Ansible configuration policy for the private network/home lab of Dustin C. Hatch http://dustin.hatch.name/
 
 
 
 
Go to file
Dustin 907cb2bdb0 r/lego-nginx: Configure LEGO for nginx
The *lego-nginx* role automates obtaining certificates for *nginx* via
ACME using `lego`.  It generates a shell script with the appropriate
arguments for `lego run`, runs it once to obtain a certificate
initially, then schedules it to run periodically via a systemd timer
unit. Using `lego`'s "hook" capability, the script signals the `nginx`
server process to reload.  This uses `doas` for now, but could be
adapted easily to use `sudo`, if the need ever arises.
2025-07-08 19:49:51 -05:00
.certs@0322911067 public-web: Add Tabitha's new SSH key 2024-03-15 10:29:03 -05:00
certs r/webites: Add apps.du5t1n.xyz F-Droid repo 2024-11-05 06:47:02 -06:00
ci pyrocufflink-dns: Drop group 2024-02-22 10:23:19 -06:00
deploy kubernetes: Manage worker nodes 2024-11-24 10:33:21 -06:00
group_vars v-l: Add data volume for logs storage 2025-07-04 10:31:46 -05:00
host_vars gw1: squid: Allow access to PXE/kickstarts 2025-07-03 17:38:06 -05:00
migration hosts: Add loki1.p.b 2024-11-05 06:54:27 -06:00
passwords/kojiweb_secret
plugins inventory: Exclude test machines by default 2025-02-14 10:04:48 -06:00
pulumi pulumi: Manage HostVDS instances 2025-01-26 13:08:59 -06:00
roles r/lego-nginx: Configure LEGO for nginx 2025-07-08 19:49:51 -05:00
scripts scripts: Add VM host maintenance scripts 2024-08-23 09:43:24 -05:00
vars applyConfigPolicy: Configure SSH user certificate 2024-11-25 21:17:44 -06:00
vault chromie: Set MinIO root password 2024-09-02 21:24:59 -05:00
.gitignore callbacks: Add ntfy callback plugin 2025-02-01 17:36:58 -06:00
.gitmodules
.vault-secret.sh
Pulumi.prod.yaml pulumi: Manage HostVDS instances 2025-01-26 13:08:59 -06:00
Pulumi.yaml pulumi: Manage HostVDS instances 2025-01-26 13:08:59 -06:00
alertmanager.yml
ansible.cfg Introduce dynamic inventory 2025-02-08 15:29:58 -06:00
ansible.yml
aria2.yml
auto-updates.yml auto-updates: Install and configure dnf-automatic 2024-06-12 06:25:17 -05:00
base.yml base: Factor out SSH host, user cert roles 2025-02-01 17:36:58 -06:00
bitwarden_rs.yml
blackbox-exporter.yml
bootstrap.yml bootstrap: Import useproxy playbook 2025-03-19 07:46:28 -05:00
btop.yml btop: Install btop and run it on the console 2024-09-01 09:24:53 -05:00
burp-client.yml
burp-server.yml
certbot.yml
chrony.yml chrony: Add role/PB for chrony 2025-03-16 16:37:19 -05:00
clouds.yaml inventory: Configure for HostVDS openstack 2025-01-26 13:08:59 -06:00
collectd.yml
create-dc.sh create-dc: Add PB for creating new DCs 2024-06-23 10:43:15 -05:00
create-dc.yml create-dc: Add PB for creating new DCs 2024-06-23 10:43:15 -05:00
datavol.yml host-setup: Import datavol Playbook 2025-07-08 19:49:51 -05:00
dch-gw.yml
dch-proxy.yml r/dch-proxy: Update and clean up 2024-08-24 11:46:28 -05:00
dch-root-ca-r2.crt fixup-dch-root-ca-r2 2024-06-12 18:56:41 -05:00
dch-root-ca.crt
dch-root-ca.yml dch-root-ca: Add PB to trust DCH Root CA 2024-08-12 22:22:50 -05:00
dch-vpn.yml
deploy.sh kubernetes: Manage worker nodes 2024-11-24 10:33:21 -06:00
dhcpcd.yml
dhcpd.yml
docker.yml
domain-controller.yml
