a few setups cleanly initialized

This commit is contained in:
2023-06-26 11:02:01 +02:00
parent 11bda1cc7b
commit d9f97dd63a
21 changed files with 729 additions and 63 deletions

View File

@@ -1,15 +0,0 @@
- name: Customization and hardening of fresh fedora install running on a VM
hosts: fedora-server
become: yes
user: pi
vars_prompt:
- name: "k3s_token"
prompt: "Enter k3s token"
private: yes
roles:
# - role: ssh-key-copy
# - role: fail2ban
- role: k3s-ha
# k3s_token: "{{ k3s_token }}"

View File

@@ -0,0 +1,19 @@
- name: Customization and hardening of fresh fedora install running on a VM
hosts: fedora_server
become: yes
# reuse password for sudo
become_method: sudo
user: ansible
vars_prompt:
- name: k3s_token
prompt: "Enter a (single use) k3s token"
private: yes
vars:
- master_ip: "{{ hostvars['fedora-node-1']['ansible_default_ipv4']['address'] }}"
roles:
- role: ssh-key-copy
- role: fail2ban
- role: k3s-ha

View File

@@ -0,0 +1,23 @@
- name: Setup of VMs
hosts: proxmox
become: yes
user: root
vars:
- proxmox_user: root@pam
proxmox_token: !vault |
$ANSIBLE_VAULT;1.1;AES256
31376165343635623536393936353032333638636564646665646464386635383761623632373036
3433306233633465313737303039346635353363326562320a336532666632613663303730643136
36353430353638616239313766666233396339643431636161373965383664663230616664336162
3730353264643434390a386132383238613165653037623466383732323835356365326439656565
38666466343932356137393333623964333463303564623666656533626331646535306531343836
3136313232333265303336613235336334323963316439383230
proxmox_node: proxmox
proxmox_token_id: ansible
roles:
- role: proxmox-fedora-vm
vms:
- name: fedora-node-1
- name: fedora-node-2

8
plays/proxmox-setup.yml Normal file
View File

@@ -0,0 +1,8 @@
- name: Proxmox configuration
hosts: proxmox
user: root
roles:
- role: proxmox-basic-setup

View File

@@ -0,0 +1,18 @@
- name: Add a remote ubuntu node to the local network and to the cluster
hosts: remote_node
become: yes
# reuse password for sudo
become_method: sudo
user: ubuntu
vars_prompt:
- name: k3s_token
prompt: "Enter the (single use) k3s token"
private: yes
roles:
# - role: ssh-key-copy
- role: fail2ban
- role: remote-worker-node-k3s