This Repository will be handle the base configuration of Public Services, like Minecraft Server or Personal S3 Storage, a try dont get any Snowflake Server.
Mostly hosted at hetzner.cloud, and created with Terraform.
- harder
sshd- configure
fail2ban
- configure
- install
restic - base
logrotateconfiguration - configure
MotD(Message of the Day) - install
python3 - configure system
ntpfor time handling - configure
docker(optional) - Security Scans
- execute
open-scap-scan - root kit analyse with
rkhunter - configure
aide(planed)
- execute
- Provide any Infrastructure (see nolte/terraform-infrastructure-modules)
- Install any Services, like Minecraft (nolte/minecraft-infrastructure), or MinIO (nolte/personal-storage-infrastructure).
virtualenv -p python3 ~/venvs/develop-ansible_role-vagrant
source ~/venvs/develop-ansible_role-vagrant/bin/activate
pip install -r requirements.txt
pre-commit install
ansible-galaxy install -r requirements.ymlpass private/keyfiles/ssh/ansible_rollout/passphrase -c
eval "$(ssh-agent -s)"
ssh-add ~/.ssh/ansible_id_ed25519| playbook | ansible_group | description |
|---|---|---|
master-configure-system.yml |
master playbook for combine the base and docker playbook. | |
playbook-base-configureation.yml |
all | Configure the base system. |
playbook-docker-configureation.yml |
dockerbased | Prepare the System for docker Usage |
export ANSIBLE_INVENTORY=$(pwd)/prod
export HCLOUD_TOKEN=$(pass .../token)
ansible-playbook master-configure-system.ymlFor Locally automatical testing we use a Combination of Molecule and Vagrant
virtualenv -p python3 ~/venvs/ansible-vagrant/
source ~/venvs/ansible-vagrant/bin/activate
pip install -r requirements.txt
pre-commit installrunning the tests:
molecule testpytest --connection=ansible --hosts=all test/*For reusing and sharing you can create own vagrant box with the Packer File under /build.
source ~/venvs/develop-ansible_role-vagrant/bin/activate
ansible-galaxy install -r requirements.yml
cd build
packer build base_centos.json
vagrant box add base-box file:///$(pwd)/.output-vagrant-base/vagrant/package.box --force
packer build base_docker_box.json
vagrant box add docker-box file:///$(pwd)/.output-vagrant-docker/vagrant/package.box --forceMust be executed from the develop branch.
pre-commit uninstall \
&& bump2version --tag release --commit \
&& git checkout master && git merge develop && git checkout develop \
&& bump2version --no-tag patch --commit \
&& git push origin master --tags \
&& git push origin develop \
&& pre-commit install
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent