wumpus.liw.fi: add

Signed-off-by: Lars Wirzenius <liw@liw.fi>
Sponsored-by: author

1 files changed, 52 insertions, 0 deletions

diff --git a/ansible/wumpus.liw.fi.yml b/ansible/wumpus.liw.fi.yml
new file mode 100644
index 0000000..0be5379
--- /dev/null
+++ b/ansible/wumpus.liw.fi.yml
@@ -0,0 +1,52 @@
+- hosts: wumpus.liw.fi
+  remote_user: root
+  become: yes
+  roles:
+    - role: sane_debian_system
+    - role: sshd
+    - role: comfortable-debian-system
+    - role: unix_users
+    - role: apache_server
+    - role: rust-rustup
+    - role: liw
+  tasks:
+    - name: "install important additional packages"
+      apt:
+        name:
+          - moreutils
+          - nmap
+          - ripgrep
+
+  vars:
+    ansible_python_interpreter: /usr/bin/python3
+
+    sane_debian_system_version: 2
+    sane_debian_system_hostname: "{{ inventory_hostname }}"
+    sane_debian_system_codename: bookworm
+    sane_debian_system_timezone: Europe/Helsinki
+    sane_debian_system_sources_lists:
+      - repo: |
+          deb http://security.debian.org/debian-security bookworm-security main contrib non-free
+
+    unix_users_version: 2
+    unix_users:
+      - username: liw
+        comment: Lars Wirzenius
+
+    sshd_version: 1
+
+    rustup_cargo_install: |
+      starship
+
+    letsencrypt: yes
+    letsencrypt_email: liw@liw.fi
+    letsencrypt_main_domain: wumpus.liw.fi
+    certbot_debian_release: bookworm
+
+    static_sites:
+
+      - domain: wumpus.liw.fi
+        owner: liw
+        ownermail: liw@liw.fi
+        letsencrypt: yes
+        letsencrypt_cert: cert01