Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/deekayen/ansible-lttlefish
Configuration for my personal cloud on a public OpenBSD host.
https://github.com/deekayen/ansible-lttlefish
ansible ansible-playbook ansible-roles dovecot-configuration openbsd opendkim openntpd postfix-configuration squirrelmail
Last synced: 1 day ago
JSON representation
Configuration for my personal cloud on a public OpenBSD host.
- Host: GitHub
- URL: https://github.com/deekayen/ansible-lttlefish
- Owner: deekayen
- License: unlicense
- Created: 2022-11-01T21:06:13.000Z (about 2 years ago)
- Default Branch: main
- Last Pushed: 2022-11-28T22:07:01.000Z (about 2 years ago)
- Last Synced: 2024-11-22T18:58:57.579Z (2 months ago)
- Topics: ansible, ansible-playbook, ansible-roles, dovecot-configuration, openbsd, opendkim, openntpd, postfix-configuration, squirrelmail
- Language: Jinja
- Homepage:
- Size: 231 KB
- Stars: 0
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Funding: .github/FUNDING.yml
- License: LICENSE
Awesome Lists containing this project
README
# lttle-ansible-bootstrap
I don't really intend for this repo to be consumed as a generic, re-usable
configuration. It's strictly intended to meet my personal needs.
Installs and configures various things with:
* Apache
* PHP
* ownCloud
* OpenVPN
* Dovecot/Postfix/procmail
* ntpd
If I'm really in an Ansible mood, I could generate a temporary
Linode API key and use Ansible to create my Atlanta-based Linode
using the standalone playbook in the directory root.
To keep the playbook idempotent and secure, the first time it runs, it
will create random passwords for the MariaDB root user, NextCloud, and
mail user. The passwords to those accounts will be saved on the remote
server in appropriate configuration files instead of in the global_vars
of this Ansible playbook like most other templates you'll find on
Github. Though these files are uploaded in-whole on the first run as
templates, they won't upload again after that because the remote server
is treated as the master copy of the passwords on these files:
* `/root/.my.cnf`
* `/var/www/nextcloud/config/config.php`
* `/etc/dovecot/dovecot-sql.conf.ext`
* `/etc/postfix/mysql-virtual-alias-maps.cf`
* `/etc/postfix/mysql-virtual-mailbox-domains.cf`
* `/etc/postfix/mysql-virtual-mailbox-maps.cf`
## System setup
This setup filled the `/usr/local`.
```
lttlefish# df -h
Filesystem Size Used Avail Capacity Mounted on
/dev/wd0a 989M 75.4M 865M 8% /
/dev/wd0h 482M 20.0K 458M 0% /home
/dev/wd0d 989M 6.0K 940M 0% /tmp
/dev/wd0e 2.7G 1.2G 1.4G 46% /usr
/dev/wd0f 1.9G 1019M 867M 54% /usr/local
/dev/wd0g 989M 2.0K 940M 0% /usr/src
/dev/wd0i 13.3G 60.9M 12.5G 0% /var
```
This is setup for a 2G shared linode.
```
lttlefish# df -h
Filesystem Size Used Avail Capacity Mounted on
/dev/wd0a 989M 74.9M 865M 8% /
/dev/wd0e 1.1G 18.0K 1.0G 0% /home
/dev/wd0d 1.5G 10.0K 1.5G 0% /tmp
/dev/wd0f 4.8G 1.2G 3.4G 27% /usr
/dev/wd0g 6.5G 218K 6.2G 0% /usr/local
/dev/wd0h 30.4G 5.9M 28.9G 0% /var
```
## Bootstrapping from scratch
* Install everything for OS, minus games, xserv, and xshare. xbase and xfont are needed for gd and imagemagik.
* Add authorized_keys to ~/.ssh/
* Install python3 so Ansible has an interpreter
* `pkg_add python3`
* `pkg_add py3-pip`
* Create a cert
* `pkg_add certbot`
* `certbot certonly`
lttlefish# cd /etc/apache2/
lttlefish# ls
extra httpd2.conf magic mime.types
lttlefish# ln -s /etc/letsencrypt/live/deekayen.net/fullchain.pem server.crt
lttlefish# ln -s /etc/letsencrypt/live/deekayen.net/privkey.pem server.key