Ansible

• 1: Bazel targets
• 2: Changelog
• 3: Collections
• 3.1: Alwaldend
• 3.1.1: Bazel targets
• 3.1.2: Changelog
• 3.1.3: Main
• 3.1.3.1: Bazel targets
• 3.1.3.2: Changelog
• 3.1.3.3: Playbooks
• 3.1.3.3.1: Bazel targets
• 3.1.3.3.2: Changelog
• 3.1.3.4: Roles
• 3.1.3.4.1: Adguard
• 3.1.3.4.1.1: Bazel targets
• 3.1.3.4.1.2: Changelog
• 3.1.3.4.1.3: Defaults
• 3.1.3.4.2: Bazel targets
• 3.1.3.4.3: Caddy
• 3.1.3.4.3.1: Bazel targets
• 3.1.3.4.3.2: Changelog
• 3.1.3.4.3.3: Defaults
• 3.1.3.4.4: Changelog
• 3.1.3.4.5: CIFS
• 3.1.3.4.5.1: Bazel targets
• 3.1.3.4.5.2: Changelog
• 3.1.3.4.5.3: Defaults
• 3.1.3.4.6: Consul
• 3.1.3.4.6.1: Bazel targets
• 3.1.3.4.6.2: Changelog
• 3.1.3.4.6.3: Defaults
• 3.1.3.4.7: Consul envoy
• 3.1.3.4.7.1: Bazel targets
• 3.1.3.4.7.2: Changelog
• 3.1.3.4.7.3: Defaults
• 3.1.3.4.8: DNS
• 3.1.3.4.8.1: Bazel targets
• 3.1.3.4.8.2: Changelog
• 3.1.3.4.8.3: Defaults
• 3.1.3.4.9: Docker
• 3.1.3.4.9.1: Bazel targets
• 3.1.3.4.9.2: Changelog
• 3.1.3.4.9.3: Defaults
• 3.1.3.4.10: Facts
• 3.1.3.4.10.1: Bazel targets
• 3.1.3.4.10.2: Changelog
• 3.1.3.4.10.3: Defaults
• 3.1.3.4.11: Firewall
• 3.1.3.4.11.1: Bazel targets
• 3.1.3.4.11.2: Changelog
• 3.1.3.4.11.3: Defaults
• 3.1.3.4.12: Hiddify manager
• 3.1.3.4.12.1: Bazel targets
• 3.1.3.4.12.2: Changelog
• 3.1.3.4.12.3: Defaults
• 3.1.3.4.13: Hiddify manager with host
• 3.1.3.4.13.1: Bazel targets
• 3.1.3.4.13.2: Changelog
• 3.1.3.4.13.3: Defaults
• 3.1.3.4.14: Host
• 3.1.3.4.14.1: Bazel targets
• 3.1.3.4.14.2: Changelog
• 3.1.3.4.14.3: Defaults
• 3.1.3.4.15: K3s
• 3.1.3.4.15.1: Bazel targets
• 3.1.3.4.15.2: Changelog
• 3.1.3.4.15.3: Defaults
• 3.1.3.4.16: K3s bootstrap
• 3.1.3.4.16.1: Bazel targets
• 3.1.3.4.16.2: Changelog
• 3.1.3.4.16.3: Defaults
• 3.1.3.4.17: K3s cluster
• 3.1.3.4.17.1: Bazel targets
• 3.1.3.4.17.2: Changelog
• 3.1.3.4.17.3: Defaults
• 3.1.3.4.18: OS
• 3.1.3.4.18.1: Bazel targets
• 3.1.3.4.18.2: Changelog
• 3.1.3.4.18.3: Defaults
• 3.1.3.4.19: PVE cluster
• 3.1.3.4.19.1: Bazel targets
• 3.1.3.4.19.2: Changelog
• 3.1.3.4.19.3: Defaults
• 3.1.3.4.20: PVE VM
• 3.1.3.4.20.1: Bazel targets
• 3.1.3.4.20.2: Changelog
• 3.1.3.4.20.3: Defaults
• 3.1.3.4.21: PVE VM remove
• 3.1.3.4.21.1: Bazel targets
• 3.1.3.4.21.2: Changelog
• 3.1.3.4.21.3: Defaults
• 3.1.3.4.22: Raspberry pi
• 3.1.3.4.22.1: Bazel targets
• 3.1.3.4.22.2: Changelog
• 3.1.3.4.22.3: Defaults
• 3.1.3.4.23: SSH
• 3.1.3.4.23.1: Bazel targets
• 3.1.3.4.23.2: Changelog
• 3.1.3.4.23.3: Defaults
• 3.1.3.4.24: SSH port forwarding
• 3.1.3.4.24.1: Bazel targets
• 3.1.3.4.24.2: Changelog
• 3.1.3.4.24.3: Defaults
• 3.1.3.4.25: SSH update known hosts
• 3.1.3.4.25.1: Bazel targets
• 3.1.3.4.25.2: Changelog
• 3.1.3.4.25.3: Defaults
• 3.1.3.4.26: Traefik
• 3.1.3.4.26.1: Bazel targets
• 3.1.3.4.26.2: Changelog
• 3.1.3.4.26.3: Defaults
• 3.1.3.4.27: Update all packages
• 3.1.3.4.27.1: Bazel targets
• 3.1.3.4.27.2: Changelog
• 3.1.3.4.27.3: Defaults
• 3.1.3.4.28: Users
• 3.1.3.4.28.1: Bazel targets
• 3.1.3.4.28.2: Changelog
• 3.1.3.4.28.3: Defaults
• 3.1.3.4.29: Vault
• 3.1.3.4.29.1: Bazel targets
• 3.1.3.4.29.2: Changelog
• 3.1.3.4.29.3: Defaults
• 3.1.3.4.30: Wireguard
• 3.1.3.4.30.1: Bazel targets
• 3.1.3.4.30.2: Changelog
• 3.1.3.4.30.3: Defaults
• 3.1.3.4.31: Xray
• 3.1.3.4.31.1: Bazel targets
• 3.1.3.4.31.2: Changelog
• 3.1.3.4.31.3: Defaults
• 3.2: Bazel targets
• 3.3: Changelog
• 4: Group vars
• 4.1: Bazel targets
• 4.2: Changelog
• 5: Host vars
• 5.1: Bazel targets
• 5.2: Changelog

