server-nozfs.yaml

# ====================================================
# Basic server setup
# ====================================================
---
- hosts: localhost
  become: false
  gather_facts: true
  user: "{{lookup('env', 'USER')}}"
  vars:
    home: "{{ansible_user_dir}}"
    codename: "{{ansible_distribution_release}}"
  vars_prompt:
    - name: arch
      prompt: "Select hardware architecture (arm64/amd64):"
      default: "amd64"
      private: false

  tasks:
    - name: Confirm variable facts are populated and accurate
      ansible.builtin.debug:
        msg:
          - "$HOME is set to {{ home }}"
          - "User is {{ansible_user}}"
          - "Codename is {{codename}}"
          - "Architecture is {{arch}}"

    - name: varcheck
      pause:
        prompt: "Check variables above. Hit return to continue.  Have you added ssh keys?"

    - name: add contrib and non-free repos
      command: sed -i '/^\([^#].*main\)*$/s/main/& contrib non-free non-free-firmware/' /etc/apt/sources.list
      become: true

    - name: Create .config dir
      file:
        path: "{{home}}/.config"
        state: directory

    - name: Create zsh config dir
      file:
        path: "{{home}}/.config/zsh"
        state: directory

    - name: Create nvim config dir
      file:
        path: "{{home}}/.config/nvim"
        state: directory

    - name: install essential packages
      apt:
        name:
          - git
          - software-properties-common
          - python3-pip
          - apt-transport-https
          - ca-certificates
          - curl
          - gnupg-agent
        update_cache: true
      become: true

    - name: Install docker gpg key
      command: wget -qO- https://download.docker.com/linux/debian/gpg | tee /etc/apt/trusted.gpg.d/docker.asc
      become: true

    - name: Install key for influxdata
      command: wget -qO- https://repos.influxdata.com/influxdb.key | tee /etc/apt/trusted.gpg.d/influx.asc 
      become: true

    - name: install docker repo
      apt_repository:
        repo: "deb [arch={{arch}}] https://download.docker.com/linux/debian {{codename}} stable"
        state: present
      become: true

    - name: install influxDB repo
      apt_repository:
        repo: "deb https://repos.influxdata.com/debian {{codename}} stable"
        state: present
      become: true

    - name: Remove old docker
      apt:
        name:
          - docker
          - docker-engine
          - docker.io
          - containerd
          - runc
          - docker-ce
          - docker-ce-cli
          - containerd.io
        state: absent
        update_cache: true
        autoremove: yes
      become: true

    - name: Install docker
      apt:
        name:
          - docker-ce
          - docker-ce-cli
          - containerd.io
        update_cache: true
      register: apt_status
      until: apt_status is success
      retries: 2
      delay: 5
      become: true

    - name: install all packages
      apt:
        name:
          - docker-compose
          - zoxide
          - rclone
          - appstream
          - attr
          - kmod
          - autoconf
          - automake
          - autopoint
          - nfs-common
          - autotools-dev
          - bind9-host
          - cgroupfs-mount
          - cmdtest
          - crda
          - discover
          - discover-data
          - dns-root-data
          - dnsutils
          - doc-debian
          - emacsen-common
          - exfat-fuse
          - exfat-utils
          - fd-find
          - ffmpeg
          - fontconfig
          - fonts-dejavu-core
          - gdisk
          - hdparm
          - iw
          - keyboard-configuration
          - laptop-detect
          - locales
          - lsof
          - lz4
          - m4
          - mailutils
          - mailutils-common
          - make
          - man-db
          - mariadb-common
          - mdadm
          - modemmanager
          - mokutil
          - mysql-common
          - neovim
          - netcat-traditional
          - nmap
          - nmap-common
          - os-prober
          - pciutils
          - picocom
          - pkg-config
          - plocate
          - powermgmt-base
          - ppp
          - protobuf-compiler
          - psmisc
          - python3
          - reportbug
          - ripgrep
          - rsync
          - runit-helper
          - screen
          - shim-signed-common
          - shim-unsigned
          - smartmontools
          - tdb-tools
          - tini
          - tmux
          - traceroute
          - udisks2
          - unzip
          - wireless-regdb
          - x11-common
          - xclip
          - xkb-data
          - zsh
          - zsh-common
          - g++
          - libncurses-dev
          - fzf
          - exa
          - libssl-dev
          - yamllint
          - spl
          - lm-sensors
          - exa
          - bat
          - duf
          - mosh
        state: latest
        update_cache: true
      become: true

    - name: Installing oh-my-zsh
      shell: sh -c "$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)" --unattended

