Playbooks to a new Lilik

Zolfa 5631ae6a15 style and variables refactoring - Coherent quotation style Single quotes for text variable (even if implicit), no quotes for variable and conditional statements, if not required. - Some useful tags added: * ssh_certs renewal of server SSH certificates and configuration of authorized CA. * tls_pub renewal of public TLS certificates (let's encrypt) and certbot configuration. * tls_int renewal of internal TLS certificates (service authorizations) and configuration of authorized internal CA. (ToDo: deployment of Certificate Revokation Lists) * lxc deployment of new containers (deployment of configuration file excluded, for instance change in ip address are always applied and trigger a container restart even if you skip this tag. * packages installation and upgrade of software packages (apt, opkg or tarballs) * service_password create new random password for services-only password, for routine rotation. Not meant to be skipped (some roles need to know the service password, so they do a rotation). - prepare_host - ssh_server - lxc_guest - ldap - gitlab - x509_subject_prefix - x509_ldap_suffix Replaces: x509_suffix in ldap.yaml - letsencrypt_email Used in roles/certbot and roles/gitlab - root_ca_cert Replaces: ssl_ca_cert and files/lilik_x1.crt New defaults: - ldap_domain \| default: `${domain}` - server_fqdn \| default: `${hostname}.dmz.${domain}` Replaces: fqdn_domain Removed: - fqdn_dmain - x509_suffix Replaced by: x509_ldap_suffix in common New defaults: - server_fqdn \| default: `${hostname}.${domain}` Replaces: fqdn - ldap_domain \| default: `${domain}` - ldap_server \| default: `ldap1.dmz.${domain}` - ldap_basedn \| default: `dn(${ldap_domain})` - enable_https \| default: `true` New defaults: - server_fqdn \| default: `${hostname}.${domain}`		5 years ago
connection_plugins	connection/ssh_lxc: new style for containers	5 years ago
doc	add new ssh and ssl CA	7 years ago
files	Add fullchain template	7 years ago
filter_plugins	use check instead of try, except block in filter ip_from_address	7 years ago
group_vars	group_vars/all.yaml: new example file	5 years ago
library	library/cert_request.py: fix tls request	5 years ago
roles	style and variables refactoring	5 years ago
tasks	integrate debug in ca-dialog	7 years ago
templates	prepare_host.yaml: new apt pkg style and tab fixed	5 years ago
.gitignore	fix hosts	7 years ago
LICENSE	Initial commit	9 years ago
MIGRATION.md	roles/lxc_guest: xfs fixed	5 years ago
README.md	update README with list of what's working	8 years ago
SETUP.md	add new ssh and ssl CA	7 years ago
all.yaml	add basic lxc_guest monitoring	7 years ago
ansible.cfg	Use default ansible folder for filter and connection plugin	7 years ago
bakulilik.yaml	add playbook for host bakulilik	7 years ago
blogs.yaml	migrate playbook: lxc_ssh.py -> ssh_lxc.py	5 years ago
ca.yaml	fix typo in host name	7 years ago
destroy_container.yaml	fix hosts	7 years ago
firewall.yaml	fix hosts	7 years ago
hosts	add debug message about certification authority host	7 years ago
hosts.example	connection/ssh_lxc: new style for containers	5 years ago
ldap.yaml	style and variables refactoring	5 years ago
lists.yaml	migrate playbook: lxc_ssh.py -> ssh_lxc.py	5 years ago
lists2.yaml	migrate playbook: lxc_ssh.py -> ssh_lxc.py	5 years ago
logger.yaml	migrate playbook: lxc_ssh.py -> ssh_lxc.py	5 years ago
login.yaml	migrate playbook: lxc_ssh.py -> ssh_lxc.py	5 years ago
mail.yaml	migrate playbook: lxc_ssh.py -> ssh_lxc.py	5 years ago
matrix.yaml	migrate playbook: lxc_ssh.py -> ssh_lxc.py	5 years ago
media.yaml	migrate playbook: lxc_ssh.py -> ssh_lxc.py	5 years ago
prepare_host.yaml	style and variables refactoring	5 years ago
projects.yaml	style and variables refactoring	5 years ago
requirements.txt	updated requirements and MIGRATION.md explanations	5 years ago
shadow_list.yaml	migrate playbook: lxc_ssh.py -> ssh_lxc.py	5 years ago
status.yaml	migrate playbook: lxc_ssh.py -> ssh_lxc.py	5 years ago
team_server.yaml	migrate playbook: lxc_ssh.py -> ssh_lxc.py	5 years ago
users.yaml	migrate playbook: lxc_ssh.py -> ssh_lxc.py	5 years ago
web_ca.yaml	migrate playbook: lxc_ssh.py -> ssh_lxc.py	5 years ago
webmail.yaml	migrate playbook: lxc_ssh.py -> ssh_lxc.py	5 years ago
wiki.yaml	migrate playbook: lxc_ssh.py -> ssh_lxc.py	5 years ago

README.md

lilik_playbook

Playbooks to a new Lilik

Production ready playbooks

destroy_container: let you destroy a container and scrap the lvm filesystem
wiki: run a Dokuwiki instance in a container

Production ready roles

dokuwiki
lxc_guest
mysql
nginx
postgresql