playbook.vivumlab.yml

---
# Configure a TOR hidden service for remote access without a public IP
- name: "Setup TOR"
  tags: tor
  hosts: all
  become: yes
  become_method: sudo
  pre_tasks:
    - name: Wait for connection if not available, timeout 600 seconds
      wait_for_connection:
        timeout: 600
        delay: 0
      when: vlab_connection_wait

  roles:
    - role: tor
      when: enable_tor

# Install and Setup Server with VivumLab
- name: "Install and Setup server with VivumLab"
  hosts: all
  become: yes
  become_method: sudo
  ansible.builtin.gather_facts: yes
  tags: setup
  pre_tasks:
    - name: Wait for connection if not available, timeout 600 seconds
      wait_for_connection:
        timeout: 600
        delay: 0
      when: vlab_connection_wait

  tasks:
    - ansible.builtin.include_role:
        name: vivumlab_setup
      when: vivumlab_runSetup == True
    - ansible.builtin.include_role:
        name: fail2ban
      when: vivumlab_runSetup == True

- name: "Deploy Bastion Host with Wireguard"
  hosts: all
  become: yes
  become_method: sudo
  tags: bastion
  pre_tasks:
    - name: Wait for connection if not available, timeout 600 seconds
      wait_for_connection:
        timeout: 600
        delay: 0
      when: vlab_connection_wait

  tasks:
    - ansible.builtin.include_role:
        name: vivumlab_wireguard
      when: bastion.enable == True

# Install and configure VivumLab services
- name: Install and configure VivumLab services
  hosts: vivumlab
  ansible.builtin.gather_facts: yes
  tags:
    - vivumlab
    - deploy
  pre_tasks:
    - name: Wait for connection if not available, timeout 600 seconds
      wait_for_connection:
        timeout: 600
        delay: 0
      when: vlab_connection_wait

  roles:
    - vivumlab_deploy

  handlers:
    - name: Restart Traefik
      become: yes
      ansible.builtin.systemd:
        name: "traefik"
        state: restarted
        daemon-reload: yes
        enabled: true