Application Categories¶
accounting¶
Akaunting¶
Empower your financial management with Akaunting, a dynamic and feature-rich accounting platform designed to simplify your bookkeeping and boost your business growth. Enjoy intuitive tools, real-time insights, and an energetic approach to your finances.
acme¶
Certbot¶
Automates the installation and configuration of Certbot for SSL/TLS certificate management
Nginx HTTPS Certificate Retrieval¶
Automates the retrieval of Let’s Encrypt SSL/TLS certificates for Nginx domains using Certbot, supporting both single-domain and wildcard certificates with DNS and webroot ACME challenges.
administration¶
ELK Stack¶
Transform online learning and collaboration with BigBlueButton, an interactive web conferencing solution designed to energize virtual classrooms and meetings. Enjoy dynamic tools and an engaging environment that makes every session a powerful learning experience.
FusionDirectory (DRAFT)¶
FusionDirectory is a web-based tool to manage LDAP directories and this role ensures a reliable, easy-to-use interface for LDAP administration.
MariaDB¶
The Docker MariaDB Role offers an easy and efficient way to deploy a MariaDB server inside a Docker container. Manage your data securely and effectively, making it ideal for production or local development.
PostgreSQL¶
The Docker PostgreSQL Role offers an easy and efficient way to run a PostgreSQL database inside a Docker container. Manage your data securely and effectively, making it ideal for production or local development.
Persona: Administrator 🛠️¶
Installs essential tools for Linux system administrators on Linux.
Persona: Network Administrator🌐¶
Installs essential network analysis tools for system administrators on Linux.
Sudo¶
Installs and configures the sudo package with a default sudoers file to ensure secure privilege escalation and system administration.
System Maintenance Lock¶
Ensures system integrity during maintenance activities by blocking execution until critical services have stopped, using a locking mechanism with timeout and retry logic.
User¶
Executes common tasks for user environment configuration.
administrator¶
Administrator User¶
Creates a dedicated administrator user for local administrative tasks, ensuring secure privilege escalation and proper system management. This role configures the administrator account, sets up the home directory, SSH settings, and grants sudo privileges with password authentication.
Root User¶
Manages the generation and handling of an SSH key for the root user. This role ensures secure remote access by generating a new RSA 4096-bit key pair if one does not exist, and displays the public key for further use.
agent¶
SSH Agent 🔐¶
Persistent SSH agent setup for GNOME Wayland sessions with SSH configuration pulled from Git.
akaunting¶
Akaunting¶
Empower your financial management with Akaunting, a dynamic and feature-rich accounting platform designed to simplify your bookkeeping and boost your business growth. Enjoy intuitive tools, real-time insights, and an energetic approach to your finances.
aliases¶
Postfix¶
Installs and configures Postfix to provide a robust mail transfer agent setup with a preconfigured aliases file for local mail delivery.
analytics¶
Matomo Analytics¶
Experience the power of Matomo, an innovative open-source analytics platform that delivers real-time insights, robust visitor tracking, and privacy-first features to elevate your website performance. Dive into actionable data with unmatched precision and clarity.
ansible¶
Cloudflare DNS Records¶
Manages DNS A-records in Cloudflare zones.
Matrix (Deprecated)¶
This role deploys and configures a Matrix homeserver using Ansible automation. Benefit from a secure, federated, and scalable communication platform with integrated support for bridges and modern web clients.
Portfolio¶
Portfolio to showcase your projects and creative work with a focus on user experience and easy customization. 🚀
application¶
Roulette Wheel¶
This role deploys and configures the Roulette Wheel application using Docker Compose. It automates the process of pulling the latest source code from GitHub, building a Docker image, and deploying the application.
apt¶
update¶
Centralizes system update operations by conditionally invoking platform-specific update roles and Docker image updates.
Update apt¶
Updates packages on Debian-based systems by refreshing the apt cache and performing a distribution upgrade.
archlinux¶
Docker 🐳¶
Automated backups to a swappable USB device.
GNOME Desktop¶
Aggregates essential GNOME desktop roles—including caffeine, extensions, and terminal—for a complete GNOME environment on Linux.
GNOME Caffeine¶
Installs caffeine-ng and configures it to autostart for preventing screen sleep on GNOME.
LibreOffice¶
Installs LibreOffice along with Liberation fonts and language packages on Arch Linux systems for a complete office suite experience.
Nextcloud Client ☁️¶
Installs and links Nextcloud desktop client folders for cloud-integrated user environments.
Spotify 🎵¶
Installs the Spotify client.
SSH Agent 🔐¶
Persistent SSH agent setup for GNOME Wayland sessions with SSH configuration pulled from Git.
Docker Compose¶
Manages Docker Compose project structure and execution logic on Arch Linux.
Taiga¶
Supercharge your project management with Taiga—a dynamic, agile tool designed for teams that thrive on creativity and collaboration. Experience a vibrant interface, robust task tracking, and an energetic platform that drives your projects to success.
Driver Lid Switch 🛑💻¶
Fixes incorrect lid switch behavior on Linux laptops by setting up hibernation and configuring systemd.
Fakeroot¶
Installs fakeroot on Arch Linux using Pacman, enabling non-privileged file manipulations required for package building and development.
GCC 🧠¶
Installs the GNU Compiler Collection (GCC).
Git¶
Installs Git using the Pacman package manager on Arch Linux systems.
Docker Healer 🩺¶
Automated recovery for unhealthy or exited Docker Compose containers.
Make Installation¶
Installs GNU Make using the Pacman package manager on Arch Linux systems.
msmtp 📧¶
Installs and configures msmtp, a lightweight SMTP client and sendmail replacement.
Nginx Docker Reverse Proxy 🚀¶
Nginx reverse proxy front-end for local Docker applications.
Nginx Domain Setup 🚀¶
Automated domain provisioning (TLS, vHost, OAuth2) for Nginx.
Persona: Administrator 🛠️¶
Installs essential tools for Linux system administrators on Linux.
Persona: Network Administrator🌐¶
Installs essential network analysis tools for system administrators on Linux.
Persona: Corporate 🏢¶
Deploys a corporate identity environment with web assets, legal pages, and a portfolio site on Linux.
