Add role proxmox-backup

This commit is contained in:
Gašper Fele-Žorž 2024-09-10 14:13:24 +02:00
parent b5565b24fd
commit f2fbd0c848
2 changed files with 99 additions and 0 deletions

View file

@ -0,0 +1,12 @@
- name: reboot
reboot:
when: "'handler' not in ansible_skip_tags"
- name: reload interfaces
command: ifreload -a
when: "'handler' not in ansible_skip_tags"
- name: update package cache
package:
update_cache: yes
when: "'handler' not in ansible_skip_tags"

View file

@ -0,0 +1,87 @@
- name: Set hostname
hostname:
name: '{{ inventory_hostname }}'
- name: Set up resolv.conf
template:
dest: /etc/resolv.conf
src: resolv.conf.j2
mode: 0644
- name: Set up debian repositories
template:
dest: /etc/apt/sources.list
src: sources.list.j2
mode: 0644
notify: update package cache
when: debian_release is defined
- name: Disable enterprise repositories
apt_repository:
repo: 'deb https://enterprise.proxmox.com/debian/pbs {{ ansible_distribution_release }} pbs-enterprise'
state: absent
- name: Enable no-subscription repository
apt_repository:
repo: 'deb http://download.proxmox.com/debian/pbs {{ ansible_distribution_release }} pbs-no-subscription'
- name: Install essential packages
package:
name:
- git
- rsync
- vim
- tmux
- name: Add rules to rename network interfaces
template:
dest: /etc/udev/rules.d/10-network.rules
src: 10-network.rules.j2
mode: 0644
notify: reboot
- name: Include interfaces.d definitions
copy:
dest: /etc/network/interfaces
content: 'source /etc/network/interfaces.d/*'
notify: reload interfaces
- name: Set up interfaces
template:
dest: /etc/network/interfaces.d/ansible.intf
src: ansible.intf.j2
mode: 0644
notify: reload interfaces
- name: Run SSH instance in management VRF
when: interfaces | selectattr('vrf') | selectattr('vrf.name', '==', 'mgmt')
block:
- name: Configure SSH instance in management VRF
copy:
dest: /etc/ssh/
src: sshd_config.mgmt
mode: 0644
notify: reboot
- name: Set up a SSH instance in management VRF
copy:
dest: /etc/systemd/system/
src: sshd@mgmt.service
mode: 0644
notify: reboot
- name: Enable management SSH
service:
name: sshd@mgmt
enabled: yes
notify: reboot
- name: Disble SSH in default VRF
service:
name: ssh
enabled: no
notify: reboot
- meta: flush_handlers