$ANSIBLE_VAULT;1.1;AES256
64653937643761616366313263363039336262313832623035313635353638393633643330303733
3030373063343264633265616638373463383562626132650a643163333961353861626438356339
64326161373332396234656664343736356566356561306334306230343335323733306533343563
3639656666313434350a303432393831323338313331386262373130633930396365653836633965
35623030313533313462666464333339633832643261383839383432366462313262386236346434
39646434653137633062346234373965323036636663326437346238373764363261633736356532
346437633064623331653362303034653463
igdb_client_id: !vault |
$ANSIBLE_VAULT;1.1;AES256
36343238373066633635656365376331626231396666373039636330376132393861373739323061
3662366362633461383730633765323530316437626639630a613337333163393539653830366235
36636139666332393366366166343064623931326634633161666264333038643537386363663962
6430613364653562320a313934393633386262343933363835663639313630653631356563346435
61616130336366613066316134303866323838653938393630623763383762316432
igdb_secret: !vault |
$ANSIBLE_VAULT;1.1;AES256
65383235643965353066343661616633353163393137326661363862353131333362383336613465
3730323833613961326161643730363434643363346138610a313230656534626137373232653633
30303163646261666461366161336131326134633832643834623438363137323531393865613761
3137316331353531350a306636306233326637623030666634353066396663623663386235393238
63303939666561353032396135646666623564616562306637613430663933626530
mastodon_db_user: !vault |
$ANSIBLE_VAULT;1.1;AES256
38613037323362636233336166643239636334333333366137306335643836636338343938303135
3134373363343964613236313562393966363033623231310a613236383134616566646466633334
61323031393663363438336265613062636432343338383936323161313264326662346538366436
3863633263643239390a383664663636343934383333623830333931326330613861353333643663
66303131633433376562643938313333383335323665643030623461623836643362633034613834
61626134386236616538366332313032383732356638356531613534313638316165383665313939
633035373238333032303637663366326431
mastodon_db_name: !vault |
$ANSIBLE_VAULT;1.1;AES256
64376131373562633437313062366334663738336463613938653564323831316531373233396634
3530613830303835666431366438376163383433623561350a653834353761616462316161613037
64353430643062316465363764653830313065363261356231356466613533643565613562613437
3338303632653865330a326337373830396230343764333231356134616365643138663731613264
61323132363839666365326665323236373935666361663063343763363062333130663135366530
30366231633932356662663863343330366266366538326232623136363934643334656366343763
363833363666643162396434636536323166
mastodon_db_pass: !vault |
$ANSIBLE_VAULT;1.1;AES256
66383339653334616233336439376164616532333062393161346238643839393161653932386265
3765376366323334613739316162336433623330373131360a653838663436663166373933353064
30646663316631653236383437616637396331616339323439353238643866633732323438636138
3530306635663631340a306237356664653033663865373964333835613733373565616638363864
36333139633033333538306335336165306537303265396631616530366534643465323232336334
33636635656130633131623437323764326565656635373265653065646135633066383561643033
373333313535343534346331643865616539
mastodon_key_base: !vault |
$ANSIBLE_VAULT;1.1;AES256
33346261623634626666383762613065613865306530363831303032656335636332393564653030
3866306433323432643930326133303831633437393265620a643234376332336262636364363866
33396431653531626538396266626337623735666165636163616262393263373065356330343139
3935356133653332370a313039366431343734363430353966386534363234316666613335353562
36316435363862646437333431303430613138353338663233646130636436316366323831343531
37623063656132336135313964333134323830373761316262386433363337303964366163313265
61376438386466636332383932346431313537656332656362376630646565626130303939313432
36646233633434383565386465376238373065303831326162386331653631633962353035376266
33653332316563333138336439393839336263393438333663383536663834396365666332356334
62316264633161363233346263366164643136656464373963303539623465383734326664386130
633539303831656364653861336263613432
mastodon_otp_secret: !vault |
$ANSIBLE_VAULT;1.1;AES256
65316136326539313931396665656663356536636530613533306531663965303933643939643866
3635646438363739303730343834623035613135623130390a316463366362386465353134663264
64393337663866333333636635656535373064356263666161633033643635366533653530643336
6236396264303463350a306333373231343566653939306564323332633237343463353566343836
31323337633238393761656133613230393235663261383961616266373165376263376666333032
62313033383339643438376662613235333464323566323763623031616531303238386334623133
62653637323034613934313065646565323363313535653931306434393136663961663634313232
33653933373537333834363538343432643037646165386633363334613566653538353464303839
63373632653235376338336332303064356363653537333363326432306139666238393966306535
66633266313465333066613161393734353263366561643865323666633733656439386564326233
