Files
infra-phytron/ansible/run.yml
T
CubelaPetarandClaude Fable 5 43054f32b8 Add base plays for all hosts, nvidia_gpu role, GPU pre-work items
- run.yml: base plays (geerlingguy.security) for jira and git; gpu01
  play with security + docker + nvidia_gpu
- roles/nvidia_gpu: driver pinned >=580 (Blackwell), CUDA repo,
  container toolkit incl. the nvidia-ctk runtime configure step
- manuals/20260714-nvidia-driver-install.md: dated per convention,
  corrected (pinned -server driver instead of autoinstall+cuda-drivers
  mix, toolkit optional, added missing nvidia-ctk/docker restart step)
- gpu01 folder: planning docs under notes/, runbooks under manuals/,
  scripts/; convention documented in CLAUDE.md
- scripts/share-analysis.ps1: read-only SMB share analysis for the
  Windows server (projektplan §2.1)
- TODO.md: Phase-0 pre-work items from the projektplan

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-14 10:30:43 +02:00

91 lines
1.6 KiB
YAML

---
- hosts: phy_z_srv_cloud
become: yes
vars_files:
- "group_vars/secrets.yml"
pre_tasks:
- name: Update apt cache.
apt:
update_cache: true
cache_valid_time: 3600
when: ansible_os_family == 'Debian'
roles:
# - role: geerlingguy.security
- role: nextcloud
- role: smtp_nextcloud
tags: mail
- hosts: phy_z_dmz_sftp01
become: yes
vars_files:
- "group_vars/secrets.yml"
pre_tasks:
- name: Update apt cache.
apt:
update_cache: true
cache_valid_time: 3600
when: ansible_os_family == 'Debian'
roles:
- role: geerlingguy.security
tags: base
- hosts: phy_z_srv_jira
become: yes
vars_files:
- "group_vars/secrets.yml"
pre_tasks:
- name: Update apt cache.
apt:
update_cache: true
cache_valid_time: 3600
when: ansible_os_family == 'Debian'
roles:
- role: geerlingguy.security
tags: base
- hosts: phy_z_srv_git
become: yes
vars_files:
- "group_vars/secrets.yml"
pre_tasks:
- name: Update apt cache.
apt:
update_cache: true
cache_valid_time: 3600
when: ansible_os_family == 'Debian'
roles:
- role: geerlingguy.security
tags: base
- hosts: phy_z_srv_gpu01
become: yes
vars_files:
- "group_vars/secrets.yml"
pre_tasks:
- name: Update apt cache.
apt:
update_cache: true
cache_valid_time: 3600
when: ansible_os_family == 'Debian'
roles:
- role: geerlingguy.security
tags: base
- role: geerlingguy.docker
tags: docker
- role: nvidia_gpu
tags: gpu