add web VM for playing with local copies of my websites

3 files changed, 33 insertions, 1 deletions

diff --git a/ansible/all.sh b/ansible/all.sh
index 38b4b4a..bfbd423 100755
--- a/ansible/all.sh
+++ b/ansible/all.sh
@@ -42,7 +42,7 @@ maybe_run_playbook exolobe2
 maybe_run_playbook exolobe4
 maybe_run_playbook exolobe5
 maybe_run_playbook holywood2
-maybe_run_playbook debmirror
+maybe_run_playbook web
 maybe_run_playbook atuin.liw.fi
 
 maybe_run_ansible git.liw.fi git
diff --git a/ansible/hosts b/ansible/hosts
index c6cd961..b663dac 100644
--- a/ansible/hosts
+++ b/ansible/hosts
@@ -45,6 +45,8 @@ sid
 
 kea
 
+web
+
 [ick-workers]
 ick3-unstable           hostname=ick3-unstable  debian_codename=unstable pbuilder_othermirror_distro=unstable
 ick3-stretch            hostname=ick3-stretch   debian_codename=stretch pbuilder_othermirror_distro=unstable
diff --git a/ansible/web.yml b/ansible/web.yml
new file mode 100644
index 0000000..477c6c2
--- /dev/null
+++ b/ansible/web.yml
@@ -0,0 +1,30 @@
+- hosts: web
+  remote_user: root
+  roles:
+    - role: sane_debian_system
+    - role: unix_users
+    - role: apache_server
+    - role: comfortable-debian-system
+    - role: self-updating-system
+  vars:
+    sane_debian_system_version: 1
+    unix_users_version: 2
+
+    sane_debian_system_hostname: web
+    sane_debian_system_codename: buster
+    sane_debian_system_mirror: deb.debian.org
+
+    unix_users:
+      - username: liw
+        comment: Lars Wirzenius
+        authorized_keys: |
+          {{ liw_ssh_pub }}
+
+    static_sites:
+
+      # Sites that refer to this server via CNAME will work out of the box.
+
+      - domain: web
+        owner: liw
+        ownermail: liw@liw.fi
+        letsencrypt: no