No description
Find a file
2021-10-14 19:25:27 +02:00
host_vars Add host-specific variables for backup dirs and options. 2020-01-21 15:41:11 +01:00
roles Desktop fine tuning (compare netboot image). 2021-10-14 11:41:11 +02:00
cloudbox.yml Add default NIC to public zone in firewalld. 2020-02-25 19:56:14 +01:00
fvs-desktop.yml Clean up FvS playbooks and add VM server playbook. 2021-10-14 19:25:27 +02:00
fvs-home-server.yml Clean up FvS playbooks and add VM server playbook. 2021-10-14 19:25:27 +02:00
fvs-vm-server.yml Clean up FvS playbooks and add VM server playbook. 2021-10-14 19:25:27 +02:00
installbox.yml Improved DHCP configuration, no static IP addresses. 2019-11-29 14:38:07 +01:00
kerberox-client.yml Add kerberize role (providing kerberized ssh so far). 2019-11-29 15:47:45 +01:00
kerberox.yml Add clients to server's inventory file. 2020-03-12 16:47:22 +01:00
kiosk.yml Use provided ansible variable to determine debian release. 2019-11-24 21:08:08 +01:00
minimal-krb5.yml Implement basic LAN client. 2019-11-20 20:41:52 +01:00
minimal.yml Add minimal role to test only preseeding. 2019-10-20 17:20:37 +02:00
README Minor improvements, nextcloud maintenance task. 2020-02-29 18:26:20 +01:00

        Run Debian in your Local Area Network
       =======================================

The goal of the "Debian Local Area Network"-project is to make setting
up Debian in a local area network as easy as possible.  This repository
offers ansible playbooks and instructions for the following machines:

 • installbox:  orchestration of automatic installs in the LAN
     - set up as gateway to some external network (WAN)
     - provides TFTP installations on the LAN interface
     - automatic installs: preseeding and ansible playbooks
     - package cache

 • kerberox:  serving a minimalistic kerberized LAN
     - automatic TFTP installation of clients
     - centralized home directories on kerberized NFS
     - simple script to manage users and machines

 • kerberox-client:  the client for the kerberized LAN

 • kiosk:  school's computer, hackerspace, …
     - auto login user
     - reasonable defaults
     - temporary home directory on tmpfs, reset at boot

 • cloudbox:  nextcloud server in the basement
     - setup of a home cloud server
     - dynamic DNS name
     - nextcloud
     - backup with borg
     - …

Contributions like patches, suggestions, pull requests and/or further
profiles are highly appreciated!

----------------------------

 Instructions
==============

Installbox
~~~~~~~~~~
 • standard Debian installation:
   - user 'ansible' in sudo group
   - WAN interface configured and connected
   - LAN interface not configured/managed

 • optional:  customize installbox.yml

 • run ansible:
     ssh-copy-id ansible@1.2.3.4
     ansible-playbook installbox.yml -v --become --ask-become-pass -u ansible -i 1.2.3.4,

 • the installbox can be used to install all other profiles

Kerberox
~~~~~~~~
 • standard Debian installation:
   - user 'ansible' in sudo group
   - WAN interface configured and connected
   - LAN interface not configured/managed

 • optional:  customize kerberox.yml

 • run ansible:
     ssh-copy-id ansible@1.2.3.4
     ansible-playbook kerberox.yml -v --become --ask-become-pass -u ansible -i 1.2.3.4,

Kerberox and installbox provide a local ansible configuration space
which can be used to install clients and/or to check/modify the local
installation.  To do the latter, cd into 'debian-lan' and run:

   'ansible-playbook --ask-become-pass -v  -i localhost, -c local  kerberox.yml'

The kerberox-clients are automatically installed using the included TFTP netboot
installer within the LAN.

Kiosk
~~~~~
 • Debian installation:
   - user 'ansible' in sudo group

 • customize kiosk.yml:
   - WiFi parameters
   - package selection: extra_pkgs and extra_pkgs_bpo for backports
   - desktop environment

 • run ansible:
     ssh-copy-id ansible@1.2.3.4
     ansible-playbook kiosk.yml -v --become --ask-become-pass -u ansible -i 1.2.3.4,

Cloudbox
~~~~~~~~
 • Debian installation:
   - user 'ansible' in sudo group

 • check/customize cloudbox.yml

 • download latest nextcloud-*.*.*.tar.bz2 archive and place it as nextcloud.tar.bz2
   in your debian-lan-ansible directory

 • run ansible:
     ssh-copy-id ansible@1.2.3.4
     ansible-playbook cloudbox.yml -v --become --ask-become-pass -u ansible -i 1.2.3.4,

 • use 'nc-admin' with password in '/root/nc-admin.pwd' to log into nextcloud.