summaryrefslogtreecommitdiff
path: root/dan/ele-helene.yml
diff options
context:
space:
mode:
Diffstat (limited to 'dan/ele-helene.yml')
-rw-r--r--dan/ele-helene.yml95
1 files changed, 6 insertions, 89 deletions
diff --git a/dan/ele-helene.yml b/dan/ele-helene.yml
index e3913843..fea6a533 100644
--- a/dan/ele-helene.yml
+++ b/dan/ele-helene.yml
@@ -8,93 +8,10 @@
- role: core/zsh
- role: core/ntp
- role: core/cpu-microcode
- - role: apt-repo/spreadspace
- - role: nginx/base
- - role: monitoring/prometheus/exporter
- - role: vm/host/base
- - role: vm/host/network
- - role: installer/debian/base
- - role: installer/openbsd/base
- - role: streaming/blackmagic/desktopvideo
- - role: kubernetes/base
- - role: kubernetes/standalone/base
- - role: streaming/player
- # post_tasks:
- # - name: install smstools
- # apt:
- # name: smstools
- # state: present
- # - name: add user for sachet
- # user:
- # name: sachet
- # system: yes
- # home: /nonexistent
- # create_home: no
- # groups: smsd
- # append: yes
-
- # - name: create sachet config directory
- # file:
- # path: /etc/sachet
- # state: directory
-
- # - name: install sachet config file
- # copy:
- # dest: /etc/sachet/config.yml
- # content: |
- # providers:
- # smstools:
- # outgoing_dir: /var/spool/sms/outgoing
-
- # receivers:
- # - name: equinox
- # provider: smstools
- # to:
- # - '+436644800222'
-
- # - name: install systemd service unit for sachet
- # copy:
- # dest: /etc/systemd/system/sachet.service
- # content: |
- # [Unit]
- # Description=Sachet SMS Daemon for Prometheus Alertmanager
-
- # [Service]
- # Restart=on-failure
- # User=sachet
- # ExecStart=/usr/local/bin/sachet -config /etc/sachet/config.yml
-
- # # systemd hardening-options
- # AmbientCapabilities=
- # CapabilityBoundingSet=
- # DeviceAllow=/dev/null rw
- # DevicePolicy=strict
- # LimitMEMLOCK=0
- # LimitNOFILE=8192
- # LockPersonality=true
- # MemoryDenyWriteExecute=true
- # NoNewPrivileges=true
- # PrivateDevices=true
- # PrivateTmp=true
- # PrivateUsers=true
- # ProtectControlGroups=true
- # ProtectHome=true
- # ProtectKernelModules=true
- # ProtectKernelTunables=true
- # ProtectSystem=full
- # ReadWritePaths=/var/spool/sms/outgoing
- # RemoveIPC=true
- # RestrictNamespaces=true
- # RestrictRealtime=true
- # SystemCallArchitectures=native
-
- # [Install]
- # WantedBy=multi-user.target
-
- # ## TODO:
- # ## - configure smstools
- # ## - build sachet using this branch: https://github.com/spreadspace/sachet/tree/topic/add-smstools
- # ## - copy binary to /usr/local/bin/sachet
- # ## - $ systemctl daemon-reload
- # ## - $ systemctl enable --now sachet
+- name: Payload Setup
+ hosts: ele-helene
+ roles:
+ # - role: apt-repo/spreadspace
+ # - role: nginx/base
+ # - role: monitoring/prometheus/exporter