server-setup/main.yml.example at main · tna76874/server-setup · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
#!/usr/bin/env ansible-playbook

- name: Basic Setup
  hosts: all
  become: yes
  tags:
    - base
  roles:
    - base

- name: Set up user
  hosts: all
  become: yes
  tags:
    - user
    - base
  vars_files:
    - vars.yml
  roles:
    - user

- name: Secure the ssh server
  hosts: all
  become: yes
  vars_files:
    - vars.yml
  tags:
    - never
    - security
  roles:
    - security

- name: Install Docker
  hosts: all
  become: yes
  vars_files:
    - vars.yml
  tags:
    - never
    - docker
  roles:
    - docker

- name: Install nginx
  hosts: all
  become: yes
  vars_files:
    - vars.yml
  tags:
    - never
    - nginx
  roles:
    - nginx
    - certbot

- name: Nextcloud
  hosts: all
  become: yes
  vars_files:
    - vars.yml
  tags:
    - never
    - nextcloud
  vars:
    nginx_domain_name: "nc.{{ main_domain }}"
  roles:
    - nginx
    - nginx-tls-add
    - nextcloud

- name: Deploy gitea server
  collections:
    - community.docker
  hosts:
    - all
  become: yes
  tags:
    - gitea
    - never
  vars_files:
    - vars.yml
  vars:
    nginx_domain_name: "git.{{ main_domain }}"
  roles:
    - nginx-tls-add
    - gitea

- name: Deploy calibre server
  collections:
    - community.docker
  hosts:
    - all
  become: yes
  tags:
    - never
    - calibre
  vars_files:
    - vars.yml
  vars:
    nginx_domain_name: "calibre.{{ main_domain }}"
    docker_release:
  roles:
    - nginx-tls-add
    - calibre

- name: Deploy cryptpad server
  collections:
    - community.docker
  hosts:
    - all
  become: yes
  tags:
    - never
    - cryptpad
  vars_files:
    - vars.yml
  vars:
    nginx_domain_name: "cryptpad.{{ main_domain }}"
  roles:
    - nginx-tls-add
    - cryptpad

- name: Deploy mailserver
  collections:
    - community.docker
  hosts:
    - all
  become: yes
  tags:
    - never
    - mail
    - roundcube
  vars_files:
    - vars.yml
  vars:
    main_domain_name: "{{ main_domain }}"
    project_root: "/srv/mailserver"
  roles:
    - mailserver

- name: Deploy mailserver frontend (roundcube)
  collections:
    - community.docker
  hosts:
    - all
  become: yes
  tags:
    - never
    - roundcube
  vars_files:
    - vars.yml
  vars:
    project_root: "/srv/roundcube"
    upload_limit: 100M
    compose_config_mail_host: "mail.{{ main_domain }}"
    nginx_domain_name: "ma.{{ main_domain }}"
  roles:
    - nginx-tls-add
    - roundcube