westfarn
6f05242ca7
Sync runner checkout / sync (push) Successful in 7s
Each host mounts wp-content and gets a compose file from inventory instead of a hand-copied one. Also allow LAN TCP 8020 so abc_voice is reachable through UFW.
63 lines
2.0 KiB
Markdown
63 lines
2.0 KiB
Markdown
# server-infra
|
|
|
|
Ansible provisioning and deployment for homelab web servers.
|
|
|
|
## Quick Start
|
|
|
|
```bash
|
|
# Install collections (once)
|
|
ansible-galaxy collection install -r requirements.yml
|
|
|
|
# Bootstrap SSH key to each host (one-time, before Ansible)
|
|
ssh-copy-id westfarn@10.0.0.77
|
|
ssh-copy-id westfarn@10.0.0.176
|
|
ssh-copy-id westfarn@10.0.0.44
|
|
ssh-copy-id westfarn@10.0.0.7
|
|
|
|
# First-time only: passwordless sudo on each new host (before first provision)
|
|
ssh -t westfarn@10.0.0.176 # repeat for each host IP
|
|
# on the host:
|
|
echo 'westfarn ALL=(ALL) NOPASSWD:ALL' | sudo tee /etc/sudoers.d/westfarn
|
|
sudo chmod 440 /etc/sudoers.d/westfarn
|
|
exit
|
|
|
|
# Test connectivity to one host
|
|
ansible adama -m ping
|
|
|
|
# Provision one host (dry run first) — includes Alloy log/metrics agent
|
|
./scripts/provision.sh adama --check
|
|
./scripts/provision.sh adama
|
|
|
|
# Control node: Alloy + Loki + Prometheus + Grafana
|
|
./scripts/provision.sh ai-server-4080
|
|
|
|
# Provision all hosts
|
|
./scripts/provision.sh
|
|
|
|
# Stop a compose app (does not remove volumes/checkouts)
|
|
./scripts/stop.sh --app print_forge --env prod
|
|
./scripts/stop.sh --app print_forge --env beta
|
|
```
|
|
|
|
See [IMPLEMENTATION.md](IMPLEMENTATION.md) for full architecture, CI/CD plan, and phase breakdown.
|
|
|
|
Observability (Alloy → Loki / Prometheus → Grafana): [docs/OBSERVABILITY.md](docs/OBSERVABILITY.md) · [docs/GRAFANA_USAGE.md](docs/GRAFANA_USAGE.md)
|
|
|
|
WordPress (MariaDB on TrueNAS): [docs/WORDPRESS.md](docs/WORDPRESS.md).
|
|
Provision mounts each site's `wp-content` and writes its compose file from
|
|
[inventory/wordpress_sites.yml](inventory/wordpress_sites.yml). Start the
|
|
containers by hand (adama first).
|
|
|
|
Provision installs **Alloy** on every host. On **ai-server-4080** it also starts
|
|
the central **Loki / Prometheus / Grafana** stack (`observability_stack: true`).
|
|
|
|
## Servers
|
|
|
|
| Host | IP | Role |
|
|
|------|-----|------|
|
|
| adama | 10.0.0.77 | app host |
|
|
| roslin | 10.0.0.176 | app host |
|
|
| starbuck | 10.0.0.44 | app host |
|
|
| apollo | 10.0.0.7 | app host |
|
|
| ai-server-4080 | 10.0.0.128 | control node + act runner |
|