ansible/all.yml

97 lines
1.8 KiB
YAML

- hosts: managed
gather_facts: false
roles:
- { role: basics, tags: basics }
- { role: users, tags: users }
# Network roles
- hosts: wireguard
roles:
- { role: wireguard, tags: wireguard }
- hosts: vps
roles:
- { role: nftables, tags: nftables }
- { role: haproxy, tags: haproxy }
- hosts: dns
roles:
- { role: dns, tags: dns }
- hosts: dns_ext
roles:
- { role: dns_ext, tags: dns_ext }
# TLS
- hosts: acme
roles:
- role: certbot_dns
tags: acme
# Services
- hosts: ilb
roles:
- { role: haproxy, tags: haproxy }
- hosts: docker
roles:
- { role: docker, tags: docker }
- hosts: rp
roles:
- { role: nginx, tags: nginx }
- hosts: website
roles:
- { role: website, tags: website }
- { role: alias, tags: alias }
- hosts: postgres
roles:
- {role: postgres, tags: postgres }
- hosts: ldap
roles:
- {role: ldap, tags: ldap }
- hosts: sso
roles:
- {role: lemonldap, tags: lemonldap }
- hosts: forgejo
roles:
- {role: forgejo, tags: forgejo }
- hosts: backend-mail
roles:
- { role: postfix, tags: postfix-backend }
- { role: dovecot, tags: dovecot-backend }
- { role: mail-autoconfig, tags: mail-autoconfig }
- hosts: pmg
roles:
- { role: pmg, tags: pmg }
- hosts: vault
roles:
- { role: vaultwarden, tags: vaultwarden }
- hosts: bookstack
roles:
- { role: bookstack, tags: bookstack }
- hosts: webmail
roles:
- { role: roundcube, tags: roundcube }
- { role: nginx, tags: nginx }
- hosts: monitoring
roles:
- { role: prometheus, tags: prometheus }
- { role: blackbox_exporter, tags: blackbox_exporter }
- { role: grafana, tags: grafana }
- { role: alertmanager, tags: alertmanager }
- hosts: lxc
roles:
- { role: node_exporter, tags: node_exporter }