Ansible Roles

This role backs up the entire Ansible repository (playbooks, roles, configurations) to dual NAS storage for redundancy.

This role backs up Centreon monitoring configuration using CLAPI (Command Line API) to dual NAS storage for disaster recovery.

This role restores Centreon monitoring configuration from a CLAPI (Command Line API) backup file.

This role manages multi-VLAN network configuration across heterogeneous systems in the homelab environment.

This role deploys SSH public keys to user accounts on target systems. It verifies user existence, creates necessary `.

This role deploys SSL/TLS certificates and private keys from Ansible Vault encrypted variables to target systems.

This role deploys comprehensive system monitoring infrastructure including NRPE (Nagios Remote Plugin Executor), custom monitoring scripts, and Centreon plugins.

This role deploys and manages Docker Compose stacks with intelligent change detection, database initialization, and monitoring integration.

This role performs comprehensive backup of Docker data volumes to dual NAS storage.

This role restores Docker data volumes from backup archives stored on NAS.

This role installs Docker Engine (CE) on RedHat-based systems.

This role backs up all Grafana alert rules using the Grafana API to dual NAS storage.

This role restores Grafana alert rules from backup archives created by `grafana_alerts_backup`.

This role backs up all Grafana dashboards using the Grafana API to dual NAS storage.

This role restores Grafana dashboards from backup archives created by `grafana_dashboards_backup`.

This role creates InfluxDB datasources in Grafana using the Grafana HTTP API.

This role installs and configures Grafana on RedHat-based systems.

This role installs and configures InfluxDB 1.x time-series database on RedHat-based systems.

This role backs up Maloja music scrobbling data using the Maloja API export feature.

This role restores Maloja music scrobbling data from backup files created by `maloja_backup`.

This role manages CIFS/SMB network share mounting from NAS devices.

This role manages CIFS/SMB network share mounting using systemd mount units instead of traditional /etc/fstab entries.

This role backs up Navidrome music playlists using the Navidrome API.

This role triggers music library scans in Navidrome using the Subsonic API.

This role installs and configures Chrony as an NTP (Network Time Protocol) client for accurate time synchronization.

This role creates and manages firewall aliases on OPNsense via the REST API. Aliases are named groups of IP addresses, networks, or other objects that simplify firewall rule management.

This role backs up OPNsense firewall configuration using the OPNsense API to dual NAS storage.

This role configures the OPNsense web UI dashboard widget layout via the REST API. It applies a defined widget layout including widget positions, sizes, and per-widget configurations (e.g.

This role manages Destination NAT (port forwarding) rules on OPNsense via the REST API. It enables forwarding external traffic to internal hosts and redirecting traffic between interfaces.

This role manages firewall rules across multiple network interfaces on OPNsense via the REST API. It supports configuration for VLANs (VLAN10-22), WAN, LAN, and WireGuard interfaces.

This role manages firewall rule categories on OPNsense via the REST API. Categories help organize and visualize firewall rules by grouping them with colored labels.

This role installs plugins and packages on OPNsense firewall via the REST API.

This role manages KEA DHCPv4 static reservations (MAC → IP mappings) with full CRUD operations.

This role configures general KEA DHCPv4 settings in OPNsense via the REST API.

This role manages KEA DHCPv4 subnets with full CRUD operations (Create, Read, Update, Delete).

This role creates and manages outbound NAT (Source NAT/SNAT) rules on OPNsense via the REST API.

This role configures OPNsense firewall to forward system logs to a remote Graylog server via the REST API.

This role configures Telegraf metrics collection agent on OPNsense firewall by deploying custom monitoring scripts and configuring exec input plugins.

This role manages SSL/TLS certificates on OPNsense via the Trust API.

This role configures DNS Blocklists (DNSBL) in OPNsense Unbound resolver via the REST API. DNSBL blocks malicious domains, ads, trackers, and other unwanted content at the DNS level.

This role manages DNS host overrides (local DNS records) in OPNsense Unbound resolver via the REST API.

This role configures the general and advanced Unbound DNS resolver settings in OPNsense via the REST API.

This role populates phpIPAM with the homelab network infrastructure via the phpIPAM REST API.

This role installs and configures Postfix as an SMTP relay for sending system emails through an external mail server.

This role configures rsyslog on Linux systems to forward system logs to a remote Graylog server and optionally monitor custom application log files.

This role installs and configures Net-SNMP daemon (snmpd) on Linux systems to enable monitoring via SNMP protocol.

This role orchestrates comprehensive system updates across heterogeneous infrastructure including Debian, RedHat, and OPNsense systems with intelligent reboot handling and Centreon monitoring integrat…

This role installs and configures the Telegraf monitoring agent on Linux systems for collecting and forwarding system metrics to InfluxDB.

This role backs up Vaultwarden (self-hosted Bitwarden) password vault using the official Bitwarden CLI.

This role installs and configures ZoneMinder, an open-source video surveillance and NVR (Network Video Recorder) system, along with its dependencies including Apache web server and MariaDB database.

This role automates the addition of camera monitors to ZoneMinder via the REST API.