westfarn
ec294a1d45
Sync runner checkout / sync (push) Successful in 6s
## Summary - Closes [#20](#20). - Register **starbuck** (`10.0.0.44`) and **apollo** (`10.0.0.7`) as Proxmox app hosts in `webservers`, with `host_apps` copied from **roslin** (same apps/ports; **no** `monica_site` worker — that stays a singleton on **adama**). - Allow `starbuck` / `apollo` in `provision.sh` and `deploy.sh`; document inventory, NPM backends, and Alloy `host` labels. ## Test plan - [ ] `ansible-inventory --list` shows both hosts under `webservers` at the expected IPs. - [ ] Bootstrap SSH + passwordless sudo on each VM (keep a Proxmox console open for first UFW enable). - [ ] `ansible starbuck,apollo -m ping` - [ ] `./scripts/provision.sh starbuck --check` then `./scripts/provision.sh starbuck` - [ ] `./scripts/provision.sh apollo --check` then `./scripts/provision.sh apollo` - [ ] `./scripts/deploy.sh starbuck` and `./scripts/deploy.sh apollo` bring up the same app+env set as roslin. - [ ] `monica_site` dj-queue worker still runs **only** on adama. - [ ] Grafana/Loki show `host="starbuck"` and `host="apollo"`. - [ ] NPM Advanced upstreams (manual): add `starbuck:PORT` and `apollo:PORT` beside adama/roslin.Reviewed-on: #21
54 lines
1.6 KiB
Markdown
54 lines
1.6 KiB
Markdown
# server-infra
|
|
|
|
Ansible provisioning and deployment for homelab web servers.
|
|
|
|
## Quick Start
|
|
|
|
```bash
|
|
# Install collections (once)
|
|
ansible-galaxy collection install -r requirements.yml
|
|
|
|
# Bootstrap SSH key to each host (one-time, before Ansible)
|
|
ssh-copy-id westfarn@10.0.0.77
|
|
ssh-copy-id westfarn@10.0.0.176
|
|
ssh-copy-id westfarn@10.0.0.44
|
|
ssh-copy-id westfarn@10.0.0.7
|
|
|
|
# First-time only: passwordless sudo on each new host (before first provision)
|
|
ssh -t westfarn@10.0.0.176 # repeat for each host IP
|
|
# on the host:
|
|
echo 'westfarn ALL=(ALL) NOPASSWD:ALL' | sudo tee /etc/sudoers.d/westfarn
|
|
sudo chmod 440 /etc/sudoers.d/westfarn
|
|
exit
|
|
|
|
# Test connectivity to one host
|
|
ansible adama -m ping
|
|
|
|
# Provision one host (dry run first) — includes Alloy log/metrics agent
|
|
./scripts/provision.sh adama --check
|
|
./scripts/provision.sh adama
|
|
|
|
# Control node: Alloy + Loki + Prometheus + Grafana
|
|
./scripts/provision.sh ai-server-4080
|
|
|
|
# Provision all hosts
|
|
./scripts/provision.sh
|
|
```
|
|
|
|
See [IMPLEMENTATION.md](IMPLEMENTATION.md) for full architecture, CI/CD plan, and phase breakdown.
|
|
|
|
Observability (Alloy → Loki / Prometheus → Grafana): [docs/OBSERVABILITY.md](docs/OBSERVABILITY.md) · [docs/GRAFANA_USAGE.md](docs/GRAFANA_USAGE.md)
|
|
|
|
Provision installs **Alloy** on every host. On **ai-server-4080** it also starts
|
|
the central **Loki / Prometheus / Grafana** stack (`observability_stack: true`).
|
|
|
|
## Servers
|
|
|
|
| Host | IP | Role |
|
|
|------|-----|------|
|
|
| adama | 10.0.0.77 | app host |
|
|
| roslin | 10.0.0.176 | app host |
|
|
| starbuck | 10.0.0.44 | app host |
|
|
| apollo | 10.0.0.7 | app host |
|
|
| ai-server-4080 | 10.0.0.128 | control node + act runner |
|