ansible/TODO.md

My todo list

Stuff that I should do but will probably never do.

Base

• Add sudo configuration role
• Add hostname/hosts configuration role that works on Ubuntu and Debian

Polish the user role

The role is fine, but could use some default filter, like for the shell value.

Also, the variables are messy.

Also, a more atomique gestion of the users would be great.

Create a role "generate certificate"

Curently, reverse_proxt_http and similare roles implement certbot themselves, and there is a role for generating self signed certificate.

It would be better to manage certbot in a role, to allow off-wan machine to use reverse_proxy_http with self signed certificates for instance.

Bonus point if the role chose whether to use certbot or a self-signed certificate (but the dependencie gestion could begin to get tricky :/ )

Proxmox setup

setup:

• x509 for clickodrom
• bind the clickodrom to a specific interface
• remove the "please pay us" message
• remove the enterprise apt repo

VM setup

• create a VM from template using cloud init
• add VM to dynamic inventory
• use the cloud init account to connect to the new VM
• setup the VM
• disable cloud init
• remove cloud init account and change the connenction variable for the vm

Network

• Improve the networking role: cannot reload network interfaces without ifupdown2, but ifupdown2 causes lost of connectivity on some hosts because it lacks backward compatibility with ifupdown

Matrix

• Potgres role should be redone, it is currently called too many times that could be globalized I think. Also the setting of timezone and locale is not idempotent

Disks

• Do a real role to setup the disks. Maybe use LVM when zfs is not in use?

good luck