NFS, zfs, samba and docker

This commit is contained in:
git
2024-02-13 13:04:02 +01:00
parent ec0a0774a7
commit 77dffb383d
67 changed files with 831 additions and 30 deletions

View File

@@ -96,3 +96,9 @@
- include_tasks: docker-users.yml
when: at_least_one_user_to_modify is defined
- name: Install docker python package
ansible.builtin.pip:
name: docker
extra_args: "--break-system-packages"

View File

@@ -0,0 +1,2 @@
---
# defaults file for create_samba_user

View File

@@ -0,0 +1,6 @@
---
# handlers file for create_samba_user
- name: smb restart
service:
name: smb
state: restarted

View File

@@ -0,0 +1,21 @@
---
# tasks file for create_samba_user
- name: Create
ansible.builtin.blockinfile:
state: present
owner: root
group: root
insertafter: EOF
path: /etc/samba/smb.conf
mode: '0644'
block: |
[{{ samba_user }}]
comment = {{ samba_user }} samba
path = {{ samba_mountpoint }}
browseable = yes
writeable = yes
read only = no
create mask = 0700
directory mask = 0700
valid users = {{ samba_user }}
notify: smb restart

View File

@@ -0,0 +1,5 @@
---
- hosts: localhost
remote_user: root
roles:
- create_samba_user

View File

@@ -0,0 +1,2 @@
---
# vars file for create_samba_user

View File

@@ -0,0 +1,6 @@
---
# defaults file for create_user
primary_group: "{{ user }}"
secondary_groups: ''
shell: "/bin/bash"
home: "/home/{{ user }}"

View File

@@ -0,0 +1,2 @@
---
# handlers file for create_user

View File

@@ -0,0 +1,45 @@
---
# tasks file for create_user
- name: Adding group
ansible.builtin.group:
name: "{{ primary_group }}"
state: present
- name: Adding user
ansible.builtin.user:
name: "{{ user }}"
group: "{{ primary_group }}"
uid: "{{ uid }}"
shell: "{{ shell }}"
groups: "{{ secondary_groups }}"
home: "{{ home }}"
password: "{{ password }}"
- name: Dowload ssh key
ansible.builtin.uri:
url: "{{ user_ssh_key_url }}"
method: GET
return_content: true
register: ssh_key
when: user_ssh_key_url is defined
- name: Setting ssh key
ansible.builtin.blockinfile:
state: present
owner: "{{ user }}"
group: "{{ primary_group }}"
insertafter: EOF
path: /home/{{ user }}/.ssh/authorized_keys
mode: '0644'
create: true
block: |
{{ ssh_key.content }}
when: user_ssh_key_url is defined
- name: Set permissions to .ssh folder
ansible.builtin.file:
path: /home/{{ user }}/.ssh
owner: "{{ user }}"
group: "{{ primary_group }}"
mode: '0711'
when: user_ssh_key_url is defined

View File

@@ -0,0 +1,5 @@
---
- hosts: localhost
remote_user: root
roles:
- create_user

View File

@@ -0,0 +1,2 @@
---
# vars file for create_user

View File

@@ -1,5 +1,6 @@
---
# defaults file for create_zfs_dataset
zfs_dataset_size: 10M
zfs_dataset_mountpoint: "{{ zfs_pool_name }}/{{ zfs_dataset_name }}"
zfs_dataset_mountpoint: "/{{ zfs_pool_name }}/{{ zfs_dataset_name }}"
zfs_dataset_user: root
zfs_dataset_group: root

View File

@@ -5,5 +5,12 @@
name: "{{ zfs_pool_name }}/{{ zfs_dataset_name }}"
state: present
extra_zfs_properties:
quota: {{ zfs_dataset_size }}
mountpoint: {{ zfs_dataset_mountpoint }}
quota: "{{ zfs_dataset_size }}"
mountpoint: "{{ zfs_dataset_mountpoint }}"
- name: Dir Ownershipt to {{ user }}
ansible.builtin.file:
path: "{{ zfs_dataset_mountpoint }}"
owner: "{{ zfs_dataset_user }}"
group: "{{ zfs_dataset_group }}"
mode: '0731'

