No description
This repository has been archived on 2023-04-26. You can view files and clone it, but cannot push or open issues or pull requests.
Find a file
2023-04-03 21:31:57 +02:00
inventory change hostnames 2023-03-14 22:44:41 +01:00
playbooks added cyberchef.geokunis2.nl 2023-04-03 21:31:57 +02:00
roles added cyberchef.geokunis2.nl 2023-04-03 21:31:57 +02:00
util remove echo from vault password prompt 2023-02-25 18:12:17 +01:00
.gitignore change makefile 2023-01-16 21:35:44 +01:00
ansible.cfg take vault password from secret service 2023-02-24 22:18:50 +01:00
LICENSE Create LICENSE 2022-11-13 14:52:43 +01:00
Makefile improve script inovcation 2023-01-16 22:28:00 +01:00
README.md remove authoritative DNS server 2023-03-19 11:44:16 +01:00

Max

This repository contains Ansible scripts to setup our main home server max. The common role executes some common OS tasks. The docker role installs Docker. The other roles are specifically for the various services we run.

Running services

All services below are running under Docker, except NSD and Borg.

Possible future services

  • matrix
  • peertube?
  • Pixelfed?
  • Prometheus
  • Concourse CI?

TODO

  • Clear view of what services + which versions we are running. This way, we can track security updates better.
  • Host tobb website?
  • Move from Ubuntu to Debian
  • move Mastodon to pim.kunis.nl
  • Podman
  • Replace watchtower with Podman features

NSD

ZSK Rollover

Could make automatic key rollovers with cron or some other tool.

Idempotency

Currently I always resign zones. But for idempotency I should probably only do it if the zone has changed or the keys have changed.

Firewall

A little more difficult because of docker networking but probably doable.