server-provisioning

Server infrastructure automation powered by terraform and ansible

Installation

Terraform (Infrastructure)

0. Export Vultr's API key as environmental variable

$ export TF_VAR_api_key="[API key]"

1. Init terraform

$ terraform init

2. [If importing an existing infrastructure] Import terraform state

$ terraform import vultr_instance.tunnel [instanceID]

3. Confirm infrastructure changes

$ terraform plan

4. Apply infrastructure changes

$ terraform apply

Ansible (Software)

0. Add password_file and skip to step 3, else continue to next step

$ touch password_file

1. Copy group_vars/servers.yml.example to group_vars/servers.yml set the appropriate config

2. Install roles from ansible galaxy

$ ansible-galaxy install -r requirements.yml

3. Configure servers inventory file

[remote]
tunnel ansible_host=tunnel.example.org ansible_user=user ansible_become_pass=secret

[local]
nas ansible_host=nas.example.org ansible_user=user ansible_become_pass=secret

[servers:children]
remote
local

4. Run deployment script

$ ansible-playbook --vault-password-file=password_file -i servers site.yml

Editing encrypted files

$ ansible-vault edit --vault-password-file=password_file group_vars/servers.yml

References

Terraform

• Vultr provider
• Vultr variables
• Vultr instance resource
• Importing existing resources

Wireguard

• WireGuard Site-to-Site
• WireGuard: How to access a peer’s local network
• Some Unofficial WireGuard Documentation

Port forwarding

• Expose server behind NAT with WireGuard and a VPS
• How To Forward Ports through a Linux Gateway with Iptables

S.M.A.R.T

• Archiwiki page
• Ubuntu-specific tutorial

Firewall

• How To Set Up a Firewall with UFW on Ubuntu 18.04
• Archwiki page