View File

@@ -0,0 +1,29 @@
---
language: python
python: "2.7"
# Use the new container infrastructure
sudo: false
# Install ansible
addons:
apt:
packages:
- python-pip
install:
# Install ansible
- pip install ansible
# Check ansible version
- ansible --version
# Create ansible.cfg with correct roles_path
- printf '[defaults]\nroles_path=../' >ansible.cfg
script:
# Basic role syntax check
- ansible-playbook tests/test.yml -i tests/inventory --syntax-check
notifications:
webhooks: https://galaxy.ansible.com/api/v1/notifications/

View File

@@ -0,0 +1,38 @@
Role Name
=========
A brief description of the role goes here.
Requirements
------------
Any pre-requisites that may not be covered by Ansible itself or the role should be mentioned here. For instance, if the role uses the EC2 module, it may be a good idea to mention in this section that the boto package is required.
Role Variables
--------------
A description of the settable variables for this role should go here, including any variables that are in defaults/main.yml, vars/main.yml, and any variables that can/should be set via parameters to the role. Any variables that are read from other roles and/or the global scope (ie. hostvars, group vars, etc.) should be mentioned here as well.
Dependencies
------------
A list of other roles hosted on Galaxy should go here, plus any details in regards to parameters that may need to be set for other roles, or variables that are used from other roles.
Example Playbook
----------------
Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
- hosts: servers
roles:
- { role: username.rolename, x: 42 }
License
-------
BSD
Author Information
------------------
An optional section for the role authors to include contact information, or a website (HTML is not allowed).

View File

@@ -0,0 +1,2 @@
---
# defaults file for docker_spin_up

View File

@@ -0,0 +1,2 @@
---
# handlers file for docker_spin_up

View File

@@ -0,0 +1,52 @@
galaxy_info:
author: your name
description: your role description
company: your company (optional)
# If the issue tracker for your role is not on github, uncomment the
# next line and provide a value
# issue_tracker_url: http://example.com/issue/tracker
# Choose a valid license ID from https://spdx.org - some suggested licenses:
# - BSD-3-Clause (default)
# - MIT
# - GPL-2.0-or-later
# - GPL-3.0-only
# - Apache-2.0
# - CC-BY-4.0
license: license (GPL-2.0-or-later, MIT, etc)
min_ansible_version: 2.1
# If this a Container Enabled role, provide the minimum Ansible Container version.
# min_ansible_container_version:
#
# Provide a list of supported platforms, and for each platform a list of versions.
# If you don't wish to enumerate all versions for a particular platform, use 'all'.
# To view available platforms and versions (or releases), visit:
# https://galaxy.ansible.com/api/v1/platforms/
#
# platforms:
# - name: Fedora
# versions:
# - all
# - 25
# - name: SomePlatform
# versions:
# - all
# - 1.0
# - 7
# - 99.99
galaxy_tags: []
# List tags for your role here, one per line. A tag is a keyword that describes
# and categorizes the role. Users find roles by searching for tags. Be sure to
# remove the '[]' above, if you add tags to this list.
#
# NOTE: A tag is limited to a single word comprised of alphanumeric characters.
# Maximum 20 tags per role.
dependencies: []
# List your role dependencies here, one per line. Be sure to remove the '[]' above,
# if you add dependencies to this list.

View File

@@ -0,0 +1,13 @@
---
# tasks file for docker_spin_up
#- name: Copy composer
# template:
# src: "../templates/{{ docker_compose_file }}"
# dest: "/{{ docker_homepath }}/docker-compose.yml"
# owner: root
# group: root
# mode: '0644'
- name: Spin up "{{ docker_name }}"
ansible.builtin.include_tasks:
"{{ docker_compose_file }}"

View File

@@ -0,0 +1,24 @@
---
- name: transmission
community.docker.docker_container:
name: transmission
image: lscr.io/linuxserver/transmission:latest
#container_name: transmission
env:
PUID: "{{ uid }}"
PGID: "{{ uid }}"
TZ: Europe/Berlin
#TRANSMISSION_WEB_HOME=/combustion-release/ #optional
USER: "{{ user }}" #optional
PASS: "{{ password }}" #optional
volumes:
# - /path/to/data:/config
- "{{ docker_homepath }}/downloads:/downloads"
- "{{ docker_homepath }}/watch:/watch"
ports:
- 9091:9091
- 51413:51413
- 51413:51413/udp
restart_policy: unless-stopped
#networks:
# - name: global