666338346237313564313937633466373937
mastodon_vapid_private_key: !vault |
$ANSIBLE_VAULT;1.1;AES256
38396438623163636339353633356339363435616262303865663834633436326331363365326433
6438633038623639346566376233356339333832383939370a353533356630346163633434346533
35386565386438383665623661653533646530623337373334356336396636376630356232656632
6634376435383163300a613635613633383765646363643563393062653465353663353935333262
35313830623635393737316337336436373730303963303962393365643165656164303633656233
3766303666323931623230623533316139666265363231356237
mastodon_vapid_public_key: !vault |
$ANSIBLE_VAULT;1.1;AES256
61653763663734616263633063323466333064636230643263383935313134306163383135353131
6166383263353435306333336131373431313363373334330a383031303163346238343061356537
36653764366265323165336161303965353434366262616464646162353038353665363132616630
6465353939316534340a626533343835303433383531373666643462326162653535313966373963
65636561633532613166356666303833306332656266383237363561663239616139666465383532
65613361663534616533343631386634316661616132383035333734353561643934353339373832
34626531373530306464336437383636633830616336393265373934613030386534323335303436
32373034336162346364643139353961323831636134313538333162373665373330636564306162
3337
gmail_smtp_pass: !vault |
$ANSIBLE_VAULT;1.1;AES256
31396436653866313237616361636439343765323730383231633739643433646365383137343037
3535373866653261303761396163373334383461323661380a376561663864346633646230633531
35326435323434386564363037383961383934363163653635346233306139303664323037383435
3763313639656566620a623639386437353662316631316638363862323334323838643037336464
64373730623035616464303230626462666166636236363033633132363236306132
gitea_db_pwd: !vault |
$ANSIBLE_VAULT;1.1;AES256
36393364326238666261663830353336616336653337666434343261666632346666663339616334
3631386161346362626236616239646430636532663531310a326462636364323664636134343432
31333231383132373131323131643866316331666663333062303865366539613338333662343530
3566396439376366640a643966376630656561643865653535363132343138393132343039346630
30616533336461396330353364656565633933613031643764343562383734373263633333346662
61383736386164366233386235336636613830313231336461636137643361383931363166336238
613733336339326564303964353238386264
paperless_pwd: !vault |
$ANSIBLE_VAULT;1.1;AES256
39623333316332626237313865646462313963303336323537613932626636333636393965646434
3664613735376537306339353537313534376566336433320a383565643833653935373132306461
66366333653839313863653632303531363039363265623365636532383732323837653464666465
3531346366376337630a393664636332343038303530666531663539616632313332626631363831
61356263303563656235623866653065633063313038326432636161316339663030313439646537
63333032353133373633353463613861643933353038323231646461386330623038343262343763
663836323538623836346337303834313139
nextcloud_mysql_root_pwd: !vault |
$ANSIBLE_VAULT;1.1;AES256
31623863613966623834303961333332396238346332646438633665623463353938623336346631
3835636631386263336130373130336662666635353461660a643635346430623438616234333964
35653638313734373134663865653865393536376162356234326565353665613337376562623231
6532333263313362660a306462626330346233393566363632613666616437343361303962353938
64343430316661653532366233396262316236633936333162653263646635643466326265613066
3062633330616537376462346235653433656635366135346265
nextcloud_mysql_pwd: !vault |
$ANSIBLE_VAULT;1.1;AES256
37343730363831393233643034393838323430383339386238626334343462383061656236613530
3430363331343139356538333333326337656163333931660a373964653034323466373038663561
64363239663665623263326435383132393561616436376564353562666637396631316262653361
6134653565623736310a303733396335303139643334363034356138393364373234353537623463
62323938343430313132363037626231633435333330653665613637333734613231326434303532
3461646466366339653532366639393035396638623035396338
nextcloud_admin_pwd: !vault |
$ANSIBLE_VAULT;1.1;AES256
64633233343935636536353533663761353033376331666634633138363233323065323936303934
3762643937346435636635306461663461373138636666380a363761616137373430666236306636
38663933656231386532333032353731643936653534666530333664333835316561663335633238
3531623266386432620a643861666538396437323234623162383437646663653036663836383233
62636461303338313436343934656165363361396332343961396434356161363736
minio_root_user: !vault |
$ANSIBLE_VAULT;1.1;AES256
63336437653937636433646632333231356331616135613363303138303535386662373131643865
6538643332666634356366353439396461356633643561620a376236316162336261633966323934
31666166303862643937306636363436333137626531633361323964393632633638333434366165
6636313930363936330a616566343031343264333965653531363133353766336635626463386461
33326533643032363436663635383631666564623263356663363232336432316433663566343135
63653237343338373332616436636664626663626436653064623037353565393964653738356331
613838353865326664333064653137343730
minio_root_pwd: !vault |
