netcup-setup/ansible/README.md

Ansible MicroOS VM setup

4. Run the custom_hardening playbook. This mostly sets SSH parameters to best practice values.

ansible-playbook -i inventory.txt custom_hardening.yml

5. Run the allow_privileged_ports_rootless playbook. This allows a rootless traefik container to use ports 80 and 443.

ansible-playbook -i inventory.txt allow_privileged_ports_rootless.yml

6. Run the deploy_services playbook. This creates groups and users for each service, creates a btrfs subvolume for data and copies the quadlet files to the correct location, then activates the service.

ansible-playbook -i inventory.txt deploy_services.yml

7. Run the deploy_traefik_config playbool. This copies the traefik configuration to the correct location.

ansible-playbook -i inventory.txt deploy_traefik_config.yml