summaryrefslogtreecommitdiff
path: root/ansible/radicle-other-node.yml
blob: 774fe8c512cb5a1968244f26bafeeeecde59f13d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
- hosts: radicle-other-node
  remote_user: debian
  become: yes
  roles:
    - role: sane_debian_system
    - role: sshd
    - role: unix_users
  tasks:
    - name: "install important additional packages"
      apt:
        name:
          - curl
          - git

    - name: "install of upgrade Radicle using installer"
      shell: |
        # Can't use "set -o pipefail" here, because shell may not be
        # bash. So we don't use a pipe from curl to bash, and download
        # as one command and run script as a second command. If the
        # download fails, the task fails.

        curl -sSf https://radicle.xyz/install > radicle-install
        sudo -u _rad bash radicle-install
  vars:
    sane_debian_system_version: 2
    sane_debian_system_hostname: "{{ inventory_hostname }}"
    sane_debian_system_codename: bookworm
    sane_debian_system_timezone: Europe/Helsinki
    sane_debian_system_sources_lists:
      - repo: |
          deb http://security.debian.org/debian-security bookworm-security main

    unix_users_version: 2
    unix_users:
      - username: _rad
        comment: Radicle node

    sshd_version: 1