Ansible playbook for base and initial configuration of web server hosting my personal websites.
Go to file
Alan Orth 54993d6d6b
Update tls cipher suite with latest string from Mozilla TLS guide
https://wiki.mozilla.org/Security/Server_Side_TLS states"

    Version 3.3: ulfr: fix SHA256 prio, add POODLE details, update various templates

Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-10-25 12:36:19 +03:00
group_vars Update tls cipher suite with latest string from Mozilla TLS guide 2014-10-25 12:36:19 +03:00
host_vars host_vars/web05: Remove TLS keys from host_vars 2014-10-11 15:43:17 +03:00
roles roles/common: Add ECDSA public key for noma 2014-10-12 13:25:48 +03:00
vars roles/nginx: Ingenius use of YAML hashes to derive TLS key from another file 2014-10-11 15:42:44 +03:00
.gitignore Add top-level .gitignore 2014-08-25 15:15:55 +03:00
README.md README.md: Spelling 2014-08-25 15:24:00 +03:00
site.yml Add site yml file 2014-08-25 13:21:00 +03:00
web.yml web.yml: Modify to incorporate provisioning user stuff 2014-10-11 12:12:32 +03:00

Ansible Playbook

Ansible playbook for base and initial configuration of web server hosting my personal websites. After successful execution of this playbook, however, there is still some manual work to import databases, copy site content, etc.

Assumptions

Before you can run this, a few things are assumed:

  • You have a clean, minimal Ubuntu 14.04 host up and running
  • You have a user account with password-less SSH access to the machine
  • You have sudo privileges on the remote host
  • You have created a hosts file with something like:
[web]
web01

Use

Once you've satisfied the the above assumptions, you can execute:

ansible-playbook web.yml -i hosts -K

Testing in a VM

A simple way to test locally in a virtual machine using libvirt + KVM:

sudo virt-install -n web01 -r 1024 --vcpus 2 -l http://ubuntu.mirror.ac.ke/ubuntu/dists/trusty/main/installer-amd64/ --os-type=linux --os-variant=ubuntusaucy --disk /home/aorth/software/vms/web01.qcow2,device=disk,bus=virtio,format=qcow2,size=40 --vnc --cpuset=1,2 -x "auto=true priority=critical url=http://blah.com/~aorth/preseed/public/ubuntu-14.04.cfg"

This boots from a network Ubuntu mirror, then uses a preseed to automate the OS installation.