Moving setup into its own role, where we just set up the system configuuration for running k3s'

docker-host/roles/setup/tasks/dns.yml

@@ -0,0 +1,15 @@
+# Further changes to DNS config are going to vary so heavily that I'm not
+# even going to bother putting down anything else for dns configuration
+# At this point basically just change /etc/resolv.conf to change dns targets
+# and then add stuff to the /etc/hosts file as required
+---
+- hosts: leftcoastlab
+  tasks:
+    - name: Install DNSMasq
+      become: yes
+      apt:
+        name: "{{ item }}"
+        update_cache: yes
+      loop:
+        - dnsmasq
+

docker-host/roles/setup/tasks/file-server.yml

@@ -0,0 +1,31 @@
+# This playbook goes through the process of setting up a simple FTP server on
+# the target host.
+---
+- hosts: leftcoastlab
+  become: yes
+  tasks:
+    - name: Include Vars
+      include_vars:
+        dir: ../vars
+
+    - name: Ensure Filebrowser Volume Exists
+      community.docker.docker_volume:
+        name: file-storage
+        state: present
+
+    - name: Setup Filebrowser Container
+      community.docker.docker_container:
+        name: filebrowser
+        image: filebrowser/filebrowser
+        restart_policy: always
+        recreate: yes
+        volumes:
+          - "file-storage:/srv"
+        ports:
+          - "{{FILEBROWSER_PORT}}:80"
+        log_driver: loki
+        log_options:
+          loki-url: "http://localhost:{{LOKI_PORT}}/loki/api/v1/push"
+    
+
+

docker-host/roles/setup/tasks/fresh.yml

@@ -0,0 +1,23 @@
+# Setup a brand new system from the ground up.
+---
+- hosts: leftcoastlab
+  tasks:
+  - name: Import Global Vars
+    include_vars:
+      dir: ../vars
+
+
+# System pre-reqs
+- import_playbook: 'system-update.yml'
+- import_playbook: 'install-docker.yml'
+- import_playbook: 'dns.yml'
+# Logging stack
+- import_playbook: 'install-loki-logger.yml'
+- import_playbook: 'grafana.yml'
+# For host metrics
+- import_playbook: 'vector.yml'
+# Containerized services
+- import_playbook: 'file-server.yml'
+- import_playbook: 'git-stack.yml'
+- import_playbook: 'subsonic.yml'
+- import_playbook: 'nginx.yml'

docker-host/roles/setup/tasks/git-stack.yml

@@ -0,0 +1,33 @@
+---
+- hosts: leftcoastlab
+  become: yes
+  vars:
+    GITEA_VOLUME: gitea-volume
+  tasks:
+    - name: Import Vars required for  configuration
+      include_vars:
+        dir: ../vars
+
+    - name: Create Gitea Volume
+      community.docker.docker_volume:
+        name: "{{GITEA_VOLUME}}"
+
+    - name: Update/Install Git Tea Container Service
+      community.docker.docker_container:
+        name: gitea
+        image: gitea/gitea
+        pull: yes
+        restart_policy: always
+        recreate: yes
+        volumes:
+          - "{{GITEA_VOLUME}}:/data"
+          - /etc/timezone:/etc/timezone:ro
+          - /etc/localtime:/etc/localtime:ro
+        ports:
+          - "{{GITEA_PUB_PORT}}:3000"
+          - "{{GITEA_SSH_PORT}}:22"
+        log_driver: loki
+        log_options:
+          loki-url: "http://localhost:{{LOKI_PORT}}/loki/api/v1/push"
+
+

docker-host/roles/setup/tasks/grafana.yml

@@ -0,0 +1,26 @@
+---
+- hosts: leftcoastlab
+  become: yes
+  tasks:
+    - name: Include Vars
+      include_vars:
+        dir: ../vars
+
+    - name: Create Grafana Volume
+      community.docker.docker_volume:
+        name: grafana-volume
+
+    - name: Setup Grafana Container(latest)
+      community.docker.docker_container:
+        name: grafana
+        image: grafana/grafana-oss:latest
+        pull: yes
+        restart_policy: always
+        recreate: yes
+        timeout: 120
+        ports:
+          - "{{GRAFANA_PORT}}:3000"
+        volumes:
+          - "grafana-volume:/var/lib/grafana/"
+
+

docker-host/roles/setup/tasks/install-docker.yml

@@ -0,0 +1,29 @@
+---
+- hosts: leftcoastlab
+  become: yes
+  tasks:
+    - name: Install docker dependencies
+      apt:
+        name: "{{item}}"
+        update_cache: yes
+      loop:
+        - apt-transport-https
+        - ca-certificates
+        - curl
+        - gnupg
+        - software-properties-common
+        - lsb-release
+        - python3-pip
+
+    - name: Install Docker
+      apt:
+        name: docker.io
+        update_cache: yes
+
+    - name: Install Docker Ansible Driver
+      pip:
+        name: docker
+
+
+
+

docker-host/roles/setup/tasks/install-loki-logger.yml

@@ -0,0 +1,12 @@
+# This playbook installs the loki docker plugin which allows other docker based
+# services to do they're regular logging actions but centralize them
+---
+- hosts: leftcoastlab
+  become: yes
+  tasks:
+  # --grant-all-permissions is the default for ansible
+  - name: Install Loki Docker Plugin
+    community.docker.docker_plugin:
+      plugin_name: grafana/loki-docker-driver:latest
+      state: enabled
+      alias: loki

docker-host/roles/setup/tasks/kanboard.yml

@@ -0,0 +1,63 @@
+# Sets up an instance of Kanboard from top to bottom
+---
+- hosts: leftcoastlab
+  become: yes
+  vars:
+    PRE: kanboard
+    DATA_VOLUME: "{{PRE}}-data-volume"
+    PLUGINS_VOLUME: "{{PRE}}-plugins-volume"
+    SSL_VOLUME: "{{PRE}}-ssl-volume"
+  tasks:
+    - name: Include Vars
+      include_vars:
+        dir: ../vars
+
+    - name: Ensure Data volume exists 
+      community.docker.docker_volume:
+        name: "{{DATA_VOLUME}}"
+
+    - name: Ensure Plugins Volume exists
+      community.docker.docker_volume:
+        name: "{{PLUGINS_VOLUME}}"
+
+    - name: Ensure SSL Volume exists
+      community.docker.docker_volume:
+        name: "{{SSL_VOLUME}}"
+
+    - name: Ensure Docker service is active
+      community.docker.docker_container:
+        name: kanboard
+        image: kanboard/kanboard:latest 
+        pull: yes
+        restart_policy: always
+        recreate: yes
+        ports:
+          - "{{ KANBOARD_PORT }}:80"
+          - "{{ KANBOARD_PORT_SSL }}:443"
+        volumes:
+          - "{{DATA_VOLUME}}:/var/www/app/data"
+          - "{{PLUGINS_VOLUME}}:/var/www/app/plugins"
+          - "{{SSL_VOLUME}}:/etc/nginx/ssl"
+
+    - name: Create Nginx Config for service
+      template:
+        dest: /etc/nginx/sites-available/todo.lablad
+        src: ../templates/proxy.conf.j2
+      notify:
+        - restart-nginx
+      vars:
+        SERVER_NAME: todo.lablad
+        PORT: KANBOARD_PORT
+
+    - name: Restart Nginx
+      service:
+        name: nginx
+        state: restarted
+
+
+
+
+
+
+
+

docker-host/roles/setup/tasks/landing-page.yml

@@ -0,0 +1,8 @@
+---
+- hosts: leftcoastlab
+  become: yes
+  tasks:
+    - name: Copy landing page
+      copy:
+        src: "{{LANDING_PAGE_ROOT_PATH}}/public/"
+        dest: /var/www/html/

docker-host/roles/setup/tasks/nginx.yml

@@ -0,0 +1,77 @@
+---
+- hosts: leftcoastlab
+  become: yes
+  vars:
+    STATIC_USER: staticweb
+  tasks:
+    - name: Install Nginx Package
+      apt:
+        name: nginx
+        update_cache: yes
+        state: present
+
+    - name: Stop Apache2 Service
+      systemd:
+        name: apache2
+        state: stopped
+        enabled: no
+
+    - name: Remove Apache2
+      apt:
+        name: apache2
+        state: absent
+
+    - name: Ensure  the default website is disabled
+      file:
+        path: /etc/nginx/sites-enabled/default
+        state: absent
+
+    - name: website user account
+      user:
+        name: "{{STATIC_USER}}"
+        comment: Static Website maintainer account
+        state: present
+
+    - name: Create Static web root directory
+      file:
+        path: /var/www
+        state: directory
+        recurse: yes
+        owner: "{{STATIC_USER}}"
+        group: "{{STATIC_USER}}"
+
+    - name: Copy Reverse proxy configs
+      copy:
+        src: "{{ item }}"
+        dest: /etc/nginx/sites-available/
+      loop:
+        - ../files/git.lablad
+        - ../files/music.lablad
+        - ../files/files.lablad
+        - ../files/metrics.lablad
+        - ../files/todo.lablad
+        - ../files/home.lablad
+        - ../files/vault.lablad
+
+    - name: Enable Sites
+      file:
+        src: /etc/nginx/sites-available/{{item}}
+        dest: /etc/nginx/sites-enabled/{{item}}
+        state: link
+      loop:
+        - git.lablad
+        - music.lablad
+        - files.lablad
+        - metrics.lablad
+        - vault.lablad
+        - todo.lablad
+        - home.lablad
+      notify:
+        - restart-nginx
+
+  handlers:
+    - import_tasks: ../handlers/nginx.yml
+
+
+
+

