alexandre.pires
272ed647cf
- Updated host_vars for dev-02 to include login history settings and modified code server authentication. - Adjusted opencode server configurations and reduced resource allocation. - Introduced a new playbook for configuring nginx reverse proxy with TLS and OAuth2. - Enhanced linux_dev_station role defaults and tasks, including package updates and service configurations. - Removed unnecessary credential assertions in linux_dev_station tasks. - Created nginx_proxy role with tasks for certbot, nginx installation, and oauth2-proxy setup. - Added templates for nginx and oauth2-proxy configurations. - Updated terraform configuration to reflect new DNS records for ide and agent services. - Documented changes and configurations in linux_dev_station.md for clarity and future reference.
137 lines
4.6 KiB
YAML
137 lines
4.6 KiB
YAML
---
|
|
linux_dev_station_service_user_enabled: true
|
|
linux_dev_station_service_user: "devstation"
|
|
linux_dev_station_service_shell: "/usr/sbin/nologin"
|
|
linux_dev_station_service_user_ssh_enabled: false
|
|
linux_dev_station_service_user_ssh_shell: "/bin/zsh"
|
|
linux_dev_station_service_user_ssh_authorized_keys: []
|
|
linux_dev_station_service_home: "/home/{{ linux_dev_station_service_user }}"
|
|
|
|
linux_dev_station_workspace_dir: "{{ linux_dev_station_service_home }}/projects"
|
|
linux_dev_station_scripts_dir: "{{ linux_dev_station_service_home }}/scripts"
|
|
linux_dev_station_logs_dir: "{{ linux_dev_station_service_home }}/.local/state/logs"
|
|
linux_dev_station_systemd_unit_dir: "/etc/systemd/system"
|
|
linux_dev_station_path: >-
|
|
{{ linux_dev_station_service_home }}/.local/bin:{{ linux_dev_station_service_home }}/go/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/usr/local/bin
|
|
|
|
linux_dev_station_dnf_packages:
|
|
- git
|
|
- tmux
|
|
- wget
|
|
- curl
|
|
- jq
|
|
- openssl
|
|
- zsh
|
|
- golang
|
|
- ripgrep
|
|
- fzf
|
|
- sqlite3
|
|
- opentofu
|
|
- kubernetes1.36-client
|
|
- ansible
|
|
- python3-ansible-lint
|
|
|
|
linux_dev_station_tool_packages:
|
|
- name: uv
|
|
install_script_url: "https://astral.sh/uv/install.sh"
|
|
- name: node
|
|
manager: fnm
|
|
- name: rust
|
|
manager: rustup
|
|
- name: code-server
|
|
version: "4.127.0"
|
|
sha256: ""
|
|
- name: opencode
|
|
version: "1.17.18"
|
|
sha256: ""
|
|
- name: sectool
|
|
version: "1.1.2"
|
|
sha256: ""
|
|
|
|
linux_dev_station_code_server_bind_to_localhost: false
|
|
|
|
linux_dev_station_code_server_host: >-
|
|
{{ (linux_dev_station_code_server_bind_to_localhost | bool) | ternary('127.0.0.1', '0.0.0.0') }}
|
|
linux_dev_station_code_server_port: 3000
|
|
linux_dev_station_code_server_auth: "password"
|
|
linux_dev_station_code_server_password: "{{ lookup('env', 'CODE_SERVER_PASSWORD', default='') }}"
|
|
linux_dev_station_code_server_workspace: "{{ linux_dev_station_workspace_dir }}"
|
|
linux_dev_station_code_server_extensions_enabled: true
|
|
linux_dev_station_code_server_extensions_fail_on_error: false
|
|
linux_dev_station_code_server_extensions:
|
|
- ms-python.python
|
|
- ms-python.vscode-pylance
|
|
- ms-azuretools.vscode-docker
|
|
- hashicorp.terraform
|
|
- redhat.ansible
|
|
- eamodio.gitlens
|
|
|
|
linux_dev_station_copilot_enabled: false
|
|
linux_dev_station_copilot_extensions:
|
|
- GitHub.copilot
|
|
- GitHub.copilot-chat
|
|
linux_dev_station_copilot_fail_on_error: false
|
|
|
|
linux_dev_station_oh_my_zsh_enabled: true
|
|
linux_dev_station_oh_my_zsh_install_url: "https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh"
|
|
linux_dev_station_oh_my_zsh_theme: "agnoster"
|
|
linux_dev_station_oh_my_zsh_plugins:
|
|
- git
|
|
- fzf
|
|
- common-aliases
|
|
- sudo
|
|
- tmux
|
|
- extract
|
|
- colored-man-pages
|
|
- history-substring-search
|
|
- kubectl
|
|
- microk8s
|
|
- docker
|
|
- ansible
|
|
- aws
|
|
- golang
|
|
- dnf
|
|
- bgnotify
|
|
linux_dev_station_zshrc_extra_env: {}
|
|
|
|
linux_dev_station_npm_packages: []
|
|
|
|
linux_dev_station_git_init_default_branch: "main"
|
|
linux_dev_station_git_pull_rebase: false
|
|
|
|
linux_dev_station_ssh_key_path: "{{ ansible_facts['env']['HOME'] }}/.ssh/id_ed25519"
|
|
linux_dev_station_ssh_key_comment: "dev-02"
|
|
|
|
linux_dev_station_code_server_systemd_enabled: true
|
|
linux_dev_station_opencode_systemd_enabled: true
|
|
linux_dev_station_opencode_bind_to_localhost: false
|
|
|
|
linux_dev_station_opencode_server_host: >-
|
|
{{ (linux_dev_station_opencode_bind_to_localhost | bool) | ternary('127.0.0.1', '0.0.0.0') }}
|
|
linux_dev_station_opencode_server_port: 4096
|
|
linux_dev_station_opencode_server_username: "{{ lookup('env', 'OPENCODE_SERVER_USERNAME', default='') }}"
|
|
linux_dev_station_opencode_server_password: "{{ lookup('env', 'OPENCODE_SERVER_PASSWORD', default='') }}"
|
|
linux_dev_station_opencode_extra_environment: {}
|
|
linux_dev_station_opencode_command: "opencode serve --hostname {{ linux_dev_station_opencode_server_host }} --port {{ linux_dev_station_opencode_server_port }}"
|
|
linux_dev_station_opencode_config: {}
|
|
linux_dev_station_opencode_config_path: "{{ linux_dev_station_service_home }}/.config/opencode/opencode.json"
|
|
|
|
# MCP installer definitions
|
|
# Supported kinds:
|
|
# - npm: package + optional version
|
|
# - uv: package + optional version + binary
|
|
# - go: module + optional version + binary
|
|
linux_dev_station_mcp_installers_enabled: true
|
|
linux_dev_station_mcp_installers: []
|
|
|
|
# Legacy ad-hoc hook kept for backward compatibility.
|
|
linux_dev_station_mcp_bootstrap_commands: []
|
|
linux_dev_station_manage_systemd: true
|
|
|
|
# SSH agent
|
|
linux_dev_station_ssh_agent_enabled: false
|
|
linux_dev_station_ssh_agent_keys:
|
|
- "{{ linux_dev_station_service_home }}/.ssh/id_ed25519"
|
|
linux_dev_station_ssh_agent_passphrase: "{{ lookup('env', 'SSH_KEY_PASSPHRASE', default='') }}"
|
|
linux_dev_station_ssh_agent_socket: "{{ linux_dev_station_service_home }}/.ssh/ssh-agent.sock"
|