$ANSIBLE_VAULT;1.1;AES256
62386334663539323161393961646133376162306366363430616231376366326339643637613935
3931313637653866623834626161616466303538643936630a363361343533636330363136633231
31386531633264656434363762353766303038346231666433343934323430373264353232333162
6561393463646163380a333333313038316165653939386438396264653738376564613161393264
66323635653065313463623532313832613931393161353466666133663361386261323865353531
39633030333164666361343139663566656534623539353939653932656631376130613436636234
313132666561333238303632643836656361
outline_secret_key: !vault |
$ANSIBLE_VAULT;1.1;AES256
65353235386537316131393230383061663333353461343931323935643338333835353965626436
3335333334343966356664626331353466376435363131340a653261656339336136323866616637
31383238323730353364376666643333616430366134343965313063623166383334643234353763
3639616332366439340a303033626164393765303462616332653239656135633937323636656164
61393534396334633665313061663030613535633031666230643662653231373132323261633937
34353836663436323835633363663761663534656331333931366566656631396462623866366134
37333235633038386165303261623432633637333834383737643361366435623061386539366135
64646231356631383031
outline_utils_secret: !vault |
$ANSIBLE_VAULT;1.1;AES256
63353837326536343330396362343761396236633165353965373138646562346266613138666162
3966343638336539663533646565356138303137663135640a313339663265333862343862333561
31653235303236643364383566653664373533336534353139623030333535646264623562633264
3536643165616462350a373830643963646365303731313636316166623437623066633639616164
34306135386265636563323736616332636331636564643934326663623136326230313365376464
33393633613365366364356239663965353963393337646532616137633830323238326339336431
62636634396263303562393635633161666434346635633138626631313834303633623262643939
34613763643561373038
outline_aws_access_key_id: !vault |
$ANSIBLE_VAULT;1.1;AES256
39373131326262363733303161383261316337663765346635373866393634343763626361633030
6236653436633839333333366562343365643231633232340a636636396265383063363561303135
36366361333664663663303761653037663233373639303034346433393536636363626164613730
6539333366626533390a313437336466323139326637383331633336653861306366646134383338
30666634346639633063383239376434393162353139666464653733346638303632
outline_aws_secret_access_key: !vault |
$ANSIBLE_VAULT;1.1;AES256
33663834363831653062366239336461643939633761313037323333333762343762343331326134
3033646130323533636538363830633132646435366566350a623965626239643036613666386238
38373962656666323034643463653634353031613162623165393333306239633033666663363664
6364306530386631340a343862316332356231653333626464613235323666343765373935393334
31663436303964616336326636633564616235393130306435316131383234643033373634663564
6630613863333062323533666633636263336538353263646332
outline_oidc_client_id: !vault |
$ANSIBLE_VAULT;1.1;AES256
62616137383734393734323631383464643762306266356330396238373364663732653366663736
6165393964666562363365343239323663373063643162360a393337323932373462323032363166
35626138656537343134316231393834356662313336353633373139313932616261326661643530
6262383165336434390a626566303563303536653539303562643530336135633330616630653362
35663135333963656530323032373836663238396434636334653063366237623863663336373033
37626132383266643734653533636261343130656464656536613235373764346536346137383533
303465323266633438633261373665316130
outline_oidc_client_secret: !vault |
$ANSIBLE_VAULT;1.1;AES256
30643230643335323036323239336334386465393732333865303632663461323761323635333631
3037393965303036643661303834323264333334323036330a376538386461326665383435653538
36616239636138633838643830393830316335643263303230356639373833336263633564306163
3139366165363466610a623239613131646466616161633163366336623937343830363361396331
64313137366365356138646465353737393437383666313237633931323363643165653535323632
38363636306436663033353636353966353861333665343739383665373932616464313136363536
626161313635316364666462646563313636
ghostfolio_redis_pass: !vault |
$ANSIBLE_VAULT;1.1;AES256
32396532363432653261333937366434396564643237663432383464653337396439373532346230
3531323930356139646537383765336533363939643836370a613162643862663536333630383530
30313330393439666538363361373962616231353839326237376363313134643933663465613135
3664363834623538330a313334656366653735373263623330333738663264613733353966653664
39326133383663323534643534393664393161376264323439623065633064306566656534353537
66383534353936323630656332323637656539326430626534623762646334323332396462633066
626431336435363264663965636463323832
ghostfolio_postgres_pass: !vault |
$ANSIBLE_VAULT;1.1;AES256
66666338343830336235303530663133623435313933666432303938396333363333366261636238
3664323432653364333833336465393936386239303537660a343332343566373436346639313034
32353439313764376230333138643336663933633139373166323439353365633835323464303832
3135303338356534330a663237303561633263333763633634613933326337646135616630393461