docker-host/roles/setup/tasks/prometheus.yml

@@ -0,0 +1,63 @@
+--- 
+- hosts: leftcoastlab
+  vars:
+    PROM_URL: "https://github.com/prometheus/node_exporter/releases/download/v1.3.1/node_exporter-1.3.1.linux-amd64.tar.gz"
+  become: yes
+  tasks:
+    - name: Include Global Vars
+      include_vars:
+        dir: ../vars
+
+    - name: Download prometheus Node Explorer static binary tarball
+      get_url:
+        url: "{{ PROM_URL }}"
+        dest: /tmp/prom-node-exporer.tar.gz
+
+    - name: Untar node exporter tarball package
+      unarchive:
+        src: /tmp/prom-node-exporer.tar.gz
+        dest: /opt/prom-node-exporter
+        creates: /opt/prom-node-exporter
+        remote_src: yes
+
+    - name: Copy Unit file for node exporter
+      copy:
+        src: ../files/services/node_exporter.service
+        dest: /etc/systemd/system/node_exporter.service
+
+    - name:  Install Node Exporter Service and Start
+      systemd:
+        daemon_reload: yes
+        name: node_exporter
+        state: restarted
+        enabled: yes
+
+    - name: Ensure Prom Docker Volume Exists
+      community.docker.docker_volume:
+        name: prometheus-volume
+
+    - name: Ensure Config directory exists
+      file:
+        path: /opt/prometheus
+        state: directory
+
+    - name: Copy Prometheus template to target directory
+      template:
+        dest: /opt/prometheus/prometheus.yml
+        src: ../templates/prometheus.yml.j2
+
+    - name: Setup Prometheus (Containerized) Service
+      community.docker.docker_container:
+        name: prometheus
+        image: prom/prometheus
+        pull: yes
+        restart_policy: always
+        recreate: yes
+        volumes:
+          - "prometheus-volume:/prometheus"
+          - "/opt/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml"
+        ports:
+          - "{{PROM_PORT}}:{{PROM_PORT}}"
+
+
+

docker-host/roles/setup/tasks/subsonic.yml

@@ -0,0 +1,37 @@
+# This playbook sets up subsonic with/without a fresh to work with
+---
+- hosts: leftcoastlab
+  become: yes
+  vars:
+    SUBSONIC_DIR: /opt/subsonic/data
+    SUBSONIC_CONFIG_VOL: subsonic-config-volume
+  tasks:
+    - name: Include Vars
+      include_vars:
+        dir: ../vars    
+
+
+    - name: Ensure Subsonic music directory exists
+      file:
+        path: "{{SUBSONIC_DIR}}"
+        state: directory
+
+    - name: Ensure Subsonic configuration volume exists
+      community.docker.docker_volume:
+        name: "{{SUBSONIC_CONFIG_VOL}}"
+        state: present
+
+    - name: Deploy Subsonic container
+      community.docker.docker_container:
+        name: subsonic
+        image: gzurowski/subsonic
+        restart_policy: always
+        recreate: yes
+        ports:
+          - "{{SUBSONIC_PORT}}:4040"
+        volumes:
+          - "{{SUBSONIC_DIR}}:/var/music"
+        log_driver: loki
+        log_options:
+          loki-url: "http://localhost:{{LOKI_PORT}}/loki/api/v1/push"
+

docker-host/roles/setup/tasks/system-update.yml

@@ -0,0 +1,10 @@
+# Simply update all required packages that we have on the system
+# This also takes care of updating any packages that must updated through means
+# of Git or some other non-apt method should it be required
+---
+- hosts: leftcoastlab
+  become: yes
+  tasks:
+    - name: Distribution Upgrade
+      apt:
+        upgrade: dist

docker-host/roles/setup/tasks/vault.yml

@@ -0,0 +1,47 @@
+---
+- hosts: leftcoastlab
+  tasks:
+    - name: Pull In Vars
+      include_vars:
+        dir: ../vars
+
+    - name: Create Vault Bind Root
+      become: yes
+      file:
+        path: /opt/vault
+        state: directory
+
+    - name: Ensure Vault Bind directories in place
+      become: yes
+      file:
+        path: "/opt/vault/{{item}}"
+        state: directory
+      loop:
+        - config
+        - logs
+        - file
+
+    - name: Create Vault Config
+      become: yes
+      template:
+        src: ../templates/vault-config.json.j2
+        dest: /opt/vault/config/vault.json
+
+    - name: Start up Vault Service
+      community.docker.docker_container:
+        name: vault
+        image: vault
+        ports:
+          - "{{VAULT_PORT}}:8200"
+        restart_policy: always
+        volumes:
+          - /opt/vault/logs:/vault/logs
+          - /opt/vault/file:/vault/file
+          - /opt/vault/config:/vault/config
+        env:
+          VAULT_ADDR: http://127.0.0.1:8200
+        capabilities:
+          - IPC_LOCK
+        entrypoint:
+          - vault server -config=/vault/config/vault.json
+