Configuration and maintenance of a host running Debian 11.

$ ansible-playbook playbook_local.yml --ask-become-pass --tags "role_base,role_software"

Basic preparation of the target host. Unequivocally opinionated, make sure it is in line with your preferences.

Installation and configuration of various userland packages.

Distributes dotfiles to the target host.

Creates jailed user with rather limited chroot. Supports automatic propagation of SSH keys.

Provisions Wireguard in any mode imaginable.

Configures web-server and enrolls an arbitrary number of domains on a remote nginx instance.

EteBase server running on uvicorn and nginx, includes automatic HTTPs via certbot.