Akatosh

playbook.yml

@@ -1,12 +1,12 @@
 - name: Preprovisioning
-  hosts: all
+  hosts: all:!cloud
   become: true
   tasks:
     - import_tasks: tasks/preprovision.yml
   handlers:
     - import_tasks: handlers/main.yml
 - name: Provision all hosts
-  hosts: all
+  hosts: all:!cloud
   become: true
   remote_user: nerevar
   tasks:
@@ -47,7 +47,7 @@
     - name: Update
       include_tasks: tasks/update_debian.yml
 - name: Update Arch hosts
-  hosts: arch
+  hosts: arch:!cloud
   become: true
   remote_user: nerevar
   tasks:
@@ -60,7 +60,7 @@
     - name: Update
       include_tasks: tasks/install_docker_debian.yml
 - name: Add utility scripts
-  hosts: all
+  hosts: all:!cloud
   become: true
   remote_user: nerevar
   tasks:
@@ -79,7 +79,7 @@
   tasks:
     - import_tasks: tasks/zsh.yml
 - name: Install tmux
-  hosts: all
+  hosts: all:!cloud
   become: true
   remote_user: nerevar
   tasks:
@@ -97,6 +97,54 @@
   handlers:
     - import_tasks: handlers/main.yml
   tags: leaf
+- name: Backup host (pull snapshots from cloud)
+  hosts: backup
+  become: true
+  remote_user: nerevar
+  tasks:
+    - import_tasks: tasks/backup_pull.yml
+  tags:
+    - leaf
+    - backup
+- name: Backup sources (cloud hosts)
+  hosts: cloud
+  become: true
+  tasks:
+    - import_tasks: tasks/backup_source.yml
+  tags:
+    - leaf
+    - backup
+- name: Akatosh install (replacement cloud server)
+  hosts: akatosh
+  become: true
+  remote_user: nerevar
+  tasks:
+    - name: Install base tools (minimal cloud image lacks them)
+      package:
+        name: [rsync, curl, sqlite3]
+        state: present
+    - name: Normalise /opt app ownership to root:aurbis (top dir only, not recursive)
+      file:
+        path: "/opt/{{ item }}"
+        state: directory
+        owner: root
+        group: aurbis
+        mode: "0775"
+      loop: [nextcloud, hdwiki, gitea, authentik, drone, "hoekveen.net"]
+    - import_tasks: tasks/nextcloud.yml
+    - import_tasks: tasks/hdwiki.yml
+    - import_tasks: tasks/gitea.yml
+    - import_tasks: tasks/nightingale.yml
+    - import_tasks: tasks/cloud_nginx.yml
+    - name: Ensure the backup user can run the forced-command pull
+      user:
+        name: backup
+        shell: /bin/bash
+        create_home: false
+    - import_tasks: tasks/backup_source.yml
+  handlers:
+    - import_tasks: handlers/main.yml
+  tags: leaf
 - name: Vaermina install
   hosts: vaermina
   become: true