ansible-ffrgb/site.yml

---

- name: Setup common roles on all hosts
  hosts: all
  roles:
  - common
  - apt
  - ntp
  - node_exporter

- name: Setup gateway servers
  hosts: [gw11.regensburg.freifunk.net, gw21.regensburg.freifunk.net, gw31.regensburg.freifunk.net, gw12.regensburg.freifunk.net, gw22.regensburg.freifunk.net]
  roles:
  - root_keys
  - arp_cache
  - batman
  - bird
  - fastd
  - fastd_exporter
  - interfaces
  - exit_ip
  - dns_split
  - radvd
  - dhcpd
  - respondd
  - yanic
  - web_gw

- name: Setup gateway servers with VXoWG
  hosts: [gw11.regensburg.freifunk.net, gw21.regensburg.freifunk.net, gw31.regensburg.freifunk.net]
  roles:
  - mesh_wg

- name: Setup stats server
  hosts: stats.regensburg.freifunk.net
  roles:
  - influxdb
  - prometheus
  - grafana
  - yanic
  - web_stats

- name: Setup tile server
  hosts: tiles.regensburg.freifunk.net
  roles:
  - tileserver

- name: Setup name servers
  hosts: ns1.regensburg.freifunk.net
  roles:
  - dns_auth

- name: Setup web service proxy
  hosts: web.regensburg.freifunk.net
  roles:
  - speedtest
  - web_svc

- name: Setup resolver
  hosts: resolver.regensburg.freifunk.net
  roles:
  - dns_resolver

- name: Setup netbox server
  hosts: netbox.regensburg.freifunk.net
  roles:
  - netbox

- name: Setup unms server
  hosts: unms.ffrgb
  roles:
  - docker

- name: Setup unifi server
  hosts: unifi.ffrgb
  roles:
  - unifi
Initial commit 2017-03-26 20:02:33 +02:00			`---`

			`- name: Setup common roles on all hosts`
			`hosts: all`
			`roles:`
			`- common`
Add apt role (adpoted from FFHB) 2017-03-26 21:48:44 +02:00			`- apt`
Initial commit 2017-03-26 20:02:33 +02:00			`- ntp`
Install node_exporter to enable monitoring 2018-07-12 10:35:15 +02:00			`- node_exporter`
Add confluence role and dependencies 2017-03-26 20:12:50 +02:00
Add fastd role and depoly to test gateway 2017-03-26 21:33:16 +02:00			`- name: Setup gateway servers`
Added Backup gw's, todo: dhcp range calculation, go installation 2018-12-13 17:21:01 +01:00			`hosts: [gw11.regensburg.freifunk.net, gw21.regensburg.freifunk.net, gw31.regensburg.freifunk.net, gw12.regensburg.freifunk.net, gw22.regensburg.freifunk.net]`
Add fastd role and depoly to test gateway 2017-03-26 21:33:16 +02:00			`roles:`
gw-admin-ssh-keys: rename to root_keys 2020-10-06 10:14:45 +02:00			`- root_keys`
arp-cache: rename to arp_cache 2020-10-06 10:12:47 +02:00			`- arp_cache`
Fix too small ARP/ND cache 2018-07-19 16:28:52 +02:00			`- batman`
			`- bird`
			`- fastd`
fastd-exporter: rename to fastd_exporter 2020-10-06 10:13:54 +02:00			`- fastd_exporter`
mesh-interfaces: rename to interfaces 2020-10-06 10:05:53 +02:00			`- interfaces`
exit-ip: rename to exit_ip 2020-10-06 10:13:16 +02:00			`- exit_ip`
dns_split: rename from dns 2020-11-24 20:52:14 +01:00			`- dns_split`
Fix too small ARP/ND cache 2018-07-19 16:28:52 +02:00			`- radvd`
			`- dhcpd`
			`- respondd`
			`- yanic`
web-gw: rename to web_gw 2020-10-06 10:16:33 +02:00			`- web_gw`
Add fastd role and depoly to test gateway 2017-03-26 21:33:16 +02:00
mesh_wg: new role for VXLAN over WG meshing This is still work in progress, as such it is only enabled on the test gateway. 2020-11-23 19:44:52 +01:00			`- name: Setup gateway servers with VXoWG`
add mesh via vxlan over wireguard to gw11 and gw21 2021-07-23 16:32:46 +02:00			`hosts: [gw11.regensburg.freifunk.net, gw21.regensburg.freifunk.net, gw31.regensburg.freifunk.net]`
mesh_wg: new role for VXLAN over WG meshing This is still work in progress, as such it is only enabled on the test gateway. 2020-11-23 19:44:52 +01:00			`roles:`
			`- mesh_wg`

stats: migrate to new host, enable for dnsdist 2020-11-25 18:26:28 +01:00			`- name: Setup stats server`
rename grafana to stats 2020-11-24 14:03:55 +01:00			`hosts: stats.regensburg.freifunk.net`
new host: grafana.regensburg.freifunk.net new role: influxdb 2020-11-04 23:15:34 +01:00			`roles:`
			`- influxdb`
stats: migrate to new host, enable for dnsdist 2020-11-25 18:26:28 +01:00			`- prometheus`
new host: grafana.regensburg.freifunk.net new role: influxdb 2020-11-04 23:15:34 +01:00			`- grafana`
yanic: make suitable for grafana host 2020-11-23 22:22:23 +01:00			`- yanic`
Add NGINX Role tailored for stateserver usage 2020-11-24 18:22:03 +01:00			`- web_stats`
new host: grafana.regensburg.freifunk.net new role: influxdb 2020-11-04 23:15:34 +01:00
tileserver: move from internal network to internet 2024-10-04 23:11:27 +02:00			`- name: Setup tile server`
			`hosts: tiles.regensburg.freifunk.net`
			`roles:`
			`- tileserver`

dns_auth: new role also apply role to ns1.regensburg.freifunk.net 2020-10-20 15:26:50 +02:00			`- name: Setup name servers`
			`hosts: ns1.regensburg.freifunk.net`
			`roles:`
			`- dns_auth`

implement web service reverse proxy 2020-06-16 23:42:14 +02:00			`- name: Setup web service proxy`
			`hosts: web.regensburg.freifunk.net`
			`roles:`
speedtest: new role to be deployed on web server 2024-10-06 17:24:38 +02:00			`- speedtest`
web-svc: rename to web_svc 2020-10-06 10:17:06 +02:00			`- web_svc`
implement web service reverse proxy 2020-06-16 23:42:14 +02:00
dns_resolver: new role for resolver only 2020-11-24 22:40:48 +01:00			`- name: Setup resolver`
			`hosts: resolver.regensburg.freifunk.net`
			`roles:`
			`- dns_resolver`

netbox: move from internal network to internet 2024-10-04 17:49:44 +02:00			`- name: Setup netbox server`
			`hosts: netbox.regensburg.freifunk.net`
			`roles:`
			`- netbox`

docker: only apply explicitly where needed 2020-06-19 21:15:19 +02:00			`- name: Setup unms server`
			`hosts: unms.ffrgb`
docker: new role that is common to all docker VMs 2020-06-16 22:54:53 +02:00			`roles:`
			`- docker`
tileserver: new role to serve map tile 2020-06-17 20:44:52 +02:00
unifi: add role for unifi controller 2020-06-17 20:53:51 +02:00			`- name: Setup unifi server`
			`hosts: unifi.ffrgb`
			`roles:`
			`- unifi`