Ansible_role on Alwaldend

Adguard

Mon, 01 Jan 0001 00:00:00 +0000

Caddy

Mon, 01 Jan 0001 00:00:00 +0000

CIFS

Mon, 01 Jan 0001 00:00:00 +0000

Consul

Mon, 01 Jan 0001 00:00:00 +0000

Consul

Mon, 01 Jan 0001 00:00:00 +0000

Consul envoy

Mon, 01 Jan 0001 00:00:00 +0000

Dev VM

Mon, 01 Jan 0001 00:00:00 +0000

The default task entry point configures package repositories and development packages. It uses the same dev_vm_packages list with either the ordinary package manager or RPM-OSTree layering. dev_vm_package_backend accepts auto, package, or rpm_ostree; auto selects RPM-OSTree when /run/ostree-booted exists. Set dev_vm_install_packages to false to skip repository and package management entirely.

RPM-OSTree changes are staged for the next boot by default. The role reports a pending deployment but does not reboot the host. Set dev_vm_rpm_ostree_apply_live to true only when live application is known to be safe for the selected packages.

DNS

Mon, 01 Jan 0001 00:00:00 +0000

Docker

Mon, 01 Jan 0001 00:00:00 +0000

Facts

Mon, 01 Jan 0001 00:00:00 +0000

Filesystem

Mon, 01 Jan 0001 00:00:00 +0000

Firewall

Mon, 01 Jan 0001 00:00:00 +0000

Forgejo

Mon, 01 Jan 0001 00:00:00 +0000

Forgejo

Mon, 01 Jan 0001 00:00:00 +0000

Forgejo runner

Mon, 01 Jan 0001 00:00:00 +0000

Gpg

Mon, 01 Jan 0001 00:00:00 +0000

Harboer

Mon, 01 Jan 0001 00:00:00 +0000

Hermes

Mon, 01 Jan 0001 00:00:00 +0000

Hiddify manager

Mon, 01 Jan 0001 00:00:00 +0000

Hiddify manager with host

Mon, 01 Jan 0001 00:00:00 +0000

Host

Mon, 01 Jan 0001 00:00:00 +0000

Install CA

Mon, 01 Jan 0001 00:00:00 +0000

K3s

Mon, 01 Jan 0001 00:00:00 +0000

K3s bootstrap

Mon, 01 Jan 0001 00:00:00 +0000

K3s cluster

Mon, 01 Jan 0001 00:00:00 +0000

K3s kubeconfig

Mon, 01 Jan 0001 00:00:00 +0000

lvg

Mon, 01 Jan 0001 00:00:00 +0000

lvg_volume_groups describes the complete desired physical-volume list for each volume group. Extra physical volumes are not removed unless a caller sets remove_extra_pvs: true.

Creating a volume group initializes every listed device as an LVM physical volume. Callers must resolve stable device paths and verify that each device is the intended, unused disk before applying this role; pvcreate may overwrite an existing disk signature.

lvol

Mon, 01 Jan 0001 00:00:00 +0000

Each lvol_volumes entry can constrain allocation with pvs, pass creation arguments with opts, and disable shrinking with shrink: false.

Mount

Mon, 01 Jan 0001 00:00:00 +0000

Mount entries can set opts, dump, and passno; state: mounted keeps the mount active and writes its persistent /etc/fstab entry.

Opencode

Mon, 01 Jan 0001 00:00:00 +0000

OpenHands automation

Mon, 01 Jan 0001 00:00:00 +0000

Runs the OpenHands automation server natively from a uv-managed virtual environment. It stores schedules and event triggers, tracks run lifecycle, and dispatches conversations to the agent server.

The automation server is not a sandbox. It records which agent server should run a dispatched conversation and hands that work to AUTOMATION_AGENT_SERVER_URL; setting that variable selects the agent server’s local mode, which uses a persistent local agent server instead of managed OpenHands Cloud sandboxes.

OpenHands canvas

Mon, 01 Jan 0001 00:00:00 +0000

Runs the OpenHands Agent Canvas browser client from the published npm package. The service listens on loopback port openhands_canvas_port; TLS, the public hostname, and routing to the agent server and automation API belong to the deployment’s Traefik role.

The service runs the package’s scripts/static-server.mjs directly with Node, an explicit loopback host, and the package’s build/ directory. It serves the browser client without starting an agent server, an automation server, or the npm launcher’s additional ingress process. Agent Canvas owns no conversation or automation state and executes no tools.

Openhands server

Mon, 01 Jan 0001 00:00:00 +0000

Runs the OpenHands agent server natively from a uv-managed virtual environment. It hosts conversations, executes tools, and streams events for Agent Canvas. The service binds loopback only; TLS and external reachability belong to the calling deployment.

Set openhands_server_secure to true to require a session API key. The unsecured mode omits the session key and is only appropriate where the loopback boundary is trusted.

The caller can set openhands_server_install_packages to false and install openhands_server_packages through its host-specific package workflow. OSTree hosts use the shared dev_vm package entry point and must boot into a deployment containing those dependencies before installing the service. They also set openhands_server_service_path under /etc/systemd/system.

OS

Mon, 01 Jan 0001 00:00:00 +0000

Pve

Mon, 01 Jan 0001 00:00:00 +0000

PVE cluster

Mon, 01 Jan 0001 00:00:00 +0000

PVE VM

Mon, 01 Jan 0001 00:00:00 +0000

PVE VM remove

Mon, 01 Jan 0001 00:00:00 +0000

Raspberry pi

Mon, 01 Jan 0001 00:00:00 +0000

SSH

Mon, 01 Jan 0001 00:00:00 +0000

SSH port forwarding

Mon, 01 Jan 0001 00:00:00 +0000

SSH update known hosts

Mon, 01 Jan 0001 00:00:00 +0000

T3 Code

Mon, 01 Jan 0001 00:00:00 +0000

Traefik

Mon, 01 Jan 0001 00:00:00 +0000

Traefik (old)

Mon, 01 Jan 0001 00:00:00 +0000

Update all packages

Mon, 01 Jan 0001 00:00:00 +0000

Users

Mon, 01 Jan 0001 00:00:00 +0000

Vault

Mon, 01 Jan 0001 00:00:00 +0000

Wireguard

Mon, 01 Jan 0001 00:00:00 +0000

Xray

Mon, 01 Jan 0001 00:00:00 +0000

Links:

https://xtls.github.io/en/