Persona: Developer 👨💻¶
Installs a base development environment for software engineers on Linux.
Persona: Java Developer☕️¶
Installs tools and dependencies for Java development on Linux.
Persona: PHP Developer🐘¶
Installs PHP and related development tools on Linux for PHP software engineering.
Persona: Developer – Python 🐍¶
Installs tools and environment for Python development on Linux.
Persona: Developer – Shell 🐚¶
Installs tools for Bash scripting and shell development on Linux.
Gamer 🎮¶
Gaming setup role for Arch Linux systems.
Gamer Core 🧩¶
Installs essential gaming utilities, launchers, and runtimes on Linux.
Gamer Default 🎮¶
Installs a curated set of open source games for Arch Linux.
RetroArch 🎮¶
Installs and configures RetroArch.
Package Manager Installation 📦¶
Installs and updates packages using pkgmgr.
System AUR Helper¶
Installs the AUR helper yay and configures an aur_builder user with appropriate sudo privileges to facilitate AUR package management on Arch Linux systems.
Update Pacman¶
Updates the package cache and upgrades all installed packages on Arch Linux systems using pacman.
Update yay¶
Updates AUR packages on Arch Linux systems using yay. This role automates the upgrade process for AUR packages, ensuring that the system remains up-to-date with the latest versions available in the Arch User Repository.
arduino¶
Persona: Arduino Developer🔌¶
Installs tools and permissions for Arduino development on Linux.
asset-management¶
Snipe‑IT¶
Snipe‑IT is an open‑source asset management system providing a containerized deployment with centralized MariaDB integration, configurable SMTP settings, and pending SAML authentication enhancements for secure asset tracking and management.
assets¶
RetroArch 🎮¶
Installs and configures RetroArch.
attendize¶
Attendize¶
Revolutionize your event management with Attendize, an energetic and intuitive platform designed to streamline ticketing and event planning. Enjoy a feature-rich, user-friendly solution that transforms every event into an unforgettable experience.
aur¶
Spotify 🎵¶
Installs the Spotify client.
System AUR Helper¶
Installs the AUR helper yay and configures an aur_builder user with appropriate sudo privileges to facilitate AUR package management on Arch Linux systems.
Update yay¶
Updates AUR packages on Arch Linux systems using yay. This role automates the upgrade process for AUR packages, ensuring that the system remains up-to-date with the latest versions available in the Arch User Repository.
automation¶
Docker 🐳¶
Automated backups to a swappable USB device.
Backup Directory Validator¶
Setup the directory validator to validate backup directories
Backup Docker to Local¶
Automates the backup of Docker volumes to a local folder
Backup Provider¶
Configures the host as a backup provider to facilitate secure backup operations.
User for Backup Provider¶
Sets up a dedicated backup user with restricted SSH commands for backup operations. This role configures a backup user with custom SSH key restrictions and sudo rights, ensuring secure and controlled access for backup processes.
Backup Remote to Local¶
Pulls backups from a remote server and stores them locally using rsync with retry logic. This role is part of a comprehensive backup scheme and works in conjunction with other roles to ensure reliable backup operations.
Certbot¶
Automates the installation and configuration of Certbot for SSL/TLS certificate management
Cleanup Backups Service¶
Automates the cleanup of old backups by executing a Python script that deletes outdated backup versions when disk usage exceeds a specified threshold.
Cleanup Backups Timer¶
Schedules periodic cleanup of old backups by configuring a systemd timer to trigger the cleanup-backups-service role.
Certbot Reaper¶
Automates the revocation and deletion of unused Let’s Encrypt certificates
Cleanup Disc Space¶
Frees disk space on the target system by executing a cleanup script that removes temporary files, clears package caches, and optionally handles Docker and backup cleanup.
Cleanup Docker Anonymous Volumes¶
Install and run dockreap to clean up unused anonymous Docker volumes
Docker Volume Backup Cleanup Role¶
Cleans up failed Docker backups by configuring a systemd service and timer to execute the cleanup operations periodically.
Browsers 🎨¶
Wrapper role to install and configure both Chromium and Firefox with enforced security extensions.
Chromium 🌐¶
Automates the installation and configuration of the Chromium browser with enforced security extensions.
GNOME Desktop¶
Aggregates essential GNOME desktop roles—including caffeine, extensions, and terminal—for a complete GNOME environment on Linux.
GNOME Extensions Manager¶
Configures GNOME Shell extensions and installs the CLI GNOME Extension Manager for managing extensions.
GNOME Terminal¶
Installs GNOME Terminal on Arch Linux, providing a modern terminal emulator for the GNOME desktop environment.
LibreOffice¶
Installs LibreOffice along with Liberation fonts and language packages on Arch Linux systems for a complete office suite experience.
Nextcloud Client ☁️¶
Installs and links Nextcloud desktop client folders for cloud-integrated user environments.
Cloudflare DNS Records¶
Manages DNS A-records in Cloudflare zones.
Docker Server¶
Installs and maintains Docker.
Akaunting¶
Empower your financial management with Akaunting, a dynamic and feature-rich accounting platform designed to simplify your bookkeeping and boost your business growth. Enjoy intuitive tools, real-time insights, and an energetic approach to your finances.
Attendize¶
Revolutionize your event management with Attendize, an energetic and intuitive platform designed to streamline ticketing and event planning. Enjoy a feature-rich, user-friendly solution that transforms every event into an unforgettable experience.
Docker Compose¶
Manages Docker Compose project structure and execution logic on Arch Linux.
Nextcloud Server¶
Elevate your collaboration with Nextcloud, a vibrant self-hosted cloud solution designed for dynamic file sharing, seamless communication, and effortless teamwork. Embrace unparalleled control, flexibility, and a boosted digital workspace that adapts to your every need.
OpenProject¶
Transform your project management with OpenProject, a vibrant and collaborative tool that brings clarity and energy to your planning, tracking, and team communication. Experience streamlined workflows and an innovative platform that propels your projects forward.
Presentation¶
This Presentation Software is a powerful tool designed for showcasing the CyMaIS platform to various audiences, including Administrators, Developers, End-Users, Businesses, and Investors.
