Ansible - Revision history

Paul: /* Requirements */

2026-03-20T09:05:08Z

Requirements

← Older revision		Revision as of 09:05, 20 March 2026
Line 4:		Line 4:

	* SSH		* SSH
	* Python 2.5 or later		* Python 3.10 or later

	Control machine requires Python 2.6 or later.		Control machine requires Python 3.10 or later.

	Ansible is push-based, i.e. updates occur only when a playbook is run. However, pull-based support is available via <code>ansible-pull</code>.		Ansible is push-based, i.e. updates occur only when a playbook is run. However, pull-based support is available via <code>ansible-pull</code>.

2026-03-20T09:02:53Z

← Older revision		Revision as of 09:02, 20 March 2026
Line 101:		Line 101:

	== Roles ==		== Roles ==

			Roles are split into three categories:

			* Core: Created by the Ansible team.
			* Certified: Created by certified RedHat / IBM partners.
			* Community: Created by anyone.

	Each Ansible role has a name, e.g. <code>web</code>. Files associated with this role go into <code>roles/web</code>, including:		Each Ansible role has a name, e.g. <code>web</code>. Files associated with this role go into <code>roles/web</code>, including:

2020-07-25T10:28:45Z

certbot

← Older revision		Revision as of 10:28, 25 July 2020
Line 157:		Line 157:
	* May also need certificates for email and other services		* May also need certificates for email and other services
	* Do we need a cron job to reload services after certificates have been renewed?		* Do we need a cron job to reload services after certificates have been renewed?
			* Should DNS challenge and dehydrated be in a separate Mythic Beasts role?

	==== Automatic blocking ====		==== Automatic blocking ====

2020-07-25T10:28:08Z

General

← Older revision		Revision as of 10:28, 25 July 2020
Line 140:		Line 140:

	* Set hostname and mailname before installing packages		* Set hostname and mailname before installing packages

			Disabling MOTD updates for privacy reasons:

			In file:

			/etc/default/motd-news

			set:

			ENABLED=0

	==== certbot ====		==== certbot ====

2020-07-20T17:29:43Z

Roles

← Older revision		Revision as of 17:29, 20 July 2020
Line 198:		Line 198:
	- nginx		- nginx
	</pre>		</pre>

			=== Example roles ===

			* https://git.coop/webarch/fail2ban
			* https://git.coop/webarch/exim

	== Testing ==		== Testing ==

2020-07-20T11:43:11Z

Base server

← Older revision		Revision as of 11:43, 20 July 2020
Line 146:		Line 146:
	* Is a recent version of dehydrated available in the Ubuntu repositories, or a PPA?		* Is a recent version of dehydrated available in the Ubuntu repositories, or a PPA?
	* May also need certificates for email and other services		* May also need certificates for email and other services
			* Do we need a cron job to reload services after certificates have been renewed?

	==== Automatic blocking ====		==== Automatic blocking ====

2020-07-20T11:42:43Z

Roles

← Older revision		Revision as of 11:42, 20 July 2020
Line 135:		Line 135:
	* <code>unattended-upgrades</code>		* <code>unattended-upgrades</code>
	* Backup scripts		* Backup scripts
			* certbot / dehydrated

	==== General ====		==== General ====

	* Set hostname and mailname before installing packages		* Set hostname and mailname before installing packages

			==== certbot ====

			* How do we get around the bootstrapping problem when obtaining a certificate for the first time? DNS challenge?
			* Is a recent version of dehydrated available in the Ubuntu repositories, or a PPA?
			* May also need certificates for email and other services

	==== Automatic blocking ====		==== Automatic blocking ====
Line 171:		Line 178:
	* Nginx		* Nginx
	* PHP FPM		* PHP FPM
	* Certbot

	=== Database server ===		=== Database server ===

2020-07-20T11:41:49Z

certbot

← Older revision		Revision as of 11:41, 20 July 2020
Line 172:		Line 172:
	* PHP FPM		* PHP FPM
	* Certbot		* Certbot

	~~==== certbot ====~~

	* How do we get around the bootstrapping problem when obtaining a certificate for the first time? DNS challenge?
	* Is a recent version of dehydrated available in the Ubuntu repositories, or a PPA?

	=== Database server ===		=== Database server ===

2020-07-20T10:05:58Z

certbot

← Older revision		Revision as of 10:05, 20 July 2020
Line 176:		Line 176:

	* How do we get around the bootstrapping problem when obtaining a certificate for the first time? DNS challenge?		* How do we get around the bootstrapping problem when obtaining a certificate for the first time? DNS challenge?
			* Is a recent version of dehydrated available in the Ubuntu repositories, or a PPA?

	=== Database server ===		=== Database server ===

2020-07-20T10:02:50Z

Web server

← Older revision		Revision as of 10:02, 20 July 2020
Line 172:		Line 172:
	* PHP FPM		* PHP FPM
	* Certbot		* Certbot

			==== certbot ====

			* How do we get around the bootstrapping problem when obtaining a certificate for the first time? DNS challenge?

	=== Database server ===		=== Database server ===