sinibaldi
/
SSE-Lab
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Inserted Nameserver and OPNSense playbooks info

This commit is contained in:
Fabio Sinibaldi 2026-04-17 12:52:55 +02:00
parent 1e3315cf35
commit a938ea6bd1
1 changed files with 20 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
ansible/readme.md
View File

@ -16,7 +16,8 @@ Launch playbooks from present folder in order to use [default config file](ansib
**Site** playbook launches them all. **Site** playbook launches them all.
**Bootstrap** is to be run first on new installations. **Bootstrap** is to be run first on new installations.
**NameServer** configures a BIND DNS
**OPNSense** configure a OPNSense edge node
### Site ### Site
This playbook recalls all the following playbooks in the stated order. This playbook recalls all the following playbooks in the stated order.
@ -40,6 +41,20 @@ Creates sudoer user ansible, necessitates of sudoer user.
Use `ansible-playbook -i inventories playbooks/bootstrap.yml -l [TARGET_HOST] -e 'ansible_user=[REMOTE_USER]' -K` Use `ansible-playbook -i inventories playbooks/bootstrap.yml -l [TARGET_HOST] -e 'ansible_user=[REMOTE_USER]' -K`
### NameServer ###
Configures a BIND DNS. Uses collection bodsch.dns.
NB DNS configuration comes from variable file.
### OPNSense ###
Configures a OPNSense edge node features :
- BIND DNS
- FIREWALL
- Wireguard VPN
NB runs locally so python intepreter needs to be specified
E.g. `ansible-playbook -i inventories/sifi.yaml playbooks/opnsense.yaml --extra-vars="ansible_python_interpreter=$(which python)"`
## Inventories ## Inventories
### Main Lab ### Main Lab
@ -54,6 +69,10 @@ Management of production services, beware!
Hosts are commented by default Hosts are commented by default
### Sifi
Macchine per il gruppo di lavoro Sistemi Fiscali
### Prox1_lab ### Prox1_lab
Prox mox laboratory Prox mox laboratory