My Raspberry Pi installation at home.
- Do not touch anything by hand, use Ansible.
- If something is hard to automate, document it at least.
- Raspberry Pi 4 model B, 4GB
- HiFiBerry DAC+
- RAIDON GR3660-B3 (with fan turned off)
The repository is tested against Raspberry Pi OS Lite 64 bit (Debian 11 "Bullseye").
- Install image on SD card
- Append
ip=«IP»intocmdline.txt - Enable ssh
touch ssh - Configure default user account with
pipasswordecho "pi:vCKtyl9xwqPxU" > userconf
Generate key:
ssh-keygen -f pi_rsaConfigure client:
cat <<EOT >> ~/.ssh/config
Host pi
HostName «IP»
User pi
IdentityFile ~/.ssh/pi_rsa
EOTCopy key to Raspberry Pi:
ssh-copy-id -i ~/.ssh/pi_rsa.pub piInstall 3rd party roles:
ansible-galaxy install -r requirements.ymlVarious playbooks to improve vanilla Raspberry Pi setup:
ansible-playbook pimpmypi.ymlRoles:
- common - missing pieces of vanilla Raspberry distribution
- aria2 - the fastest utility for downloading files
- docker - Docker repository and packages
- fluentbit - send systemd logs to GCP Logging and/or Loki, see readme
- grafana - monitoring with Grafana Cloud (free tier)
- hdidle - spin-down disks, see Github
- log2ram - move logs into RAM, see Github
- posfix - forward mails to real account
- smartmontools - monitor hard drives
- adguard - privacy all the time, see AdGuard Home
- backup - to backup or not to backup, that’s no question, see Backup Ninja
- hyperion - ambient lighting, see Hyperion
- kodi - the best media center, see readme
- raspotify, shairport - make my retired HiFi great again: Raspotify , Librespot, Shairport
- samba - my family disk for files and automated backups, see Samba
- tailscale - VPN done right, see Tailscale
- traefik - Reverse proxy, see Traefik
- transmission - BitTorrent daemon, see Transmission
Upgrade system to the latest Bullseye:
ansible all -m apt -a "upgrade=yes update_cache=yes"The following packages have versions pinned and needs to updated explicitly:
- adguard
- grafana-agent
- kodi