65326139666138663133636634366436333461313430323639313165366432666539373136663366
65323763353639393262643138366565396232623633336539616136656536653963313139386236
626435396261393961303036653435366139
ghostfolio_token_salt: !vault |
$ANSIBLE_VAULT;1.1;AES256
64346334626434336666643263636566393261393732626431346636326663663939366166323231
6661636230616136346363363935666263393964323035320a636337383839383363346431656362
30303739326439663132396164333266323264326633363733653430616133656566386664623162
6662313236376563330a383137643130353335393137633730623030393030303061343139343166
38353363336435353638616330626531333363633632376563316531613939306666656164333066
37373634386266323730316333393262653631383035303337366264353265623630303666366331
646237333736346138666663626164316239
ghostfolio_jwt: !vault |
$ANSIBLE_VAULT;1.1;AES256
33346639313831613566373961356466343336396339366233633333613961353565383661376137
6535336132396366623761373330643935356565386138630a363131633430356239353434386363
61383666313065663365363932616261303063336236326333643364313361623632636364343330
6439373562333535610a363465623465333166336332316134383630646234333766653030346663
39653234323065663539333661383230363339306566363836636239363036656231616130313930
38393132626531386631633536333633653866626364376134613862623338653664336563653031
643433306266643631353535336639343231
heartbeat_user_pwd: !vault |
$ANSIBLE_VAULT;1.1;AES256
36383161343965643131303065346532653336643864633266383164623464326538623466383030
3565366234666263316233313765633236386637313538350a316536363561313633613630383538
64313439323963313231663135353166326666366432393766343266313832373133633836643165
3435656236623236640a313633653662616437626236313865343266656261386265343339653637
33663438636431313163666234323738316131323263643966613136386537303634303537333036
35623363313731343734613036383731306439663661326465363335633433356533333837303038
636262643139396462643966383465376263
graylog_root_password: !vault |
$ANSIBLE_VAULT;1.1;AES256
33626163626133356532353362323261613661636635653631636334633438303935333239346132
6130313764356433383937303862393334376433363538620a623065636637613231343762666435
33323933353630626437393936366664656437306532396562353862373862623165616331643064
3136396465653563640a316137376233363935666134666161613265383131633766343164613834
31393363613538313238326336643331643632363139653339306433373732663030663864613364
34333537313535373637613439653032373836646666646561386365616439633035326133313433
31303536373338656230616265643038623136643461363437386464633738376661613038623666
39376264333362636364
graylog_password_secret: !vault |
$ANSIBLE_VAULT;1.1;AES256
63303066396633316531326435656137313261613835356435373037326239306331343065643964
6132346632363164666363323565386464316263323336610a656366643761316565343935383262
33663561363131323662353364323832616564373264363461616264383563356662366261336138
6565613961666561630a313466613931373366636662373137333061333236616539666333363038
34663031333031396239386361323539613837383230366165653664396135633563633265376333
64346366386136383233613533386437376263653736333437373466353465333339373365376663
336434663137336232636133623132653237
technitium_web_admin: !vault |
$ANSIBLE_VAULT;1.1;AES256
65313430343864303431623031393535376535666130306139626162336439383464333739623463
3839323438323532636631643635653566643037643365610a313237633637613131376338356666
35323230303636663265656664333632306365623733623232336631333032656638346538636431
3931383564353136640a353634363338646437616565623766653330353662663263663138646531
35613361306332616464336232323562643463366139313431336436653536393062663761356337
66306532353138663762653338646339613038363035303064666433336333633531626666393239
653738616662366532653061326632663333
+6
View File
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.25
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 225
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.24
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 615
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.16
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 607
+6
View File
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.43
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 643
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.17
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 608
+6
View File
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.48
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 648
+6
View File
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.46
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 646
@@ -0,0 +1,8 @@
---
ansible_user: root
ansible_host: 10.0.2.13
ansible_ssh_pass: "{{ proxmox_api_password }}"
mac_addr: EA:11:8B:05:5A:88
vmid: 203
node: epona
+6
View File
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.19
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 610
+6
View File
