Viyurz/vps
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
Project to manage my services. https://viyurz.fr
129 commits 1 branch 0 tags 4.5 MiB
Mako 46.8%
Python 46.7%
Shell 5.3%
Dockerfile 1.2%
Find a file
Viyurz 30f6f1f3ee
Move nftables to its own playbook.
2024-03-02 12:03:14 +01:00
playbooks Move nftables to its own playbook. 2024-03-02 12:03:14 +01:00
roles Update reverse proxy. 2024-03-02 11:57:21 +01:00
.gitignore The Great Ansible Update. 2024-02-17 19:01:04 +01:00
ansible-playbook-selector.sh The Great Ansible Update. 2024-02-17 19:01:04 +01:00
ansible.cfg The Great Ansible Update. 2024-02-17 19:01:04 +01:00
env.yml Update homepage role for V2. 2024-02-25 19:15:58 +01:00
README.md README: Add full crontab entry. 2024-02-23 09:46:48 +01:00
secrets.yml.example Add Synapse backup tasks. 2024-02-23 12:17:32 +01:00

README.md

vps

This repository contains all the files I use to manage services hosted on viyurz.fr.

Requirements

Ansible:

sudo apt install -y ansible

Setup SSL certificates with Certbot beforehand:

sudo apt install -y certbot python3-certbot-dns-ovh

Secrets

Copy the existing secrets.yml.example to secrets.yml, run ansible-vault encrypt secrets.yml to encrypt the file with a password, and finally edit the newly encrypted file with ansible-vault edit secrets.yml.

If you want to change the vault password run ansible-vault rekey secrets.yml.

Backups

Run the backup-services.yml playbook once to setup the passphrase file.

After that, you can create a root cronjob to run this playbook without requiring interactivity:

0 4 * * * export ANSIBLE_ROLES_PATH=/home/viyurz/vps/roles/; /usr/bin/ansible-playbook /home/viyurz/vps/playbooks/backup-services.yml -e include_secrets=false -e selected_projects=''

Here we leave selected_projects empty to backup all projects.