mirror of
https://github.com/fscotto/infra.git
synced 2026-09-27 19:03:47 +00:00
160d63c02d
* Add Atlas media and storage services * Document Atlas backend phase one and WireGuard deployment * Enable Atlas NAS management and document bootstrap workflow * Harden Atlas network, SSH, firewall, and sharing * Rotate Ansible Vault secrets * Allow configurable Aegis SSH users and authorized keys * Manage Aegis SSH authorized key fragments * Manage SSH authorized key fragments for infrastructure hosts * Harden Rocky storage and sharing configuration * Verify WireGuard handshakes and restore Podman networking
33 lines
1.0 KiB
YAML
33 lines
1.0 KiB
YAML
---
|
|
- name: Restart Atlas Navidrome Quadlet
|
|
tags: [backend_phase1, navidrome, podman, services]
|
|
become_user: "{{ backend_phase1_username }}"
|
|
ansible.builtin.systemd:
|
|
name: atlas-navidrome.service
|
|
scope: user
|
|
state: restarted
|
|
daemon_reload: true
|
|
environment:
|
|
XDG_RUNTIME_DIR: "/run/user/{{ backend_phase1_uid }}"
|
|
DBUS_SESSION_BUS_ADDRESS: "unix:path=/run/user/{{ backend_phase1_uid }}/bus"
|
|
when:
|
|
- backend_phase1_enabled | bool
|
|
- backend_phase1_start_services | bool
|
|
- not ansible_check_mode
|
|
|
|
- name: Restart Atlas Syncthing Quadlet
|
|
tags: [backend_phase1, syncthing, podman, services]
|
|
become_user: "{{ backend_phase1_username }}"
|
|
ansible.builtin.systemd:
|
|
name: atlas-syncthing.service
|
|
scope: user
|
|
state: restarted
|
|
daemon_reload: true
|
|
environment:
|
|
XDG_RUNTIME_DIR: "/run/user/{{ backend_phase1_uid }}"
|
|
DBUS_SESSION_BUS_ADDRESS: "unix:path=/run/user/{{ backend_phase1_uid }}/bus"
|
|
when:
|
|
- backend_phase1_enabled | bool
|
|
- backend_phase1_start_services | bool
|
|
- not ansible_check_mode
|