jakubdyszkiewicz/ant-hill

Ant Hill 🐜

Ansible tools to assemble my homelab ant hill!

Run

$ ansible-galaxy install -r requirements.yaml
$  export BECOME_PASSWORD=sudo-password-to-ant-hill # remember about the space to not write this to history!
$  export VAULT_PASSWORD=vauilt-password
$ ./hill.sh # configure hill that provisions ant-dev and ant-services
$ ./dev.sh # configure ant-dev
$ ./services.sh # configure ant-services

TODO

all VMs

• mDNS to autodiscover with MacOS
• Mount disk by labels

ant-services

• Script Let's encrypt certs into ant-services (done via docker!)
• Place docker services into a ant-services VM and passthrough data disk there
• Move time machine to ant-services?
• Move SMB NAS to ant-services
• Convert as many configs from data disk to static declarative configuration
  • samba
  • ddclient
  • gickup
  • rclone
  • swag
  • kong
  • prometheus
  • grafana
• Do not expose port from docker containers, hide everything behind Kong
• Try to remove root user from Kong

Observability

• Node exporter does not report proper network stats :(
• Report Public IP # it is reported by speedtest exporter
• Move metrics to location that can survive VM removal, but do not backup them
• Log retention
• Slack channel alarms

ant-hill

• VPN to ant hill
• Install cockpit via Ansible
• Configure vmbridge0
• Automate Sensors with https://hub.docker.com/r/amkay/sensor-exporter + Podman
• Try to get rid of additional network card?

Updates

Last ant-services container updates: 21.01.2023