Initial Ansible automation for hobbs.farm infrastructure
Complete IaC covering: - 14 roles: common, docker, traefik, vaultwarden, monitoring, media, matrix, home_assistant, frigate, adguard, gitea, semaphore, openclaw, security, backup - Inventory for all hosts (Peggy, Bart, Yoda, NAS, Firewalla) - Stack playbooks: core-infrastructure, monitoring, media, communication, automation, smarthome, security-hardening - Maintenance playbooks: update-containers, backup, health-check - Production Docker Compose templates with Traefik labels - Security hardening (sysctl, auditd, UFW, fail2ban) - Automated backups with retention policy
This commit is contained in:
@@ -0,0 +1,37 @@
|
||||
---
|
||||
ansible_host: 192.168.86.45
|
||||
hostname: peggy
|
||||
hardware_description: "Intel i7-6700T, 8GB RAM"
|
||||
os: "Ubuntu 24.04"
|
||||
|
||||
docker_compose_stacks:
|
||||
- core-infrastructure
|
||||
- infrastructure
|
||||
- monitoring
|
||||
- media
|
||||
- automation
|
||||
- communication
|
||||
- smarthome
|
||||
|
||||
# NAS mounts for Peggy
|
||||
nfs_mounts:
|
||||
- src: "192.168.86.30:/volume1/media"
|
||||
dest: /mnt/nas/media
|
||||
fstype: nfs
|
||||
opts: "rw,hard,intr,rsize=8192,wsize=8192"
|
||||
- src: "192.168.86.30:/volume1/backups"
|
||||
dest: /mnt/nas/backups
|
||||
fstype: nfs
|
||||
opts: "rw,hard,intr"
|
||||
|
||||
# Backup paths
|
||||
backup_sources:
|
||||
- /data/docker-compose
|
||||
- /data/traefik
|
||||
- /data/vaultwarden
|
||||
- /data/grafana
|
||||
- /data/prometheus
|
||||
- /data/homeassistant
|
||||
- /data/gitea
|
||||
|
||||
backup_destination: /mnt/nas/backups/peggy
|
||||
Reference in New Issue
Block a user