Initial commit

.gitignore

@@ -0,0 +1,16 @@
+*.retry
+*.swp
+
+.venv
+.env
+env
+venv
+
+node_modules/
+
+.vault
+.vaults/
+vault
+vaults/
+
+roles/

.prettierrc.yml

@@ -0,0 +1,5 @@
+singleQuote: true
+printWidth: 90
+tabWidth: 2
+useTabs: false
+bracketSpacing: true

ansible.cfg

@@ -0,0 +1,2 @@
+[privilege_escalation]
+become_ask_pass = True

playbook.yml

@@ -0,0 +1,18 @@
+- hosts: localhost
+  pre_tasks:
+    - name: install shared packages
+      become: true
+      pacman:
+        name: '{{ packages }}'
+  - roles:
+    - common
+  tasks:
+    # TODO add ssh setup
+    # TODO add nginx setup
+    - import_tasks: 'tasks/setup.yml'
+    - import_tasks: 'tasks/wireguard.yml'
+    - import_tasks: 'tasks/radicale.yml'
+    - import_tasks: 'tasks/syncthing.yml'
+    - import_tasks: 'tasks/transmission.yml'
+  vars_files:
+    - 'vars.yml'

requirements.yml

@@ -0,0 +1,4 @@
+- src: git+https://git.fudiggity.nl/ansible/common.git
+  name: common
+  version: master
+  scm: git

tasks/setup.yml

@@ -0,0 +1,8 @@
+- name: copy firewall template
+  template:
+    src: 'templates/nftables.j2'
+    dest: '/etc/nftables.conf'
+    owner: root
+    group: root
+    mode: '0600'
+  notify: restart nftables

vars.yml

@@ -0,0 +1,5 @@
+packages:
+  - nftables
+  - wireguard
+  - syncthing
+  - transmission