https://github.com/alixanneraud/infrastructure

Infrastructure code and documentation for deploying and managing my sovereign services.
https://github.com/alixanneraud/infrastructure

ansible docker docker-compose sovereignty truenas

Last synced: 4 months ago
JSON representation

Infrastructure code and documentation for deploying and managing my sovereign services.

• Host: GitHub
• URL: https://github.com/alixanneraud/infrastructure
• Owner: AlixANNERAUD
• License: mit
• Created: 2025-09-15T10:49:37.000Z (10 months ago)
• Default Branch: main
• Last Pushed: 2026-02-08T15:33:24.000Z (5 months ago)
• Last Synced: 2026-02-08T21:54:18.019Z (5 months ago)
• Topics: ansible, docker, docker-compose, sovereignty, truenas
• Language: Jinja
• Homepage: https://anneraud.fr
• Size: 101 KB
• Stars: 1
• Watchers: 0
• Forks: 0
• Open Issues: 1
• Metadata Files:
  • Readme: readme.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# Infrastructure

This repository contains the infrastructure code and documentation for deploying and managing my personnal services.

## Inventory

See [documentation/inventory.md](documentation/inventory.md)

## Services

| Name                                                                   | Description                                   | Access  | Server     | Deployment   | Status                                                                                                                             |

| ---------------------------------------------------------------------- | --------------------------------------------- | ------- | ---------- | ------------ | ---------------------------------------------------------------------------------------------------------------------------------- |

| [Accueil](https://wwww.anneraud.fr/)                                   | Services homepage                             | Public  | Bruxelles  | TrueNAS Apps | ![Status](https://etat.anneraud.fr/api/v1/endpoints/services_accueil/uptimes/30d/badge.svg)                                        |

| [Bitwarden](https://bitwarden.anneraud.fr/)                            | Password manager (Vaultwarden)                | Public  | Bruxelles  | TrueNAS Apps | ![Status]()                        |

| [Nuage](https://nuage.anneraud.fr/)                                    | Cloud storage and collaboration (Nextcloud)   | Public  | Bruxelles  | TrueNAS Apps | ![Status]()                            |

| [Automatisation](https://automatisation.anneraud.fr)                   | Workflow automation (n8n)                     | Private | Bruxelles  | TrueNAS Apps | ![Status]()                         |

| [Maison](https://maison.anneraud.fr/)                                  | Home automation (Home Assistant)              | Public  | Bruxelles  | TrueNAS Apps | ![Status]()                      |

| [Médiathèque](https://mediatheque.anneraud.fr/)                        | Media server (Jellyfin)                       | Public  | Bruxelles  | TrueNAS Apps | ![Status]()                       |

| [Téléchargement](https://telechargement.anneraud.fr/)                  | Download manager (qBittorrent)                | Private | Bruxelles  | Ansible      | ![Status]()                 |

| [Matrix](https://matrix.anneraud.fr/)                                  | Matrix server (Synapse)                       | Public  | Bruxelles  | Ansible      | ![Status]()                             |

| [Archive](https://archive.anneraud.fr/)                                | Document management (Paperless-ngx)           | Private | Bruxelles  | TrueNAS Apps | ![Status]()                      |

| [Statistiques](https://s.anneraud.fr/)                                 | Analytics (Umami)                             | Public  | Bruxelles  | TrueNAS Apps | ![Status]()                         |

| [Notes](https://notes.anneraud.fr/)                                    | Documentation (Docmost)                       | Private | Bruxelles  | Ansible      | ![Status]()                              |

| [Mini Train Store](https://minitrainstore.fr/)                         | Business management (Odoo)                    | Public  | Bruxelles  | TrueNAS Apps | ![Status]()                      |

| [Git](https://git.anneraud.fr/)                                        | Git forge (Gitea)                             | Private | Bruxelles  | TrueNAS Apps | ![Status]()                                  |

| [Finances](https://finances.anneraud.fr/)                              | Personal finance manager (Firefly III)        | Private | Bruxelles  | TrueNAS Apps | ![Status]()                       |

| [Importateur finances](https://importeur-finances.anneraud.fr/)        | Finance data importer (Firefly III importer)  | Private | Bruxelles  | TrueNAS Apps | ![Status]()  |

| [Recettes](https://recettes.anneraud.fr/)                              | Recipe manager (Mealie)                       | Private | Bruxelles  | TrueNAS Apps | ![Status]()                            |

