1 #####################################
2 ### someone's ansible provisioner ###
3 #####################################
4 # Part of: https://git.somenet.org/root/pub/somesible.git
5 # 2017-2024 by someone <someone@somenet.org>
10 - { role: base/systemd, tags: ['systemd'] }
12 # configure package manager + update pkg-cache + upgrade packages.
13 - { role: base/apt, tags: ['apt'] }
16 - { role: base/ansible, tags: ['ansible'] }
20 # configure grub defaults.
21 - { role: base/grub, tags: ['grub'] }
23 # install btrfs-helpers.
24 - { role: base/btrfs-helpers, tags: ['btrfshelpers'] }
26 # setup fulldisk-initrd-encryption helpers
27 - { role: base/cryptsetup-helper, tags: ['cryptsetuphelper'] }
30 - { role: base/hostname, tags: ['hostname'] }
32 # configure system settings.
33 - { role: base/sysctl, tags: ['sysctl'] }
35 # install + configure logrotate.
36 - { role: base/logrotate, tags: ['logrotate'] }
38 # install + configure backups.
39 - { role: base/backup, tags: ['backup'] }
43 # setup networking and firewall.
44 - { role: base/network, tags: ['network'] }
46 # install + configure wireguard interface(s).
47 - { role: base/wireguard, tags: ['wireguard'] }
49 # install + configure sshd.
50 - { role: base/ssh, tags: ['ssh'] }
52 # install + configure ntpd server config.
53 - { role: base/ntp, tags: ['ntp'] }
55 # install + configure munin-node with munin-async proxy.
56 - { role: base/munin-node, tags: ['munin-node'] }
58 # install + configure tor node with hidden sshd service.
59 - { role: base/tor, tags: ['tor'] }
63 # create/update users.
64 - { role: base/create-users, tags: ['createusers'] }