🚀 Ansible DevOps Server Setup

Ansible project for rapid and automated DevOps server provisioning.

Table Of Content

• Project Overview
• Quick Start
• Usage
• Project Structure
• Notes
• Sources

🎯 Project Overview

This project is a collection of Ansible Playbooks for automated and standardized Linux server setup in DevOps environments. Using this project, you can prepare your servers for service in minimal time.

• Prepating-Server: Doing update and upgrade from apt Package Manager
• Docker: Installing Docker and its utilities from apt Package Manager - Add user to Docker user group - Start and enable Docker service
• Adding Soon ...

🚀 Quick Start

1. Clone the Repository

git clone https://github.com/younesmod/ansible-devops-foundation.git
cd ansible-devops-foundation

2. Configure Servers

# Copy configuration file
cp vars/server_vars.example.yaml vars/server_vars.yaml

# Edit settings
nano vars/server_vars.yaml

3. Run Playbooks

# Run all playbooks
ansible-playbook -i inventory/host.yaml -e @vars/server_vars.yaml playbook/*

# Or run individually
ansible-playbook -i inventory/host.yaml -e @vars/server_vars.yaml playbook/docker.yml

🎮 Usage

• Full Setup:

ansible-playbook -i inventory/host.yaml -e @vars/server_vars.yaml playbook/*

• Step-by-Step Execution:

# 1. Docker Installation
ansible-playbook -i inventory/host.yaml -e @vars/server_vars.yaml playbook/docker.yaml

# 2. Security Hardening
ansible-playbook -i inventory/host.yaml -e @vars/server_vars.yaml playbook/preparing.yaml

# 3. Security Hardening
ansible-playbook -i inventory/host.yaml -e @vars/server_vars.yaml playbook/hardening.yaml

# 4. Monitoring Setup (in-progress)
ansible-playbook -i inventory/host.yaml -e @vars/server_vars.yaml playbook/monitoring.yaml

📁 Project Structure

ansible-devops-foundation/
├── inventory/
│   └── host.yaml                # Inventory file
├── playbook/
│   ├── preparing.yaml           # Preparing setup
│   ├── hardening.yaml           # Security hardening
│   ├── harden-ssh.yaml          # SSH hardening
│   ├── harden-os.yaml           # OS hardening
│   ├── docker.yaml              # Docker installation
│   ├── nginx.yaml               # Nginx setup + Nginx Hardening 
│   ├── nginx-hardening.yaml     # Nginx Hardening
│   ├── nginx-setup.yaml         # Nginx setup
│   ├── php-setup.yaml           # Php setup
│   └── setup-node.yaml          # Preparing + Docker
├── vars/
│   └── server_vars.yaml         # Main variables
├── roles/                       # Ansible roles
│   ├── docker/                  # Docker role
│   │   └── ...
│   ├── preparing-server/        # Preparing role
│   │   └── ...
│   ├── nginx/                   # Nginx role
│   │   └── ...
│   ├── php/                     # Php role
│   │   └── ...
│   ├── os-hardening/            # OS-Hardening role
│   │   └── ...
│   ├── ssh-hardening/           # SSH-Hardening role
│   │   └── ...
│   └── nginx-hardening/         # Nginx-Hardening role
│       └── ...
├── .gitignore
├── ansible.cfg                  # Ansible config
├── LICENSE                      # License file
├── README.fa.md
└── README.md

📝 Notes

• Preparing-Server
  • FreeBSD and OpenBSD needs python on target OS.
  • Arch Linux may need some extra tweaks.
  • For SUSE needs to activate some of repositories.
  • Packages are optimized for each distros.
• Docker
  • OpenBSD DOESN'T support docker natively.
  • FreeBSD does support docker but there are some limitations.
  • RedHat/CentOS 8+ uses dnf package manager instead of yum.
  • It's better to use official repository for production areas.
  • ‌Be sure that the $user is existed on OS.

👥 Sources

• geerlingguy: Nginx, Php
• Dev-Sec: OS-Hardening, SSH-Hardening, Nginx-Hardening