1 - Bazel targets

2 - Changelog

• Remove pkg_tar from ansible rules and ansible targets (986245)
• Add raspberry_pi role, add rancher1 playbook (3e9178)
• Remove old playbooks, add host vars and group vars, add k3s install script (cd9021)
• Move roles and playbooks to the collection (f1c071)
• Add external ansible collections, rename some deps (99b3c7)
• Move changelog rules to bzl/rules/git, improve ansible rules (c94123)
• Move ansible and leetcode rules to bzl/rules (0d9b39)
• Move changelog rules to bzl/rules/changelog (4d59d6)
• Move readme rules to bzl/rules/readme (95ea8d)
• Move bzl rules to bzl/rules/bzl (57930e)
• Bump bazel version, split the root MODULE file, add bzl/rules/ansible (981a38)
• Add dnscontrol alias, add ansible:playbook target, update books (1ea9d0)
• Update MODULE, update locks (c45e7a)
• Remove ansible from global python dependencies (e5b7df)
• Add changelog for all packages (a6ebf9)
• Add ansible/collections, add git rules (827c23)
• Add bzl_target_doc (c5636e)
• Add al_ansible_role macro, add ansible/roles, add ansible/playbooks (451ebc)

3 - Collections

Links

• https://docs.ansible.com/ansible/latest/collections_guide/index.html

3.1 - Alwaldend

3.1.1 - Bazel targets

3.1.2 - Changelog

• Remove pkg_tar from ansible rules and ansible targets (986245)
• Add raspberry_pi role, add rancher1 playbook (3e9178)
• Remove old playbooks, add host vars and group vars, add k3s install script (cd9021)
• Move roles and playbooks to the collection (f1c071)

3.1.3 - Main

3.1.3.1 - Bazel targets

3.1.3.2 - Changelog

• Remove pkg_tar from ansible rules and ansible targets (986245)
• Add raspberry_pi role, add rancher1 playbook (3e9178)
• Remove old playbooks, add host vars and group vars, add k3s install script (cd9021)
• Move roles and playbooks to the collection (f1c071)

