https://github.com/nleiva/ansible-home
Collection of playbooks I run in my personal home-lab.
https://github.com/nleiva/ansible-home
ansible grafana playbook raspberry-pi raspbian
Last synced: 10 months ago
JSON representation
Collection of playbooks I run in my personal home-lab.
- Host: GitHub
- URL: https://github.com/nleiva/ansible-home
- Owner: nleiva
- License: gpl-3.0
- Created: 2020-12-30T04:49:21.000Z (over 5 years ago)
- Default Branch: main
- Last Pushed: 2023-04-05T19:56:20.000Z (about 3 years ago)
- Last Synced: 2024-11-07T13:52:20.021Z (over 1 year ago)
- Topics: ansible, grafana, playbook, raspberry-pi, raspbian
- Language: Jinja
- Homepage:
- Size: 6.55 MB
- Stars: 9
- Watchers: 3
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# My Home Lab
These are the playbooks I run in my personal lab.
Early setup of my lab
## Requirements
`ssh-copy-id` to every host before running these playbooks.
## Playbooks
### 1. Setup Lab instances
To perform some basic management tasks such as upgrading packages or updating Firewall rules:
```bash
ansible-playbook setup.yml --ask-become-pass -v
```
#### Dependencies
The role names will be according to the [requirements.yml](roles/requirements.yml) file definition.
```bash
ansible-galaxy role install -r roles/requirements.yml
```
### 2. Install Pi-hole
To install Pi-hole:
```bash
ansible-playbook pi-hole.yml --ask-become-pass -v
```
To update the list of whitelisted websites per [WHITELIST](https://github.com/anudeepND/whitelist):
```bash
ansible-playbook pi-hole.yml --ask-become-pass -v --tags whitelist
```
[Block lists](https://firebog.net/) can be added via the [GUI](https://docs.pi-hole.net/database/gravity/example/).
### 3. Cloud monitoring with Grafana Agent
Install [Grafana Cloud Agent](https://github.com/grafana/agent) in a RHEL/Debian host using [grafana_agent](https://galaxy.ansible.com/nleiva/grafana_agent)'s role.
```bash
ansible-playbook grafana-cloud.yml --ask-become-pass -v
```
### 4. Initial setup for a new machine
Creates my user (assuming I can ssh as root) and adds my SSH public key to the authorized users (instead of `ssh-copy-id`).
Registers the system if it's RHEL.
```bash
ansible-playbook initial-setup.yml --ask-become-pass --ask-vault-pass
```
### 5. Install RH Satellite (WIP)
Installs RH Satellite 6.7 (Work in Progress) in RHEL 7.
```bash
ansible-playbook install-satellite.yml --ask-become-pass --ask-vault-pass
```
### 6. Run OpenSCAP
Perform compliance and vulnerability scanning on RHEL 8 with OpenSCAP.
- [ ] TODO: Profile selection: STIG, PCI-DSS, or HIPAA
```bash
ansible-playbook openscap.yml --ask-become-pass
```
## HW details
### 2nd generation
Second iteration of my lab
- [6U Wall Mount Rack Cabinet Enclosure](https://smile.amazon.com/gp/product/B01K1JJHTO)
- [Cantilever Server Shelf Rack Mount 19 Inch 1U](https://smile.amazon.com/gp/product/B008LUW3ZG)
- [Intel® NUC Kit NUC8i5BEH](https://www.intel.com/content/www/us/en/products/boards-kits/nuc/kits/nuc8i5beh.html)
- [Raspberry Pi 4 Model B](https://www.raspberrypi.org/products/raspberry-pi-4-model-b/)
- [Raspberry Pi 3 Model B](https://www.raspberrypi.org/products/raspberry-pi-3-model-b/)
- [Raspberry Pi Cluster Case 6-Layers](https://smile.amazon.com/gp/product/B07K72STFB)
- [5-Pack Snagless Short Cat6 Ethernet Cable](https://smile.amazon.com/gp/product/B00C2DZ85U)
- [TP-Link Litewave 8 Port Gigabit Ethernet Switch](https://smile.amazon.com/gp/product/B086384H7C)
- [CyberPower LE850G UPS Battery Backup](https://www.costco.com/cyberpower-le850g-ups-battery-backup-with-surge-protection.product.100519070.html)
### 3rd generation
Third iteration of my lab
- [Lenovo ThinkCentre M910Q Tiny Desktop Computer](https://www.amazon.com/gp/product/B08MMQH98H): Intel Core i7-6700T Upto 3.6GHz, 32GB RAM, 1TB NVMe SSD.
- [Dell OptiPlex 3060 MFF](https://www.dellrefurbished.com/category/store-dt-ultra/desktops/ultra-small/1.html?model_f[]=OptiPlex%203060): Intel Core i5-8500T 2.10 GHz, 16GB RAM, 500GB HDD.
- [Switch 8 PoE (60W)](https://store.ui.com/collections/unifi-network-switching/products/unifi-switch-8-60w)
- [Switch Flex Mini](https://store.ui.com/collections/unifi-network-switching/products/usw-flex-mini)
- [AC Infinity MULTIFAN S1](https://www.amazon.com/gp/product/B00G059G86)
- [APC® 8-Outlet Uninterruptible Power Supply, 1000VA/600 Watts, BX1000M-LM60](https://www.officedepot.com/a/products/5182451/APC-8-Outlet-Uninterruptible-Power-Supply/)