homelab/ansible/playbooks/bootstrap-minisforum.yaml

19 lines
518 B
YAML

---
# Run: ansible-playbook -i ansible/inventory.yaml ansible/playbooks/bootstrap-minisforum.yaml
# Requires: SSH access to 192.168.7.7 as root (or a user with NOPASSWD sudo)
#
# What this does:
# - Creates the 'nik' user with sudo access
# - Hardens SSH (no password auth, no root login)
# - Installs base packages
# - Configures UFW firewall
# - Creates /data/* directories for persistent volumes
- name: Bootstrap Minisforum
hosts: minisforum
become: true
gather_facts: true
roles:
- common