ansible-playbooks

another attempt to have everything organized ...
git clone https://git.e1e0.net/ansible-playbooks.git
Log | Files | Refs | README | LICENSE

website.yml (3463B)


      1 ---
      2 - name: Prepare firewall and shitty stuff
      3   hosts: web
      4   remote_user: paco
      5   become: yes
      6   become_method: doas
      7   roles:
      8     - base
      9     - motd-figlet
     10     - pf
     11   vars:
     12     - motd_figlet_group: wheel
     13     - pf_tcp_ports_allowed:
     14       - "http"
     15       - "https"
     16       - "gopher"
     17       - 5000
     18       - 5222
     19       - 5269
     20       - 5281
     21     - base_extra_groups: "wheel"
     22 
     23 - name: Set up httpd server
     24   hosts: web
     25   remote_user: paco
     26   become: yes
     27   become_method: doas
     28   roles:
     29     - httpd
     30   vars:
     31     - motd_figlet_group: wheel
     32     - https_restart_services:
     33         - httpd
     34         - prosody
     35     - https_servers:
     36       - server_name: "w1.e1e0.net"
     37         server_aliases:
     38           - "test.e1e0.net"
     39         server_owner: "paco"
     40         root: "/htdocs/w1.e1e0.net"
     41         locations:
     42           - name: "/*"
     43             options:
     44             - "block return 301 \"https://e1e0.net/\""
     45       - server_name: "e1e0.net"
     46         server_aliases:
     47           - "www.e1e0.net"
     48         server_owner: "paco"
     49         root: "/htdocs/e1e0.net"
     50         locations:
     51           - name: "/paste/*"
     52             options:
     53             - "root \"/pastes\""
     54             - "request strip 1"
     55             - "default type text/plain"
     56           - name: "/dist/*"
     57             options:
     58             - "root \"/distfiles\""
     59             - "request strip 1"
     60           - name: "/repo/*"
     61             options:
     62             - "root \"/repo\""
     63             - "request strip 1"
     64             - "directory auto index"
     65           - name: "/gh-contrib"
     66             options:
     67             - "block return 301 \"https://github.com/search?q=is%3Apr+author%3Apacoesteban+is%3Apublic\""
     68           - name: "/openbsd-contrib"
     69             options:
     70             - "block return 301 \"https://marc.info/?l=openbsd-ports-cvs&w=2&r=1&s=Paco+Esteban&q=b\""
     71       - server_name: "git.e1e0.net"
     72         server_owner: "paco"
     73         root: "/htdocs/git.e1e0.net"
     74         httpd_options:
     75           - "directory { index index.html }"
     76         locations:
     77           - name: "/*.git*"
     78             options:
     79             - "root \"/git/public\""
     80       - server_name: "onna.be"
     81         server_aliases:
     82           - "www.onna.be"
     83         server_owner: "paco"
     84         root: "/htdocs/onna.be"
     85         locations:
     86           - name: "/gh-contrib"
     87             options:
     88             - "block return 301 \"https://github.com/search?q=is%3Apr+author%3Apacoesteban+is%3Apublic\""
     89           - name: "/openbsd-contrib"
     90             options:
     91             - "block return 301 \"https://marc.info/?l=openbsd-ports-cvs&w=2&r=1&s=Paco+Esteban&q=b\""
     92           - name: "/*"
     93             options:
     94             - "block return 301 \"https://e1e0.net$REQUEST_URI\""
     95       - server_name: "git.onna.be"
     96         server_owner: "paco"
     97         root: "/htdocs/git.e1e0.net"
     98         httpd_options:
     99           - "directory { index index.html }"
    100         locations:
    101           - name: "/*.git*"
    102             options:
    103             - "root \"/var/git/public\""
    104           - name: "/*"
    105             options:
    106             - "block return 301 \"https://git.e1e0.net$REQUEST_URI\""
    107       - server_name: "uploads.onna.be"
    108         server_aliases:
    109           - "groups.onna.be"
    110           - "proxy.onna.be"
    111         server_owner: "paco"
    112         root: "/htdocs/xmpp.onna.be"
    113         locations:
    114           - name: "/*"
    115             options:
    116             - "block return 301 \"https://e1e0.net/\""
    117 
    118 - name: Set up gopher server
    119   hosts: web
    120   remote_user: paco
    121   become: yes
    122   become_method: doas
    123   roles:
    124     - gopher