This contains all Ansible playbooks/roles used to deploy saibotk.de services.
Find a file
saibotk c2842b0f5b
Ansible: Set transfer method to scp explicitly
This fixes the warnings for the sftp transfer mechanism failing, when sftp is disabled on all hosts using the ssh hardening role.

This should usually be covered with the scp_if_ssh option but it seems like this option is ignored on newer Ansible versions. Which sadly was not mentioned in any changelog :(
2021-05-30 17:02:29 +02:00
.ansible/skeleton/default Add default role skeleton 2021-02-28 19:39:59 +01:00
guides Initial commit 2020-08-10 01:37:13 +02:00
playbooks Remove unicorns_website role 2021-04-01 23:43:20 +02:00
roles Merge branch 'renovate/penpot-1.x' into 'master' 2021-05-26 12:18:19 +00:00
.editorconfig Add .editorconfig & .vault_pass 2020-08-10 02:06:18 +02:00
.gitlab-ci.yml CI: Fix listing saibotk as external contributor 2021-04-01 23:26:02 +02:00
.renovaterc.json renovatebot: Raise pr limit & fix invalid value 2021-03-28 02:56:03 +01:00
.vault_pass Add .editorconfig & .vault_pass 2020-08-10 02:06:18 +02:00
ansible.cfg Ansible: Set transfer method to scp explicitly 2021-05-30 17:02:29 +02:00
LICENSE Initial commit 2020-08-10 01:37:13 +02:00
README.md Move playbooks into their own folder 2021-03-05 14:06:48 +01:00
requirements.yml automation: Update devsec.hardening to version 7.7.0 2021-05-24 21:04:12 +00:00

Infrastructure

Ansible infrastructure playbooks/roles for the saibotk.de services.

Requirements

Some roles may need specific python libraries etc. installed on the Ansible client (for example python-influxdb for the roles/monitoring role).

Setup

Install all required roles from ansible galaxy using:

ansible-galaxy install -f -r requirements.yml

Run with your local (test) inventory:

ansible-playbook -i test.inventory playbooks/PLAYBOOK.yml

Create new roles

When creating new roles, you can set up an initial folder structure with Ansible-Galaxy and the default skeleton folder structures defined in .ansible/skeleton. For more information check out the Ansible documentation here

cd roles
ansible-galaxy init ROLE_NAME

License

This repository is licensed under GPL-3 and many roles are derived from the awesome infrastructure repository published by Sheogorath.

Thank you, and so I hope this can be as useful to someone else as Sheogorath's repository was to me.