Sascha
bc765668a6
Nachgezogener Arbeitsstand des Homelabs: - neue host_vars (k3s-*, gluster-*, docmost, paperless, kometa, thelounge, satisfactory, wolfstack-vm) - neue Rollen/Playbooks (net_watchdog, patchmon-agent, tc_ratelimit, sops-age, rotate-ssh-key, dns-doh, remove-postfix, checkrr-deploy) - diverse Rollen-Updates (base, borg, dns_resolver, frp_client, hawser, nvidia) Ausgeklammert (bleiben uncommittet): host_vars/docmost/vars.yml (Klartext-Token -> sollte vault-konform via vault_* referenziert werden). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
33 lines
866 B
YAML
33 lines
866 B
YAML
---
|
|
- name: Netzwerk-Interface ermitteln
|
|
ansible.builtin.shell:
|
|
cmd: "ip -o link show | awk -F': ' '!/lo/{print $2; exit}'"
|
|
register: detected_iface
|
|
changed_when: false
|
|
when: tc_iface == "auto"
|
|
|
|
- name: Interface setzen
|
|
ansible.builtin.set_fact:
|
|
tc_iface: "{{ detected_iface.stdout | trim }}"
|
|
when: tc_iface == "auto"
|
|
|
|
- name: tc-ratelimit Script deployen
|
|
ansible.builtin.template:
|
|
src: tc-ratelimit.sh.j2
|
|
dest: /usr/local/bin/tc-ratelimit.sh
|
|
mode: "0755"
|
|
notify: restart tc-ratelimit
|
|
|
|
- name: Systemd Service deployen
|
|
ansible.builtin.template:
|
|
src: tc-ratelimit.service.j2
|
|
dest: /etc/systemd/system/tc-ratelimit.service
|
|
mode: "0644"
|
|
notify: restart tc-ratelimit
|
|
|
|
- name: Service aktivieren und starten
|
|
ansible.builtin.systemd:
|
|
name: tc-ratelimit
|
|
enabled: true
|
|
state: started
|
|
daemon_reload: true
|