|
4 months ago | |
---|---|---|
.. | ||
files | 4 months ago | |
group_vars | 11 months ago | |
handlers | 2 years ago | |
roles | 6 months ago | |
.gitignore | 2 years ago | |
README.md | 1 year ago | |
hosts | 7 months ago | |
patch.yml | 2 years ago | |
site.yml | 6 months ago |
README.md
Workflow description
cyberian user will have one key, which lives in leckie.cyberia.club as bastion host that we run ansible from
- people can update ansible by working locally and pushing to master to run on remote box (CI is not set up yet)
- or by logging into leckie.cyberia.club and running
ansible-playbook -i hosts site.yml
You can perform a "dry run" before making changes with ansible-playbook -i hosts site.yml --check
You can limit ansible to only touch one host with ansible-playbook -i hosts site.yml --limit legion.cyberia.club
You can limit ansible to only apply certain tagged roles with ansible-playbook -i hosts site.yml --tags nginx
Server naming convention
- scifi media produced by minority peoples
- one word
- simple to spell and say phonetically
DNS records
- Add an A record with the primary servername pointing at the servers IP
- Any additional records should be CNAME records pointing at the primary servername
ex:
A record: mothership.cyberia.club -> 69.2.118.24
CNAME: rsyslog.cyberia.club -> mothership.cyberia.club
Making a new server
-
login to baikal
-
create an alpine capsul with:
pubkey
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICFY6QqqL5DLeYVRQXSFmy7doecYJRGKIJVNFWdWE+hi root-deploy-key
email
ops@cyberia.club
-
login to the host and set the hostname via
/etc/hostname
-
update the host via
apk update && apk add python3 && apk upgrade
-
reboot the host
-
add an A-record for the host
-
add the host to the inventory
-
run
ansible-playbook -i hosts site.yml
from j3s.sh/home/cyberian/code/ops-handbook/ansible
Service restarts
If a critical service has its' config file(s) updated, many won't restart automatically. Operators are expected to restart services by hand as-needed.
Services that restart upon config change:
- sshd
Services that require manual restarts:
- matrix-synapse
- postgresql