dyngroups.yml dyngroups: Always run all tasks 2024-01-09 18:18:34 -06:00
facts.yml
fileserver.yml
firewalld.yml
frigate.yml r/frigate-exporter: Deploy Prometheus exporter 2024-10-21 20:27:31 -05:00
gitea.yml r/gitea: use sshd_config.d 2023-11-13 17:45:21 -06:00
grafana.yml
graylog.yml
hassdb.yml
homeassistant.yml
host-setup.yml host-setup: Import datavol Playbook 2025-07-08 19:49:51 -05:00
hostname.yml
hosts hosts: Decommission node-refrain.k.p.b 2025-06-21 17:51:06 -05:00
hosts.gw chrony: Add role/PB for chrony 2025-03-16 16:37:19 -05:00
hosts.pyrocufflink.yml Introduce dynamic inventory 2025-02-08 15:29:58 -06:00
hostvds.openstack.yml inventory: Configure for HostVDS openstack 2025-01-26 13:08:59 -06:00
jellyfin.yml
jenkins-slave.yml
journal2ntfy.yml
koji-builder.yml
koji-hub.yml
koji-web.yml
koji.yml
kube-root-ca.crt
kubernetes.yml kubernetes: Manage worker nodes 2024-11-24 10:33:21 -06:00
loki.yml r/loki-caddy: Caddy reverse proxy for Loki 2024-11-05 06:54:27 -06:00
metricspi.yml
minio-backups.yml minio-backups: Deploy MinIO for backups 2024-09-01 08:59:28 -05:00
minio.yml
motioneye.yml
named-server.yml
net-ifaces.yml
network.yml
newvm.sh newvm: Add host to some groups by default 2025-03-16 16:37:19 -05:00
nextcloud.yml nextcloud: Move database to db0 2024-09-02 21:03:33 -05:00
ntp.yml
nut.yml nut-monitor: Configure upsmon 2024-01-19 20:50:03 -06:00
postgresql.yml r/postgresql-data: Manage users and databases 2025-02-01 17:36:58 -06:00
promtail.yml promtail: Role/Playbook to deploy Promtail 2024-02-22 19:23:31 -06:00
protonvpn.yml
pxe.yml
pyproject.toml pulumi: Manage HostVDS instances 2025-01-26 13:08:59 -06:00
pyrocufflink.yml pyrocufflink: Trust DCH Root CA R2 2024-06-12 18:40:17 -05:00
radius.yml
radvd.yml
raid-array.yml raid-array: Create udev rules to auto re-add disks 2024-11-05 06:52:20 -06:00
remount.yml
repohost.yml r/repohost: Configure Yum package repo host 2023-11-07 20:51:10 -06:00
restic.yml restic: Trust dch-root-ca certificate 2025-03-29 09:34:17 -05:00
rngd.yml
samba-dc.yml samba-dc: Gather facts for all DCs 2024-06-23 10:43:15 -05:00
serterm.yml r/serterm: Deploy serial terminal multiplexer 2024-11-10 13:15:08 -06:00
site.yml site: Import victoria-logs PB 2025-05-30 21:52:23 -05:00
smtp-relay.yml
squid.yml
ssh-host-certs.yml base: Factor out SSH host, user cert roles 2025-02-01 17:36:58 -06:00
ssh-user-ca.yml base: Factor out SSH host, user cert roles 2025-02-01 17:36:58 -06:00
synapse.yml
systemd-networkd.yml
systemd-resolved.yml
taiga.yml
unifi.yml unifi: Switch from nginx to Caddy 2025-03-16 17:17:00 -05:00
useproxy.yml r/useproxy: Configure system-wide proxy 2024-08-12 18:47:04 -05:00
users.yml users: Do not clear supplemental groups 2025-06-08 09:00:16 -05:00
uv.lock pulumi: Manage HostVDS instances 2025-01-26 13:08:59 -06:00
victoria-logs.yml r/victoria-logs: Deploy VictoriaLogs 2025-05-30 21:19:05 -05:00
victoria-metrics.yml
vmhost.yml vmhost: Allow host provisioner to log in 2025-02-08 16:49:14 -06:00
wait-for-host.yml wait-for-host: PB to wait for a host to come up 2024-07-02 20:44:29 -05:00
websites.yml r/webites: Add apps.du5t1n.xyz F-Droid repo 2024-11-05 06:47:02 -06:00
wheelhost.yml
zabbix-agent.yml
zabbix-server.yml
zabbix.yml
zezere.yml
zigbee2mqtt.yml
zwavejs2mqtt.yml