This commit introduces the foundational Ansible playbooks, roles, and configurations for automated provisioning of both production and test environments. Key capabilities include: - **Base System Setup:** Common packages, timezone, chrony, and hostname. - **Security Hardening:** SELinux disable, SSH configuration, `dnf-automatic`, `fail2ban`, `firewalld` setup, and `journald` log limits. - **Docker & Swarm:** Docker installation and configuration, Docker Swarm initialization/joining for managers and workers, overlay network creation, and node labeling. - **Storage:** Hetzner StorageBox integration using `davfs2`. - **Directory Structure:** Creation of application and database-specific directories. This establishes a comprehensive, automated pipeline for infrastructure deployment and initial configuration.
7 lines
312 B
YAML
7 lines
312 B
YAML
# Prod environment specific variables
|
|
storagebox_user: "{{ storagebox_account }}-sub2" # Prod sub-account suffix
|
|
storagebox_url: "https://{{ storagebox_user }}.your-storagebox.de/"
|
|
storagebox_mount_point: "/mnt/storagebox"
|
|
swarm_manager_ip: "10.20.10.11"
|
|
# storagebox_password: "{{ vault_storagebox_password }}"
|