configuration management for a cmangos development and production environment
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
crito c9f8d18fbc implement postresql role 3 months ago
roles implement postresql role 3 months ago
tasks/jails tasks: delete snapshot after creating jails 3 months ago
.gitignore update playbooks and add vault and consul 3 months ago
LICENSE add MIT license file 3 months ago add 3 months ago
ansible.cfg implement dynamic inventory for hashicorp vault 3 months ago
env.yml implement postresql role 3 months ago fix variable lookup for 'all' group 3 months ago

how to

first of all install a virtual machine running freebsd. Adopt the settings in the bootstrap inventory and run

ansible-playbook -i inventory/hosts env.yml --limit <vm-hostname>

As soon as the freebsd machine is up and running you’re able to create your first jail template

ansible-playbook -i inventory/hosts tasks/jails/base/create/main.yml --limit <vm-hostname>


It’s up to you if you want to manage your inventory in a static file driven structure or migrate everything into a full encrypted key-value store.

ansible-playbook -i inventory/hosts tasks/jails/create/main.yml
  --limit <vm-hostnam>
  --extra-vars="jail_stage=prod jail_name=vault"

the above command only creates a jail that can be started without applying the roles assigned to that jail. After the jail is started you should be able to apply it’s roles.

ansible-playbook -i inventory/hosts prod.yml --limit <jail-hostname>

If your consul and vault role are applied you have to finish the first run wizard on http://:8200 and copy all contents of the bootstrap env into a newly created key-value secret engine called ansible

vault hierarchy


an example host_vars file looks like this

  "ipv4addr": ""

an example group_vars file looks similar while a inventory file requires to contain either a hosts or a children element.

  "hosts": [
  "children": [

After copying your initial inventory over you can run ansible with a dynamic inventory stored in hashicorp’s vault

export VAULT_ADDR="http://<vault-hostname>:8200"
export VAULT_TOKEN="<token>"

ansible-playbook -i env.yml