Go to file
uzurka 3f28422453
Ansible Lint / Ansible Lint (push) Successful in 1m4s Details
gitleaks / gitleaks (push) Failing after 9s Details
Changed: Added Jekyll container
2023-11-25 16:25:56 +01:00
.gitea/workflows Changed: Added Prom exporters 2023-09-08 14:54:34 +02:00
data Changed: Added docker logs configuration in the daemon 2023-11-22 15:46:46 +01:00
group_vars/proxmox_vms Changed: Added docker logs configuration in the daemon 2023-11-22 15:46:46 +01:00
host_vars Changed: Added Jekyll container 2023-11-25 16:25:56 +01:00
playbooks Changed: Fixed Immich BR 2023-11-24 14:37:53 +01:00
roles Changed: Added Prom exporters 2023-09-08 14:54:34 +02:00
.ansible-lint Changed: Added Prom exporters 2023-09-08 14:54:34 +02:00
.drone.yml Changed: Added Prom exporters 2023-09-08 14:54:34 +02:00
README.md Changed: Updated Readme.md 2023-11-19 16:02:59 +01:00
ansible.cfg Update : Changed Ansible-vault password & added vault.sh script 2023-11-17 23:19:53 +01:00
hosts Major update : Cleanup of the Ansible architecture 2023-11-17 23:19:53 +01:00
vault.sh Update : Changed Ansible-vault password & added vault.sh script 2023-11-17 23:19:53 +01:00
vault_check.sh Changed: major restructuration, used MergeBy to create group containers & added UptimeKuma + Docker daemon configuration 2023-09-15 18:32:49 +02:00

README.md

Ansible configuration

This repository contains all my LAN configuration, done with Ansible

I've only been working with Ansible since April 2023, so there's probably a lot of errors, but i kinda like the way it works
Before, i was using essentially Docker compose files which are, well, quite a mess for a lot of reasons.
The way i got all my configuration (and not only Docker ones) ready into one file, and the ability to do much more than simply deploy containers is a real time-changer

My hosts

A long moment, i used an Openmediavault OS installed directly on my server, and i pushed all my containers & services into it. Recently, i decided to change that, and instead, use Proxmox Virtual Environment to separate machines & usages.

Here's the hardware config :

  • Asus Z170 Pro gaming

  • Intel Core i5 5600T (4C/4T)

  • 32GB DDR4 2100MHz

  • System SSD for PVE : 128Go

  • 1To SSD NVME on a PCIe slot for storing VMs disks

  • Raid 1 : 2x4To (md0)

  • Raid 0 : 3x1To (md1)

Here's a table with my VMs, usage, main containers, and specifications.

VM Name VM ID CPU RAM GPU Passtrough Containers
vm-docker-network 104 1C 2Go No - AdguardHome
- iVentoy (PXE Boot)
vm-docker-master 111 2C 4Go No - Traefik
- Nextcloud + Collabora Online (CODE)
- Gitea + Act Runner
- Vaultwarden
- Grafana + Prometheus + Loki
vm-mailcow 112 2C 6Go No - Mailcow-dockerized stack (Disabled ClamAV as i don't have ehnough RAM, will turn it on later)
vm-docker-media 113 2C 8Go Yes (GTX970) - Jellyfin + jfa-go
- Immich & all related containers
- Transmission (one for downloading, and 1 for seeding my torrents)
vm-docker-databases 114 2C 4Go No - MariaDB
- Redis
- MongoDB
- PostgreSQL
- InfluxDB
- PhpMyAdmin

Promtail is installed on every VM & on PVE host, to send every logs on a grafana dashboard.

Todo :

  • Replace md1 raid with 2x4To HDDs

  • Add another raid of 2x4To HDDs

  • Add another 1To NVME SSD to ensure a mirroring of my VMs disks

  • Replace CPU with a 8C/16T one

  • Upgrade RAM to 64Go

Software improvements to do

  • Make every container rootless & with her own user

  • Learn Kubernetes and use it instead of separate docker

  • Waiting for Fiber : Ensure backups are stored on a cloud

  • Rsyslog every logs on my vm-docker-master -> Done with a Promtail + Loki stack