server-infra

Ansible provisioning and deployment for homelab web servers.

Quick Start

# Install collections (once)
ansible-galaxy collection install -r requirements.yml

# Bootstrap SSH key to each host (one-time, before Ansible)
ssh-copy-id westfarn@10.0.0.77
ssh-copy-id westfarn@10.0.0.176
ssh-copy-id westfarn@10.0.0.44
ssh-copy-id westfarn@10.0.0.7

# First-time only: passwordless sudo on each new host (before first provision)
ssh -t westfarn@10.0.0.176   # repeat for each host IP
# on the host:
echo 'westfarn ALL=(ALL) NOPASSWD:ALL' | sudo tee /etc/sudoers.d/westfarn
sudo chmod 440 /etc/sudoers.d/westfarn
exit

# Test connectivity to one host
ansible adama -m ping

# Provision one host (dry run first) — includes Alloy log/metrics agent
./scripts/provision.sh adama --check
./scripts/provision.sh adama

# Control node: Alloy + Loki + Prometheus + Grafana
./scripts/provision.sh ai-server-4080

# Provision all hosts
./scripts/provision.sh

# Stop a compose app (does not remove volumes/checkouts)
./scripts/stop.sh --app print_forge --env prod
./scripts/stop.sh --app print_forge --env beta

See IMPLEMENTATION.md for full architecture, CI/CD plan, and phase breakdown.

Observability (Alloy → Loki / Prometheus → Grafana): docs/OBSERVABILITY.md · docs/GRAFANA_USAGE.md

WordPress (MariaDB on TrueNAS): docs/WORDPRESS.md. Provision mounts each site's wp-content and writes its compose file from inventory/wordpress_sites.yml. Start the containers by hand (adama first).

Provision installs Alloy on every host. On ai-server-4080 it also starts the central Loki / Prometheus / Grafana stack (observability_stack: true).

Servers

Host	IP	Role
adama	10.0.0.77	app host
roslin	10.0.0.176	app host
starbuck	10.0.0.44	app host
apollo	10.0.0.7	app host
ai-server-4080	10.0.0.128	control node + act runner