Snipe‑IT¶
Snipe‑IT is an open‑source asset management system providing a containerized deployment with centralized MariaDB integration, configurable SMTP settings, and pending SAML authentication enhancements for secure asset tracking and management.
Sphinx Documentation¶
Automates building and serving Sphinx documentation. Unlock comprehensive insights with our extensive documentation. Explore guides, tutorials, and support resources designed to help you navigate software effortlessly.
Syncope (DRAFT)¶
Apache Syncope is an open-source Identity and Access Management (IAM) system, offering centralized identity governance, user provisioning, role management, and workflow integration.
WordPress¶
Use the full power of WordPress—with its intuitive interface, customizable themes and plugins, responsive design, and advanced SEO tools—in a scalable and secure containerized environment.
YOURLS¶
Streamline your online presence with YOURLS — a nimble, open‑source URL shortener that empowers you to create, track, and manage short links effortlessly. This containerized deployment integrates centralized MariaDB support and a customizable environment, ensuring a secure and scalable solution for all your link management needs.
Docker Healer 🩺¶
Automated recovery for unhealthy or exited Docker Compose containers.
Make Installation¶
Installs GNU Make using the Pacman package manager on Arch Linux systems.
msmtp 📧¶
Installs and configures msmtp, a lightweight SMTP client and sendmail replacement.
Nginx Certbot Automation¶
Automates Let’s Encrypt SSL/TLS certificate renewals for Nginx using Certbot and systemd services with automatic reloads after successful renewals.
Nginx Docker Reverse Proxy 🚀¶
Nginx reverse proxy front-end for local Docker applications.
Nginx Domain Setup 🚀¶
Automated domain provisioning (TLS, vHost, OAuth2) for Nginx.
Nginx HTTPS Certificate Retrieval¶
Automates the retrieval of Let’s Encrypt SSL/TLS certificates for Nginx domains using Certbot, supporting both single-domain and wildcard certificates with DNS and webroot ACME challenges.
Nginx File Server¶
Configures an Nginx-based file server with HTTPS support, automatic SSL/TLS certificate retrieval, directory listing, and .well-known handling for secure static file hosting.
Nginx Static HTML Server¶
Configures an Nginx server to host static HTML websites with HTTPS support, automatic SSL certificate retrieval via Let’s Encrypt, and secure default settings.
Node.js¶
Installs Node.js
npm¶
Installs npm and runs optional ‘npm ci’ inside a project
Persona: Developer – Shell 🐚¶
Installs tools for Bash scripting and shell development on Linux.
Kevins Package Manager 🤖📦¶
Automates the installation of Kevin’s Package Manager — a tool for managing multiple repositories and automating Git operations.
Python-Pip¶
Installs the python-pip package to provide the Python package manager, ensuring that Python packages can be installed reliably on the target system.
Docker Auto Restart¶
Automates the restart of Docker Compose instances by detecting docker-compose.yml files and executing a restart script, ensuring consistent service availability.
System Btrfs Auto Balancer¶
Automates the balancing of Btrfs file systems by cloning the auto-btrfs-balancer repository and configuring a systemd service and timer for regular execution.
Automated Email Alerts for Service Failures¶
Installs and configures components for sending email notifications. This role is part of the systemd-notifier suite, providing automated alerts when services fail.
Automated Telegram Alerts for Service Failures¶
Installs and configures components for sending Telegram notifications through systemd. This role is part of the systemd-notifier suite, providing automated alerts when services fail.
Systemd Timer¶
Configures a systemd timer to periodically start a specified service. This role automates the creation, reloading, and restarting of systemd timer units for recurring tasks.
autostart¶
GNOME Caffeine¶
Installs caffeine-ng and configures it to autostart for preventing screen sleep on GNOME.
backup¶
Docker 🐳¶
Automated backups to a swappable USB device.
Backup Directory Validator¶
Setup the directory validator to validate backup directories
Backup Docker to Local¶
Automates the backup of Docker volumes to a local folder
Backup Provider¶
Configures the host as a backup provider to facilitate secure backup operations.
User for Backup Provider¶
Sets up a dedicated backup user with restricted SSH commands for backup operations. This role configures a backup user with custom SSH key restrictions and sudo rights, ensuring secure and controlled access for backup processes.
Backup Remote to Local¶
Pulls backups from a remote server and stores them locally using rsync with retry logic. This role is part of a comprehensive backup scheme and works in conjunction with other roles to ensure reliable backup operations.
Cleanup Backups Service¶
Automates the cleanup of old backups by executing a Python script that deletes outdated backup versions when disk usage exceeds a specified threshold.
Cleanup Backups Timer¶
Schedules periodic cleanup of old backups by configuring a systemd timer to trigger the cleanup-backups-service role.
Docker Volume Backup Cleanup Role¶
Cleans up failed Docker backups by configuring a systemd service and timer to execute the cleanup operations periodically.
backups¶
Backup Provider¶
Configures the host as a backup provider to facilitate secure backup operations.
balancing¶
System Btrfs Auto Balancer¶
Automates the balancing of Btrfs file systems by cloning the auto-btrfs-balancer repository and configuring a systemd service and timer for regular execution.
baserow¶
Baserow¶
Empower your data management with Baserow, an innovative platform that makes building and managing databases both fun and efficient. Enjoy a dynamic interface, seamless collaboration, and energetic tools that supercharge your workflow.
bash¶
Persona: Developer – Shell 🐚¶
Installs tools for Bash scripting and shell development on Linux.
Shell 🐚¶
Ensures that .profile is sourced in all shells.
User¶
Executes common tasks for user environment configuration.
blog¶
WordPress¶
Use the full power of WordPress—with its intuitive interface, customizable themes and plugins, responsive design, and advanced SEO tools—in a scalable and secure containerized environment.
bluesky¶
Bluesky¶
Soar to new digital heights with Bluesky, an innovative platform that reimagines social networking with its forward-thinking, community-driven approach. Experience a burst of energy, creativity, and the freedom to connect in a truly inspiring way.
bootstrap¶
🌍 Global CSS Injection for Nginx¶
Global CSS injection for Nginx-based apps using dynamic colorschemes.
browser¶
Chromium 🌐¶
Automates the installation and configuration of the Chromium browser with enforced security extensions.
