bgw / ansible-playbooks

Custom Ansible playbooks for personal use

Ansible Playbooks

Goals and Priorities

• I want to be able to run all the basic "cloud" services I need myself (instant freedom box).
• For simplicity, most configuration is based on a single-user model. Multiple users may come later.
• Low memory consumption. When we pick between alternatives, we'll usually go with whatever needs the least CPU, RAM, and disk.
• Everything should be secured as much as is reasonably possible. All daemons should run as their own user, not root. All files with "secrets" should have no more read permissions than necessary.
• I'm only targeting Debian Stable for servers, and Sid for workstations (as that's what I use).

The project is similar to Sovereign. Sovereign is designed for a single server in the cloud. I want this to automate (at least part of) all my hardware.

Provided Roles

• ddclient: A dynamic DNS client, using <freedns.afraid.org>
• Email: A single-user mailserver using postfix and dovecot
• Mutt: (in develoment) Command-line email access
• IRC Bouncer: A simple IRC bouncer using ZNC, making IRC across multiple machines easy
• XChat: A configuration for XChat that connects through ZNC
• Tinc: A mesh-routing VPN
• OpenTTD: Dedicated server for the game, set up with init.d and stuff

Installation

Installing isn't... too... bad?

sudo aptitude install python-pip python-dev
sudo pip install virtualenv
virtualenv .env
.env/bin/pip install -e .
cp -r config.example config   # Modify as appropriate
cp -r secrets.example secrets # Modify as appropriate
.env/bin/ansible-playbook site.yml

If you only want to install specific roles, pass the desired tags, such as -t ddclient. If you only want to configure a specific machine or group of machines, you can pass something like -l workstations depending on the hosts file.

ansible-playbooks's Issues

gpg2 hangs on password prompt

This is mostly for the next person who finds this module via Google. :-)

Some machiens have gpg, and some have gpg2 in my case. The machines with gpg2 hang in import as it's asking for a passphrase. In that case, one could add --batch to the discovered gpg2 command in this module.

Submit gpg module to ansible?

I was looking for a gpg module (rather than just apt_gpg, which is all I believe Ansible ships with at the moment) to install the gpg key for rvm. I came across your repo, and was curious if you've considered submitting the gpg key to the ansible_extras project for consideration as an official module?