adc/ansible

• setup from scratch:
  • install dependencies
  • run a play
  • preparing open_the_vault
• wg
  • clients
  • adding a client
• instructions on specific roles
  • awfulAll
  • mediaserver
  • certs/letsencrypt/acme stuff

setup from scratch:

install dependencies

ansible-galaxy collection install -r requirements.yml

run a play

ansible-playbook -i hosts.yml all.yml --ask-vault-pass --ask-become-pass

preparing open_the_vault

wg

clients

you probably want to deploy clients individually most of the time. to do that, provide a tag, like: ansible-playbook -i hosts.yml client_matrix.yml --ask-vault-pass --ask-become-pass --tags matrix_client

adding a client

• generate a new public/private keypair
• umask 077
• wg genkey | tee privatekey | wg pubkey > publickey
• add the pubkey to the groupvars/main.yml
• add the privkey to the groupvars/vault.yml
• add a task referencing the new client
• add a template with the groupvars embedded.

instructions on specific roles

awfulAll

awfulAll is a single server that's a catch all for services that don't need a dedicated vm. ansible-playbook -i hosts.yml awfulAll.yml --tags awfulAll

mediaserver

ansible-playbook awfulAll.yml --tags mediaserver

certs/letsencrypt/acme stuff

ansible-playbook acme-all.yml -v

• right now for bouncer, syno