3.1.3.3 - Playbooks

3.1.3.3.1 - Bazel targets

3.1.3.3.2 - Changelog

• Remove pkg_tar from ansible rules and ansible targets (986245)
• Add raspberry_pi role, add rancher1 playbook (3e9178)
• Remove old playbooks, add host vars and group vars, add k3s install script (cd9021)
• Move roles and playbooks to the collection (f1c071)

3.1.3.4 - Roles

3.1.3.4.1 - Adguard

3.1.3.4.1.1 - Bazel targets

3.1.3.4.1.2 - Changelog

• Move roles and playbooks to the collection (f1c071)

3.1.3.4.1.3 - Defaults

adguard_dir: /etc/adguard
adguard_work_dir: "{{ adguard_dir }}"
adguard_gpg_key_url: https://keys.openpgp.org/vks/v1/by-fingerprint/28645AC9776EC4C00BCE2AFC0FE641E7235E2EC6
adguard_gpg_key_src: files/key.asc
adguard_gpg_key_path: "{{ adguard_dir }}/release-key.asc"
adguard_gpg_key_checksum: "22d78dbacb461667861ee7d2dd13d13240ee003d"
adguard_release_source_url: https://github.com/AdguardTeam/AdGuardHome/releases/download
adguard_release_version: v0.107.48
adguard_release_checksum: "sha512:c0a336212e3792ae6fc6b8de976befce0038c5d6ddde919a00994c43a929349958c7bd65f7fb7fdd471962afa20855ecbf5830cc7a1d26f3037a716db638c101"
adguard_release_distrib: AdGuardHome_linux_amd64.tar.gz
adguard_release_url: "{{ adguard_release_source_url }}/{{ adguard_release_version }}/{{ adguard_release_distrib }}"
adguard_release_archive_dest: "{{ adguard_dir }}/release-{{ adguard_release_version }}-{{ adguard_release_distrib }}" 
adguard_release_dest: "{{ adguard_dir }}/release-{{ adguard_release_version }}" 
adguard_release_dir: "{{ adguard_release_dest }}/AdGuardHome"
adguard_release_bin: "{{ adguard_release_dir }}/AdGuardHome"
adguard_release_sig: "{{ adguard_release_bin }}.sig"

3.1.3.4.2 - Bazel targets

3.1.3.4.3 - Caddy

3.1.3.4.3.1 - Bazel targets

3.1.3.4.3.2 - Changelog

• Add raspberry_pi role, add rancher1 playbook (3e9178)
• Move roles and playbooks to the collection (f1c071)

3.1.3.4.3.3 - Defaults

caddy_enabled: false
caddy_user: caddy
caddy_config_path: /etc/caddy/Caddyfile
caddy_config_dir: /etc/caddy/configs
caddy_config: |
  import {{ caddy_config_dir }}/*

3.1.3.4.4 - Changelog

• Remove pkg_tar from ansible rules and ansible targets (986245)
• Add raspberry_pi role, add rancher1 playbook (3e9178)
• Remove old playbooks, add host vars and group vars, add k3s install script (cd9021)
• Move roles and playbooks to the collection (f1c071)

3.1.3.4.5 - CIFS

3.1.3.4.5.1 - Bazel targets

3.1.3.4.5.2 - Changelog

• Add raspberry_pi role, add rancher1 playbook (3e9178)
• Move roles and playbooks to the collection (f1c071)

3.1.3.4.5.3 - Defaults

cifs_enabled: false
cifs_systemd_dir: /etc/systemd/system
cifs_mounts: []

3.1.3.4.6 - Consul

3.1.3.4.6.1 - Bazel targets

3.1.3.4.6.2 - Changelog

• Move roles and playbooks to the collection (f1c071)

