You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
localghost 0c62cc21af chris' cyberia ssh pub key 4 months ago
files chris' cyberia ssh pub key 4 months ago
group_vars Add sanine, refactor to support debian 11 months ago
handlers Added certs, create nginx proxy, added ansible root handlers dir 2 years ago
roles fix nginx log tailer example 6 months ago
.gitignore Add initial version of Ansible automation 2 years ago add ansible command how-to to readme 1 year ago
hosts Merge remote-tracking branch 'cyberia-gitea/master' 7 months ago
patch.yml add daily matrix backup job 2 years ago
site.yml nginx log tailer --> caddy log tailer 6 months ago

Workflow description

cyberian user will have one key, which lives in as bastion host that we run ansible from

  • people can update ansible by working locally and pushing to master to run on remote box (CI is not set up yet)
  • or by logging into and running ansible-playbook -i hosts site.yml

You can perform a "dry run" before making changes with ansible-playbook -i hosts site.yml --check

You can limit ansible to only touch one host with ansible-playbook -i hosts site.yml --limit

You can limit ansible to only apply certain tagged roles with ansible-playbook -i hosts site.yml --tags nginx

Server naming convention

  • scifi media produced by minority peoples
  • one word
  • simple to spell and say phonetically

DNS records

  • Add an A record with the primary servername pointing at the servers IP
  • Any additional records should be CNAME records pointing at the primary servername


A record: ->

Making a new server

  • login to baikal

  • create an alpine capsul with:

    pubkey ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICFY6QqqL5DLeYVRQXSFmy7doecYJRGKIJVNFWdWE+hi root-deploy-key


  • login to the host and set the hostname via /etc/hostname

  • update the host via apk update && apk add python3 && apk upgrade

  • reboot the host

  • add an A-record for the host

  • add the host to the inventory

  • run ansible-playbook -i hosts site.yml from /home/cyberian/code/ops-handbook/ansible

Service restarts

If a critical service has its' config file(s) updated, many won't restart automatically. Operators are expected to restart services by hand as-needed.

Services that restart upon config change:

  • sshd

Services that require manual restarts:

  • matrix-synapse
  • postgresql