Vezpi/Homelab
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Compare commits

base: Vezpi:main
Branches Tags
Vezpi:main Vezpi:lab
..
compare: Vezpi:lab
Branches Tags
Vezpi:lab Vezpi:main

8 Commits
main ... lab

Author SHA1 Message Date
Vezpi
1bffdef5fe revert: insecure to false 2025-12-15 19:38:03 +00:00
Vezpi
6a57609f8a change: set insecure to true 2025-12-13 21:35:26 +00:00
Vezpi
f4d67bee86 add: proxmox project with terraform_user.yml 2025-12-12 20:45:24 +00:00
Vezpi
b028018d7e change: use username/password instead of ssh key 2025-12-11 19:50:04 +00:00
Vezpi
72bf321145 feat: use multiple ssh key in pve_vm module 2025-12-06 16:52:01 +00:00
Vezpi
87c5a9386d remove: firewall section 2025-12-05 21:24:21 +00:00
Vezpi
6b1c582ca6 add: install_nginx.yml 2025-12-05 19:50:22 +00:00
Vezpi
908f9748bd add: semaphore-vms terraform project for semaphore UI 2025-12-05 19:36:03 +00:00
11 changed files with 137 additions and 6 deletions
Expand all files Collapse all files

0
ansible/inventories/terraform.yml → ansible/ansiform/inventories/terraform.yml
View File

0
ansible/playbooks/deploy_tf.yml → ansible/ansiform/playbooks/deploy_tf.yml
View File

35
ansible/ansiform/playbooks/install_nginx.yml Normal file
View File

@@ -0,0 +1,35 @@
---
- name: Demo Playbook - Install Nginx and Serve Hostname Page
hosts: all
become: true
tasks:
- name: Ensure apt cache is updated
ansible.builtin.apt:
update_cache: true
cache_valid_time: 3600
- name: Install nginx
ansible.builtin.apt:
name: nginx
state: present
- name: Create index.html with hostname
ansible.builtin.copy:
dest: /var/www/html/index.html
content: |
<html>
<head><title>Demo</title></head>
<body>
<h1>Hostname: {{ inventory_hostname }}</h1>
</body>
</html>
owner: www-data
group: www-data
mode: "0644"
- name: Ensure nginx is running
ansible.builtin.service:
name: nginx
state: started
enabled: true

0
ansible/roles/terraform_vm/defaults/main.yml → ansible/ansiform/roles/terraform_vm/defaults/main.yml
View File

0
ansible/roles/terraform_vm/tasks/main.yml → ansible/ansiform/roles/terraform_vm/tasks/main.yml
View File

20
ansible/proxmox/terraform_user.yml Normal file
View File

@@ -0,0 +1,20 @@
---
- name: Create Terraform local user for Proxmox
hosts: nodes
become: true
tasks:
- name: Create terraform user
ansible.builtin.user:
name: "{{ terraform_user }}"
password: "{{ terraform_password | password_hash('sha512') }}"
shell: /bin/bash
- name: Create sudoers file for terraform user
ansible.builtin.copy:
dest: /etc/sudoers.d/{{ terraform_user }}
mode: '0440'
content: |
{{ terraform_user }} ALL=(root) NOPASSWD: /sbin/pvesm
{{ terraform_user }} ALL=(root) NOPASSWD: /sbin/qm
{{ terraform_user }} ALL=(root) NOPASSWD: /usr/bin/tee /var/lib/vz/*

3
terraform/modules/pve_vm/main.tf
View File

@@ -26,8 +26,7 @@ resource "proxmox_virtual_environment_file" "cloud_config" {
- name: ${var.vm_user} - name: ${var.vm_user}
groups: sudo groups: sudo
shell: /bin/bash shell: /bin/bash
ssh-authorized-keys: ssh-authorized-keys: ${jsonencode(var.vm_user_sshkeys)} # Inject user's SSH key
- "${var.vm_user_sshkey}" # Inject user's SSH key
sudo: ALL=(ALL) NOPASSWD:ALL sudo: ALL=(ALL) NOPASSWD:ALL
runcmd: runcmd:
- systemctl enable qemu-guest-agent - systemctl enable qemu-guest-agent

11
terraform/modules/pve_vm/variables.tf
View File

@@ -26,10 +26,13 @@ variable "vm_user" {
default = "vez" default = "vez"
} }
variable "vm_user_sshkey" { variable "vm_user_sshkeys" {
description = "Admin user SSH key of the VM" description = "Admin user SSH keys of the VM"
type = string type = list(string)
default = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID62LmYRu1rDUha3timAIcA39LtcIOny1iAgFLnxoBxm vez@bastion" default = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID62LmYRu1rDUha3timAIcA39LtcIOny1iAgFLnxoBxm vez@bastion",
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHovfHKpqTvwj5zrcSuSZALa8iiH6qBvE5dyJCz9eQ2k vez@surface"
]
} }
variable "vm_cpu" { variable "vm_cpu" {

33
terraform/projects/semaphore-vms/main.tf Normal file
View File

@@ -0,0 +1,33 @@
module "pve_vm" {
source = "../../modules/pve_vm"
for_each = local.vm_list
node_name = each.value.node_name
vm_name = each.value.vm_name
vm_cpu = each.value.vm_cpu
vm_ram = each.value.vm_ram
vm_vlan = each.value.vm_vlan
}
locals {
# Ordered list of VM hostnames
sem_hosts = ["sem01", "sem02", "sem03"]
# Create a map: host -> node
vm_list = {
for idx, host in local.sem_hosts :
host => {
node_name = data.proxmox_virtual_environment_nodes.pve_nodes.names[idx]
vm_name = host
vm_cpu = 1
vm_ram = 2048
vm_vlan = 66
}
}
}
data "proxmox_virtual_environment_nodes" "pve_nodes" {}
output "vm_ip" {
value = { for k, v in module.pve_vm : k => v.vm_ip }
}

19
terraform/projects/semaphore-vms/provider.tf Normal file
View File

@@ -0,0 +1,19 @@
terraform {
required_providers {
proxmox = {
source = "bpg/proxmox"
}
}
}
provider "proxmox" {
endpoint = var.proxmox_endpoint
api_token = var.proxmox_api_token
insecure = false
ssh {
agent = false
# private_key = file("~/.ssh/id_ed25519")
username = var.proxmox_ssh_username
password = var.proxmox_ssh_password
}
}

22
terraform/projects/semaphore-vms/variables.tf Normal file
View File

@@ -0,0 +1,22 @@
variable "proxmox_endpoint" {
description = "Proxmox URL endpoint"
type = string
}
variable "proxmox_api_token" {
description = "Proxmox API token"
type = string
sensitive = true
}
variable "proxmox_ssh_username" {
description = "Proxmox SSH username"
type = string
sensitive = true
}
variable "proxmox_ssh_password" {
description = "Proxmox SSH password"
type = string
sensitive = true
}