3.1.3.4.6.3 - Defaults

consul_is_server: false
consul_user_name: consul
consul_user_uid:
consul_dir: "/opt/consul"
consul_persistence_dir: "{{ consul_dir }}"
consul_releases_dir: "{{ consul_dir }}/releases"
consul_config_symlink_dir: "{{ consul_configs_dir }}/current"
consul_config_symlink_data_dir: "{{ consul_config_symlink_dir }}/configs"
consul_configs_dir: "{{ consul_persistence_dir }}/configs/{{ inventory_hostname }}"
consul_data_dir: "{{ consul_persistence_dir }}/data/{{ inventory_hostname }}"
consul_config_path: "{{ consul_config_config_dir }}/consul.json"
consul_config_dir: "{{ consul_configs_dir }}/{{ consul_config_dir_name }}" 
consul_config_data_dir: "{{ consul_config_dir }}/data"
consul_config_config_dir: "{{ consul_config_dir }}/configs"
consul_config_dir_name: "{{ consul_config_version }}"
consul_config_version: "{{ lookup('ansible.builtin.pipe', 'git rev-parse HEAD') }}"
consul_env: {}
consul_configs: []
consul_env_path: "{{ consul_config_data_dir }}/consul.env"
consul_env_symlink_path: "{{ consul_config_symlink_dir }}/data/consul.env"
consul_release_dir: "{{ consul_releases_dir }}/{{ consul_release_dir_name }}"
consul_release_dir_name: "{{ consul_release_version }}"
consul_release_symlink_path: "{{ consul_releases_dir }}/current"
consul_release_symlink_bin_path: "{{ consul_release_symlink_path }}/consul"
consul_release_version: 1.20.2
consul_release_archive_name: "consul_{{ consul_release_version }}_linux_amd64"
consul_release_archive_fullname: "{{ consul_release_archive_name }}.zip"
consul_release_bin_path: "{{ consul_release_dir }}/consul"
consul_release_url: "https://releases.hashicorp.com/consul/{{ consul_release_version }}/{{ consul_release_archive_fullname }}"
consul_release_checksum: "sha256:1bf7ddf332f02e6e36082b0fdf6c3e8ce12a391e7ec7dafd3237bb12766a7fd5"
consul_agent_ca_cert_path: "{{ consul_config_data_dir }}/agent_ca_cert.pub"
consul_agent_ca_cert:
consul_server_cert_path: "{{ consul_config_data_dir }}/server_cert_{{ inventory_hostname }}.pub"
consul_server_cert:
consul_server_key_path: "{{ consul_config_data_dir }}/server_cert_{{ inventory_hostname }}.key"
consul_server_key:

3.1.3.4.7 - Consul envoy

3.1.3.4.7.1 - Bazel targets

3.1.3.4.7.2 - Changelog

• Move roles and playbooks to the collection (f1c071)

3.1.3.4.7.3 - Defaults

consul_envoy_dir: "/opt/consul_envoy"
consul_envoy_deployments_dir: "{{ consul_envoy_dir }}/deployments"
consul_envoy_releases_dir: "{{ consul_envoy_dir }}/releases"
consul_envoy_deployment_dir: "{{ consul_envoy_deployments_dir }}/{{ consul_envoy_deployment_version }}"
consul_envoy_release_dir: "{{ consul_envoy_releases_dir }}/{{ consul_envoy_release_version }}"
consul_envoy_configs_dir: "{{ consul_envoy_deployment_dir }}/configs"
consul_envoy_bootstrap_config_path: "{{ consul_envoy_configs_dir }}/bootstrap.json"
consul_envoy_deployment_version: "{{ lookup('ansible.builtin.pipe', 'git rev-parse HEAD') }}"
consul_envoy_user_name: consul_envoy
consul_envoy_release_version: 1.31.0
consul_envoy_release_archive_fullname: "envoy_{{ consul_envoy_release_version }}_linux_amd64.zip"
consul_envoy_release_url: "https://releases.hashicorp.com/envoy/{{ consul_envoy_release_version }}/{{ consul_envoy_release_archive_fullname }}"
consul_envoy_release_bin_path: "{{ consul_envoy_release_dir }}/envoy"
consul_envoy_release_symlink_path: "{{ consul_envoy_releases_dir }}/current"
consul_envoy_release_checksum: "sha256:350782275de0fe50699844b4f9096d77a0193a5bcf205e14b8ad964ec429d45e"

3.1.3.4.8 - DNS

3.1.3.4.8.1 - Bazel targets

3.1.3.4.8.2 - Changelog

• Move roles and playbooks to the collection (f1c071)

3.1.3.4.8.3 - Defaults

dns_records: []
dns_domains: []
dns_njalla_api_url: https://njal.la/api/1/
dns_njalla_token:

