Raspberry PI Configuration

My Raspberry Pi installation at home.

• Do not touch anything by hand, use Ansible.
• If something is hard to automate, document it at least.

Hardware

• Raspberry Pi 4 model B, 4GB
• HiFiBerry DAC+
• RAIDON GR3660-B3 (with fan turned off)

Manual setup

Install image

The repository is tested against Raspberry Pi OS Lite 64 bit (Debian 11 "Bullseye").

1. Install image on SD card
2. Append ip=«IP» into cmdline.txt
3. Enable ssh touch ssh
4. Configure default user account with pi password echo "pi:vCKtyl9xwqPxU" > userconf

Configuring SSH

Generate key:

ssh-keygen -f pi_rsa

Configure client:

cat <<EOT >> ~/.ssh/config
Host pi
 HostName «IP»
 User pi
 IdentityFile ~/.ssh/pi_rsa
EOT

Copy key to Raspberry Pi:

ssh-copy-id -i ~/.ssh/pi_rsa.pub pi

Ansible playbooks

Install 3rd party roles:

ansible-galaxy install -r requirements.yml

Pimp my Pi playbooks

Various playbooks to improve vanilla Raspberry Pi setup:

ansible-playbook pimpmypi.yml

Roles:

• common - missing pieces of vanilla Raspberry distribution
• aria2 - the fastest utility for downloading files
• docker - Docker repository and packages
• fluentbit - send systemd logs to GCP Logging and/or Loki, see readme
• grafana - monitoring with Grafana Cloud (free tier)
• hdidle - spin-down disks, see Github
• log2ram - move logs into RAM, see Github
• posfix - forward mails to real account
• smartmontools - monitor hard drives

Other playbooks

• adguard - privacy all the time, see AdGuard Home
• backup - to backup or not to backup, that’s no question, see Backup Ninja
• hyperion - ambient lighting, see Hyperion
• kodi - the best media center, see readme
• raspotify, shairport - make my retired HiFi great again: Raspotify , Librespot, Shairport
• samba - my family disk for files and automated backups, see Samba
• tailscale - VPN done right, see Tailscale
• traefik - Reverse proxy, see Traefik
• transmission - BitTorrent daemon, see Transmission

Upgrade playbook

Upgrade system to the latest Bullseye:

ansible all -m apt -a "upgrade=yes update_cache=yes"

The following packages have versions pinned and needs to updated explicitly:

• adguard
• grafana-agent
• kodi