Dyn-o-mite Ansible Collection

My personal collection of Ansible playbooks primarily for use in my Homelab.

Currently, all managed nodes are running either Proxmox CE 9.2.3 or Debian 13.5 so all of the playbooks in this repository are written exlusively for Debian-derived distros.

---

Prerequisites:

1. Hosts should be added to the hosts.yml inventory file in order for ansible to know how to reach it, establish groups, and know which subsequent plays to run.

2. Manually SSH into the root account of the host at least once to accept the host key.

3. If step 2 required a password rather than utilizing SSH keys, edit /etc/ssh/sshd_config and change the following lines:

• PermitRootLogin no to PermitRootLogin no-password
• PasswordAuthentication yes to PasswordAuthentication no, then restart the ssh service by running systemctl restart sshd

4. Hosts need to have an authorized SSH key for the root account before running the bootstrap.yml playbook. If creating a VM or container via Proxmox, this should be handled automatically. Alternatively, run the command ssh-copy-id <host> path/to/public_auth_key

5. Run ansible-playbook <host(s)> bootstrap.yml; which connects as the root account, establishes an ansible user/group, enables sudoers access, and adds a public SSH key for that user so that all future plays run as the ansible user rather than root.

6. Once the bootstrap.yml play runs successfully, the host should be properly configured for all future runs of the primary playbook in this repository.

---

Roles:

Common:

Every managed node runs these plays; first 5 minute security, util packages, etc

Proxmox:

Nodes running Proxmox CE bare-metal

Server:

Any Debian install (LXC/QEMU VM/Physical)

Docker:

Hosts with Docker installed and a controlled list of running services that are managed entirely by this ansible playbook.