Refactor ansible-apply.yaml and inventory/hosts, add playbook_m3uproxy.yml

.github/workflows/ansible-apply.yaml

@@ -78,9 +78,9 @@ jobs:
           SSH_AUTH_SOCK: /tmp/ssh_agent.sock
         run: |
           cd ansible
-          # Currently, the playbook_hardening.yml is failing due to the aide package and UFW
+          sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_hardening.yml
-          # sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_hardening.yml
           sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_microk8s.yml
           sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_gitea.yml
           sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_nextcloud.yml
           sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_wordpress.yml
+          sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_m3uproxy.yml

ansible/inventory/hosts

@@ -25,5 +25,8 @@ contabo01.a13labs.pt
 [nextcloud]
 contabo01.a13labs.pt
 
+[m3uproxy]
+contabo01.a13labs.pt
+
 [microk8s]
 contabo01.a13labs.pt

ansible/playbook_m3uproxy.yml

@@ -0,0 +1,30 @@
+---
+- name: M3Uproxy Playbook (K8s)
+  hosts: m3uproxy
+  gather_facts: true
+
+# Specific tasks for this playbook
+  tasks:
+    - name: Set required facts
+      ansible.builtin.set_fact:
+        m3uproxy_home: "/var/lib/m3uproxy"
+        m3uproxy_user_id: 1000
+        m3uproxy_group_id: 1000
+      tags: always
+
+    - name: Create required m3uproxy data folder
+      become: true
+      ansible.builtin.file:
+        state: directory
+        path: "{{ item }}"
+        mode: "0750"
+        owner: "{{ m3uproxy_user_id }}"
+        group: "{{ m3uproxy_group_id }}"
+      with_items:
+        - "{{ m3uproxy_home }}"
+        - "{{ m3uproxy_home }}/cache"
+        - "{{ m3uproxy_home }}/squid"
+        - "{{ m3uproxy_home }}/geoip"
+      tags:
+        - tasks
+        - tasks::folders