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.14
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 605
+6
View File
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.39
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 639
+6
View File
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.47
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 647
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.40
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 640
+6
View File
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.28
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 619
+6
View File
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.41
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 641
@@ -0,0 +1,5 @@
---
ansible_user: Prenatal4216
ansible_host: 10.0.0.203
ansible_ssh_pass: "{{ heartbeat_user_pwd }}"
+6
View File
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.52
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 652
+6
View File
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.18
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 609
+10
View File
@@ -0,0 +1,10 @@
---
ansible_user: root
ansible_host: 10.0.2.1
ansible_ssh_pass: "{{ proxmox_api_password }}"
ip_addr: 10.0.2.2
# interface which will be used for flannel
flannel_iface: "vmbr0"
+6
View File
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.42
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 642
+6
View File
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.20
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 611
+6
View File
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.26
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 617
+6
View File
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.35
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 635
+7
View File
@@ -0,0 +1,7 @@
---
ansible_user: root
ansible_host: 10.0.2.3
ansible_ssh_pass: "{{ proxmox_api_password }}"
ip_addr: 10.0.2.3
# interface which will be used for flannel
flannel_iface: "vmbr0"
+6
View File
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.30
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 621
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.37
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 637
+6
View File
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.44
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 644
+6
View File
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.22
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 613
+6
View File
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.36
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 636
+6
View File
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.29
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 620
+10
View File
@@ -0,0 +1,10 @@
---
ansible_user: root
ansible_host: 10.0.2.8
ansible_ssh_pass: "{{ proxmox_api_password }}"
ip_addr: 10.0.2.2
# interface which will be used for flannel
flannel_iface: "vmbr0"
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.53
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 653
+7
View File
@@ -0,0 +1,7 @@
---
ansible_user: root
ansible_host: 10.0.2.4
ansible_ssh_pass: "{{ proxmox_api_password }}"
ip_addr: 10.0.2.4
# interface which will be used for flannel
flannel_iface: "vmbr0"
@@ -0,0 +1,8 @@
---
ansible_user: root
ansible_host: 10.0.2.12
ansible_ssh_pass: "{{ proxmox_api_password }}"
mac_addr: C2:F5:B2:99:92:51
vmid: 202
node: revali
+7
View File
@@ -0,0 +1,7 @@
---
ansible_user: root
ansible_host: 10.0.2.2
ansible_ssh_pass: "{{ proxmox_api_password }}"
ip_addr: 10.0.2.2
# interface which will be used for flannel
flannel_iface: "vmbr0"
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.45
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 645
+6
View File
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.15
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 606
+6
View File
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.21
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 612
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.49
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 649
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.50
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 650
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.51
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 651
+9
View File
@@ -0,0 +1,9 @@
---
ansible_user: root
ansible_host: 10.0.3.110
ansible_ssh_pass: "{{ proxmox_api_password }}"
# interface which will be used for flannel
flannel_iface: "eth0"
+6
View File
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.38
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 638
@@ -0,0 +1,7 @@
---
ansible_user: root
ansible_host: 10.0.2.11
ansible_ssh_pass: "{{ proxmox_api_password }}"
mac_addr: 72:2E:3C:F0:2A:B3
vmid: 201
node: mipha
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.27
