tanshu/barker
1
0
Fork 0
Code Issues 1 Pull Requests Releases 4 Activity

netbird server works now. linted the yml files

Browse Source
This commit is contained in:
tanshu
2026-08-30 07:35:08 +00:00
parent ae69c2fafe
commit 35a3bb9ad2
40 changed files with 366 additions and 135 deletions
Download Patch File Download Diff File Expand all files Collapse all files
frank/ansible/bake-pies.yml
+91 -66
View File
@@ -2,7 +2,8 @@
# DO Community Playbooks: Docker
#################################################
---
- hosts: all
- name: Bake pies
hosts: all
become: true
vars_files:
- vars/pies.yml
@@ -19,161 +20,185 @@
# when: lcd_rotate_test.stdout == "0"
- name: Update the hostname file
replace:
ansible.builtin.replace:
path: /etc/hostname
regexp: '(\s*)raspberrypi(\s+.*)?$'
regexp: "(\\s*)raspberrypi(\\s+.*)?$"
replace: "\\1{{ hostname }}\\2"
backup: yes
backup: true
- name: Update the hosts file
replace:
ansible.builtin.replace:
path: /etc/hosts
regexp: '(\s+)raspberrypi(\s+.*)?$'
regexp: "(\\s+)raspberrypi(\\s+.*)?$"
replace: "\\1{{ hostname }}\\2"
backup: yes
backup: true
- name: Ensure SSH Directory exists
file:
path: "/home/{{ user }}/.ssh"
state: directory
group: "{{ user }}"
owner: "{{ user }}"
mode: 0700
- name: Ensure authorized_keys file exists
copy:
content: ""
dest: "/home/{{ user }}/.ssh/authorized_keys"
force: no
ansible.builtin.file:
path: "/home/{{ user }}/.ssh"
state: directory
group: "{{ user }}"
owner: "{{ user }}"
mode: 0644
mode: "0700"
- name: Ensure authorized_keys file exists
ansible.builtin.copy:
content: ""
dest: "/home/{{ user }}/.ssh/authorized_keys"
force: false
group: "{{ user }}"
owner: "{{ user }}"
mode: "0644"
- name: Check Terminus public key
shell: "grep -c \"{{ terminus_key }}\" /home/{{ user }}/.ssh/authorized_keys || true"
ansible.builtin.shell: "grep -c \"{{ terminus_key }}\" /home/{{ user }}/.ssh/authorized_keys || true"
register: terminuskey_test
changed_when: false
- name: Add Terminus public key
lineinfile:
ansible.builtin.lineinfile:
dest: "/home/{{ user }}/.ssh/authorized_keys"
line: "{{ terminus_key }}"
when: terminuskey_test.stdout == "0"
- name: Check clair public key
shell: "grep -c \"{{ clair_key }}\" /home/{{ user }}/.ssh/authorized_keys || true"
ansible.builtin.shell: "grep -c \"{{ clair_key }}\" /home/{{ user }}/.ssh/authorized_keys || true"
register: clairkey_test
changed_when: false
- name: Add clair public key
lineinfile:
ansible.builtin.lineinfile:
dest: "/home/{{ user }}/.ssh/authorized_keys"
line: "{{ clair_key }}"
when: clairkey_test.stdout == "0"
- name: Check Anjin public key
shell: "grep -c \"{{ anjin_key }}\" /home/{{ user }}/.ssh/authorized_keys || true"
ansible.builtin.shell: "grep -c \"{{ anjin_key }}\" /home/{{ user }}/.ssh/authorized_keys || true"
register: anjin_key_test
changed_when: false
- name: Add Anjin public key
lineinfile:
ansible.builtin.lineinfile:
dest: "/home/{{ user }}/.ssh/authorized_keys"
line: "{{ anjin_key }}"
when: anjin_key_test.stdout == "0"
- name: Update the sshd config file to disable password logins
replace:
ansible.builtin.replace:
path: /etc/ssh/sshd_config
regexp: '(\s+)#PasswordAuthentication yes(\s+.*)?$'
regexp: "(\\s+)#PasswordAuthentication yes(\\s+.*)?$"
replace: "\\1PasswordAuthentication no\\2"
backup: yes
backup: true
- name: Check if .ssh config file exists
stat:
ansible.builtin.stat:
path: "/home/{{ user }}/.ssh/config"
register: config_status
- name: No need to upload the .ssh config
when: config_status.stat.exists == true
debug:
when: config_status.stat.exists
ansible.builtin.debug:
msg: No need to upload the .ssh config as it already exists.
- name: Upload the .ssh config file
when: config_status.stat.exists == false
template:
when: not config_status.stat.exists
ansible.builtin.template:
src: "files/config"
dest: "/home/{{ user }}/.ssh/config"
group: "{{ user }}"
owner: "{{ user }}"
mode: 0644
mode: "0644"
- name: Check if ed25519 key exists
stat:
ansible.builtin.stat:
path: "/home/{{ user }}/.ssh/id_ed25519"
register: key_status
- name: No need to generate new ed25519 key
when: key_status.stat.exists == true
debug:
when: key_status.stat.exists
ansible.builtin.debug:
msg: No need to generate new ed25519 key as it already exists.
