Refactor and enhance Ansible configurations for dev-02 and nginx proxy setup

- Updated host_vars for dev-02 to include login history settings and modified code server authentication.
- Adjusted opencode server configurations and reduced resource allocation.
- Introduced a new playbook for configuring nginx reverse proxy with TLS and OAuth2.
- Enhanced linux_dev_station role defaults and tasks, including package updates and service configurations.
- Removed unnecessary credential assertions in linux_dev_station tasks.
- Created nginx_proxy role with tasks for certbot, nginx installation, and oauth2-proxy setup.
- Added templates for nginx and oauth2-proxy configurations.
- Updated terraform configuration to reflect new DNS records for ide and agent services.
- Documented changes and configurations in linux_dev_station.md for clarity and future reference.
This commit is contained in:
2026-07-11 19:29:50 -04:00
parent 5818b05d96
commit 272ed647cf
23 changed files with 626 additions and 99 deletions
@@ -27,7 +27,9 @@ linux_dev_station_dnf_packages:
- fzf
- sqlite3
- opentofu
- kubectl
- kubernetes1.36-client
- ansible
- python3-ansible-lint
linux_dev_station_tool_packages:
- name: uv
@@ -46,7 +48,10 @@ linux_dev_station_tool_packages:
version: "1.1.2"
sha256: ""
linux_dev_station_code_server_host: "0.0.0.0"
linux_dev_station_code_server_bind_to_localhost: false
linux_dev_station_code_server_host: >-
{{ (linux_dev_station_code_server_bind_to_localhost | bool) | ternary('127.0.0.1', '0.0.0.0') }}
linux_dev_station_code_server_port: 3000
linux_dev_station_code_server_auth: "password"
linux_dev_station_code_server_password: "{{ lookup('env', 'CODE_SERVER_PASSWORD', default='') }}"
@@ -82,7 +87,6 @@ linux_dev_station_oh_my_zsh_plugins:
- kubectl
- microk8s
- docker
- docker-compose
- ansible
- aws
- golang
@@ -100,7 +104,10 @@ linux_dev_station_ssh_key_comment: "dev-02"
linux_dev_station_code_server_systemd_enabled: true
linux_dev_station_opencode_systemd_enabled: true
linux_dev_station_opencode_server_host: "0.0.0.0"
linux_dev_station_opencode_bind_to_localhost: false
linux_dev_station_opencode_server_host: >-
{{ (linux_dev_station_opencode_bind_to_localhost | bool) | ternary('127.0.0.1', '0.0.0.0') }}
linux_dev_station_opencode_server_port: 4096
linux_dev_station_opencode_server_username: "{{ lookup('env', 'OPENCODE_SERVER_USERNAME', default='') }}"
linux_dev_station_opencode_server_password: "{{ lookup('env', 'OPENCODE_SERVER_PASSWORD', default='') }}"