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 618
@@ -0,0 +1,6 @@
---
ansible_user: root
ansible_host: 10.0.2.23
ansible_ssh_pass: "{{ proxmox_api_password }}"
vmid: 614
+7
View File
@@ -0,0 +1,7 @@
---
ansible_user: root
ansible_host: 10.0.2.7
ansible_ssh_pass: "{{ proxmox_api_password }}"
ip_addr: 10.0.2.7
# interface which will be used for flannel
flannel_iface: "vmbr0"
+10
View File
@@ -0,0 +1,10 @@
---
ansible_user: root
ansible_host: 10.0.3.3
ansible_ssh_pass: "{{ proxmox_api_password }}"
ip_addr: 10.0.3.3
# interface which will be used for flannel
flannel_iface: "vmbr0"
+54
View File
@@ -0,0 +1,54 @@
[lxc]
frigate
swag
cloudflare-ddns
#dahua-to-mqtt
#immich
mastodon
tautulli
openvpn
#youtube-downloader
changedetection
arr
mealie
vaultwarden
gitea
paperless
#nextcloud
minio
outline
#nginx-proxy-manager
#upsnap
#geoguessr
ghostfolio
#graylog
#jellyfin
convertx
#nocodb
super-productivity
droposs
ghost
dawarich
technitium-dns
technitium-dns-2
technitium-dns-3
hortusfox
reactive-resume
[baremetal]
mipha
purah
; revali
yuga
; impa
sidon
yunobo
[pihole]
epona-pihole
revali-pihole
urbosa-pihole
[heartbeat_hosts]
heartbeat-1
-32
View File
@@ -1,32 +0,0 @@
---
k3s_version: v1.24.4+k3s1
# this is the user that has ssh access to these machines
ansible_user: ansibleuser
systemd_dir: /etc/systemd/system
# Set your timezone
system_timezone: "Your/Timezone"
# interface which will be used for flannel
flannel_iface: "eth0"
# apiserver_endpoint is virtual ip-address which will be configured on each master
apiserver_endpoint: "192.168.30.222"
# k3s_token is required masters can talk together securely
# this token should be alpha numeric only
k3s_token: "some-SUPER-DEDEUPER-secret-password"
# change these to your liking, the only required one is--disable servicelb
extra_server_args: "--disable servicelb --disable traefik"
extra_agent_args: ""
# image tag for kube-vip
kube_vip_tag_version: "v0.5.0"
# image tag for metal lb
metal_lb_speaker_tag_version: "v0.13.5"
metal_lb_controller_tag_version: "v0.13.5"
# metallb ip range for load balancer
metal_lb_ip_range: "192.168.30.80-192.168.30.90"
-12
View File
@@ -1,12 +0,0 @@
[master]
192.168.30.38
192.168.30.39
192.168.30.40
[node]
192.168.30.41
192.168.30.42
[k3s_cluster:children]
master
node
+27
View File
@@ -0,0 +1,27 @@
---
# - hosts: localhost
# become: yes
# roles:
# - role: 41-graylog/provision/delete
# vars:
# vmid: 641
# - role: 41-graylog/provision/create
# vars:
# vmid: 641
# - role: 41-graylog/provision/start
# vars:
# vmid: 641
- hosts: sidon
become: yes
roles:
- role: 41-graylog/enable-ssh
vars:
vmid: 641
- hosts: graylog
become: yes
roles:
- role: 41-graylog/update
- role: 41-graylog/install-docker
- role: 41-graylog/install-app
+27
View File
@@ -0,0 +1,27 @@
---
- hosts: localhost
become: yes
roles:
- role: 42-jellyfin/provision/delete
vars:
vmid: 642
- role: 42-jellyfin/provision/create
vars:
vmid: 642
- role: 42-jellyfin/provision/start
vars:
vmid: 642
- hosts: purah
become: yes
roles:
- role: 42-jellyfin/enable-ssh
vars:
vmid: 642
- hosts: jellyfin
become: yes
roles:
- role: 42-jellyfin/update
- role: 42-jellyfin/install-docker
- role: 42-jellyfin/install-app
+27
View File
@@ -0,0 +1,27 @@
---
- hosts: localhost
become: yes
roles:
- role: 43-convertx/provision/delete
vars:
vmid: 643
- role: 43-convertx/provision/create
vars:
vmid: 643
- role: 43-convertx/provision/start
vars:
vmid: 643
- hosts: purah
become: yes
roles:
- role: 43-convertx/enable-ssh
vars:
vmid: 643
- hosts: convertx
become: yes
roles:
- role: 43-convertx/update
- role: 43-convertx/install-docker
- role: 43-convertx/install-app
+27
View File
@@ -0,0 +1,27 @@
---
- hosts: localhost
become: yes
roles:
- role: 44-nocodb/provision/delete
vars:
vmid: 644
- role: 44-nocodb/provision/create
vars:
vmid: 644
- role: 44-nocodb/provision/start
vars:
vmid: 644
- hosts: purah
become: yes
roles:
- role: 44-nocodb/enable-ssh
vars:
vmid: 644
- hosts: nocodb
become: yes
roles:
- role: 44-nocodb/update
- role: 44-nocodb/install-docker
- role: 44-nocodb/install-app
+27
View File
@@ -0,0 +1,27 @@
---
- hosts: localhost
become: yes
roles:
- role: 45-super-productivity/provision/delete
vars:
vmid: 645
- role: 45-super-productivity/provision/create
vars:
vmid: 645
- role: 45-super-productivity/provision/start
vars:
vmid: 645
- hosts: purah
become: yes
roles:
- role: 45-super-productivity/enable-ssh
vars:
vmid: 645
- hosts: super-productivity
become: yes
roles:
- role: 45-super-productivity/update
- role: 45-super-productivity/install-docker
- role: 45-super-productivity/install-app
+27
View File
@@ -0,0 +1,27 @@
---
- hosts: localhost
become: yes
roles:
- role: 46-droposs/provision/delete
vars:
vmid: 646
- role: 46-droposs/provision/create
vars:
vmid: 646
- role: 46-droposs/provision/start
vars:
vmid: 646
- hosts: purah
become: yes
roles:
- role: 46-droposs/enable-ssh
vars:
vmid: 646
- hosts: droposs
become: yes
roles:
- role: 46-droposs/update