3.1.3.4.9 - Docker

3.1.3.4.9.1 - Bazel targets

3.1.3.4.9.2 - Changelog

• Move roles and playbooks to the collection (f1c071)

3.1.3.4.9.3 - Defaults

docker_enabled: false

3.1.3.4.10 - Facts

3.1.3.4.10.1 - Bazel targets

3.1.3.4.10.2 - Changelog

• Add raspberry_pi role, add rancher1 playbook (3e9178)
• Move roles and playbooks to the collection (f1c071)

3.1.3.4.10.3 - Defaults

3.1.3.4.11 - Firewall

3.1.3.4.11.1 - Bazel targets

3.1.3.4.11.2 - Changelog

• Add raspberry_pi role, add rancher1 playbook (3e9178)
• Move roles and playbooks to the collection (f1c071)

3.1.3.4.11.3 - Defaults

firewall_state: enabled
firewall_enabled: true
firewall_allow_port_from: []

3.1.3.4.12 - Hiddify manager

3.1.3.4.12.1 - Bazel targets

3.1.3.4.12.2 - Changelog

• Move roles and playbooks to the collection (f1c071)

3.1.3.4.12.3 - Defaults

hiddify_manager_env:
  HIDDIFY_MANAGER_IMAGE: ghcr.io/hiddify/hiddify-manager:main@sha256:d5edef06d2133ffa26f0fcbb67e711f4356dba44c44a41a96570c4e03845a84c
  HIDDIFY_MANAGER_REDIS_IMAGE: redis:7.4.1@sha256:bb142a9c18ac18a16713c1491d779697b4e107c22a97266616099d288237ef47
  HIDDIFY_MANAGER_MARIADB_IMAGE: mariadb:11.6.2@sha256:a9547599cd87d7242435aea6fda22a9d83e2c06d16c658ef70d2868b3d3f6a80
  HIDDIFY_MANAGER_REDIS_PASSWORD: "{{ lookup('ansible.builtin.env', 'HIDDIFY_MANAGER_REDIS_PASSWORD') | mandatory('HIDDIFY_MANAGER_REDIS_PASSWORD') }}"
  HIDDIFY_MANAGER_MYSQL_PASSWORD: "{{ lookup('ansible.builtin.env', 'HIDDIFY_MANAGER_MYSQL_PASSWORD') | mandatory('HIDDIFY_MANAGER_MYSQL_PASSWORD') }}"
  HIDDIFY_MANAGER_MARIADB_PASSWORD: "{{ lookup('ansible.builtin.env', 'HIDDIFY_MANAGER_MARIADB_PASSWORD') | mandatory('HIDDIFY_MANAGER_MARIADB_PASSWORD') }}"
hiddify_manager_env_override: {}
hiddify_manager_dir: /opt/hiddify_manager

3.1.3.4.13 - Hiddify manager with host

3.1.3.4.13.1 - Bazel targets

3.1.3.4.13.2 - Changelog

• Move roles and playbooks to the collection (f1c071)

3.1.3.4.13.3 - Defaults

3.1.3.4.14 - Host

3.1.3.4.14.1 - Bazel targets

3.1.3.4.14.2 - Changelog

• Add raspberry_pi role, add rancher1 playbook (3e9178)
• Move roles and playbooks to the collection (f1c071)

3.1.3.4.14.3 - Defaults

3.1.3.4.15 - K3s

3.1.3.4.15.1 - Bazel targets

3.1.3.4.15.2 - Changelog

• Remove pkg_tar from ansible rules and ansible targets (986245)
• Remove old playbooks, add host vars and group vars, add k3s install script (cd9021)
• Move roles and playbooks to the collection (f1c071)

3.1.3.4.15.3 - Defaults

k3s_install_environment: {}
k3s_manifests_dir: /var/lib/rancher/k3s/server/manifests
k3s_install_script_path: /usr/local/bin/k3s_install.sh
k3s_config_path: /etc/rancher/k3s/config.yaml
k3s_config: {}
k3s_service_name: k3s

3.1.3.4.16 - K3s bootstrap

3.1.3.4.16.1 - Bazel targets

3.1.3.4.16.2 - Changelog

• Move roles and playbooks to the collection (f1c071)

