configuration management for a cmangos development and production environment
Du kan inte välja fler än 25 ämnen Ämnen måste starta med en bokstav eller siffra, kan innehålla bindestreck ('-') och vara max 35 tecken långa.
crito c9f8d18fbc implement postresql role 2 månader sedan
roles implement postresql role 2 månader sedan
tasks/jails tasks: delete snapshot after creating jails 2 månader sedan
.gitignore update playbooks and add vault and consul 2 månader sedan
LICENSE add MIT license file 2 månader sedan add 2 månader sedan
ansible.cfg implement dynamic inventory for hashicorp vault 2 månader sedan
env.yml implement postresql role 2 månader sedan fix variable lookup for 'all' group 2 månader sedan

how to

first of all install a virtual machine running freebsd. Adopt the settings in the bootstrap inventory and run

ansible-playbook -i inventory/hosts env.yml --limit <vm-hostname>

As soon as the freebsd machine is up and running you’re able to create your first jail template

ansible-playbook -i inventory/hosts tasks/jails/base/create/main.yml --limit <vm-hostname>


It’s up to you if you want to manage your inventory in a static file driven structure or migrate everything into a full encrypted key-value store.

ansible-playbook -i inventory/hosts tasks/jails/create/main.yml
  --limit <vm-hostnam>
  --extra-vars="jail_stage=prod jail_name=vault"

the above command only creates a jail that can be started without applying the roles assigned to that jail. After the jail is started you should be able to apply it’s roles.

ansible-playbook -i inventory/hosts prod.yml --limit <jail-hostname>

If your consul and vault role are applied you have to finish the first run wizard on http://:8200 and copy all contents of the bootstrap env into a newly created key-value secret engine called ansible

vault hierarchy


an example host_vars file looks like this

  "ipv4addr": ""

an example group_vars file looks similar while a inventory file requires to contain either a hosts or a children element.

  "hosts": [
  "children": [

After copying your initial inventory over you can run ansible with a dynamic inventory stored in hashicorp’s vault

export VAULT_ADDR="http://<vault-hostname>:8200"
export VAULT_TOKEN="<token>"

ansible-playbook -i env.yml