- role: 46-droposs/install-docker
- role: 46-droposs/install-app
+27
View File
@@ -0,0 +1,27 @@
---
- hosts: localhost
become: yes
roles:
- role: 47-ghost/provision/delete
vars:
vmid: 647
- role: 47-ghost/provision/create
vars:
vmid: 647
- role: 47-ghost/provision/start
vars:
vmid: 647
- hosts: purah
become: yes
roles:
- role: 47-ghost/enable-ssh
vars:
vmid: 647
- hosts: ghost
become: yes
roles:
- role: 47-ghost/update
- role: 47-ghost/install-docker
- role: 47-ghost/install-app
+27
View File
@@ -0,0 +1,27 @@
---
# - hosts: localhost
# become: yes
# roles:
# - role: 48-dawarich/provision/delete
# vars:
# vmid: 648
# - role: 48-dawarich/provision/create
# vars:
# vmid: 648
# - role: 48-dawarich/provision/start
# vars:
# vmid: 648
# - hosts: yunobo
# become: yes
# roles:
# - role: 48-dawarich/enable-ssh
# vars:
# vmid: 648
- hosts: dawarich
become: yes
roles:
- role: 48-dawarich/update
- role: 48-dawarich/install-docker
- role: 48-dawarich/install-app
+27
View File
@@ -0,0 +1,27 @@
---
- hosts: localhost
become: yes
roles:
- role: 49-technitium-dns/provision/delete
vars:
vmid: 649
- role: 49-technitium-dns/provision/create
vars:
vmid: 649
- role: 49-technitium-dns/provision/start
vars:
vmid: 649
- hosts: mipha
become: yes
roles:
- role: 49-technitium-dns/enable-ssh
vars:
vmid: 649
- hosts: technitium-dns
become: yes
roles:
- role: 49-technitium-dns/update
- role: 49-technitium-dns/install-docker
- role: 49-technitium-dns/install-app
+27
View File
@@ -0,0 +1,27 @@
---
- hosts: localhost
become: yes
roles:
- role: 50-technitium-dns-2/provision/delete
vars:
vmid: 650
- role: 50-technitium-dns-2/provision/create
vars:
vmid: 650
- role: 50-technitium-dns-2/provision/start
vars:
vmid: 650
- hosts: purah
become: yes
roles:
- role: 50-technitium-dns-2/enable-ssh
vars:
vmid: 650
- hosts: technitium-dns-2
become: yes
roles:
- role: 50-technitium-dns-2/update
- role: 50-technitium-dns-2/install-docker
- role: 50-technitium-dns-2/install-app
+27
View File
@@ -0,0 +1,27 @@
---
- hosts: localhost
become: yes
roles:
- role: 51-technitium-dns-3/provision/delete
vars:
vmid: 651
- role: 51-technitium-dns-3/provision/create
vars:
vmid: 651
- role: 51-technitium-dns-3/provision/start
vars:
vmid: 651
- hosts: sidon
become: yes
roles:
- role: 51-technitium-dns-3/enable-ssh
vars:
vmid: 651
- hosts: technitium-dns-3
become: yes
roles:
- role: 51-technitium-dns-3/update
- role: 51-technitium-dns-3/install-docker
- role: 51-technitium-dns-3/install-app
+27
View File
@@ -0,0 +1,27 @@
---
- hosts: localhost
become: yes
roles:
- role: 52-hortusfox/provision/delete
vars:
vmid: 652
- role: 52-hortusfox/provision/create
vars:
vmid: 652
- role: 52-hortusfox/provision/start
vars:
vmid: 652
- hosts: purah
become: yes
roles:
- role: 52-hortusfox/enable-ssh
vars:
vmid: 652
- hosts: hortusfox
become: yes
roles:
- role: 52-hortusfox/update
- role: 52-hortusfox/install-docker
- role: 52-hortusfox/install-app
+27
View File
@@ -0,0 +1,27 @@
---
- hosts: localhost
become: yes
roles:
- role: 53-reactive-resume/provision/delete
vars:
vmid: 653
- role: 53-reactive-resume/provision/create
vars:
vmid: 653
- role: 53-reactive-resume/provision/start
vars:
vmid: 653
- hosts: purah
become: yes
roles:
- role: 53-reactive-resume/enable-ssh
vars:
vmid: 653
- hosts: reactive-resume
become: yes
roles:
- role: 53-reactive-resume/update
- role: 53-reactive-resume/install-docker
- role: 53-reactive-resume/install-app
+23
View File
@@ -0,0 +1,23 @@
---
- hosts: localhost
become: yes
roles:
- role: arr/provision/delete
- role: arr/provision/create
- role: arr/provision/start
vars:
vmid: 616
- hosts: impa
become: yes
roles:
- role: arr/enable-ssh
vars:
vmid: 616
- hosts: arr
become: yes
roles:
- role: arr/update
- role: arr/install-docker
- role: arr/install-app
+23
View File
@@ -0,0 +1,23 @@
---
- hosts: localhost
become: yes
roles:
- role: changedetection/provision/delete
- role: changedetection/provision/create
- role: changedetection/provision/start
vars:
vmid: 615
- hosts: impa
become: yes
roles:
- role: changedetection/enable-ssh
vars:
vmid: 615
- hosts: changedetection
become: yes
roles:
- role: changedetection/update
- role: changedetection/install-docker
- role: changedetection/install-app
+19
View File
@@ -0,0 +1,19 @@
---
- hosts: localhost
become: yes
roles:
- role: cloudflare-ddns/provision/delete
- role: cloudflare-ddns/provision/create
- role: cloudflare-ddns/provision/start
- hosts: revali
become: yes
roles:
- role: lxc/enable-ssh
- hosts: cloudflare-ddns
become: yes
roles:
- role: cloudflare-ddns/update
- role: cloudflare-ddns/install-docker
- role: cloudflare-ddns/install-app
+23
View File
@@ -0,0 +1,23 @@
---
- hosts: localhost
become: yes
roles:
- role: dahua-to-mqtt/provision/delete
- role: dahua-to-mqtt/provision/create
- role: dahua-to-mqtt/provision/start
vars:
vmid: 608
- hosts: revali
become: yes
roles:
- role: dahua-to-mqtt/enable-ssh
vars:
vmid: 608
- hosts: dahua-to-mqtt
become: yes
roles:
