add networking

.gitignore

@@ -0,0 +1 @@
+vault.yml

README.md

@@ -0,0 +1,2 @@
+- Create API token "ansible"
+- Make sure privilege seperation is unchecked

main.yml

@@ -5,11 +5,12 @@
 
   vars_files:
     - vault.yml
+    - vars
 
   tasks:
     - import_tasks: tasks/setup.yml
       tags: ['setup']
 
-  #  - import_tasks: tasks/vms.yml
-  #    tags: ['vms']
+    - import_tasks: tasks/vms.yml
+      tags: ['vms']
 

tasks/setup.yml

@@ -1,3 +1,39 @@
+# DOES NOT WORK RN
+- name: Configure network interfaces
+  community.general.interfaces_file:
+    dest: /etc/network/interfaces
+    state: present
+    iface:
+      - name: lo
+        inet: loopback
+        auto: true
+      - name: eno1
+        inet: manual
+      - name: eno2
+        inet: manual
+      - name: vmbr0
+        inet: static
+        auto: true
+        options:
+          - address 192.168.0.11/24
+          - gateway 192.168.0.1
+          - bridge-ports eno1
+          - bridge-stp off
+          - bridge-fd 0
+      - name: vmbr1
+        inet: manual
+        auto: true
+        options:
+          - bridge-ports eno2
+          - bridge-stp off
+          - bridge-fd 0
+  register: interfaces
+
+- name: reload networking if interfaces changed
+  ansible.builtin.systemd_service:
+    state: started
+    name: networking
+  when: interfaces.changed
 
 - name: install programs
   ansible.builtin.apt:
@@ -6,9 +42,18 @@
       - libguestfs-tools # for virt-customize
       - neovim
       - powertop
+      - python3-pip
       - tmux
     update_cache: true
-    upgrade: true
+
+- name: Ignore PEP 668 because it's silly.
+  ansible.builtin.file:
+    path: /usr/lib/python3.11/EXTERNALLY-MANAGED
+    state: absent
+
+- name: Install proxmoxer python package (required for ansible)
+  ansible.builtin.pip:
+    name: proxmoxer
 
 - name: create powertop service
   ansible.builtin.copy:

tasks/vms.yml

@@ -2,15 +2,18 @@
 - name: get latest cloud-init image
   ansible.builtin.get_url:
     url: https://cdimage.debian.org/images/cloud/trixie/daily/latest/debian-13-generic-amd64-daily.qcow2
-    dest: /var/lib/vz/template/iso/
+    dest: /var/lib/vz/template/iso/debian-13-generic-amd64-daily.qcow2
   
-#- name: opnsense
-#  community.general.proxmox_kvm:
-#    node: "{{ proxmox_node }}"
-#    vmid: "{{ opnsense_id }}"
-#    api_user: "{{ proxmox_api_user }}"
-#    api_token_id: "{{ proxmox_token_id }}"
-#    api_token_secret: "{{ proxmox_secret }}"
-#    api_host: "{{ proxmox_host }}"
-#    state: started
+- name: opnsense
+  community.general.proxmox_kvm:
+    name: opnsense
+    node: "{{ proxmox_node }}"
+    vmid: "{{ opnsense_id }}"
+    api_user: "{{ proxmox_api_user }}"
+    api_token_id: "{{ proxmox_token_id }}"
+    api_token_secret: "{{ proxmox_secret }}"
+    api_host: "{{ ansible_ssh_host }}"
+    state: started
+    net0: bridge=vmbr0
+    net1: bridge=vmbr1
     

vars

@@ -1,2 +1,8 @@
-immich_version: v1.124.2
-frigate_version: 0.14.1
+proxmox_node: "pve"
+proxmox_api_user: "root@pam"
+proxmox_token_id: "ansible"
+
+
+opnsense_id: "100"
+truenas_id: "101"
+debian-pods_id: "102"