Ansible project to manage my services.
https://viyurz.fr
| playbooks | ||
| projects | ||
| roles | ||
| .gitignore | ||
| ansible-playbook-selector.sh | ||
| ansible.cfg | ||
| env.yml | ||
| fstab | ||
| manage.py | ||
| monitoring.py | ||
| monitoring.service | ||
| nftables.conf.mako | ||
| psql-create-db-user.sh | ||
| pyenv.yml | ||
| pysecrets.yml.example | ||
| README.md | ||
| secrets.yml.example | ||
| setup.sh | ||
vps
This repository contains all the files I use to manage my services hosted on viyurz.fr.
Requirements
Initial setup
Run the setup script:
./setup.sh
SSL certificates
Install Certbot:
sudo apt install -y certbot python3-certbot-dns-ovh python3-certbot-nginx
Request certificates:
# For the NGINX reverse proxy
sudo certbot certonly --nginx -d viyurz.fr,*.viyurz.fr
# For Coturn
bash <(wget -q -O - https://github.com/zerossl/zerossl-bot/raw/master/get-zerosslbot.sh)
sudo zerossl-bot certonly --nginx -m viyurz@viyurz.fr -d turn.viyurz.fr
# For the mailserver
sudo certbot certonly --nginx -d mail.viyurz.fr
Secrets
Copy the existing secrets.yml.example file to secrets.yml and fill the variables.
Storagebox
Add credential:
/etc/storagebox-cifs-credentials.txt
---
username=MYUSERNAME
password=MYPASSWORD
Copy the file fstab and edit it accordingly (username and potentially uids/gids).
Backups
Create a cronjob to periodically backup all projects:
0 4 * * * /home/viyurz/vps/manage.py backup ''