homeserver-ansible/README.md

**IMPORTANT:** This repository is deprecated in favor of [homeserver-iac](https://github.com/dogeystamp/homeserver-iac), a major rewrite.

# Homeserver Ansible playbook 

This is the Ansible playbook I use to automate installation and configuration of the services on my homeserver.
Do note that this is for personal use, so do not rely on this repo for anything important.

The playbook assumes you have Arch Linux ARM installed on a machine in your LAN, connected to ethernet.
It should have default credentials (alarm - alarm, root - root). Installation of Python and use of pacman-key is handled.

Special thanks to [Wolfgang](https://github.com/notthebee/) for the idea of automating the installation process.
This project was largely inspired by his own [infra](https://github.com/notthebee/infra) repo.

## Services

* Gitea
* Exim mailserver (for local use only)
* Matrix Synapse
* Nginx webserver
* MediaWiki farm
* Navidrome music server
* Syncthing
* Firewall (UFW)

## Miscellaneous features

* Bootstrapping Python
* Setting up a LAN static IP address (NetworkManager)
* Filesystem decryption and mounting
* Dotfile installation

## Usage

Install ansible. [Install guide](https://docs.ansible.com/ansible/latest/installation_guide/intro_installation.html)

Install python-passlib. This is necessary for syncthing because for some reason
Ansible can't compute hashes for bcrypt with the usual library.
If you don't do this, you will not be able to log into Syncthing via web GUI.


Clone the repo:
```
git clone https://github.com/dogeystamp/homeserver-ansible
```

Create a hosts file based on hosts.example:
```
cd homeserver-ansible
cp hosts.example hosts
vim hosts
```


Adjust group variables (remember this is for all your hosts):
```
vim group_vars/all/vars.yml
```


Adjust host variables:
```
mkdir -p host_vars/[hostname]/
vim host_vars/[hostname]/vars.yml
```

Create vault for secrets:
```
ansible-vault create host_vars/[hostname]/vault.yml
ansible-vault edit host_vars/[hostname]/vault.yml
```

A template for secret variables can be found near the end of `group_vars/all/vars.yml`


Add secret files:

```
# Keyfile for LUKS disk encryption
dd if=/dev/random of=roles/filesystems/files/k5e.secret bs=1024 count=2
ansible-vault encrypt roles/filesystems/files/k5e.secret

# This is a signing key for Matrix Synapse. It should be from a previous install.
# If you don't have one, it should be generated by Synapse.
ansible-vault encrypt roles/services/synapse/files/signing.key.secret