| [Portefolio Alix](https://alix.anneraud.fr/)                           | Personal portfolio (GitHub Pages)             | Public  | -          | -            | ![Status]()               |

| [Radarr](https://radarr.anneraud.fr/)                                  | Movie collection manager                      | Private | Bruxelles  | TrueNAS Apps | ![Status](https://etat.anneraud.fr/api/v1/endpoints/services_radarr/uptimes/30d/badge.svg)                                         |

| [Sonarr](https://sonarr.anneraud.fr/)                                  | TV show collection manager                    | Private | Bruxelles  | TrueNAS Apps | ![Status](https://etat.anneraud.fr/api/v1/endpoints/services_sonarr/uptimes/30d/badge.svg)                                         |

| [Prowlarr](https://prowlarr.anneraud.fr/)                              | Indexer manager                               | Private | Bruxelles  | TrueNAS Apps | ![Status](https://etat.anneraud.fr/api/v1/endpoints/services_prowlarr/uptimes/30d/badge.svg)                                       |

| [Bazarr](https://bazarr.anneraud.fr/)                                  | Subtitle manager                              | Private | Bruxelles  | TrueNAS Apps | ![Status](https://etat.anneraud.fr/api/v1/endpoints/services_bazarr/uptimes/30d/badge.svg)                                         |

| [Jellyseerr](https://jellyseerr.anneraud.fr/)                          | Media request manager                         | Private | Bruxelles  | TrueNAS Apps | ![Status](https://etat.anneraud.fr/api/v1/endpoints/services_jellyseerr/uptimes/30d/badge.svg)                                     |

| [Wakapi](https://wakapi.anneraud.fr)                                   | Coding time tracker                           | Public  | Bruxelles  | Ansible      | ![Status](https://etat.anneraud.fr/api/v1/endpoints/services_wakapi/uptimes/30d/badge.svg)                                         |

| [Translation](https://translate.anneraud.fr/)                          | Translation platform (Weblate)                | Private | Bruxelles  | Ansible      | ![Status]()                        |

| [Proxy Bruxelles](https://nginx.bruxelles.anneraud.fr/)                | Reverse proxy (Nginx Proxy Manager)           | Private | Bruxelles  | TrueNAS Apps | ![Status]()  |

| [DNS dynamique Bruxelles](https://ddns-updater.bruxelles.anneraud.fr/) | Dynamic DNS updater                           | Private | Bruxelles  | TrueNAS Apps | ![Status]() |

| [Bruxelles console](https://bruxelles.anneraud.fr/)                    | Server management (TrueNAS)                   | Private | Bruxelles  | TrueNAS Apps | ![Status]()            |

| [Conteneurs Bruxelles](https://conteneurs.bruxelles.anneraud.fr/)      | Container management (Portainer)              | Private | Bruxelles  | TrueNAS Apps | ![Status]()       |

| [État](https://etat.anneraud.fr/)                                      | Service status page                           | Public  | Bruxelles  | TrueNAS Apps | -                                                                                                                                  |

| [VPN](https://tailscale.anneraud.fr/)                                  | Virtual private network (Tailscale/Headscale) | Public  | Luxembourg | Ansible      | ![Status]()                        |

| [VPN console](https://tailscale.anneraud.fr/admin/)                    | VPN administration console                    | Public  | Luxembourg | Ansible      | ![Status](https://etat.anneraud.fr/api/v1/endpoints/services_vpn-console/uptimes/30d/badge.svg)                                    |

| [Matrix](https://matrix.insa.lol/)                                     | Decentralized communication platform          | Public  | Luxembourg | Ansible      | -                                                                                                                                  |

| [Status (dera.page)](https://status.dera.page/)                        | Service status page                           | Public  | Luxembourg | Ansible      | -                                                                                                                                  |

## Deployment

Deploy a service playbook with Ansible:

```bash

ansible-playbook -i inventory.yml --ask-become-pass services//deploy.yml

```

## Structure

The repository is organized by **service**, with each service containing all its related files:

```

services/

  /

    deploy.yml          # Ansible playbook

    compose.yml         # Docker Compose file

    config.yml          # Service configuration

    ...

vault/                  # Private submodule with encrypted secrets

deployments/            # Deployment-specific files

documentation/          # Documentation

```

## Vault

Source the vault password file path:

```bash

source source.sh

```

Then edit or view vault files with:

```bash

ansible-vault edit vault/...

ansible-vault view vault/...

```