···

       
1
       
-
       
---

     

       
2
       
 
       
- hosts: freebsd_servers

     

       
3
       
 
       
  gather_facts: true

     

       
4
       
 
       
  become: true

     

       
5
       
-
       


     

       
6
       
 
       
  tasks:

     

       
7
       
 
       
    - name: Update all installed packages

     

       
8
       
 
       
      community.general.pkgng:

     

       
9
       
 
       
        name: "*"

     

       
10
       
 
       
        state: latest

     

       
11
       
-
       


     

       
12
       
 
       
    - name: Update the base system

     

       
13
       
 
       
      ansible.builtin.shell: freebsd-update fetch install --not-running-from-cron

     

       
14
       
-
       


     

       
15
       
 
       
    - name: Get currently running FreeBSD kernel version in memory

     

       
16
       
 
       
      ansible.builtin.shell: freebsd-version -r

     

       
17
       
 
       
      register: running_kv

     

       
18
       
-
       


     

       
19
       
 
       
    - name: Get newly installed kernel version

     

       
20
       
 
       
      ansible.builtin.shell: freebsd-version -k

     

       
21
       
 
       
      register: installed_kv

     

       
22
       
-
       


     

       
23
       
 
       
    - name: Check for kernel version mismatch

     

       
24
       
 
       
      set_fact:

     

       
25
       
 
       
        reboot_required: "{{ running_kv.stdout != installed_kv.stdout }}"

     

       
26
       
-
       


     

       
27
       
 
       
    - name: Display reboot status

     

       
28
       
 
       
      ansible.builtin.debug:

     

       
29
       
 
       
        msg: "Reboot required: {{ reboot_required }}"

     

       
30
       
-
       


     

       
31
       
 
       
    - name: Reboot the FreeBSD server if needed

     

       
32
       
 
       
      ansible.builtin.reboot:

     

       
33
       
 
       
        reboot_timeout: 3600

     

···

       
0
       
 
       

     

       
1
       
 
       
- hosts: freebsd_servers

     

       
2
       
 
       
  gather_facts: true

     

       
3
       
 
       
  become: true

     

       
0
       
 
       

     

       
4
       
 
       
  tasks:

     

       
5
       
 
       
    - name: Update all installed packages

     

       
6
       
 
       
      community.general.pkgng:

     

       
7
       
 
       
        name: "*"

     

       
8
       
 
       
        state: latest

     

       
0
       
 
       

     

       
9
       
 
       
    - name: Update the base system

     

       
10
       
 
       
      ansible.builtin.shell: freebsd-update fetch install --not-running-from-cron

     

       
0
       
 
       

     

       
11
       
 
       
    - name: Get currently running FreeBSD kernel version in memory

     

       
12
       
 
       
      ansible.builtin.shell: freebsd-version -r

     

       
13
       
 
       
      register: running_kv

     

       
0
       
 
       

     

       
14
       
 
       
    - name: Get newly installed kernel version

     

       
15
       
 
       
      ansible.builtin.shell: freebsd-version -k

     

       
16
       
 
       
      register: installed_kv

     

       
0
       
 
       

     

       
17
       
 
       
    - name: Check for kernel version mismatch

     

       
18
       
 
       
      set_fact:

     

       
19
       
 
       
        reboot_required: "{{ running_kv.stdout != installed_kv.stdout }}"

     

       
0
       
 
       

     

       
20
       
 
       
    - name: Display reboot status

     

       
21
       
 
       
      ansible.builtin.debug:

     

       
22
       
 
       
        msg: "Reboot required: {{ reboot_required }}"

     

       
0
       
 
       

     

       
23
       
 
       
    - name: Reboot the FreeBSD server if needed

     

       
24
       
 
       
      ansible.builtin.reboot:

     

       
25
       
 
       
        reboot_timeout: 3600

     

···

       
1
       
-
       
debian_servers:

     

       
2
       
 
       
  hosts:

     

       
3
       
-
       
    hyperreal:

     

       
4
       
 
       
      ansible_user: jas

     

       
5
       
-
       
      ansible_host: hyperreal.carp-wyvern.ts.net

     

       
6
       
 
       
      ansible_python_interpreter: /usr/bin/python3

     

       
7
       
-
       
freebsd_servers:

     

       
8
       
-
       
  hosts:

     

       
9
       
 
       
    nas:

     

       
10
       
 
       
      ansible_user: jas

     

       
11
       
 
       
      ansible_host: nas.carp-wyvern.ts.net

     

       
12
       
 
       
      ansible_python_interpreter: /usr/local/bin/python3.11

     

       
13
       
-
       
prom_clients:

     

