Switch to Ansible/Podman/systemd #35
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
In the create subtasks file there's a task looping on a filtered variable registered in a previous task. Ansible fails on the task because it tries to evaluate the filter on an undefined variable even though the task should be skipped. So we use include_tasks instead.
Promtail only supports RFC5424 on syslog input, the standard port for it is 601/tcp, so we change it for 1601/tcp for a better match. Some equipments that use RFC3164 "BSD-syslog" can be configured to use TCP instead of of the standard UDP so add a syslog-ng TCP listener on port 514 for RFC3164 formatted messages.
Containers can't reach other containers published ports when the network is isolated using netavark 1.6.0.
…an-auto-prune service
The rules are already present in the nginx.conf file
To stay closer to upstream version in order to facilitate diffs in the long run
To anticipate it's removal in unrealeased v8, see https://recyclarr.dev/wiki/upgrade-guide/v8.0/#assign-scores-to
Before Fedora CoreOS 41, /sysroot was bind-mounted on / as rw so we could target a rw scrub on the root partition Now, only /var and /etc are bind-mounted from /sysroot so we need to target a ro scrub on it
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Here we go again, this time for real, I've finally made the switch to using Ansible, Podman and systemd to manage my services.
I've been running this code since April and it's been pretty much rock solid. The scope of my infrastructure has also expanded a bit in the meantime, I have two physical hosts and one cloud host now:
Physical:
Cloud:
I've externalized the hosting of my critical services (mainly Nextcloud and Immich) because I've had some internet connection problems at home several times recently and I need those services to be available, Hetzner being a much more reliable hoster than myself!
The expansion of my infrastructure is another reason of why I really wanted to use Ansible to manage it, it's a better suited tool than docker-compose to manage multiple hosts.
The repo is in a good enough state to open this PR but there's still some things I would like to do before merging in
main:Closes #12