From d5915480a2e66d4df8941a748b005d67a32ceb13 Mon Sep 17 00:00:00 2001 From: Fabio Sinibaldi Date: Fri, 24 Jul 2026 16:23:57 +0200 Subject: [PATCH 1/2] Vault info --- ansible/README.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/ansible/README.md b/ansible/README.md index dc37f15..c3d6f54 100644 --- a/ansible/README.md +++ b/ansible/README.md @@ -35,3 +35,9 @@ ansible-galaxy install -r requirements.yaml Per maggior informazioni [Ansible Galaxy](https://galaxy.ansible.com/ui/). +#### Vault secrets +I segreti dei playbook vengono gestiti tramite [ansible-vault](https://docs.ansible.com/projects/ansible/latest/cli/ansible-vault.html), che permette di proteggere con una password l'accesso alle variabili sensibili. + +La configurazione corrente prevede un solo vault file in *inventories/group_vars/all/vault.yaml* + +**NB** Quando viene lanciato un playbook viene richiesta la password del vault. \ No newline at end of file From d4777eb4af35ac45b8f8a7c4a17b94125bad4398 Mon Sep 17 00:00:00 2001 From: Fabio Sinibaldi Date: Fri, 24 Jul 2026 16:24:09 +0200 Subject: [PATCH 2/2] Pangolin playbook info --- ansible/playbooks/README.md | 15 +++++++++++++-- 1 file changed, 13 insertions(+), 2 deletions(-) diff --git a/ansible/playbooks/README.md b/ansible/playbooks/README.md index 8cf3ecc..fd1858a 100644 --- a/ansible/playbooks/README.md +++ b/ansible/playbooks/README.md @@ -28,7 +28,7 @@ L'opzione '*-K*' invece permette di chiedere la password dell'utente remoto ``` ### VPN Server -Istanzia un server Wireguard abilitando il tunneling del traffico. +Istanzia un server [Wireguard](https://www.wireguard.com/ ) abilitando il tunneling del traffico. **Target Hosts : wireguard_server** @@ -59,4 +59,15 @@ wg_peers: - "192.168.101.0/24" - "10.22.0.0/16" forceRegeneration: False -``` \ No newline at end of file +``` + +### Pangolin + +Il playbook installa docker e docker compose. Attraverso docker compose vengono poi lanciati i container per [pangolin](https://docs.pangolin.net), [gerbil](https://github.com/fosrl/gerbil) e [traefik](https://doc.traefik.io/traefik/). + +Il playbook utilizza : +- [geerlingguy.docker](https://github.com/geerlingguy/ansible-role-docker) attraverso ansible galaxy +- I ruoli common e pangolin definiti in [pangolin-ansible-terraform](https://github.com/patelanuj21/pangolin-ansible-terraform/tree/main), riportati staticamente come ruolo *pangolin* + + +I parametri attesi dal playbook sono quelli definiti nei ruoli da cui dipende. \ No newline at end of file