       
14
       
-
       
  children:

     

       
15
       
-
       
    debian_servers:

     

       
16
       
-
       
prom_servers:

     

       
17
       
 
       
  hosts:

     

       
18
       
-
       
    desktop:

     

       
19
       
 
       
      ansible_user: jas

     

       
20
       
-
       
      ansible_host: desktop.carp-wyvern.ts.net

     

       
21
       
 
       
      ansible_python_interpreter: /usr/bin/python3

     

       
22
       
-
       
remote_logging_clients:

     

       
23
       
-
       
  children:

     

       
24
       
-
       
    debian_servers:

     

       
25
       
-
       
    freebsd_servers:

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

···

       
1
       
+
       
borgmatic_hosts:

     

       
2
       
 
       
  hosts:

     

       
3
       
+
       
    desktop:

     

       
4
       
 
       
      ansible_user: jas

     

       
5
       
+
       
      ansible_host: desktop.carp-wyvern.ts.net

     

       
6
       
 
       
      ansible_python_interpreter: /usr/bin/python3

     

       
0
       
 
       

     

       
0
       
 
       

     

       
7
       
 
       
    nas:

     

       
8
       
 
       
      ansible_user: jas

     

       
9
       
 
       
      ansible_host: nas.carp-wyvern.ts.net

     

       
10
       
 
       
      ansible_python_interpreter: /usr/local/bin/python3.11

     

       
11
       
+
       
debian_servers:

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
12
       
 
       
  hosts:

     

       
13
       
+
       
    moonshadow:

     

       
14
       
 
       
      ansible_user: jas

     

       
15
       
+
       
      ansible_host: moonshadow.carp-wyvern.ts.net

     

       
16
       
 
       
      ansible_python_interpreter: /usr/bin/python3

     

       
17
       
+
       
freebsd_servers:

     

       
18
       
+
       
  hosts:

     

       
19
       
+
       
    nas:

     

       
20
       
+
       
      ansible_user: root

     

       
21
       
+
       
      ansible_host: nas.carp-wyvern.ts.net

     

       
22
       
+
       
      ansible_python_interpreter: /usr/local/bin/python3.11

     

       
23
       
+
       
    tornode:

     

       
24
       
+
       
      ansible_user: root

     

       
25
       
+
       
      ansible_host: tornode

     

       
26
       
+
       
      ansible_python_interpreter: /usr/local/bin/python3.11

     

···

       
19
       
 
       
        state: absent

     

       
20
       
 
       
      when: ansible_system == "Linux"

     

       
21
       
 
       
    - name: Get remote logging server headnet IP address

     

       
22
       
-
       
      ansible.builtin.shell: tailscale status | grep "desktop" | awk '{print $1}'

     

       
23
       
 
       
      register: ctrl_headnet_ip_addr

     

       
24
       
 
       
      changed_when: false

     

       
25
       
 
       
      failed_when: ctrl_headnet_ip_addr.rc != 0

     
···

       
31
       
 
       
        group: root

     

       
32
       
 
       
        mode: 0644

     

       
33
       
 
       
        block: |

     

       
34
       
-
       
          # Forward to desktop.ayu-matrix.ts.net ({{ctrl_headnet_ip_addr.stdout}})

     

       
35
       
 
       
          *.* action(type="omfwd" target="{{ctrl_headnet_ip_addr.stdout}}" port="514" protocol="tcp"

     

       
36
       
 
       
              action.resumeRetryCount="100"

     

       
37
       
 
       
              queue.type="linkedList" queue.size="10000")

     

···

       
19
       
 
       
        state: absent

     

       
20
       
 
       
      when: ansible_system == "Linux"

     

       
21
       
 
       
    - name: Get remote logging server headnet IP address

     

       
22
       
+
       
      ansible.builtin.shell: tailscale status | grep "aux" | awk '{print $1}'

     

       
23
       
 
       
      register: ctrl_headnet_ip_addr

     

       
24
       
 
       
      changed_when: false

     

       
25
       
 
       
      failed_when: ctrl_headnet_ip_addr.rc != 0

     
···

       
31
       
 
       
        group: root

     

       
32
       
 
       
        mode: 0644

     

       
33
       
 
       
        block: |

     

       
34
       
+
       
          # Forward to aux.carp-wyvern.ts.net ({{ctrl_headnet_ip_addr.stdout}})

     

       
35
       
 
       
          *.* action(type="omfwd" target="{{ctrl_headnet_ip_addr.stdout}}" port="514" protocol="tcp"

     

       
36
       
 
       
              action.resumeRetryCount="100"

     

       
37
       
 
       
              queue.type="linkedList" queue.size="10000")