View File

@@ -0,0 +1,2 @@
localhost

View File

@@ -0,0 +1,5 @@
---
- hosts: localhost
remote_user: root
roles:
- docker_spin_up

View File

@@ -0,0 +1,2 @@
---
# vars file for docker_spin_up

View File

@@ -6,9 +6,10 @@
- sudoer_no_passwd.yml
- hostname_set.yml
- git.yml
- create_user.yml
# - create_user.yml
- set_perma_ip.yml
- bashrc_copy.yml
- timezone.yml
#- name: Set Pernament IP
# ansible.builtin.include_tasks: set_perma_ip.yml

View File

@@ -0,0 +1,3 @@
- name: Set timezone to Europe/Prague
community.general.timezone:
name: Europe/Prague

View File

@@ -0,0 +1,29 @@
---
language: python
python: "2.7"
# Use the new container infrastructure
sudo: false
# Install ansible
addons:
apt:
packages:
- python-pip
install:
# Install ansible
- pip install ansible
# Check ansible version
- ansible --version
# Create ansible.cfg with correct roles_path
- printf '[defaults]\nroles_path=../' >ansible.cfg
script:
# Basic role syntax check
- ansible-playbook tests/test.yml -i tests/inventory --syntax-check
notifications:
webhooks: https://galaxy.ansible.com/api/v1/notifications/

View File

@@ -0,0 +1,38 @@
Role Name
=========
A brief description of the role goes here.
Requirements
------------
Any pre-requisites that may not be covered by Ansible itself or the role should be mentioned here. For instance, if the role uses the EC2 module, it may be a good idea to mention in this section that the boto package is required.
Role Variables
--------------
A description of the settable variables for this role should go here, including any variables that are in defaults/main.yml, vars/main.yml, and any variables that can/should be set via parameters to the role. Any variables that are read from other roles and/or the global scope (ie. hostvars, group vars, etc.) should be mentioned here as well.
Dependencies
------------
A list of other roles hosted on Galaxy should go here, plus any details in regards to parameters that may need to be set for other roles, or variables that are used from other roles.
Example Playbook
----------------
Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
- hosts: servers
roles:
- { role: username.rolename, x: 42 }
License
-------
BSD
Author Information
------------------
An optional section for the role authors to include contact information, or a website (HTML is not allowed).

View File

@@ -0,0 +1,52 @@
galaxy_info:
author: your name
description: your role description
company: your company (optional)
# If the issue tracker for your role is not on github, uncomment the
# next line and provide a value
# issue_tracker_url: http://example.com/issue/tracker
# Choose a valid license ID from https://spdx.org - some suggested licenses:
# - BSD-3-Clause (default)
# - MIT
# - GPL-2.0-or-later
# - GPL-3.0-only
# - Apache-2.0
# - CC-BY-4.0
license: license (GPL-2.0-or-later, MIT, etc)
min_ansible_version: 2.1
# If this a Container Enabled role, provide the minimum Ansible Container version.
# min_ansible_container_version:
#
# Provide a list of supported platforms, and for each platform a list of versions.
# If you don't wish to enumerate all versions for a particular platform, use 'all'.
# To view available platforms and versions (or releases), visit:
# https://galaxy.ansible.com/api/v1/platforms/
#
# platforms:
# - name: Fedora
# versions:
# - all
# - 25
# - name: SomePlatform
# versions:
# - all
# - 1.0
# - 7
# - 99.99
galaxy_tags: []
# List tags for your role here, one per line. A tag is a keyword that describes
# and categorizes the role. Users find roles by searching for tags. Be sure to
# remove the '[]' above, if you add tags to this list.
#
# NOTE: A tag is limited to a single word comprised of alphanumeric characters.
# Maximum 20 tags per role.
dependencies: []
# List your role dependencies here, one per line. Be sure to remove the '[]' above,
# if you add dependencies to this list.