Health CSP Crawler¶
Checks for CSP-blocked resources via Puppeteer-based Node.js crawler
browsers¶
Browsers 🎨¶
Wrapper role to install and configure both Chromium and Firefox with enforced security extensions.
btrfs¶
System Btrfs Auto Balancer¶
Automates the balancing of Btrfs file systems by cloning the auto-btrfs-balancer repository and configuring a systemd service and timer for regular execution.
build¶
GCC 🧠¶
Installs the GNU Compiler Collection (GCC).
Make Installation¶
Installs GNU Make using the Pacman package manager on Arch Linux systems.
caffeine¶
GNOME Caffeine¶
Installs caffeine-ng and configures it to autostart for preventing screen sleep on GNOME.
central-database¶
Central Database¶
The Docker Central Database Role lets you quickly provision a centralized database through Docker Compose. Whether using MariaDB or PostgreSQL, this role provides a reliable, low-maintenance solution that supports your business applications.
MariaDB¶
The Docker MariaDB Role offers an easy and efficient way to deploy a MariaDB server inside a Docker container. Manage your data securely and effectively, making it ideal for production or local development.
PostgreSQL¶
The Docker PostgreSQL Role offers an easy and efficient way to run a PostgreSQL database inside a Docker container. Manage your data securely and effectively, making it ideal for production or local development.
certbot¶
Certbot¶
Automates the installation and configuration of Certbot for SSL/TLS certificate management
Certbot Reaper¶
Automates the revocation and deletion of unused Let’s Encrypt certificates
cleanup-domains¶
Remove Nginx configuration files and revoke/delete Certbot certificates for deprecated domains
Nginx Certbot Automation¶
Automates Let’s Encrypt SSL/TLS certificate renewals for Nginx using Certbot and systemd services with automatic reloads after successful renewals.
Nginx HTTPS Certificate Retrieval¶
Automates the retrieval of Let’s Encrypt SSL/TLS certificates for Nginx domains using Certbot, supporting both single-domain and wildcard certificates with DNS and webroot ACME challenges.
certificate¶
Let’s Encrypt SSL for Nginx 🔐¶
An Ansible role to automate Let’s Encrypt SSL certificate issuance and renewal for Nginx
chromium¶
Browsers 🎨¶
Wrapper role to install and configure both Chromium and Firefox with enforced security extensions.
Chromium 🌐¶
Automates the installation and configuration of the Chromium browser with enforced security extensions.
ci/cd¶
GitLab¶
Accelerate your development with GitLab, an all-in-one platform for source code management, CI/CD, and more. Experience a robust and collaborative environment that empowers your development process.
cleanup¶
Cleanup Backups Service¶
Automates the cleanup of old backups by executing a Python script that deletes outdated backup versions when disk usage exceeds a specified threshold.
Cleanup Backups Timer¶
Schedules periodic cleanup of old backups by configuring a systemd timer to trigger the cleanup-backups-service role.
Certbot Reaper¶
Automates the revocation and deletion of unused Let’s Encrypt certificates
Cleanup Disc Space¶
Frees disk space on the target system by executing a cleanup script that removes temporary files, clears package caches, and optionally handles Docker and backup cleanup.
Cleanup Docker Anonymous Volumes¶
Install and run dockreap to clean up unused anonymous Docker volumes
cleanup-domains¶
Remove Nginx configuration files and revoke/delete Certbot certificates for deprecated domains
Docker Volume Backup Cleanup Role¶
Cleans up failed Docker backups by configuring a systemd service and timer to execute the cleanup operations periodically.
Docker Server¶
Installs and maintains Docker.
client¶
Spotify 🎵¶
Installs the Spotify client.
Wireguard Client¶
Manages WireGuard on a client system by deploying services and scripts to set MTU on network interfaces and ensure optimal VPN connectivity.
cloud¶
Nextcloud Client ☁️¶
Installs and links Nextcloud desktop client folders for cloud-integrated user environments.
Nextcloud Server¶
Elevate your collaboration with Nextcloud, a vibrant self-hosted cloud solution designed for dynamic file sharing, seamless communication, and effortless teamwork. Embrace unparalleled control, flexibility, and a boosted digital workspace that adapts to your every need.
cloudflare¶
Cloudflare DNS Records¶
Manages DNS A-records in Cloudflare zones.
cms¶
Joomla CMS¶
Elevate your website management with Joomla, a powerful content management system that fuses versatility with dynamic design, inspiring creativity and driving your digital presence to new heights.
MediaWiki¶
Empower your knowledge base with MediaWiki, a versatile and collaborative platform designed for comprehensive, user-driven documentation. Benefit from an extensive extension ecosystem, robust content management, and customizable configurations tailored to your needs.
Moodle¶
Ignite the learning experience with Moodle, a powerful and versatile platform for online education that energizes classrooms and fosters interactive learning.
MyBB¶
Transform your community engagement with MyBB, a feature-rich forum solution that combines modern design with robust functionality. Enjoy dynamic discussions, intuitive moderation, and a vibrant user interface that brings your community together.
colors¶
🌍 Global CSS Injection for Nginx¶
Global CSS injection for Nginx-based apps using dynamic colorschemes.
community¶
MyBB¶
Transform your community engagement with MyBB, a feature-rich forum solution that combines modern design with robust functionality. Enjoy dynamic discussions, intuitive moderation, and a vibrant user interface that brings your community together.
compiler¶
GCC 🧠¶
Installs the GNU Compiler Collection (GCC).
compose¶
Docker Compose¶
Manages Docker Compose project structure and execution logic on Arch Linux.
OpenProject¶
Transform your project management with OpenProject, a vibrant and collaborative tool that brings clarity and energy to your planning, tracking, and team communication. Experience streamlined workflows and an innovative platform that propels your projects forward.
PeerTube¶
Transform your video hosting experience with Peertube, a decentralized platform built for scalability, innovation, and community collaboration.
Update Docker¶
Updates Docker Compose instances by detecting changes in Docker image digests and rebuilding containers when necessary. This role automates Docker image pulls and container rebuilds.
conference¶
conferencing¶
configuration¶
Git¶
Installs Git and configures it using a custom git-configurator for personal computers.
Wireguard Client¶
Manages WireGuard on a client system by deploying services and scripts to set MTU on network interfaces and ensure optimal VPN connectivity.
Postfix¶
Installs and configures Postfix to provide a robust mail transfer agent setup with a preconfigured aliases file for local mail delivery.
SSHD¶
Configures a secure SSH daemon environment by deploying a templated sshd_config file and restarting the SSH service as needed.
Sudo¶
Installs and configures the sudo package with a default sudoers file to ensure secure privilege escalation and system administration.
Systemd Timer¶
Configures a systemd timer to periodically start a specified service. This role automates the creation, reloading, and restarting of systemd timer units for recurring tasks.
User¶
Executes common tasks for user environment configuration.
Administrator User¶
Creates a dedicated administrator user for local administrative tasks, ensuring secure privilege escalation and proper system management. This role configures the administrator account, sets up the home directory, SSH settings, and grants sudo privileges with password authentication.
Root User¶
Manages the generation and handling of an SSH key for the root user. This role ensures secure remote access by generating a new RSA 4096-bit key pair if one does not exist, and displays the public key for further use.
Wireguard¶
Manages Wireguard VPN configuration on the host. Installs necessary tools, deploys sysctl settings for IP forwarding, and copies the Wireguard configuration file to enable secure VPN connectivity.
container¶
Docker Server¶
Installs and maintains Docker.
Docker Compose¶
Manages Docker Compose project structure and execution logic on Arch Linux.
content management¶
Joomla CMS¶
Elevate your website management with Joomla, a powerful content management system that fuses versatility with dynamic design, inspiring creativity and driving your digital presence to new heights.
corporate¶
Persona: Corporate 🏢¶
Deploys a corporate identity environment with web assets, legal pages, and a portfolio site on Linux.
crm¶
EspoCRM¶
Empower your customer relationship management with EspoCRM, an open-source platform that combines workflow automation, seamless LDAP/OIDC SSO integration, and a sleek, lightweight user interface. Tailored for businesses of all sizes, EspoCRM enables you to manage your sales, customer interactions, and business processes with ease, fostering productivity and streamlined communication across teams.
csp¶
Health CSP Crawler¶
Checks for CSP-blocked resources via Puppeteer-based Node.js crawler
css¶
🌍 Global CSS Injection for Nginx¶
Global CSS injection for Nginx-based apps using dynamic colorschemes.
curl¶
Automated Telegram Alerts for Service Failures¶
Installs and configures components for sending Telegram notifications through systemd. This role is part of the systemd-notifier suite, providing automated alerts when services fail.
cymais¶
Taiga¶
Supercharge your project management with Taiga—a dynamic, agile tool designed for teams that thrive on creativity and collaboration. Experience a vibrant interface, robust task tracking, and an energetic platform that drives your projects to success.
Package Manager Installation 📦¶
Installs and updates packages using pkgmgr.
data management¶
Baserow¶
Empower your data management with Baserow, an innovative platform that makes building and managing databases both fun and efficient. Enjoy a dynamic interface, seamless collaboration, and energetic tools that supercharge your workflow.
database¶
Central Database¶
The Docker Central Database Role lets you quickly provision a centralized database through Docker Compose. Whether using MariaDB or PostgreSQL, this role provides a reliable, low-maintenance solution that supports your business applications.
MariaDB¶
The Docker MariaDB Role offers an easy and efficient way to deploy a MariaDB server inside a Docker container. Manage your data securely and effectively, making it ideal for production or local development.
PostgreSQL¶
The Docker PostgreSQL Role offers an easy and efficient way to run a PostgreSQL database inside a Docker container. Manage your data securely and effectively, making it ideal for production or local development.
databases¶
Baserow¶
Empower your data management with Baserow, an innovative platform that makes building and managing databases both fun and efficient. Enjoy a dynamic interface, seamless collaboration, and energetic tools that supercharge your workflow.
debian¶
Update apt¶
Updates packages on Debian-based systems by refreshing the apt cache and performing a distribution upgrade.
decentralization¶
Pixelfed¶
Pixelfed is a decentralized image sharing platform that champions creativity and privacy. This containerized deployment provides a secure, scalable, and modern environment for sharing visual content within a federated network.
decentralized¶
Bluesky¶
Soar to new digital heights with Bluesky, an innovative platform that reimagines social networking with its forward-thinking, community-driven approach. Experience a burst of energy, creativity, and the freedom to connect in a truly inspiring way.
Friendica¶
Empower your decentralized social networking with Friendica, a platform designed to foster communication and community building with ease. Experience a robust, containerized deployment that streamlines installation, configuration, and maintenance for your Friendica instance.
Mastodon¶
Dive into a decentralized social experience with Mastodon, a federated platform designed for dynamic, community-driven networking. Enjoy real-time updates, robust moderation, and customizable user interfaces that empower communities to thrive.
Matrix¶
Step into the future of communication with Matrix, a dynamic and decentralized platform that delivers secure, real-time messaging and collaboration. Benefit from federation, end-to-end encryption, and versatile bridging that connects you globally while safeguarding your data.
Matrix (Deprecated)¶
This role deploys and configures a Matrix homeserver using Ansible automation. Benefit from a secure, federated, and scalable communication platform with integrated support for bridges and modern web clients.
PeerTube¶
Transform your video hosting experience with Peertube, a decentralized platform built for scalability, innovation, and community collaboration.
deployment¶
Presentation¶
This Presentation Software is a powerful tool designed for showcasing the CyMaIS platform to various audiences, including Administrators, Developers, End-Users, Businesses, and Investors.
Sphinx Documentation¶
Automates building and serving Sphinx documentation. Unlock comprehensive insights with our extensive documentation. Explore guides, tutorials, and support resources designed to help you navigate software effortlessly.
desktop¶
GNOME Desktop¶
Aggregates essential GNOME desktop roles—including caffeine, extensions, and terminal—for a complete GNOME environment on Linux.
Nextcloud Client ☁️¶
Installs and links Nextcloud desktop client folders for cloud-integrated user environments.
development¶
Fakeroot¶
Installs fakeroot on Arch Linux using Pacman, enabling non-privileged file manipulations required for package building and development.
GCC 🧠¶
Installs the GNU Compiler Collection (GCC).
Persona: Developer 👨💻¶
Installs a base development environment for software engineers on Linux.
Persona: Arduino Developer🔌¶
Installs tools and permissions for Arduino development on Linux.
Persona: Java Developer☕️¶
Installs tools and dependencies for Java development on Linux.
Persona: PHP Developer🐘¶
Installs PHP and related development tools on Linux for PHP software engineering.
Persona: Developer – Python 🐍¶
Installs tools and environment for Python development on Linux.
Persona: Developer – Shell 🐚¶
Installs tools for Bash scripting and shell development on Linux.
Kevins Package Manager 🤖📦¶
Automates the installation of Kevin’s Package Manager — a tool for managing multiple repositories and automating Git operations.
devops¶
Docker Compose¶
Manages Docker Compose project structure and execution logic on Arch Linux.
directory¶
Backup Directory Validator¶
Setup the directory validator to validate backup directories
LAM¶
Elevate your LDAP directory management with LAM (LDAP Account Manager), a powerful solution for efficient administration of LDAP directories.
LDAP Directory¶
Unleash the potential of centralized identity management with our robust LDAP Directory solution, powered by OpenLDAP. Manage users, groups, and schemas securely with extensive customization options and integrated TLS support.
discourse¶
Discourse¶
Discourse is a popular open-source discussion platform designed to foster community engagement with modern, user-friendly features and robust moderation tools.
discussion¶
Discourse¶
Discourse is a popular open-source discussion platform designed to foster community engagement with modern, user-friendly features and robust moderation tools.
disk¶
Cleanup Backups Service¶
Automates the cleanup of old backups by executing a Python script that deletes outdated backup versions when disk usage exceeds a specified threshold.
Cleanup Disc Space¶
Frees disk space on the target system by executing a cleanup script that removes temporary files, clears package caches, and optionally handles Docker and backup cleanup.
dns¶
Cloudflare DNS Records¶
Manages DNS A-records in Cloudflare zones.
docker¶
Backup Docker to Local¶
Automates the backup of Docker volumes to a local folder
Backup Remote to Local¶
Pulls backups from a remote server and stores them locally using rsync with retry logic. This role is part of a comprehensive backup scheme and works in conjunction with other roles to ensure reliable backup operations.
Cleanup Docker Anonymous Volumes¶
Install and run dockreap to clean up unused anonymous Docker volumes
Docker Volume Backup Cleanup Role¶
Cleans up failed Docker backups by configuring a systemd service and timer to execute the cleanup operations periodically.
Docker Server¶
Installs and maintains Docker.
Akaunting¶
Empower your financial management with Akaunting, a dynamic and feature-rich accounting platform designed to simplify your bookkeeping and boost your business growth. Enjoy intuitive tools, real-time insights, and an energetic approach to your finances.
Attendize¶
Revolutionize your event management with Attendize, an energetic and intuitive platform designed to streamline ticketing and event planning. Enjoy a feature-rich, user-friendly solution that transforms every event into an unforgettable experience.
Baserow¶
Empower your data management with Baserow, an innovative platform that makes building and managing databases both fun and efficient. Enjoy a dynamic interface, seamless collaboration, and energetic tools that supercharge your workflow.
Bluesky¶
Soar to new digital heights with Bluesky, an innovative platform that reimagines social networking with its forward-thinking, community-driven approach. Experience a burst of energy, creativity, and the freedom to connect in a truly inspiring way.
Central Database¶
The Docker Central Database Role lets you quickly provision a centralized database through Docker Compose. Whether using MariaDB or PostgreSQL, this role provides a reliable, low-maintenance solution that supports your business applications.
Docker Compose¶
Manages Docker Compose project structure and execution logic on Arch Linux.
Discourse¶
Discourse is a popular open-source discussion platform designed to foster community engagement with modern, user-friendly features and robust moderation tools.
ELK Stack¶
Transform online learning and collaboration with BigBlueButton, an interactive web conferencing solution designed to energize virtual classrooms and meetings. Enjoy dynamic tools and an engaging environment that makes every session a powerful learning experience.
EspoCRM¶
Empower your customer relationship management with EspoCRM, an open-source platform that combines workflow automation, seamless LDAP/OIDC SSO integration, and a sleek, lightweight user interface. Tailored for businesses of all sizes, EspoCRM enables you to manage your sales, customer interactions, and business processes with ease, fostering productivity and streamlined communication across teams.
Friendica¶
Empower your decentralized social networking with Friendica, a platform designed to foster communication and community building with ease. Experience a robust, containerized deployment that streamlines installation, configuration, and maintenance for your Friendica instance.
Funkwhale¶
Dive into a world of rhythm and sound with Funkwhale, an innovative self-hosted music sharing platform that celebrates creativity and community. Enjoy an energetic soundscape and seamless music streaming that amplifies your passion for tunes.
FusionDirectory (DRAFT)¶
FusionDirectory is a web-based tool to manage LDAP directories and this role ensures a reliable, easy-to-use interface for LDAP administration.
Gitea¶
Boost your development journey with Gitea, a lightweight and energetic self-hosted Git service that offers efficient code collaboration, intuitive version control, and an agile environment for your projects. Ignite your coding spirit, innovate faster, and code with confidence!
GitLab¶
Accelerate your development with GitLab, an all-in-one platform for source code management, CI/CD, and more. Experience a robust and collaborative environment that empowers your development process.
Joomla CMS¶
Elevate your website management with Joomla, a powerful content management system that fuses versatility with dynamic design, inspiring creativity and driving your digital presence to new heights.
Keycloak¶
Step into a secure future with Keycloak! Our dynamic identity and access management solution offers streamlined SSO capabilities, robust security measures, and an intuitive user experience that propels your applications to unprecedented heights of performance and reliability.
LAM¶
Elevate your LDAP directory management with LAM (LDAP Account Manager), a powerful solution for efficient administration of LDAP directories.
LDAP Directory¶
Unleash the potential of centralized identity management with our robust LDAP Directory solution, powered by OpenLDAP. Manage users, groups, and schemas securely with extensive customization options and integrated TLS support.
Listmonk¶
Elevate your email marketing with Listmonk, a high-performance, self-hosted newsletter and mailing list manager featuring a modern dashboard, advanced analytics, and flexible configuration options.
Mailu¶
Revolutionize your email communications with Mailu, a secure and flexible mail server solution that integrates comprehensive features for managing digital correspondence reliably.
MariaDB¶
The Docker MariaDB Role offers an easy and efficient way to deploy a MariaDB server inside a Docker container. Manage your data securely and effectively, making it ideal for production or local development.
Mastodon¶
Dive into a decentralized social experience with Mastodon, a federated platform designed for dynamic, community-driven networking. Enjoy real-time updates, robust moderation, and customizable user interfaces that empower communities to thrive.
Matomo Analytics¶
Experience the power of Matomo, an innovative open-source analytics platform that delivers real-time insights, robust visitor tracking, and privacy-first features to elevate your website performance. Dive into actionable data with unmatched precision and clarity.
Matrix¶
Step into the future of communication with Matrix, a dynamic and decentralized platform that delivers secure, real-time messaging and collaboration. Benefit from federation, end-to-end encryption, and versatile bridging that connects you globally while safeguarding your data.
MediaWiki¶
Empower your knowledge base with MediaWiki, a versatile and collaborative platform designed for comprehensive, user-driven documentation. Benefit from an extensive extension ecosystem, robust content management, and customizable configurations tailored to your needs.
Moodle¶
Ignite the learning experience with Moodle, a powerful and versatile platform for online education that energizes classrooms and fosters interactive learning.
MyBB¶
Transform your community engagement with MyBB, a feature-rich forum solution that combines modern design with robust functionality. Enjoy dynamic discussions, intuitive moderation, and a vibrant user interface that brings your community together.
Nextcloud Server¶
Elevate your collaboration with Nextcloud, a vibrant self-hosted cloud solution designed for dynamic file sharing, seamless communication, and effortless teamwork. Embrace unparalleled control, flexibility, and a boosted digital workspace that adapts to your every need.
OpenProject¶
Transform your project management with OpenProject, a vibrant and collaborative tool that brings clarity and energy to your planning, tracking, and team communication. Experience streamlined workflows and an innovative platform that propels your projects forward.
PeerTube¶
Transform your video hosting experience with Peertube, a decentralized platform built for scalability, innovation, and community collaboration.
pgAdmin¶
Take control of your PostgreSQL databases with pgAdmin — a powerful, open source, web-based administration tool offering an intuitive user interface, multi‑server management, robust configuration options, and optional OAuth2 integration for enhanced security.
phpldapadmin¶
Take control of your LDAP directory with phpldapadmin — a web‑based LDAP client offering an intuitive interface to manage your LDAP directories. This containerized deployment simplifies administration and provides secure, flexible configuration options.
PhpMyAdmin¶
Manage your databases with confidence using PHPMyAdmin, a robust and dynamic tool designed to simplify administration and enhance productivity. Enjoy an intuitive interface, powerful features, and an energetic approach that makes database management a breeze.
Pixelfed¶
Pixelfed is a decentralized image sharing platform that champions creativity and privacy. This containerized deployment provides a secure, scalable, and modern environment for sharing visual content within a federated network.
Portfolio¶
Portfolio to showcase your projects and creative work with a focus on user experience and easy customization. 🚀
PostgreSQL¶
The Docker PostgreSQL Role offers an easy and efficient way to run a PostgreSQL database inside a Docker container. Manage your data securely and effectively, making it ideal for production or local development.
Presentation¶
This Presentation Software is a powerful tool designed for showcasing the CyMaIS platform to various audiences, including Administrators, Developers, End-Users, Businesses, and Investors.
Roulette Wheel¶
This role deploys and configures the Roulette Wheel application using Docker Compose. It automates the process of pulling the latest source code from GitHub, building a Docker image, and deploying the application.
Snipe‑IT¶
Snipe‑IT is an open‑source asset management system providing a containerized deployment with centralized MariaDB integration, configurable SMTP settings, and pending SAML authentication enhancements for secure asset tracking and management.
Sphinx Documentation¶
Automates building and serving Sphinx documentation. Unlock comprehensive insights with our extensive documentation. Explore guides, tutorials, and support resources designed to help you navigate software effortlessly.
Syncope (DRAFT)¶
Apache Syncope is an open-source Identity and Access Management (IAM) system, offering centralized identity governance, user provisioning, role management, and workflow integration.
Taiga¶
Supercharge your project management with Taiga—a dynamic, agile tool designed for teams that thrive on creativity and collaboration. Experience a vibrant interface, robust task tracking, and an energetic platform that drives your projects to success.
WordPress¶
Use the full power of WordPress—with its intuitive interface, customizable themes and plugins, responsive design, and advanced SEO tools—in a scalable and secure containerized environment.
YOURLS¶
Streamline your online presence with YOURLS — a nimble, open‑source URL shortener that empowers you to create, track, and manage short links effortlessly. This containerized deployment integrates centralized MariaDB support and a customizable environment, ensuring a secure and scalable solution for all your link management needs.
Docker Healer 🩺¶
Automated recovery for unhealthy or exited Docker Compose containers.
Nginx Docker Reverse Proxy 🚀¶
Nginx reverse proxy front-end for local Docker applications.
Docker Auto Restart¶
Automates the restart of Docker Compose instances by detecting docker-compose.yml files and executing a restart script, ensuring consistent service availability.
System Storage Optimizer Role¶
Optimizes storage allocation for Docker volumes by migrating volumes between SSD and HDD based on container image types, and creates symbolic links to maintain consistent paths.
update¶
Centralizes system update operations by conditionally invoking platform-specific update roles and Docker image updates.
Update Docker¶
Updates Docker Compose instances by detecting changes in Docker image digests and rebuilding containers when necessary. This role automates Docker image pulls and container rebuilds.
docker-compose¶
Akaunting¶
Empower your financial management with Akaunting, a dynamic and feature-rich accounting platform designed to simplify your bookkeeping and boost your business growth. Enjoy intuitive tools, real-time insights, and an energetic approach to your finances.
