Skip to content

Latest commit

 

History

History
66 lines (49 loc) · 2.33 KB

README.md

File metadata and controls

66 lines (49 loc) · 2.33 KB
Raw

Free I.T. Athen's Infrastructure

This project is used to develop Ansible for deploying and maintaining websites and services operated by Free I.T. Athens (FRITA).

  • Requires GNU Make, Ansible, and Vagrant on the host

Quick Start

  1. Clone this project
  2. Run make to provision a Debian 11 base box
  3. Go to
  4. Click through the HTTPS security warning

Production

  1. Clone production-env to ./environments

    mkdir -p environments
git clone [email protected]:freeitathens/production-env.git ./environments

  2. Run ./scripts/vault-key.sh from the root of the project to obtain the Ansible Vault password

  3. Enter the Bitwarden Master Password

  4. Run ansible-playbook against the production servers, e.g.,

    ansible-playbook -u root -i environments/production --vault-pass-file ./.ansible_vault webserver.yml --diff --check

  5. Delete the .ansible_vault file when you are done

Using Ansible Vault to add or rotate values

Do not submit ciphertext into Ansible Vault with the indention formatting.
To submit, press CTRL+d twice.

  • Decrypt Ansible Vault values

    ansible-vault decrypt --vault-pass-file .ansible_vault

  • Encrypt new Ansible Vault values

    ansible-vault encrypt --vault-pass-file .ansible_vault
    • e.g., pwgen -s 100 1 | ansible-vault encrypt --vault-pass-file .ansible_vault

Authors

  • Kris Lamoureux - Project Founder - @krislamo

Copyrights and Licenses

Copyright (C) 2019, 2020, 2022 Free I.T. Athens

This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, version 3 of the License.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program. If not, see https://www.gnu.org/licenses/.