hypervisors/ansible/hypervisors.yml

---
- hosts: hypervisors

  handlers:
    - name: enable interfaces
      command:
        cmd: ifup -a

  pre_tasks:
    - name: Set timezone
      timezone:
        name: Europe/Amsterdam

    - name: Create data directory
      file:
        path: /data
        state: directory
        mode: og=rwx

  roles:
    - {role: setup_apt, tags: setup_apt}
    - {role: libvirt, tags: libvirt}

- hosts: atlas

  roles:
    - {role: postgresql, tags: postgresql}
    - {role: ssh_ca, tags: ssh_ca}

- hosts: hypervisors
  no_log: False

  handlers:
    - name: enable interfaces
      command:
        cmd: ifup -a

  pre_tasks:
    - name: Copy interfaces configuration
      copy:
        src: dmz.conf
        dest: /etc/network/interfaces.d/dmz.conf
      notify: enable interfaces

  roles:
    - {role: wireguard, tags: wireguard}
    - {role: ssh_ca_known_hosts, tags: ssh_ca_known_hosts}
    - {role: deploy_ssh_certificates, tags: deploy_ssh_certificates}
    - {role: borg, tags: borg}