Refactor and enhance Ansible configurations for dev-02 and nginx proxy setup
- Updated host_vars for dev-02 to include login history settings and modified code server authentication. - Adjusted opencode server configurations and reduced resource allocation. - Introduced a new playbook for configuring nginx reverse proxy with TLS and OAuth2. - Enhanced linux_dev_station role defaults and tasks, including package updates and service configurations. - Removed unnecessary credential assertions in linux_dev_station tasks. - Created nginx_proxy role with tasks for certbot, nginx installation, and oauth2-proxy setup. - Added templates for nginx and oauth2-proxy configurations. - Updated terraform configuration to reflect new DNS records for ide and agent services. - Documented changes and configurations in linux_dev_station.md for clarity and future reference.
This commit is contained in:
@@ -27,7 +27,9 @@ linux_dev_station_dnf_packages:
|
||||
- fzf
|
||||
- sqlite3
|
||||
- opentofu
|
||||
- kubectl
|
||||
- kubernetes1.36-client
|
||||
- ansible
|
||||
- python3-ansible-lint
|
||||
|
||||
linux_dev_station_tool_packages:
|
||||
- name: uv
|
||||
@@ -46,7 +48,10 @@ linux_dev_station_tool_packages:
|
||||
version: "1.1.2"
|
||||
sha256: ""
|
||||
|
||||
linux_dev_station_code_server_host: "0.0.0.0"
|
||||
linux_dev_station_code_server_bind_to_localhost: false
|
||||
|
||||
linux_dev_station_code_server_host: >-
|
||||
{{ (linux_dev_station_code_server_bind_to_localhost | bool) | ternary('127.0.0.1', '0.0.0.0') }}
|
||||
linux_dev_station_code_server_port: 3000
|
||||
linux_dev_station_code_server_auth: "password"
|
||||
linux_dev_station_code_server_password: "{{ lookup('env', 'CODE_SERVER_PASSWORD', default='') }}"
|
||||
@@ -82,7 +87,6 @@ linux_dev_station_oh_my_zsh_plugins:
|
||||
- kubectl
|
||||
- microk8s
|
||||
- docker
|
||||
- docker-compose
|
||||
- ansible
|
||||
- aws
|
||||
- golang
|
||||
@@ -100,7 +104,10 @@ linux_dev_station_ssh_key_comment: "dev-02"
|
||||
|
||||
linux_dev_station_code_server_systemd_enabled: true
|
||||
linux_dev_station_opencode_systemd_enabled: true
|
||||
linux_dev_station_opencode_server_host: "0.0.0.0"
|
||||
linux_dev_station_opencode_bind_to_localhost: false
|
||||
|
||||
linux_dev_station_opencode_server_host: >-
|
||||
{{ (linux_dev_station_opencode_bind_to_localhost | bool) | ternary('127.0.0.1', '0.0.0.0') }}
|
||||
linux_dev_station_opencode_server_port: 4096
|
||||
linux_dev_station_opencode_server_username: "{{ lookup('env', 'OPENCODE_SERVER_USERNAME', default='') }}"
|
||||
linux_dev_station_opencode_server_password: "{{ lookup('env', 'OPENCODE_SERVER_PASSWORD', default='') }}"
|
||||
|
||||
Reference in New Issue
Block a user