ilia
3415340e26
All checks were successful
CI / skip-ci-check (pull_request) Successful in 1m18s
CI / lint-and-test (pull_request) Successful in 1m21s
CI / ansible-validation (pull_request) Successful in 2m43s
CI / secret-scanning (pull_request) Successful in 1m19s
CI / dependency-scan (pull_request) Successful in 1m23s
CI / sast-scan (pull_request) Successful in 2m28s
CI / license-check (pull_request) Successful in 1m20s
CI / vault-check (pull_request) Successful in 2m21s
CI / playbook-test (pull_request) Successful in 2m19s
CI / container-scan (pull_request) Successful in 1m48s
CI / sonar-analysis (pull_request) Successful in 1m26s
CI / workflow-summary (pull_request) Successful in 1m17s
28 lines
1.1 KiB
YAML
28 lines
1.1 KiB
YAML
---
|
|
# Playbook: servers.yml
|
|
# Purpose: Baseline configuration for servers (no desktop apps, no IDE install)
|
|
# Targets: services + qa + ansible + tailscale (override with -e target_group=...)
|
|
# Tags: maintenance, base, security, user, ssh, shell, docker, monitoring
|
|
# Usage:
|
|
# ansible-playbook -i inventories/production playbooks/servers.yml
|
|
# ansible-playbook -i inventories/production playbooks/servers.yml -e target_group=services
|
|
# ansible-playbook -i inventories/production playbooks/servers.yml --limit jellyfin
|
|
|
|
- name: Configure servers baseline
|
|
hosts: "{{ target_group | default('services:qa:ansible:tailscale') }}"
|
|
become: true
|
|
|
|
roles:
|
|
- {role: maintenance, tags: ['maintenance']}
|
|
- {role: base, tags: ['base', 'security']}
|
|
- {role: user, tags: ['user']}
|
|
- {role: ssh, tags: ['ssh', 'security']}
|
|
- {role: shell, tags: ['shell']}
|
|
- {role: docker, tags: ['docker']}
|
|
- {role: monitoring_server, tags: ['monitoring']}
|
|
|
|
tasks:
|
|
- name: Display completion message
|
|
ansible.builtin.debug:
|
|
msg: "Server baseline configuration completed successfully!"
|