    - name: Install powerlevel10k theme
      git:
        repo: https://github.com/romkatv/powerlevel10k.git
        dest: "{{home}}/.oh-my-zsh/custom/themes/powerlevel10k"
        depth: 1

    - name: Add github identity
      copy:
        dest: "{{home}}/.gitconfig"
        content: |
          [user]
            name = mcondren
            email = matthew.condren@icloud.com

    - name: Export zsh DOTFILE location system-wide
      lineinfile: dest=/etc/zsh/zshenv
                  regexp="^export"
                  line="export ZDOTDIR=$HOME/.config/zsh"
                  state=present
      become: true

    - name: add prems for telegraf to sudoers
      lineinfile:
        dest: /etc/sudoers
        state: present
        line: '{{ item }}'
      with_items:
        - '# For smartctl add the following lines:'
        - 'Cmnd_Alias SMARTCTL = /usr/sbin/smartctl'
        - 'telegraf  ALL=(ALL) NOPASSWD: SMARTCTL'
        - 'Defaults!SMARTCTL !logfile, !syslog, !pam_session'


    - name: Create ramdisk in fstab
      lineinfile: dest=/etc/fstab
                  line="ramdisk /tmp/cache tmpfs defaults,size=1G,x-gvfs-show 0 0"
                  state=present
      become: true

    - name: mount NAS nfs drive
      lineinfile: dest=/etc/fstab
                  line='coldstorage.ansible.house:/mnt/ColdStorage/backup   /backup   nfs4   defaults 0 0'
                  state=present

    - name: Copy .zshenv to $HOME
      copy:
        src: "/etc/zsh/zshenv"
        dest: "{{home}}/.zshenv"
        group: "{{ansible_user_id}}"
        owner: "{{ansible_user_id}}"
      become: true

    - name: Adding github key
      shell: |
        eval `ssh-agent -s`
        ssh-add $HOME/.ssh/github
        ssh-add $HOME/.ssh/id_rsa

    - name: Clone dotfiles repo
      git:
        repo: git@github.com:mcondren/dotfiles.git
        version: master
        dest: "{{home}}/dotfiles"
        key_file: "{{home}}/.ssh/github"
        accept_hostkey: true
      # ssh-agent doesn't allow key to pass through remote sudo commands.
      become: false

    - name: Create a symbolic links for dotfiles (.zshrc)
      ansible.builtin.file:
        src: "{{home}}/dotfiles/.zshrc"
        dest: "{{home}}/.config/zsh/.zshrc"
        state: link

    - name: Create a symbolic links for dotfiles (nvim.init)
      ansible.builtin.file:
        src: "{{home}}/dotfiles/init.vim"
        dest: "{{home}}/.config/nvim/init.vim"
        state: link

    - name: Create a symbolic links for dotfiles (.p10k.zsh)
      ansible.builtin.file:
        src: "{{home}}/dotfiles/.p10k.zsh"
        dest: "{{home}}/.config/zsh/.p10k.zsh"
        state: link

    - name: Clone docker repo
      git:
        repo: git@github.com:mcondren/docker.git
        version: master
        dest: "{{home}}/docker"
        key_file: "{{home}}/.ssh/github"
        accept_hostkey: true
      # ssh-agent doesn't allow key to pass through remote sudo commands.
      become: false

    - name: Set Crontab env variable for rclone/rsync
      cron:
        name: SSH_AUTH_SOCK
        env: true
        job: /tmp/ssh-agent-root-cron
      become: true

    - name: Add weekly rclone backup job to crontab
      cron:
        name: "rclone backup"
        special_time: weekly
        job: "/usr/bin/rclone sync /backup/docker crypt:backup/docker"
      become: true

    - name: Upgrade all packages
      apt: upgrade=safe
      become: true

    - name: Set shell to ZSH
      user:
        name: "{{ansible_user_id}}"
        shell: /bin/zsh
      become: true

    - name: automount share
      shell: 'mount -a'

    - name: Upgrade the OS (apt-get dist-upgrade)
      apt:
        upgrade: dist

    - name: create rsync config dir
      file:
        path: "{{home}}/.config/rclone"
        state: directory
        mode: '0755'

    - name: Copy rclone config
      copy:
        src: "/backup/files/rclone.conf"
        dest: "{{home}}/.config/rclone/rclone.conf"
        group: "{{ansible_user_id}}"
        owner: "{{ansible_user_id}}"
      become: true

    - name: Add telegraf config
      copy:
        src: "/backup/files/telegraf.conf"
        dest: "/etc/telegraf/telegraf.conf"
        group: "{{ansible_user_id}}"
        owner: "{{ansible_user_id}}"
      become: true