- name: Generate new id_ed25519 key
when: key_status.stat.exists == false
become: yes
when: not key_status.stat.exists
become: true
become_user: "{{ user }}"
shell: ssh-keygen -t ed25519 -q -f "/home/{{ user }}/.ssh/id_ed25519" -C "{{ user }}@{{ hostname }} $(date '+%Y.%m.%d')" -N ""
ansible.builtin.shell: ssh-keygen -t ed25519 -q -f "/home/{{ user }}/.ssh/id_ed25519" -C "{{ user }}@{{ hostname }} $(date '+%Y.%m.%d')" -N ""
changed_when: true
- name: Install Docker
shell: curl -sSL https://get.docker.com | sh
ansible.builtin.shell: curl -sSL https://get.docker.com | sh # noqa command-instead-of-module risky-shell-pipe
changed_when: true
- name: Install matchbox-keyboard
package:
ansible.builtin.package:
name: matchbox-keyboard
state: latest
state: present
- name: Install python3-docker
package:
ansible.builtin.package:
name: python3-docker
state: latest
state: present
- name: adding user to group docker
user:
- name: Adding user to group docker
ansible.builtin.user:
name: "{{ user }}"
groups: docker
append: yes
append: true
- name: adding user to group lp (line printers)
user:
- name: Adding user to group lp (line printers)
ansible.builtin.user:
name: "{{ user }}"
groups: lp
append: yes
append: true
- name: install nats-tunnel systemd unit file
template:
- name: Install nats-tunnel systemd unit file
ansible.builtin.template:
src: "files/nats-tunnel.service"
dest: "/etc/systemd/system/nats-tunnel.service"
mode: "0644"
- name: enable service nats-tunnel and ensure it is not masked
systemd:
- name: Enable service nats-tunnel and ensure it is not masked
ansible.builtin.systemd:
name: nats-tunnel
enabled: yes
masked: no
enabled: true
masked: false
- name: Make sure nats-tunnel service is running
systemd:
ansible.builtin.systemd:
state: started
name: nats-tunnel
- name: install leardal systemd unit file
template:
- name: Install leardal systemd unit file
ansible.builtin.template:
src: "files/leardal.service"
dest: "/etc/systemd/system/leardal.service"
mode: "0644"
- name: enable service leardal and ensure it is not masked
systemd:
- name: Enable service leardal and ensure it is not masked
ansible.builtin.systemd:
name: leardal
enabled: yes
masked: no
enabled: true
masked: false
- name: Make sure leardal service is running
systemd:
ansible.builtin.systemd:
state: started
name: leardal
- name: Check if NetBird is installed
ansible.builtin.command: netbird --version
register: netbird_installed
ignore_errors: true
changed_when: false
- name: Install NetBird client
ansible.builtin.shell: curl -fsSL https://pkgs.netbird.io/install.sh | sh
when: netbird_installed.rc != 0
changed_when: true
- name: Connect NetBird to management server
ansible.builtin.command: >
netbird up --management-url {{ netbird_management_url }} --setup-key {{ netbird_setup_key }}
when: netbird_installed.rc != 0
changed_when: true
frank/ansible/playbook.yml
+2 -1
View File
@@ -2,7 +2,8 @@
# DO Community Playbooks: Docker
#################################################
---
- hosts: frank
- name: Deploy Frank
hosts: frank
become: true
vars_files:
- vars/registry.yml
frank/ansible/requirements.yml
+3
View File
@@ -0,0 +1,3 @@
---
collections:
- name: community.docker
frank/ansible/roles/frank/tasks/main.yml
+26 -8
View File
@@ -8,28 +8,28 @@
msg: "No need to upload the frank .env file as it already exists."
