LgHS Infra

Setup

You need to update your local SSH config since the public DNS are actually CloudFlare proxies without the port 22 open. Ask an admin if you need them.

Host <inventory-name>
    User <user>
    HostName <server-ip>

We use pipenv to prevent you from having the wrong dependency versions, you can initialise your environment with these commands:

[python3 -m ]pipenv sync
[python3 -m ]pipenv shell
ansible-galaxy install -r ansible-requirements.yml

You will need to run pipenv shell every time you come back to the repository.

Provisioning a server

After creating a server, you need to provision it to have access to it with your normal user. To do so, add the server to the inventory and run the following command:

ANSIBLE_SSH_ARGS="-i ~/.ssh/<root-key>" ansible-playbook -u root -l <new-server> playbooks/provision.yml

Once this is done, you can run the global role using your normal user to set it up based on the inventory configuration:

ansible-playbook -l <new-server> playbooks/global.yml

Running playbooks

Some of our servers aren't accessible publicly, you can exclude them for your plays using --limit '!local'