WIP

2026-01-19 12:21:48 +01:00
parent 62e663d053
commit d448ca6516
290 changed files with 50594 additions and 51540 deletions
@@ -0,0 +1,34 @@
+---
+- name: Nodes initialisieren und härten
+  hosts: all
+  become: true
+
+  roles:
+    - role: common
+      tags: common
+    - role: ssh_hardening
+      tags: ssh
+    - role: ufw_firewall
+      tags: firewall
+    - role: fail2ban
+      tags: fail2ban
+  handlers:
+    - name: restart sshd
+      ansible.builtin.service:
+        name: ssh
+        state: restarted
+    - name: restart fail2ban
+      ansible.builtin.service:
+        name: fail2ban
+        state: restarted
+- name: Setup Ceph Cluster and CephFS
+  hosts: all
+  become: true
+  roles:
+    - role: ceph_setup
+
+- name: Docker Swarm initialisieren
+  hosts: all
+  become: true
+  roles:
+    - role: docker_swarm
@@ -0,0 +1,13 @@
+- name: Infrastruktur Dienste bereitstellen
+  hosts: all
+  gather_facts: true
+  roles:
+    # - traefik
+    # - portainer
+    # - hyperdx
+    - kestra
+    # - authentik
+    # # - dockge
+    # - signoz
+    # - signoz-infra
+    # - leantime
@@ -0,0 +1,6 @@
+[client.admin]
+	key = AQDfUDBpnhHKNBAAwIRER17JF8flD9GSeNtFlg==
+	caps mds = "allow *"
+	caps mgr = "allow *"
+	caps mon = "allow *"
+	caps osd = "allow *"
@@ -0,0 +1,4 @@
+# minimal ceph.conf for f103f9ee-d058-11f0-aee8-920006d45637
+[global]
+	fsid = f103f9ee-d058-11f0-aee8-920006d45637
+	mon_host = [v2:10.0.1.2:3300/0,v1:10.0.1.2:6789/0]
@@ -45,4 +45,4 @@
    # - signoz-infra
    # - leantime
    - kestra
-    - hyperdx
+    # - hyperdx
@@ -28,6 +28,18 @@
  run_once: true
  delegate_to: "{{ groups['managers'][0] }}"

+- name: HYPERDX | shared-observability Netzwerk erstellen
+  community.docker.docker_network:
+    name: shared-observability
+    driver: overlay
+    state: present
+    attachable: yes
+    ipam_config:
+      - subnet: '172.16.201.0/24'
+        gateway: '172.16.201.1'
+  run_once: true
+  delegate_to: "{{ groups['managers'][0] }}"
+
 - name: HYPERDX | Generate Compose file
  ansible.builtin.template:
    src: docker-compose.yml.j2