Running the Main Play

The main playbook is intended to do further setup: update software; automatic software updates; security hardening (sshd, firewall, fail2ban), useful tools etc.

Before running the main playbook fill out host_vars for :

  • fail2ban
  • mariadb
  • Lets Encrypt
  • Postfix
  • Homer dashboard
  • Forgejo

Remember any variables in host_vars/YOURSERVER/main.yml prefixed with vault_ will need to be added in vault.yml. Open it for editing with:

ansible-vault edit host_vars/YOURSERVER/vault.yml

On first run this will install a lot of packages - be patient!

ansible-playbook --ask-vault-pass play/main.yml

Once it finishes you should be able to access the Momod dashboard web page at your fully qualified domain name:

https://server.example.com

You’ll need the username and password you used to generate dashboard_htpasswd in your servers host_vars to log in (unless you disabled the password protection of course).

Note that the dashboard is only accessible over https.

Next, you have some configuration to finish.