mirror of
https://github.com/fscotto/infra.git
synced 2026-09-27 19:03:47 +00:00
160d63c02d
* Add Atlas media and storage services * Document Atlas backend phase one and WireGuard deployment * Enable Atlas NAS management and document bootstrap workflow * Harden Atlas network, SSH, firewall, and sharing * Rotate Ansible Vault secrets * Allow configurable Aegis SSH users and authorized keys * Manage Aegis SSH authorized key fragments * Manage SSH authorized key fragments for infrastructure hosts * Harden Rocky storage and sharing configuration * Verify WireGuard handshakes and restore Podman networking
42 lines
849 B
YAML
42 lines
849 B
YAML
---
|
|
- name: Reload SSH service
|
|
ansible.builtin.systemd:
|
|
name: sshd
|
|
state: reloaded
|
|
|
|
- name: Reload NFS exports
|
|
ansible.builtin.command:
|
|
argv:
|
|
- exportfs
|
|
- -ra
|
|
changed_when: true
|
|
when: not ansible_check_mode
|
|
|
|
- name: Restart NFS server
|
|
ansible.builtin.systemd:
|
|
name: nfs-server
|
|
state: restarted
|
|
|
|
- name: Restart NFS mount daemon
|
|
ansible.builtin.systemd:
|
|
name: nfs-mountd
|
|
state: restarted
|
|
daemon_reload: true
|
|
|
|
- name: Restart Samba service
|
|
ansible.builtin.systemd:
|
|
name: smb
|
|
state: restarted
|
|
|
|
- name: Restart Atlas media Quadlets
|
|
ansible.builtin.systemd:
|
|
name: "{{ item }}"
|
|
state: restarted
|
|
daemon_reload: true
|
|
loop: "{{ atlas_media_quadlet_services }}"
|
|
loop_control:
|
|
label: "{{ item }}"
|
|
when:
|
|
- atlas_manage_media_stack | bool
|
|
- not ansible_check_mode
|