first commit

roles/docker/tasks/main.yml

@@ -0,0 +1,63 @@
+---
+- name: Install required packages for Docker
+  ansible.builtin.apt:
+    name:
+      - apt-transport-https
+      - ca-certificates
+      - curl
+      - gnupg
+      - lsb-release
+    state: present
+    update_cache: true
+
+- name: Create keyrings directory
+  ansible.builtin.file:
+    path: /etc/apt/keyrings
+    state: directory
+    mode: '0755'
+
+- name: Add Docker GPG key
+  ansible.builtin.get_url:
+    url: https://download.docker.com/linux/ubuntu/gpg
+    dest: /etc/apt/keyrings/docker.asc
+    mode: '0644'
+
+- name: Get system architecture
+  ansible.builtin.command: dpkg --print-architecture
+  register: dpkg_arch
+  changed_when: false
+
+- name: Get Ubuntu codename
+  ansible.builtin.command: lsb_release -cs
+  register: ubuntu_codename
+  changed_when: false
+
+- name: Add Docker repository
+  ansible.builtin.apt_repository:
+    repo: "deb [arch={{ dpkg_arch.stdout }} signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/ubuntu {{ ubuntu_codename.stdout }} stable"
+    state: present
+    filename: docker
+
+- name: Install Docker packages
+  ansible.builtin.apt:
+    name:
+      - docker-ce
+      - docker-ce-cli
+      - containerd.io
+      - docker-buildx-plugin
+      - docker-compose-plugin
+    state: present
+    update_cache: true
+
+- name: Ensure Docker service is started and enabled
+  ansible.builtin.systemd:
+    name: docker
+    state: started
+    enabled: true
+
+- name: Add jerick user to docker group
+  ansible.builtin.user:
+    name: jerick
+    groups: docker
+    append: true
+  ignore_errors: true

roles/nfs/tasks/main.yml

@@ -0,0 +1,65 @@
+---
+- name: Install NFS client packages
+  ansible.builtin.apt:
+    name:
+      - nfs-common
+    state: present
+    update_cache: true
+
+- name: Create NFSFolder mount directory
+  ansible.builtin.file:
+    path: /var/NFSFolder
+    state: directory
+    mode: '0755'
+  when: install_nfs_folder | default(false) | bool
+
+- name: Add NFSFolder mount to fstab
+  ansible.builtin.lineinfile:
+    path: /etc/fstab
+    line: "192.168.0.161:/mnt/share1/NFSFolder /var/NFSFolder  nfs      auto,nofail,noatime,nolock,intr,tcp,actimeo=1800    0       0"
+    state: present
+    create: true
+  when: install_nfs_folder | default(false) | bool
+
+- name: Reload systemd daemon
+  ansible.builtin.systemd:
+    daemon_reload: true
+  when: install_nfs_folder | default(false) | bool
+
+- name: Mount NFSFolder share
+  ansible.posix.mount:
+    path: /var/NFSFolder
+    src: "192.168.0.161:/mnt/share1/NFSFolder"
+    fstype: nfs
+    opts: "auto,nofail,noatime,nolock,intr,tcp,actimeo=1800"
+    state: mounted
+  when: install_nfs_folder | default(false) | bool
+
+- name: Create vault mount directory
+  ansible.builtin.file:
+    path: /var/vault
+    state: directory
+    mode: '0755'
+  when: install_nfs_vault | default(false) | bool
+
+- name: Add vault mount to fstab
+  ansible.builtin.lineinfile:
+    path: /etc/fstab
+    line: "vault.lan:/mnt/vault /var/vault  nfs      auto,nofail,noatime,nolock,intr,tcp,actimeo=1800    0       0"
+    state: present
+    create: true
+  when: install_nfs_vault | default(false) | bool
+
+- name: Reload systemd daemon
+  ansible.builtin.systemd:
+    daemon_reload: true
+  when: install_nfs_vault | default(false) | bool
+
+- name: Mount vault share
+  ansible.posix.mount:
+    path: /var/vault
+    src: "vault.lan:/mnt/vault"
+    fstype: nfs
+    opts: "auto,nofail,noatime,nolock,intr,tcp,actimeo=1800"
+    state: mounted
+  when: install_nfs_vault | default(false) | bool