3.1.3.4.16.3 - Defaults

k3s_bootstrap_apply_path: 
k3s_bootstrap_token_name: "{{ lookup('ansible.builtin.env', 'USER') }}"
k3s_bootstrap_token_namespace: kube-system
k3s_bootstrap_venv_dir: "/opt/bootstrap-venv"
k3s_bootstrap_venv_bin: "{{ k3s_bootstrap_venv_dir | mandatory }}/bin/python"
k3s_bootstrap_kubeconfig: /etc/rancher/k3s/k3s.yaml
k3s_bootstrap_cluster_name: "{{ inventory_hostname }}"
k3s_bootstrap_cluster_ca_path: "{{ lookup('ansible.builtin.env', 'HOME') | mandatory }}/.kube/ca-{{ k3s_bootstrap_cluster_name | mandatory }}.ca.crt"
k3s_bootstrap_user_ca_path: "{{ k3s_bootstrap_cluster_ca_path | mandatory | dirname }}/ca-{{ k3s_bootstrap_cluster_name | mandatory }}-{{ k3s_bootstrap_token_name | mandatory }}.ca.crt"
k3s_bootstrap_user_name: "{{ k3s_bootstrap_cluster_name | mandatory }}-{{ k3s_bootstrap_token_name | mandatory }}" 
k3s_bootstrap_cluster_port: 

3.1.3.4.17 - K3s cluster

3.1.3.4.17.1 - Bazel targets

3.1.3.4.17.2 - Changelog

• Move roles and playbooks to the collection (f1c071)

3.1.3.4.17.3 - Defaults

3.1.3.4.18 - OS

3.1.3.4.18.1 - Bazel targets

3.1.3.4.18.2 - Changelog

• Move roles and playbooks to the collection (f1c071)

3.1.3.4.18.3 - Defaults

os_hardening_enabled: true

3.1.3.4.19 - PVE cluster

3.1.3.4.19.1 - Bazel targets

3.1.3.4.19.2 - Changelog

• Move roles and playbooks to the collection (f1c071)

3.1.3.4.19.3 - Defaults

pve_cluster_remove_repos:
  - pve-enterprise.list 
  - ceph.list
pve_cluster_add_repos:
  - name: pve-no-subscription
    value: deb http://download.proxmox.com/debian/pve bookworm pve-no-subscription
  - name: ceph-squid
    value: deb http://download.proxmox.com/debian/ceph-squid bookworm no-subscription
pve_cluster_node_config: []
pve_cluster_admins: []
pve_cluster_cluster_name:
pve_cluster_acme_accounts: []
pve_cluster_acme_plugins: []
pve_cluster_venv_dir: /opt/ansible/pve_cluster_venv
pve_cluster_venv_packages: 
  - pexpect
pve_cluster_base_image_dir: /var/lib/vz/template
pve_cluster_node_name: "{{ inventory_hostname | mandatory | split('.') | first }}"
pve_cluster_ceph_enabled: false
pve_cluster_ceph_repository: no-subscription
pve_cluster_ceph_osd: []
pve_cluster_ceph_pools: []
pve_cluster_ceph_mon: []
pve_cluster_ceph_mgr: []
pve_cluster_ceph_mds: []
pve_cluster_storages: []
pve_cluster_storage_config_path: /etc/pve/storage.cfg

3.1.3.4.20 - PVE VM

3.1.3.4.20.1 - Bazel targets

3.1.3.4.20.2 - Changelog

• Move roles and playbooks to the collection (f1c071)

3.1.3.4.20.3 - Defaults

pve_vm_agent: 
pve_vm_name: "{{ inventory_hostname }}"
pve_vm_delegate_update_known_hosts: localhost
pve_vm_delegate_pve: 
pve_vm_set: "{{ pve_vm_set_default + pve_vm_set_additional }}"
pve_vm_set_default: []
pve_vm_set_additional: []
pve_vm_set_creation: "{{ pve_vm_set_creation_default + pve_vm_set_creation_additional }}"
pve_vm_set_creation_default: []
pve_vm_set_creation_additional: []
pve_vm_resize: []
pve_vm_venv_dir: "/opt/ansible/pve_vm_venv"
pve_vm_init_user:
pve_vm_venv_packages:
  - proxmoxer
  - requests

3.1.3.4.21 - PVE VM remove

3.1.3.4.21.1 - Bazel targets