♻️ Fixes for barebones system

deployment/backupserver.yml

@@ -0,0 +1,17 @@
+---
+
+- name: Deploy backup server
+  hosts: backup
+  remote_user: root
+
+  vars:
+    firewall_open_ports:
+      - "{{ ssh_port | default('ssh') }}"
+      - '25565'
+    postgresql_enabled: false
+    nginx_enabled: false
+    redis_enabled: false
+    nodejs_enabled: false
+
+  roles:
+    - base2

deployment/hosts

@@ -3,3 +3,6 @@ staging.regex-it.nl
 
 [production]
 regex-it.nl ansible_python_interpreter=/usr/bin/python3
+
+[backup]
+backups.regex-it.nl

deployment/roles/base/tasks/packages.yml

@@ -25,24 +25,3 @@
     - libgdk-pixbuf2.0-0
     - libffi-dev
     - shared-mime-info
-
-# node_Release_file: https://deb.nodesource.com/node_6.x/dists/jessie/Release
-
-- name: Add apt-key for (recent) NodeJS
-  apt_key:
-    url: https://deb.nodesource.com/gpgkey/nodesource.gpg.key
-  remote_user: root
-
-- name: Add NodeJS sources
-  copy:
-    src: nodesource.list
-    dest: /etc/apt/sources.list.d/nodesource.list
-    mode: "u=rw,g=r,o=r"
-  remote_user: root
-
-- name: Install NodeJS
-  package:
-    name: nodejs
-    state: present
-    update_cache: yes
-  remote_user: root

deployment/roles/base2/tasks/databases.yml

@@ -14,6 +14,7 @@
     line: 'local   all             postgres                                ident'
   notify:
     - restart postgres
+  when: postgresql_enabled
 
 - name: Enforce password auth for local postgres connections
   lineinfile:
@@ -22,3 +23,4 @@
     line: 'local   all             all                                     md5'
   notify:
     - restart postgres
+  when: postgresql_enabled

deployment/roles/base2/tasks/firewall.yml

@@ -20,9 +20,9 @@
 - name: Open ports
   ufw:
     proto: tcp
-    direction: incoming
+    direction: in
     rule: allow
-    port: "{{ item.port }}"
+    port: "{{ item }}"
   with_items: "{{ firewall_open_ports }}"
   notify:
     - restart ufw