View File

@@ -0,0 +1,2 @@
localhost

View File

@@ -5,4 +5,5 @@
loop:
- set_community_repo.yml
- iommu.yml
#- set_wol.yml

View File

@@ -0,0 +1 @@
#no fuctiona for now

View File

@@ -0,0 +1,29 @@
---
language: python
python: "2.7"
# Use the new container infrastructure
sudo: false
# Install ansible
addons:
apt:
packages:
- python-pip
install:
# Install ansible
- pip install ansible
# Check ansible version
- ansible --version
# Create ansible.cfg with correct roles_path
- printf '[defaults]\nroles_path=../' >ansible.cfg
script:
# Basic role syntax check
- ansible-playbook tests/test.yml -i tests/inventory --syntax-check
notifications:
webhooks: https://galaxy.ansible.com/api/v1/notifications/

View File

@@ -0,0 +1,38 @@
Role Name
=========
A brief description of the role goes here.
Requirements
------------
Any pre-requisites that may not be covered by Ansible itself or the role should be mentioned here. For instance, if the role uses the EC2 module, it may be a good idea to mention in this section that the boto package is required.
Role Variables
--------------
A description of the settable variables for this role should go here, including any variables that are in defaults/main.yml, vars/main.yml, and any variables that can/should be set via parameters to the role. Any variables that are read from other roles and/or the global scope (ie. hostvars, group vars, etc.) should be mentioned here as well.
Dependencies
------------
A list of other roles hosted on Galaxy should go here, plus any details in regards to parameters that may need to be set for other roles, or variables that are used from other roles.
Example Playbook
----------------
Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
- hosts: servers
roles:
- { role: username.rolename, x: 42 }
License
-------
BSD
Author Information
------------------
An optional section for the role authors to include contact information, or a website (HTML is not allowed).

View File

@@ -0,0 +1,2 @@
---
# defaults file for samba_install

View File

@@ -0,0 +1,6 @@
---
# handlers file for samba_install
- name: smb restart
service:
name: smb
state: restarted

View File

@@ -0,0 +1,52 @@
galaxy_info:
author: your name
description: your role description
company: your company (optional)
# If the issue tracker for your role is not on github, uncomment the
# next line and provide a value
# issue_tracker_url: http://example.com/issue/tracker
# Choose a valid license ID from https://spdx.org - some suggested licenses:
# - BSD-3-Clause (default)
# - MIT
# - GPL-2.0-or-later
# - GPL-3.0-only
# - Apache-2.0
# - CC-BY-4.0
license: license (GPL-2.0-or-later, MIT, etc)
min_ansible_version: 2.1
# If this a Container Enabled role, provide the minimum Ansible Container version.
# min_ansible_container_version:
#
# Provide a list of supported platforms, and for each platform a list of versions.
# If you don't wish to enumerate all versions for a particular platform, use 'all'.
# To view available platforms and versions (or releases), visit:
# https://galaxy.ansible.com/api/v1/platforms/
#
# platforms:
# - name: Fedora
# versions:
# - all
# - 25
# - name: SomePlatform
# versions:
# - all
# - 1.0
# - 7
# - 99.99
galaxy_tags: []
# List tags for your role here, one per line. A tag is a keyword that describes
# and categorizes the role. Users find roles by searching for tags. Be sure to
# remove the '[]' above, if you add tags to this list.
#
# NOTE: A tag is limited to a single word comprised of alphanumeric characters.
# Maximum 20 tags per role.
dependencies: []
# List your role dependencies here, one per line. Be sure to remove the '[]' above,
# if you add dependencies to this list.

View File

@@ -0,0 +1,22 @@
---
# tasks file for samba_install
- name: Install
ansible.builtin.package:
name:
- samba
state: present
- name: Start and enabled
ansible.builtin.service:
name: smbd
state: started
enabled: true
- name: Copy config
template:
src: ../templates/smb.conf
dest: /etc/samba/smb.conf
owner: root
group: root
mode: '0644'
notify: smb restart

View File

@@ -0,0 +1,54 @@
[global]
workgroup = DOMA2
interfaces = "{{ samba_ip }}"
bind interfaces only = yes
log file = /var/log/samba/log.%m
max log size = 1000
logging = file
panic action = /usr/share/samba/panic-action %d
server role = standalone server
obey pam restrictions = yes
unix password sync = yes
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
pam password change = yes
map to guest = bad user
; logon path = \\%N\profiles\%U
; logon drive = H:
; logon script = logon.cmd
; add user script = /usr/sbin/adduser --quiet --disabled-password --gecos "" %u
; add machine script = /usr/sbin/useradd -g machines -c "%u machine account" -d /var/lib/samba -s /bin/false %u
; add group script = /usr/sbin/addgroup --force-badname %g
; include = /home/samba/etc/smb.conf.%m
; idmap config * : backend = tdb
; idmap config * : range = 3000-7999
; idmap config YOURDOMAINHERE : backend = tdb
; idmap config YOURDOMAINHERE : range = 100000-999999
; template shell = /bin/bash
;[netlogon]
; comment = Network Logon Service
; path = /home/samba/netlogon
; guest ok = yes
; read only = yes
;[profiles]
; comment = Users profiles
; path = /home/samba/profiles
; guest ok = no
; browseable = no
; create mask = 0600
; directory mask = 0700
;[printers]
; comment = All Printers
; browseable = no
; path = /var/spool/samba
; printable = yes
; guest ok = no
; read only = yes
; create mask = 0700
;[print$]
; comment = Printer Drivers
; path = /var/lib/samba/printers
; browseable = yes
; read only = yes
; guest ok = no
; write list = root, @lpadmin