- role: dahua-to-mqtt/update
- role: dahua-to-mqtt/install-docker
- role: dahua-to-mqtt/install-app
+28
View File
@@ -0,0 +1,28 @@
---
- hosts: localhost
become: yes
roles:
- role: frigate/provision/delete
- role: frigate/provision/create
- hosts: epona
become: yes
roles:
- role: frigate/provision/cgroup
- hosts: localhost
become: yes
roles:
- role: frigate/provision/start
- hosts: epona
become: yes
roles:
- role: lxc/enable-ssh
- hosts: frigate
become: yes
roles:
- role: frigate/update
- role: frigate/install-docker
- role: frigate/install-app
+23
View File
@@ -0,0 +1,23 @@
---
- hosts: localhost
become: yes
roles:
- role: geoguessr/provision/delete
- role: geoguessr/provision/create
- role: geoguessr/provision/start
vars:
vmid: 639
- hosts: mipha
become: yes
roles:
- role: geoguessr/enable-ssh
vars:
vmid: 639
- hosts: geoguessr
become: yes
roles:
- role: geoguessr/update
- role: geoguessr/install-docker
- role: geoguessr/install-app
+27
View File
@@ -0,0 +1,27 @@
---
- hosts: localhost
become: yes
roles:
- role: ghostfolio/provision/delete
vars:
vmid: 640
- role: ghostfolio/provision/create
vars:
vmid: 640
- role: ghostfolio/provision/start
vars:
vmid: 640
- hosts: purah
become: yes
roles:
- role: ghostfolio/enable-ssh
vars:
vmid: 640
- hosts: ghostfolio
become: yes
roles:
- role: ghostfolio/update
- role: ghostfolio/install-docker
- role: ghostfolio/install-app
+23
View File
@@ -0,0 +1,23 @@
---
# - hosts: localhost
# become: yes
# roles:
# - role: gitea/provision/delete
# - role: gitea/provision/create
# - role: gitea/provision/start
# vars:
# vmid: 619
# - hosts: impa
# become: yes
# roles:
# - role: gitea/enable-ssh
# vars:
# vmid: 619
- hosts: gitea
become: yes
roles:
# - role: gitea/update
# - role: gitea/install-docker
- role: gitea/install-app
+9
View File
@@ -0,0 +1,9 @@
---
- hosts: heartbeat_hosts
become: yes
roles:
# - role: heartbeat/provision/00-update-os
# - role: heartbeat/provision/01-install-dependencies
# - role: heartbeat/setup/node
#- role: heartbeat/setup/openvpn-client
- role: heartbeat/setup/uptime-kuma
+23
View File
@@ -0,0 +1,23 @@
---
- hosts: localhost
become: yes
roles:
- role: immich/provision/delete
- role: immich/provision/create
- role: immich/provision/start
vars:
vmid: 609
- hosts: hyrule
become: yes
roles:
- role: immich/enable-ssh
vars:
vmid: 609
- hosts: immich
become: yes
roles:
- role: immich/update
- role: immich/install-docker
- role: immich/install-app
+16 -2
View File
@@ -1,12 +1,10 @@
--- ---
- hosts: k3s_cluster - hosts: k3s_cluster
gather_facts: yes gather_facts: yes
become: yes become: yes
roles: roles:
- role: prereq - role: prereq
- role: download - role: download
- role: raspberrypi
- hosts: master - hosts: master
become: yes become: yes
@@ -22,3 +20,19 @@
become: yes become: yes
roles: roles:
- role: k3s/post - role: k3s/post
- hosts: master
become: yes
roles:
- role: k3s/copy-config
- hosts: localhost
become: yes
roles:
- role: traefik
- role: cert-manager
- role: authentik
- role: argocd
- role: nginx
- role: arr
- role: redis
+5
View File
@@ -0,0 +1,5 @@
---
- hosts: lxc
become: yes
roles:
- role: common/lxc/docker-prune
+6
View File
@@ -0,0 +1,6 @@
---
- hosts: lxc
become: yes
roles:
- role: common/lxc/install-rsyslog
+5
View File
@@ -0,0 +1,5 @@
---
- hosts: lxc
become: yes
roles:
- role: common/lxc/update-os
+23
View File
@@ -0,0 +1,23 @@
---
- hosts: localhost
become: yes
roles:
- role: mastodon/provision/delete
- role: mastodon/provision/create
- role: mastodon/provision/start
vars:
vmid: 611
- hosts: epona
become: yes
roles:
- role: mastodon/enable-ssh
vars:
vmid: 611
- hosts: mastodon
become: yes
roles:
- role: mastodon/update
- role: mastodon/install-docker
- role: mastodon/install-app
+23
View File
@@ -0,0 +1,23 @@
---
- hosts: localhost
become: yes
roles:
- role: mealie/provision/delete
- role: mealie/provision/create
- role: mealie/provision/start
vars:
vmid: 617
- hosts: impa
become: yes
roles:
- role: mealie/enable-ssh
vars:
vmid: 617
- hosts: mealie
become: yes
roles:
- role: mealie/update
- role: mealie/install-docker
- role: mealie/install-app
+23
View File
@@ -0,0 +1,23 @@
---
- hosts: localhost
become: yes
roles:
- role: minio/provision/delete
- role: minio/provision/create
- role: minio/provision/start
vars:
vmid: 635
- hosts: impa
become: yes
roles:
- role: minio/enable-ssh
vars:
vmid: 635
- hosts: minio
become: yes
roles:
- role: minio/update
- role: minio/install-docker
- role: minio/install-app
+23
View File
@@ -0,0 +1,23 @@
---
- hosts: localhost
become: yes
roles:
- role: nextcloud/provision/delete
- role: nextcloud/provision/create
- role: nextcloud/provision/start
vars:
vmid: 621
- hosts: impa
become: yes
roles:
- role: nextcloud/enable-ssh
vars:
vmid: 621
- hosts: nextcloud
become: yes
roles:
- role: nextcloud/update
- role: nextcloud/install-docker
- role: nextcloud/install-app

Some files were not shown because too many files have changed in this diff Show More