70 lines
2.2 KiB
YAML
70 lines
2.2 KiB
YAML
|
---
|
||
|
|
# Bootstrap Ubuntu Server 24.04 headless host for arr-stack + local AI (Vulkan)
|
||
|
|
#
|
||
|
|
# Usage (from this directory):
|
||
|
|
# ansible-galaxy collection install -r requirements.yml
|
||
|
|
# ansible-playbook site.yml -l ser5
|
||
|
|
#
|
||
|
|
# Tags: common, docker, amd, vulkan, firewall, stack, upgrade, deploy
|
||
|
|
|
||
|
|
- name: Prepare homelab host
|
||
|
|
hosts: homelab
|
||
|
|
gather_facts: true
|
||
|
|
become: true
|
||
|
|
|
||
|
|
pre_tasks:
|
||
|
|
- name: Verify target is Ubuntu
|
||
|
|
ansible.builtin.assert:
|
||
|
|
that:
|
||
|
|
- ansible_distribution == "Ubuntu"
|
||
|
|
- ansible_distribution_major_version is version('24', '>=')
|
||
|
|
fail_msg: "This playbook targets Ubuntu 24.04+. Found {{ ansible_distribution }} {{ ansible_distribution_version }}"
|
||
|
|
tags: [always]
|
||
|
|
|
||
|
|
- name: Resolve stack user uid/gid
|
||
|
|
ansible.builtin.getent:
|
||
|
|
database: passwd
|
||
|
|
key: "{{ stack_owner }}"
|
||
|
|
tags: [always]
|
||
|
|
|
||
|
|
- name: Set PUID/PGID facts from passwd
|
||
|
|
ansible.builtin.set_fact:
|
||
|
|
ansible_user_uid: "{{ getent_passwd[stack_owner][1] }}"
|
||
|
|
ansible_user_gid: "{{ getent_passwd[stack_owner][2] }}"
|
||
|
|
tags: [always]
|
||
|
|
|
||
|
|
roles:
|
||
|
|
- role: common
|
||
|
|
tags: [common]
|
||
|
|
- role: docker
|
||
|
|
tags: [docker]
|
||
|
|
- role: amd_vulkan
|
||
|
|
tags: [amd, vulkan, gpu]
|
||
|
|
- role: firewall
|
||
|
|
tags: [firewall]
|
||
|
|
- role: stack
|
||
|
|
tags: [stack]
|
||
|
|
# After stack paths exist — ownership, sudo, groups, GPU nodes
|
||
|
|
- role: users
|
||
|
|
tags: [users, permissions]
|
||
|
|
|
||
|
|
post_tasks:
|
||
|
|
- name: Summary
|
||
|
|
ansible.builtin.debug:
|
||
|
|
msg: |
|
||
|
|
Host ready: {{ inventory_hostname }} ({{ ansible_host }})
|
||
|
|
Stack root: {{ stack_root }} (owned by {{ stack_owner }})
|
||
|
|
Media root: {{ storage_root }} (owned by {{ stack_owner }})
|
||
|
|
User: {{ stack_owner }} — passwordless sudo, docker/video/render/…
|
||
|
|
Docker: enabled on boot
|
||
|
|
Vulkan: Mesa packages + permissive /dev/dri udev (trusted host)
|
||
|
|
Firewall: UFW LAN {{ lan_subnet }}
|
||
|
|
|
||
|
|
Next on the server (re-login once for groups):
|
||
|
|
cd {{ stack_root }}
|
||
|
|
docker compose build bonsai && docker compose up -d
|
||
|
|
|
||
|
|
Open WebUI: http://{{ ansible_host }}:3000
|
||
|
|
Jellyfin: http://{{ ansible_host }}:8096
|
||
|
|
tags: [always]
|