ansible/group_vars/hardtack/main.yml

@@ -3,5 +3,6 @@ hashi_arch: arm
 consul_arch: arm64
 nomad_arch: arm64
 docker_arch: arm64
+k3s_version: v1.24.1+k3s1
 k3s_role: 'client'
 k3s_server_hostname: hardtack1.minhas.io

ansible/group_vars/teapot/main.yml

@@ -1,7 +1,6 @@
 ---
 hashi_arch: arm
 consul_arch: arm64
-k3s_version: v1.24.8+k3s1
+k3s_version: v1.25.4+k3s1
 k3s_role: 'client'
 k3s_server_hostname: teapot01.minhas.io
-kube_storage: True

ansible/host_vars/sedan.minhas.io/haproxy.yml

@@ -4,6 +4,7 @@ haproxy_domains:
     - { name: "gitea", url: "git.minhas.io" }
     - { name: "kanban", url: "kanban.minhas.io" }
     - { name: "nextcloud", url: "nextcloud.minhas.io" }
+    - { name: "radicale", url: "dav.minhas.io" }
     - { name: "sudoscientist-go-backend", url: "api.sudoscientist.com" }
     - { name: "wallabag", url: "wallabag.minhas.io" }
 ...

ansible/roles/haproxy/templates/haproxy.cfg.j2

@@ -32,6 +32,11 @@ defaults
     errorfile 503 /etc/haproxy/errors/503.http
     errorfile 504 /etc/haproxy/errors/504.http
 
+frontend fe_tcp
+    mode    tcp
+    bind    :8000
+    default_backend be_airsonic
+
 frontend fe_default
     mode    http
     bind    :443 ssl crt /etc/haproxy/certs/ alpn h2,http/1.1
@@ -52,6 +57,10 @@ backend be_{{ domain.name }}
 
 {% endfor %}
 
+backend be_airsonic
+    balance leastconn
+    server airsonic 192.168.0.12:8001
+
 resolvers consul
     nameserver consul 127.0.0.1:8600
     accepted_payload_size 8192

ansible/roles/k3s/defaults/main.yml

@@ -1,3 +0,0 @@
----
-k3s_version: v1.24.8+k3s1
-kube_storage: False

ansible/roles/k3s/tasks/clients.yml

@@ -13,4 +13,9 @@
     enabled: yes
     name: k3s
     state: started
+
+- name: ensure nfsd is installed
+  apt:
+    name: nfs-common
+    state: present
 ...

ansible/roles/k3s/tasks/get_k3s.yml

@@ -4,8 +4,6 @@
     name:
       - apparmor
       - apparmor-utils
-      - nfs-common
-      - open-iscsi
 
 - name: check k3s version
   shell:
@@ -23,7 +21,6 @@
     mode: 0755
     owner: root
     group: root
-    force: True
   when: installed_k3s_version.stdout != k3s_version
   notify: restart k3s
 
@@ -48,12 +45,4 @@
     owner: root
     group: root
     mode: 0644
-
-- name: ensure mount is configured
-  ansible.posix.mount:
-    path: /mnt/storage
-    src: /dev/nvme0n1p1
-    fstype: ext4
-    state: mounted
-  when: kube_storage
 ...

vault/policies/external-dns.hcl

@@ -1,3 +0,0 @@
-path "kv/data/external-dns" {
-  capabilities = ["read"]
-}