playbook folder rename

playbooks/ansible.yaml

@@ -0,0 +1,29 @@
+- name: Setup ansible node
+  hosts: all
+  tasks:
+  
+    - name: Add ansible user
+      ansible.builtin.user:
+        name: ansible
+        state: present
+        password: '!'
+        comment: Ansible management user
+        groups: sudo
+      become: true
+
+    - name: Allow ansible to execute root commands
+      ansible.builtin.copy:
+        src: ansible/sudoers_ansible
+        dest: /etc/sudoers.d/ansible
+        validate: visudo -c -f %s
+        owner: root
+        group: root
+        mode: u=r,g=r,o=-rwx
+      become: true
+
+    - name: Add epickiwi-laptop ssh key
+      ansible.posix.authorized_key:
+        comment: epickiwi@epickiwi-laptop
+        user: ansible
+        key: ssh-rsa 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 epickiwi@epickiwi-laptop
+        state: present

playbooks/ansible/sudoers_ansible

@@ -0,0 +1 @@
+ansible ALL=(ALL:ALL) NOPASSWD: ALL

playbooks/matrix.yaml

@@ -0,0 +1,91 @@
+- name: Setup matrix server
+  hosts: berliet.medicenlutte.fr
+  tasks:
+
+    - name: Setup Continuwuity repository key
+      ansible.builtin.copy:
+        src: matrix/forgejo-continuwuation.asc
+        dest: /etc/apt/keyrings/forgejo-continuwuation.asc
+        owner: root
+        group: root
+        mode: u=rw,g=rw,o=r
+      become: true
+
+    - name: Setup Continuwuity repository
+      ansible.builtin.copy:
+        src: matrix/continuwuation.list
+        dest: /etc/apt/sources.list.d/continuwuation.list
+        owner: root
+        group: root
+        mode: u=rw,g=rw,o=r
+      become: true
+
+    - name: Install Continuwuity
+      ansible.builtin.apt:
+        name: continuwuity
+        state: present
+        update_cache: yes
+      become: true
+
+    - name: Setup Continuwuity config
+      ansible.builtin.copy:
+        src: matrix/conduwuit.toml
+        dest: /etc/conduwuit/conduwuit.toml
+        owner: root
+        group: root
+        mode: u=rw,g=rw,o=r
+      become: true
+
+    - name: Create conduwuit user
+      ansible.builtin.user:
+        name: conduwuit
+        state: present
+        create_home: false
+        home: /var/lib/conduwuit
+        shell: /usr/sbin/nologin
+        password: '!'
+        system: true
+      become: true
+      
+    - name: Start and Enable Continuwuity
+      ansible.builtin.systemd_service:
+        name: conduwuit
+        state: reloaded
+        enabled: true
+      become: true
+
+- name: Setup NGINX
+  ansible.builtin.import_playbook: nginx.yaml
+
+- name: Setup NGINX config for matrix server
+  hosts: berliet.medicenlutte.fr
+  tasks:
+
+    - name: Setup matrix.medicenlutte.fr site
+      ansible.builtin.copy:
+        src: matrix/matrix.medicenlutte.fr.conf
+        dest: /etc/nginx/sites-available/matrix.medicenlutte.fr.conf
+        owner: root
+        group: root
+        mode: u=rw,g=rw,o=r
+      become: true
+
+    - name: Add www-data to conduwuit group
+      ansible.builtin.user:
+        name: www-data
+        groups: conduwuit
+        append: true
+      become: true
+
+    - name: Enable matrix.medicenlutte.fr site
+      ansible.builtin.file:
+        path: /etc/nginx/sites-enabled/matrix.medicenlutte.fr.conf
+        state: link
+        src: ../sites-available/matrix.medicenlutte.fr.conf
+      become: true
+      
+    - name: Reload NGINX
+      ansible.builtin.systemd_service:
+        name: nginx
+        state: reloaded
+      become: true

