configuration management for a cmangos development and production environment
您最多选择25个主题 主题必须以字母或数字开头,可以包含连字符 (-),并且长度不得超过35个字符
crito c9f8d18fbc implement postresql role 2 个月前
roles implement postresql role 2 个月前
tasks/jails tasks: delete snapshot after creating jails 2 个月前
.gitignore update playbooks and add vault and consul 2 个月前
LICENSE add MIT license file 2 个月前 add 2 个月前
ansible.cfg implement dynamic inventory for hashicorp vault 2 个月前
env.yml implement postresql role 2 个月前 fix variable lookup for 'all' group 2 个月前

how to

first of all install a virtual machine running freebsd. Adopt the settings in the bootstrap inventory and run

ansible-playbook -i inventory/hosts env.yml --limit <vm-hostname>

As soon as the freebsd machine is up and running you’re able to create your first jail template

ansible-playbook -i inventory/hosts tasks/jails/base/create/main.yml --limit <vm-hostname>


It’s up to you if you want to manage your inventory in a static file driven structure or migrate everything into a full encrypted key-value store.

ansible-playbook -i inventory/hosts tasks/jails/create/main.yml
  --limit <vm-hostnam>
  --extra-vars="jail_stage=prod jail_name=vault"

the above command only creates a jail that can be started without applying the roles assigned to that jail. After the jail is started you should be able to apply it’s roles.

ansible-playbook -i inventory/hosts prod.yml --limit <jail-hostname>

If your consul and vault role are applied you have to finish the first run wizard on http://:8200 and copy all contents of the bootstrap env into a newly created key-value secret engine called ansible

vault hierarchy


an example host_vars file looks like this

  "ipv4addr": ""

an example group_vars file looks similar while a inventory file requires to contain either a hosts or a children element.

  "hosts": [
  "children": [

After copying your initial inventory over you can run ansible with a dynamic inventory stored in hashicorp’s vault

export VAULT_ADDR="http://<vault-hostname>:8200"
export VAULT_TOKEN="<token>"

ansible-playbook -i env.yml