infra-ansible

ansible script to ship alpine/ssh/wireguard

git clone https://9o.is/git/infra-ansible.git

commit f83780984757720e7df8d359ef9c05a829c8b41f
parent ee6a3d048edc741367a1ebb220cf14fc42099fcb
Author: Jul <jul@9o.is>
Date:   Sat, 11 May 2024 01:58:45 +0800

organize playbooks with iptables and fwknop

Diffstat:
Ahost/init.yml | 8++++++++
Mhost/readme.md | 10++++++++--
Mhost/site.yml | 5++---
3 files changed, 18 insertions(+), 5 deletions(-)

diff --git a/host/init.yml b/host/init.yml @@ -0,0 +1,8 @@ +--- +- name: Initiate server + hosts: servers + remote_user: root + roles: + - hostname + - openssh + diff --git a/host/readme.md b/host/readme.md @@ -1,6 +1,12 @@ -### Starting Requirements +### Installation +- Make sure .ssh/config and .ssh/known_hosts is configured properly - Server must be ssh-authorized via root -- Server must set mtu to 576 (`ip link set ens3 mtu 576`) +- Server must set mtu to 576 for 1984 hosting (`ip link set ens3 mtu 576`) - else 1984 hosting will drop fragmented packets from large, sftp files +``` +ansible-playbook init.yml --ssh-extra-args '-o Port=22' +ansible-playbook site.yml +``` + diff --git a/host/site.yml b/host/site.yml @@ -4,7 +4,6 @@ remote_user: user become: true roles: - - hostname - - openssh -# - k0s + - iptables + - fwknop