Thomas von Dein
480111eed7
- finally fixed pf.conf - got Bastillefile working (sshd_config missing yet) - re-activated network role to set net variables - fixed make [all] - use hetzner volume for jail home - use ramdisk for /tmp inside jail
50 lines
1.2 KiB
Makefile
50 lines
1.2 KiB
Makefile
.PHONY: all deploy check clean create debug editvars test
|
|
|
|
|
|
VARS = group_vars/all/vars.yaml
|
|
VALL = group_vars/all/all.yaml
|
|
TOKEN = $(shell ansible-vault decrypt --output - $(VARS) | grep hetzner_cloud_token | cut -d' ' -f2)
|
|
|
|
SNAPNAME = $(shell cat $(VALL) | yq .snapshot)
|
|
|
|
SNAPSHOT = $(shell hcloud image list -t snapshot -o yaml | \
|
|
yq '. | map(select(.description == "$(SNAPNAME)")) | .[].id')
|
|
|
|
OPTIONS = -i inventory -t active
|
|
CREATE_COMMAND = ansible-playbook create.yaml $(OPTIONS)
|
|
DEPLOY_COMMAND = ansible-playbook deploy.yaml $(OPTIONS)
|
|
CLEAN_COMMAND = ansible-playbook cleanup.yaml $(OPTIONS)
|
|
HOSTS_COMMAND = ansible-playbook knownhosts.yaml $(OPTIONS)
|
|
DEBUG_COMMAND = ansible-playbook debug.yaml $(OPTIONS)
|
|
|
|
ENV = HCLOUD_TOKEN="$(TOKEN)" SNAPSHOT="$(SNAPSHOT)" ANSIBLE_VERBOSITY=$(verbose)
|
|
|
|
|
|
all: create deploy
|
|
|
|
debug:
|
|
$(ENV) $(DEBUG_COMMAND)
|
|
|
|
create:
|
|
$(ENV) $(CREATE_COMMAND)
|
|
|
|
hosts:
|
|
$(ENV) $(HOSTS_COMMAND)
|
|
|
|
deploy:
|
|
$(ENV) $(DEPLOY_COMMAND)
|
|
|
|
clean:
|
|
$(ENV) $(CLEAN_COMMAND)
|
|
|
|
check:
|
|
ansible-playbook -vvv --ask-vault-pass deploy.yaml -i inventory --syntax-check
|
|
|
|
editvars:
|
|
ansible-vault decrypt $(VARS)
|
|
vi $(VARS)
|
|
ansible-vault encrypt $(VARS)
|
|
|
|
showvars:
|
|
ansible-vault decrypt $(VARS) --output -
|