Added some more things into #IaC (#ansible) for albony mirror nodes.
The goal is to automate everything, hence making new node additions quick :)

What #Ansible Project/Module/Role should I use to provision an #OpenWRT Router?

#ansible #configuration #configurationmanagement

https://forum.openwrt.org/t/what-ansible-project-module-role-should-be-used-to-provision-an-openwrt-router-from-scratch/229252

Hello, hachyderm! we've been working hard on building up our ansible runbooks and improving hachyderm's overall resilience. Recently, we've been focusing on is database resilience.

We're getting close to retiring our original database server (finally!) and preparing to move to a fully ansible-managed set of databases servers, primary and replica on new hardware. We'll send another announcement when we do the cut over. The team has done excellent work to make this highly automated, quick, and painless!

Done:

author ansible roles for managing postgresql, pgbackrest (backups), pgbouncer, and primary/replica failover
decide to continue with pgbouncer and *not* use pgcat
rotate database passwords
order new replica database hardware
order new future primary database hardware

To do soon:

rebuild replica database with ansible scripts
prepare primary database with ansible scripts
start replicating to new database replica
cut over to new database server

We're also planning on open-sourcing our ansible roles in the coming weeks - just a little housekeeping & tidying up before we do!

For years now I’ve had a bit of a bee under my cap: would it be possible to unlock a Vault file with a GnuPG-compatible smart card? And what if the smart card were local and the unlocking had to be triggered remotely?

Forwarding GnuPG agent over SSH

https://jpmens.net/2025/04/04/forwarding-gnupg-agent-over-ssh/

#gpg #ansible

Edit: I have amended the sentence regarding distinct machines. Works fine on two different Linux boxes.

Hierarchical view of ansible-playbook, insights and more ! (public release end of April)

https://github.com/RogerMarchal/balaxy/tree/main

Discussions: https://discu.eu/q/https://github.com/RogerMarchal/balaxy/tree/main

i should've taken the opportunity to use #ansible to set up this stinkpad but i'm already on the manual warpath so maybe next time.

Built a bit of intranet tooling in recent weeks. I had #certbot renew our wildcard #LetsEncrypt certificate, but installing it on multiple internal services was a manual process. So I made an #Ansible playbook, but still had to run it manually. When? A cron job was checking the TLS certificate of our intranet every week. If its validity was less than 3 weeks I got an alert via healthchecks.io.
Only today I realised that certbot can run the playbook directly as a deploy hook...

Aaah yes

```
# Disable tunneling
PermitTunnel yes
```

Outdated comments are always lovely.
(tho in this case not _strictly_ outdated, rather not updated correctly by ansible role)

Архитектура приложения. Разбиваем приложение Ansible на модули (Inventory, Deployer)

Привет, Хабр! Продолжу серию третьей статьей об эффективном использовании Ansible для развертывания больших инфраструктур в компаниях. В этом тексте я расскажу, какую архитектуру приложения на основе Ansible мы сформировали, и остановлюсь на модулях Deployer и Inventory.

https://habr.com/ru/companies/pt/articles/896652/

Crypto.com is hiring Java Developer (Mid to Senior)

#java #springframework #cryptocurrency #ansible #aws #kafka #kubernetes #sql #seniorengineer
Bangalore, India
Full-time
Crypto.com

Job details https://jobsfordevelopers.com/jobs/java-developer-mid-to-senior-at-crypto-com-mar-12-2024-3e3f95?utm_source=mastodon.world&utm_medium=social&utm_campaign=posting
#jobalert #jobsearch #hiring

Current status: waiting on #Ansible

ansible-playbook jail-named.yml --limit=dns1.int.unixathome.org

And for my second cappuccino.

Oh the glorious mornings of #homelab

#Ansible's decision to use Jinja in values only, and not render the YAML itself through Jinja (like Salt does) might make some things a bit more clean, but it also makes a _lot_ of things significantly more difficult.