- name: Upload the frank .env file
when: status.stat.exists == false
when: not status.stat.exists
template:
src: files/frank.env
dest: "/home/{{ user }}/frank.env"
group: "{{ user }}"
owner: "{{ user }}"
mode: 0644
mode: "0644"
- name: Log into registry
docker_login:
community.docker.docker_login:
registry: "{{ registry }}"
username: "{{ username }}"
password: "{{ password }}"
- name: Pull frank image
docker_image:
community.docker.docker_image:
name: "registry.tanshu.com/frank:{{ frank_version | default('latest') }}"
source: pull
force_source: yes
force_source: true
- name: Create frank worker container
docker_container:
community.docker.docker_container:
name: "frank"
image: "registry.tanshu.com/frank:{{ frank_version | default('latest') }}"
pull: true
@@ -44,14 +44,32 @@
template:
src: "files/frank.service"
dest: "/etc/systemd/system/frank.service"
mode: "0644"
- name: enable service frank and ensure it is not masked
systemd:
name: frank
enabled: yes
masked: no
enabled: true
masked: false
- name: Make sure frank service is running
systemd:
state: started
name: frank
- name: Check if NetBird is installed
ansible.builtin.command: netbird --version
register: netbird_installed
ignore_errors: true
changed_when: false
- name: Install NetBird client
ansible.builtin.shell: curl -fsSL https://pkgs.netbird.io/install.sh | sh
when: netbird_installed.rc != 0
changed_when: true
- name: Connect NetBird to management server
ansible.builtin.command: >
netbird up --management-url {{ netbird_management_url }} --setup-key {{ netbird_setup_key }}
when: netbird_installed.rc != 0
changed_when: true
frank/ansible/roles/tunnels/tasks/main.yml
+16 -14
View File
@@ -1,32 +1,34 @@
---
- name: install nats-tunnel systemd unit file
template:
- name: Install nats-tunnel systemd unit file
ansible.builtin.template:
src: "files/nats-tunnel.service"
dest: "/etc/systemd/system/nats-tunnel.service"
mode: "0644"
- name: enable service nats-tunnel and ensure it is not masked
systemd:
- name: Enable service nats-tunnel and ensure it is not masked
ansible.builtin.systemd:
name: nats-tunnel
enabled: yes
masked: no
enabled: true
masked: false
- name: Make sure nats-tunnel service is running
systemd:
ansible.builtin.systemd:
state: started
name: nats-tunnel
- name: install leardal systemd unit file
template:
- name: Install leardal systemd unit file
ansible.builtin.template:
src: "files/leardal.service"
dest: "/etc/systemd/system/leardal.service"
mode: "0644"
- name: enable service leardal and ensure it is not masked
systemd:
- name: Enable service leardal and ensure it is not masked
ansible.builtin.systemd:
name: leardal
enabled: yes
masked: no
enabled: true
masked: false
- name: Make sure leardal service is running
systemd:
ansible.builtin.systemd:
state: started
name: leardal
frank/ansible/vars/devices/chd1.yml
+2
View File
@@ -2,4 +2,6 @@
hostname: chd1
ssh_port: 22341
user: pi
queue_name: moz-elante
printer_port: "/dev/usb/lp0"
ip_address: 10.3.4.1
frank/ansible/vars/devices/chd2.yml
+1
View File
@@ -2,4 +2,5 @@
hostname: chd2
ssh_port: 22342
user: pi
queue_name: moz-elante
printer_port: "/dev/usb/lp0"
frank/ansible/vars/devices/mhl1.yml
+1
View File
@@ -2,4 +2,5 @@
hostname: mhl1
ssh_port: 22441
user: pi
queue_name: moz-elante
printer_port: "/dev/usb/lp0"
frank/ansible/vars/devices/mhl2.yml
+1
View File
@@ -2,4 +2,5 @@
hostname: mhl2
ssh_port: 22442
user: pi
queue_name: moz-elante
printer_port: "/dev/usb/lp0"
frank/ansible/vars/devices/mhl3.yml
+1
View File
@@ -2,4 +2,5 @@
hostname: mhl3
ssh_port: 22443
user: pi
queue_name: moz-elante
printer_port: "/dev/usb/lp0"
frank/ansible/vars/devices/mhl4.yml
+1
View File
@@ -2,4 +2,5 @@
hostname: mhl4
ssh_port: 22444
user: pi
queue_name: moz-elante
printer_port: "/dev/usb/lp0"
frank/ansible/vars/devices/moz1.yml
+1
View File
@@ -2,4 +2,5 @@
hostname: moz1
ssh_port: 22541
user: vari
queue_name: moz-elante
printer_port: "/dev/usb/lp0"
frank/ansible/vars/devices/moz2.yml
+1
View File
@@ -2,4 +2,5 @@
hostname: moz2
ssh_port: 22542
user: vari
queue_name: moz-elante
printer_port: "/dev/usb/lp0"
frank/ansible/vars/devices/pkl1.yml
+1
View File
@@ -2,4 +2,5 @@
hostname: pkl1
ssh_port: 22241
user: pi
queue_name: moz-elante
printer_port: "/dev/usb/lp0"
frank/ansible/vars/devices/pkl2.yml
+1
View File
@@ -2,4 +2,5 @@
hostname: pkl2
ssh_port: 22242
user: pi
queue_name: moz-elante
printer_port: "/dev/usb/lp0"
frank/ansible/vars/devices/pkl3.yml
+1
View File
@@ -2,4 +2,5 @@
hostname: pkl3
ssh_port: 22243
user: pi
queue_name: moz-elante
printer_port: "/dev/usb/lp0"
frank/ansible/vars/pies.yml
+2
View File
@@ -3,3 +3,5 @@ terminus_key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK8WQHla0uCcNwmN0DUE49lbjNWa6
clair_key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBeTz3weHvjJRTlBg+ovP3KfQNDvyn9mVsekAGwX1HMn tanshu@clair 2025-06-30"
anjin_key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMlvalE0JqKyjpEsGTgtf/N1d9QK2MgNFJib+e8O2h9M tanshu@anjin 2024.09.28"
server: "clair"
netbird_management_url: "https://netbird.tanshu.com"
netbird_setup_key: "REPLACE_ME_WITH_SETUP_KEY"