playbooks/matrix/continuwuation.list

@@ -0,0 +1 @@
+deb [signed-by=/etc/apt/keyrings/forgejo-continuwuation.asc] https://forgejo.ellis.link/api/packages/continuwuation/debian trixie stable

playbooks/matrix/forgejo-continuwuation.asc

@@ -0,0 +1,32 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=wfVg
+-----END PGP PUBLIC KEY BLOCK-----

playbooks/matrix/matrix.medicenlutte.fr.conf

@@ -0,0 +1,12 @@
+server {
+	listen 80;
+	listen [::]:80;
+	server_name matrix.medicenlutte.fr;
+
+	client_max_body_size 5G;
+
+	location / {
+		include "proxy_params";
+		proxy_pass http://unix:/run/conduwuit/conduwuit.sock:$request_uri;
+	}
+}

playbooks/medicenlutte.fr.yaml

@@ -0,0 +1,37 @@
+- name: Setup NGINX
+  ansible.builtin.import_playbook: nginx.yaml
+
+- name: Setup medicenlutte.fr static website
+  hosts: berliet.medicenlutte.fr
+  tasks:
+
+    - name: Setup /srv/www/medicenlutte.fr folder
+      ansible.builtin.file:
+        path: /srv/www/medicenlutte.fr
+        state: directory
+        owner: www-data
+        group: www-data
+        mode: u=rwx,g=rwx,o=rx
+      become: true
+
+    - name: Setup medicenlutte.fr site
+      ansible.builtin.copy:
+        src: medicenlutte.fr/medicenlutte.fr.conf
+        dest: /etc/nginx/sites-available/medicenlutte.fr.conf
+        owner: root
+        group: root
+        mode: u=rw,g=rw,o=r
+      become: true
+
+    - name: Enable medicenlutte.fr site
+      ansible.builtin.file:
+        path: /etc/nginx/sites-enabled/medicenlutte.fr.conf
+        state: link
+        src: ../sites-available/medicenlutte.fr.conf
+      become: true
+      
+    - name: Reload NGINX
+      ansible.builtin.systemd_service:
+        name: nginx
+        state: reloaded
+      become: true

playbooks/medicenlutte.fr/medicenlutte.fr.conf

@@ -0,0 +1,11 @@
+server {
+	listen 80;
+	listen [::]:80;
+	server_name medicenlutte.fr;
+    root /srv/www/medicenlutte.fr/;
+
+	location /.well-known/matrix {
+		include "proxy_params";
+		proxy_pass http://unix:/run/conduwuit/conduwuit.sock:$request_uri;
+	}
+}

playbooks/nginx.yaml

@@ -0,0 +1,42 @@
+- name: Setup NGINX
+  hosts: berliet.medicenlutte.fr
+  tasks:
+
+    - name: Install NGINX
+      ansible.builtin.apt:
+        name: nginx
+        state: present
+        update_cache: yes
+      become: true
+    
+    - name: Setup default website
+      ansible.builtin.copy:
+        src: nginx/default
+        dest: /etc/nginx/sites-available/default
+        owner: root
+        group: root
+        mode: u=rw,g=rw,o=r
+      become: true
+
+    - name: Enable default website
+      ansible.builtin.file:
+        path: /etc/nginx/sites-enabled/default
+        state: link
+        src: ../sites-available/default
+      become: true
+
+    - name: Setup /srv/www folder
+      ansible.builtin.file:
+        path: /srv/www
+        state: directory
+        owner: www-data
+        group: www-data
+        mode: u=rwx,g=rwx,o=rx
+      become: true
+      
+    - name: Start and Enable NGINX
+      ansible.builtin.systemd_service:
+        name: nginx
+        state: reloaded
+        enabled: true
+      become: true

playbooks/nginx/default

@@ -0,0 +1,9 @@
+server {
+	listen 80 default_server;
+	listen [::]:80 default_server;
+	server_name _;
+
+	location / {
+		return 404;
+	}
+}