Pains-Perdus
/
ansible
3
1
Fork 0
Code Issues Pull Requests 1 Releases Wiki Activity
The ansible files for the pains-perdus infra.
29 Commits 7 Branches 0 Tags 1.3 MiB
Shell 64.4%
Jinja 31.6%
Python 4%
Go to file
Jean-Marie Mineau 4d1370b22d fix dependancies for docker_compose module 2021-01-24 23:45:47 +01:00
group_vars/all free the port 53 for nginx 2021-01-23 13:45:25 +01:00
roles fix dependancies for docker_compose module 2021-01-24 23:45:47 +01:00
.gitignore add certbot, wip 2020-10-13 01:25:02 +02:00
LICENSE Initial commit 2020-10-05 09:38:11 +02:00
README.md add some note about the ssh-agent 2021-01-22 23:11:38 +01:00
ansible.cfg add certbot, wip 2020-10-13 01:25:02 +02:00
base.yml add basic tools 2020-10-12 09:59:51 +02:00
dns.yml free the port 53 for nginx 2021-01-23 13:45:25 +01:00
hosts add test host 2021-01-24 19:48:37 +01:00
keycloak.yml copy docker-compose.yml 2021-01-24 22:42:56 +01:00
web_services.yml split the reverse_proxy role to implement a separate reverse proxy for stream 2021-01-23 01:19:21 +01:00

README.md

ansible

The ansible files for the pains-perdus infra.

Deploy a playbook

ansible-playbook playbook.yml

Add --check to do a dry run

Edit the vault

ansible-vault edit group_vars/all/vault

with the edditor defined in the env varible $EDITOR and the password of the vault in the file .vault_password (Carefull not to commit it!!!)

SSH key whith passphrase

To avoid entering the passphrase of the ssh key for each host, we have to use an ssh-agent. The ssh-agent with xonsh does not really works, so in my case I have to use ansible and the agent inside a sh process:

sh
eval `ssh-agent -s`
ssh-add
ansible all -m ping # or whatever you want to do with ansible
exit