zcdziura/debt-pirate
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix the base system setup playbook

Browse source
This commit is contained in:
Z. Charles Dziura 2025-03-26 20:58:49 -04:00
parent 582e7015a9
commit f9c257d49d
1 changed files with 176 additions and 166 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

46
admin/playbooks/00-make-base-system.yml
View file

@ -2,12 +2,13 @@
- hosts: alpha
become: true
vars_files:
- '{{ inventory_dir }}/vars.yml'
- "{{ inventory_dir }}/vars.yml"
tags:
- base
tasks:
- name: Upgrade base system to Trixie
tags:
- host
- requires_reboot
block:
- name: Update base system packages
@ -21,8 +22,8 @@
- name: Change package sources file to pull from Trixie
ansible.builtin.copy:
src: '{{ inventory_dir }}/includes/00-make-base-system/sources.list'
dest: '{{ etc_apt }}/sources.list'
src: "{{ inventory_dir }}/includes/00-make-base-system/sources.list"
dest: "{{ etc_apt }}/sources.list"
backup: true
- name: Clear and fill local apt cache with Trixie packages
@ -47,13 +48,22 @@
- name: Install necessary software packages
tags:
- host
- base
ansible.builtin.package:
name: neovim,python3-pip,python3-pexpect,python3-psycopg2
state: present
- name: Generate UTF-8 locales
tags:
- host
- base
ansible.builtin.command:
cmd: "locale-gen en_US.utf8"
- name: Enable and configure the firewall
tags:
- host
- firewall
block:
- name: Install firewalld
@ -63,20 +73,20 @@
- name: Define a firewalld service for CouchDB
ansible.builtin.copy:
src: '{{ inventory_dir }}/includes/00-make-base-system/couchdb.xml'
dest: '{{ etc_firewalld_services }}/couchdb.xml'
src: "{{ inventory_dir }}/includes/00-make-base-system/couchdb.xml"
dest: "{{ etc_firewalld_services }}/couchdb.xml"
- name: Reload firewalld
ansible.builtin.command:
cmd: 'firewall-cmd --reload'
cmd: "firewall-cmd --reload"
- name: Add all of the necessary services to firewalld
ansible.builtin.command:
cmd: 'firewall-cmd --permanent --add-service=http --add-service=https --add-service=redis --add-service=ssh --add-service=postgresql --add-service=couchdb'
cmd: "firewall-cmd --permanent --add-service=http --add-service=https --add-service=redis --add-service=ssh --add-service=postgresql --add-service=couchdb"
- name: Reload firewalld to apply service changes
ansible.builtin.command:
cmd: 'firewall-cmd --reload'
cmd: "firewall-cmd --reload"
- name: Install and set up databases
tags:
@ -94,15 +104,15 @@
tags:
- postgres
ansible.builtin.copy:
src: '{{ inventory_dir }}/includes/00-make-base-system/postgresql.conf'
dest: '{{ etc_postgres }}/postgresql.conf'
src: "{{ inventory_dir }}/includes/00-make-base-system/postgresql.conf"
dest: "{{ etc_postgres }}/postgresql.conf"
- name: Copy Postgres pg_hba file
tags:
- postgres
ansible.builtin.copy:
src: '{{ inventory_dir }}/includes/00-make-base-system/pg_hba.conf'
dest: '{{ etc_postgres }}/pg_hba.conf'
src: "{{ inventory_dir }}/includes/00-make-base-system/pg_hba.conf"
dest: "{{ etc_postgres }}/pg_hba.conf"
- name: Restart Postgres
tags:
@ -119,7 +129,7 @@
command: 'su -c "createuser -d -P debt_pirate" - postgres'
creates: /root/.dp-user-created
responses:
'Enter': HRURqlUmtjIy
"Enter": HRURqlUmtjIy
- name: Create 'db user created' file
tags:
@ -132,7 +142,7 @@
tags:
- postgres
ansible.builtin.command:
cmd: 'su -c "createdb -E UTF8 -l en_US.UTF-8 -O debt_pirate debt_pirate" - postgres'
cmd: 'su -c "createdb -T template0 -E UTF8 -l en_US.UTF-8 -O debt_pirate debt_pirate" - postgres'
creates: /root/.dp-db-created
- name: Create 'db created' file
@ -146,16 +156,16 @@
tags:
- valkey
ansible.builtin.copy:
src: '{{ inventory_dir }}/includes/00-make-base-system/valkey.conf'
dest: '{{ etc_valkey }}/valkey.conf'
src: "{{ inventory_dir }}/includes/00-make-base-system/valkey.conf"
dest: "{{ etc_valkey }}/valkey.conf"
backup: true
- name: Copy Valkey acl file to destination
tags:
- valkey
ansible.builtin.copy:
src: '{{ inventory_dir }}/includes/00-make-base-system/users.acl'
dest: '{{ etc_valkey }}/users.acl'
src: "{{ inventory_dir }}/includes/00-make-base-system/users.acl"
dest: "{{ etc_valkey }}/users.acl"
- name: Restart Valkey
tags: