Gitea – Ansible Installer Role

Automation and configuration management are not just about comfort.They provide security, auditability and operational freedom. For this reason Tom’s IT Cafe provides an Ansible role that: The role focuses on a small, auditable code base with strong security.

Continue reading →

Gitea – Your Self-Hosted Git Platform

You feel the comfort of the cloud – low maintenance, fast setup.Your source code, configuration and files are safe. Or… are they? You rely on a third party for infrastructure control, security operations and availability.What would your business continuity plan look like if your SaaS provider became unavailable? In this article we investigate a self-hosted…

Continue reading →

08 Objective: Encrypt the Silence – Ansible Vault

Ghosts know that secrets are critical.You can’t let them sit or travel in plain text.Ansible Vault is the blade of the Operator.

Continue reading →

07 Objective: Reusability and Doctrine – Roles

Write once.Execute unlimited.The Ghost Ops way. Variables – loaded.Templates – locked.Tasks – trained.Playbooks – executing. Roles – fixed directory structures of Ansible code.

Continue reading →

05 Objective: Code as Message – Jinja2 Templates

Logic and data separated.Variables are loaded. Dynamic configuration files? Templates are your blades – fed by variables. They support logic.Loops.Conditionals. Ghosts don’t over-complicate.Clarity keeps templates sharp.

Continue reading →

03 Objective: Execution Vectors – Modules & Tasks

Modules – The Execution Units Modules are small working horses.Tactical code units. One module. One function. The UNIX way.Clear Python code.You don’t need Python – modules are abstracted to YAML.

Continue reading →

02 Objective: Whispers to Hosts – Inventories

You don’t command what you can’t see.You don’t control what you can’t reach. Inventories are your maps.Your whispers travel through them.

Continue reading →

01 Objective: Forge The Blade – Deploy And Configure

Ansible brings surgical precision, or chaos and entropy.The key is the installation and configuration. Don’t go in war with a blunt sword.

Continue reading →

Protecting The Wire – Semaphore Behind SSL Proxy

Mission Brief Plain text communication is loud. It’s bleeding data.Prying eyes can see every bit in the wire. You have to isolate the backend – the Semaphore UI and MySQL containers stay locked down. Unreachable for the external work.Open a tiny hole on the stronghold to the world – the frontend is an NginX SSL…

Continue reading →

Ghost Hands – Automating The Stronghold With Ansible And Podman

Mission Update Now we automate. The pod.The proxy.The secrets. One playbook to conjure the setup, one command to repeat the ritual.

Continue reading →

Ansible Automation For Ghosts – Semaphore UI

Mission of the Ghost Ansible is a sharp blade. For operators craving API-driven command, Semaphore rises from Ansible’s silent core. DeadSwitch maps it.

Continue reading →

How to Install OpenTofu

Installing and setting up OpenTofu on Debian Bookworm can be accomplished with a few straightforward steps. OpenTofu is an open-source infrastructure-as-code tool that serves as a drop-in replacement for Terraform, making it a popular choice for managing cloud resources.

Continue reading →