forked from Netz39_Admin/netz39-infra-ansible
57 lines
1.5 KiB
YAML
57 lines
1.5 KiB
YAML
---
|
|
- hosts: tau
|
|
become: true
|
|
|
|
vars:
|
|
server_admin: "admin@netz39.de"
|
|
admin_users: [tux, alex]
|
|
|
|
ag_timezone: Europe/Berlin
|
|
|
|
docker_compose_version: "1.25.4"
|
|
docker_compose_path: /usr/local/bin/docker-compose
|
|
|
|
mysql_root_pw: !vault |
|
|
$ANSIBLE_VAULT;1.1;AES256
|
|
64313138383833643866383332623265383863623332343864306537633931326139303638303761
|
|
6464653933613663643632383935376164393033363233330a313063613832396166666464666136
|
|
36633532393231663634663034666666356332373438646130643161383134653739663066626538
|
|
3661663132343639310a613431653031626434323064313465373866666332353931313836623465
|
|
3461
|
|
|
|
roles:
|
|
- role: ansible.timezone
|
|
|
|
tasks:
|
|
- name: Update and clean package cache
|
|
apt:
|
|
update_cache: true
|
|
cache_valid_time: 3600
|
|
autoclean: true
|
|
|
|
- name: Ensure unattended-upgrades is installed and up to date
|
|
apt:
|
|
name: unattended-upgrades
|
|
state: latest
|
|
|
|
- name: Setup unattended-upgrades
|
|
include_role:
|
|
name: ansible-role-unattended-upgrades
|
|
vars:
|
|
unattended_origins_patterns:
|
|
- 'origin=Debian,archive=buster-security'
|
|
- 'o=Debian,a=buster-updates'
|
|
unattended_package_blacklist: [cowsay]
|
|
unattended_mail: 'root'
|
|
|
|
- name: Setup users
|
|
include_tasks: tasks/users.yml
|
|
|
|
- name: Install Docker
|
|
include_tasks: tasks/docker_install.yml
|
|
|
|
- name: Setup Docker Containers
|
|
include_tasks: tasks/docker_setup.yml
|
|
|
|
- name: Setup httpd
|
|
include_tasks: tasks/httpd.yml
|