infra.git/host_vars, branch master Ansible playbooks for personal infrastructure. https://git.ilvokhin.com/infra.git/atom?h=master 2026-01-04T12:15:12Z Rotate vault password 2026-01-04T12:15:12Z Dmitry Ilvokhin d@ilvokhin.com 2026-01-04T12:15:12Z urn:sha1:c81aeaf94898e224efb8fc322410d296f70dd1e8 Update shell.ilvokhin.com droplet id 2025-02-15T20:04:21Z Dmitry Ilvokhin d@ilvokhin.com 2025-02-15T20:04:21Z urn:sha1:8c502120148c6fe67c7110a77b45c00c2e85b4db Allow forward ssh key to DigitalOcean hosts 2025-01-18T20:12:26Z Dmitry Ilvokhin d@ilvokhin.com 2025-01-18T20:12:26Z urn:sha1:80d5d36b004d59e2e0a455fa08303eb5e84b175a I don't really need key forwarding everywhere, only for gate and shell, but I figured this will simplify configuration a bit. If something goes wrong, it can always become more strict in the future. Move shell to dedicated box 2024-12-21T16:00:40Z Dmitry Ilvokhin d@ilvokhin.com 2024-12-21T15:14:03Z urn:sha1:edb6f2db3f9783d756e5df23a57c445535ea8f71 Add all DigitalOcean hosts to sysupgrade playbook 2024-06-29T19:39:22Z Dmitry Ilvokhin d@ilvokhin.com 2024-06-29T19:39:22Z urn:sha1:e470136455a1703ff88f594eaa376fcdadf9591c Introduce sysupgrade playbook 2024-06-23T18:40:01Z Dmitry Ilvokhin d@ilvokhin.com 2024-06-23T18:40:01Z urn:sha1:3a6614f74ecc90ae7e3060541188bcad13133c9c Playbook sysupgrade.yml is a attempt to do automatic full system upgrade. Currently logic is completely automated for happy path. 1. Shutdown machine. 2. Take snapshot from the machine. 3. Power on machine back. 4. Update archlinux-keyring. 5. Upgrade everything. 6. Reboot. If something is working, then we are done. Otherwise, restore from snapshot manually and try to figure out what went wrong. Mark gate as jumphost 2024-06-14T21:23:47Z Dmitry Ilvokhin d@ilvokhin.com 2024-06-14T21:23:17Z urn:sha1:88697df1e49e37ee3227dce234a6adbf5e35ccbc Finally migrate gate.ilvokhin.com 2024-06-14T21:08:14Z Dmitry Ilvokhin d@ilvokhin.com 2024-06-14T21:08:14Z urn:sha1:23c5fbaaff3fbe7b3c2b48f4c2aec7d088e906c6 Wireguard overlay network setup 2024-05-19T16:02:45Z Dmitry Ilvokhin d@ilvokhin.com 2024-05-19T16:02:45Z urn:sha1:b4a12dbbf4a4759bf24975ca9bfc5096c90ae8b6 Need to migrate away from networkd, because it can't add new wireguard peers now out of the box without hacks. [1]: https://github.com/systemd/systemd/issues/25547