Erich Blume
1e4e72b923
Tutorial changes: - Replace what-is-blumeops with adding-a-service tutorial - Update ai-assistance-guide with Mise Tasks table - Update contributing with tooling setup, target revisions, DNS preview - Remove AI-only sections from contributing and exploring-the-docs - Add replicator explanation to exploring-the-docs - Add pre-commit link validation note - Add Core Services phase to replication roadmap - Add docs service to services list in replicating-blumeops New reference cards: - docs.md - Quartz documentation service - tailscale-operator.md - Kubernetes ingress operator - ansible/roles.md - Available ansible roles Other updates: - Add mise to Brewfile - Update docs/index.md to link to exploring-the-docs - Add notes to update exploring-the-docs in future phases - Link tailscale-operator from apps.md Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
47 lines
1.4 KiB
Markdown
47 lines
1.4 KiB
Markdown
---
|
|
title: ansible-roles
|
|
tags:
|
|
- ansible
|
|
- reference
|
|
---
|
|
|
|
# Ansible Roles
|
|
|
|
Roles for provisioning services on [[indri]]. Run via `mise run provision-indri`.
|
|
|
|
## Available Roles
|
|
|
|
| Role | Purpose | Service |
|
|
|------|---------|---------|
|
|
| **alloy** | Observability collector | [[alloy]] |
|
|
| **borgmatic** | Backup automation | [[borgmatic]] |
|
|
| **borgmatic_metrics** | Backup metrics exporter | [[borgmatic]] |
|
|
| **caddy** | Reverse proxy & TLS | [[routing]] |
|
|
| **forgejo** | Git forge | [[forgejo]] |
|
|
| **jellyfin** | Media server | [[jellyfin]] |
|
|
| **jellyfin_metrics** | Media metrics exporter | [[jellyfin]] |
|
|
| **minikube** | Kubernetes cluster | [[cluster]] |
|
|
| **minikube_metrics** | Cluster metrics | [[cluster]] |
|
|
| **zot** | Container registry | [[zot]] |
|
|
| **zot_metrics** | Registry metrics | [[zot]] |
|
|
|
|
## Role Structure
|
|
|
|
Each role follows Ansible conventions:
|
|
```
|
|
ansible/roles/<role>/
|
|
├── defaults/main.yml # Default variables
|
|
├── tasks/main.yml # Task definitions
|
|
├── handlers/main.yml # Handlers (restarts, etc.)
|
|
├── templates/ # Jinja2 templates
|
|
└── files/ # Static files
|
|
```
|
|
|
|
## Secrets
|
|
|
|
Roles that need secrets use 1Password via the playbook's `pre_tasks`. Secrets are gathered at playbook start and passed to roles as variables.
|
|
|
|
## Related
|
|
|
|
- [[indri]] - Target host
|
|
- [[observability]] - Metrics collection
|