View File

@@ -0,0 +1,2 @@
localhost

View File

@@ -0,0 +1,5 @@
---
- hosts: localhost
remote_user: root
roles:
- samba_install

View File

@@ -0,0 +1,2 @@
---
# vars file for samba_install

View File

@@ -18,6 +18,8 @@
- rsync
- iotop
- screen
- python3
- python3-pip
state: present
- name: Wireguard deb

View File

@@ -0,0 +1,29 @@
---
language: python
python: "2.7"
# Use the new container infrastructure
sudo: false
# Install ansible
addons:
apt:
packages:
- python-pip
install:
# Install ansible
- pip install ansible
# Check ansible version
- ansible --version
# Create ansible.cfg with correct roles_path
- printf '[defaults]\nroles_path=../' >ansible.cfg
script:
# Basic role syntax check
- ansible-playbook tests/test.yml -i tests/inventory --syntax-check
notifications:
webhooks: https://galaxy.ansible.com/api/v1/notifications/

View File

@@ -0,0 +1,38 @@
Role Name
=========
A brief description of the role goes here.
Requirements
------------
Any pre-requisites that may not be covered by Ansible itself or the role should be mentioned here. For instance, if the role uses the EC2 module, it may be a good idea to mention in this section that the boto package is required.
Role Variables
--------------
A description of the settable variables for this role should go here, including any variables that are in defaults/main.yml, vars/main.yml, and any variables that can/should be set via parameters to the role. Any variables that are read from other roles and/or the global scope (ie. hostvars, group vars, etc.) should be mentioned here as well.
Dependencies
------------
A list of other roles hosted on Galaxy should go here, plus any details in regards to parameters that may need to be set for other roles, or variables that are used from other roles.
Example Playbook
----------------
Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
- hosts: servers
roles:
- { role: username.rolename, x: 42 }
License
-------
BSD
Author Information
------------------
An optional section for the role authors to include contact information, or a website (HTML is not allowed).

View File

@@ -0,0 +1,52 @@
galaxy_info:
author: your name
description: your role description
company: your company (optional)
# If the issue tracker for your role is not on github, uncomment the
# next line and provide a value
# issue_tracker_url: http://example.com/issue/tracker
# Choose a valid license ID from https://spdx.org - some suggested licenses:
# - BSD-3-Clause (default)
# - MIT
# - GPL-2.0-or-later
# - GPL-3.0-only
# - Apache-2.0
# - CC-BY-4.0
license: license (GPL-2.0-or-later, MIT, etc)
min_ansible_version: 2.1
# If this a Container Enabled role, provide the minimum Ansible Container version.
# min_ansible_container_version:
#
# Provide a list of supported platforms, and for each platform a list of versions.
# If you don't wish to enumerate all versions for a particular platform, use 'all'.
# To view available platforms and versions (or releases), visit:
# https://galaxy.ansible.com/api/v1/platforms/
#
# platforms:
# - name: Fedora
# versions:
# - all
# - 25
# - name: SomePlatform
# versions:
# - all
# - 1.0
# - 7
# - 99.99
galaxy_tags: []
# List tags for your role here, one per line. A tag is a keyword that describes
# and categorizes the role. Users find roles by searching for tags. Be sure to
# remove the '[]' above, if you add tags to this list.
#
# NOTE: A tag is limited to a single word comprised of alphanumeric characters.
# Maximum 20 tags per role.
dependencies: []
# List your role dependencies here, one per line. Be sure to remove the '[]' above,
# if you add dependencies to this list.

View File

@@ -0,0 +1,2 @@
localhost