this post was submitted on 07 May 2024
88 points (97.8% liked)

Selfhosted

40296 readers
185 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago
MODERATORS
 

After getting fed up with TrueNAS (after it borked itself for the third time and I would have had to set it up AGAIN) I decided to learn Ansible and write a playbook to setup my homeserver that way.

I wanted to share this playbook with you in case someone might find it useful for their own setup and maybe someone has some tips on things I could improve.

This server will not be exposed to the public/internet. If I want to access a service on it from outside my home network I have Wireguard setup on my router to connect to my home network from anywhere.

Keep in mind that I'm relatively new to sysadmin stuff etc so don't be too harsh please πŸ˜…

you are viewing a single comment's thread
view the rest of the comments
[–] foggy@lemmy.world 4 points 6 months ago (2 children)

I'm unsure but I see secret.yml in there. Is that sensitive? You might want to update that ASAP if it is.

[–] Tywele@lemmy.dbzer0.com 6 points 6 months ago

If you look inside the file you will see that it's an encrypted file created via ansible-vault

[–] its_me_gb@feddit.uk 6 points 6 months ago

Looks like it's encrypted with ansible-vault