Noratrieb/vps
1
0
Fork 0
mirror of https://github.com/Noratrieb/vps.git synced 2026-01-14 16:55:00 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

more

Browse source
This commit is contained in:
nora 2023-08-26 20:40:30 +02:00
parent b12faec372
commit bd28224e55
4 changed files with 71 additions and 33 deletions
Download patch file Download diff file Expand all files Collapse all files

1
flake.nix
View file

@ -36,6 +36,7 @@
certbot certbot
dig dig
openssl openssl
caddy
]; ];
}; };
}); });

15
new/debug.html Normal file
View file

@ -0,0 +1,15 @@
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>nils' server</title>
</head>
<body>
<h1>congrats, you landed on my server directly!?</h1>
<p>sorry, but there isn't anything cool here. this is <b>my</b> infra, you are not allowed here.</p>
<p>if you do want to be allowed here, then uh.. still no.</p>
<p>:3</p>
</body>
</html>

78
new/playbooks/basic-setup.yml
View file

@ -2,46 +2,58 @@
- name: Basic Server setup - name: Basic Server setup
hosts: all hosts: all
gather_facts: false gather_facts: false
vars:
acme_challenge_type: http-01
acme_directory: https://acme-v02.api.letsencrypt.org/directory
acme_version: 2
acme_email: nilstrieb@gmail.com # don't spam me pls :(
letsencrypt_dir: /etc/letsencrypt
letsencrypt_keys_dir: /etc/letsencrypt/keys
letsencrypt_csrs_dir: /etc/letsencrypt/csrs
letsencrypt_certs_dir: /etc/letsencrypt/certs
letsencrypt_account_key: /etc/letsencrypt/account/account.key
domain_name: vps2.nilstrieb.dev
tasks: tasks:
- name: Test ping
ansible.builtin.ping:
- name: Install docker - name: Install docker
ansible.builtin.apt: ansible.builtin.apt:
name: docker.io name: docker.io
state: present state: present
- name: Install nginx - name: Install keyring packages
ansible.builtin.apt: ansible.builtin.apt:
name: nginx name: "{{ item }}"
with_items:
- debian-keyring
- debian-archive-keyring
- apt-transport-https
- name: Add caddy keyrings
ansible.builtin.shell: |
set -euo pipefail
sudo rm /usr/share/keyrings/caddy-stable-archive-keyring.gpg
curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/gpg.key' | sudo gpg --dearmor -o /usr/share/keyrings/caddy-stable-archive-keyring.gpg
curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/debian.deb.txt' | sudo tee /etc/apt/sources.list.d/caddy-stable.list
# todo: show ok/changed
args:
executable: /bin/bash
- name: Install caddy
ansible.builtin.apt:
name: caddy
state: present state: present
- name: Ensure nginx is started args:
update_cache: true
- name: Ensure caddy is started
ansible.builtin.service: ansible.builtin.service:
name: nginx name: caddy
state: started state: started
- name: Create hello world file - name: Create debug html root
ansible.builtin.copy: ansible.builtin.file:
dest: /var/www/html/index.html path: /var/www/html/debug
content: | state: directory
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>uwu</title>
</head>
<body>
meow :3
</body>
</html>
mode: u=rw,g=r,o=r mode: u=rw,g=r,o=r
- name: Create debug webserver file
ansible.builtin.copy:
dest: /var/www/html/debug/index.html
src: "../debug.html"
mode: u=rw,g=r,o=r
- name: Copy Caddyfile
ansible.builtin.copy:
dest: /etc/caddy/Caddyfile
src: "../vps2/Caddyfile" # TODO: Choose the right caddyfile depending on the server.
mode: "u=rw,g=r,o=r"
notify:
- "Caddyfile changed"
handlers:
- name: "Caddyfile changed"
ansible.builtin.service:
name: caddy
state: reloaded

10
new/vps2/Caddyfile Normal file
View file

@ -0,0 +1,10 @@
{
email nilstrieb@gmail.com
acme_ca https://acme-staging-v02.api.letsencrypt.org/directory
debug
}
vps2.nilstrieb.dev
root * /var/www/html/debug
file_server