From a938ea6bd187669187f3473505246890eb63a761 Mon Sep 17 00:00:00 2001 From: Fabio Sinibaldi Date: Fri, 17 Apr 2026 12:52:55 +0200 Subject: [PATCH] Inserted Nameserver and OPNSense playbooks info --- ansible/readme.md | 21 ++++++++++++++++++++- 1 file changed, 20 insertions(+), 1 deletion(-) diff --git a/ansible/readme.md b/ansible/readme.md index 2cbafef..84a3890 100644 --- a/ansible/readme.md +++ b/ansible/readme.md @@ -16,7 +16,8 @@ Launch playbooks from present folder in order to use [default config file](ansib **Site** playbook launches them all. **Bootstrap** is to be run first on new installations. - +**NameServer** configures a BIND DNS +**OPNSense** configure a OPNSense edge node ### Site This playbook recalls all the following playbooks in the stated order. @@ -40,6 +41,20 @@ Creates sudoer user ansible, necessitates of sudoer user. Use `ansible-playbook -i inventories playbooks/bootstrap.yml -l [TARGET_HOST] -e 'ansible_user=[REMOTE_USER]' -K` +### NameServer ### +Configures a BIND DNS. Uses collection bodsch.dns. +NB DNS configuration comes from variable file. + +### OPNSense ### +Configures a OPNSense edge node features : + +- BIND DNS +- FIREWALL +- Wireguard VPN + +NB runs locally so python intepreter needs to be specified +E.g. `ansible-playbook -i inventories/sifi.yaml playbooks/opnsense.yaml --extra-vars="ansible_python_interpreter=$(which python)"` + ## Inventories ### Main Lab @@ -54,6 +69,10 @@ Management of production services, beware! Hosts are commented by default +### Sifi +Macchine per il gruppo di lavoro Sistemi Fiscali + + ### Prox1_lab Prox mox laboratory