Docker Healer 🩺¶
Automated recovery for unhealthy or exited Docker Compose containers.
documentation¶
MediaWiki¶
Empower your knowledge base with MediaWiki, a versatile and collaborative platform designed for comprehensive, user-driven documentation. Benefit from an extensive extension ecosystem, robust content management, and customizable configurations tailored to your needs.
Sphinx Documentation¶
Automates building and serving Sphinx documentation. Unlock comprehensive insights with our extensive documentation. Explore guides, tutorials, and support resources designed to help you navigate software effortlessly.
domains¶
cleanup-domains¶
Remove Nginx configuration files and revoke/delete Certbot certificates for deprecated domains
dotfiles¶
Shell 🐚¶
Ensures that .profile is sourced in all shells.
dynamic¶
🌍 Global CSS Injection for Nginx¶
Global CSS injection for Nginx-based apps using dynamic colorschemes.
e-learning¶
Moodle¶
Ignite the learning experience with Moodle, a powerful and versatile platform for online education that energizes classrooms and fosters interactive learning.
education¶
Moodle¶
Ignite the learning experience with Moodle, a powerful and versatile platform for online education that energizes classrooms and fosters interactive learning.
elk¶
ELK Stack¶
Transform online learning and collaboration with BigBlueButton, an interactive web conferencing solution designed to energize virtual classrooms and meetings. Enjoy dynamic tools and an engaging environment that makes every session a powerful learning experience.
email¶
Mailu¶
Revolutionize your email communications with Mailu, a secure and flexible mail server solution that integrates comprehensive features for managing digital correspondence reliably.
health-msmtp¶
Sends periodic health check emails via msmtp
msmtp 📧¶
Installs and configures msmtp, a lightweight SMTP client and sendmail replacement.
Unified Service Failure Notifier¶
Installs a unified systemd notification service that sends alerts via both Telegram and Email when a service fails.
Automated Email Alerts for Service Failures¶
Installs and configures components for sending email notifications. This role is part of the systemd-notifier suite, providing automated alerts when services fail.
email marketing¶
Listmonk¶
Elevate your email marketing with Listmonk, a high-performance, self-hosted newsletter and mailing list manager featuring a modern dashboard, advanced analytics, and flexible configuration options.
embedded¶
Persona: Arduino Developer🔌¶
Installs tools and permissions for Arduino development on Linux.
emulator¶
RetroArch 🎮¶
Installs and configures RetroArch.
encrypted¶
Matrix¶
Step into the future of communication with Matrix, a dynamic and decentralized platform that delivers secure, real-time messaging and collaboration. Benefit from federation, end-to-end encryption, and versatile bridging that connects you globally while safeguarding your data.
Matrix (Deprecated)¶
This role deploys and configures a Matrix homeserver using Ansible automation. Benefit from a secure, federated, and scalable communication platform with integrated support for bridges and modern web clients.
encryption¶
Certbot¶
Automates the installation and configuration of Certbot for SSL/TLS certificate management
engineering¶
Persona: Developer 👨💻¶
Installs a base development environment for software engineers on Linux.
Persona: Arduino Developer🔌¶
Installs tools and permissions for Arduino development on Linux.
Persona: Java Developer☕️¶
Installs tools and dependencies for Java development on Linux.
Persona: PHP Developer🐘¶
Installs PHP and related development tools on Linux for PHP software engineering.
Persona: Developer – Python 🐍¶
Installs tools and environment for Python development on Linux.
enterprise-policy¶
Browsers 🎨¶
Wrapper role to install and configure both Chromium and Firefox with enforced security extensions.
Chromium 🌐¶
Automates the installation and configuration of the Chromium browser with enforced security extensions.
environment¶
Shell 🐚¶
Ensures that .profile is sourced in all shells.
espocrm¶
EspoCRM¶
Empower your customer relationship management with EspoCRM, an open-source platform that combines workflow automation, seamless LDAP/OIDC SSO integration, and a sleek, lightweight user interface. Tailored for businesses of all sizes, EspoCRM enables you to manage your sales, customer interactions, and business processes with ease, fostering productivity and streamlined communication across teams.
event management¶
Attendize¶
Revolutionize your event management with Attendize, an energetic and intuitive platform designed to streamline ticketing and event planning. Enjoy a feature-rich, user-friendly solution that transforms every event into an unforgettable experience.
extensions¶
GNOME Extensions Manager¶
Configures GNOME Shell extensions and installs the CLI GNOME Extension Manager for managing extensions.
fakeroot¶
Fakeroot¶
Installs fakeroot on Arch Linux using Pacman, enabling non-privileged file manipulations required for package building and development.
federated¶
Mastodon¶
Dive into a decentralized social experience with Mastodon, a federated platform designed for dynamic, community-driven networking. Enjoy real-time updates, robust moderation, and customizable user interfaces that empower communities to thrive.
Matrix¶
Step into the future of communication with Matrix, a dynamic and decentralized platform that delivers secure, real-time messaging and collaboration. Benefit from federation, end-to-end encryption, and versatile bridging that connects you globally while safeguarding your data.
Matrix (Deprecated)¶
This role deploys and configures a Matrix homeserver using Ansible automation. Benefit from a secure, federated, and scalable communication platform with integrated support for bridges and modern web clients.
federation¶
Pixelfed¶
Pixelfed is a decentralized image sharing platform that champions creativity and privacy. This containerized deployment provides a secure, scalable, and modern environment for sharing visual content within a federated network.
file-server¶
Nginx File Server¶
Configures an Nginx-based file server with HTTPS support, automatic SSL/TLS certificate retrieval, directory listing, and .well-known handling for secure static file hosting.
filesystem¶
System Btrfs Auto Balancer¶
Automates the balancing of Btrfs file systems by cloning the auto-btrfs-balancer repository and configuring a systemd service and timer for regular execution.
firefox¶
Browsers 🎨¶
Wrapper role to install and configure both Chromium and Firefox with enforced security extensions.
firewall¶
WireGuard Client behind NAT¶
Adapts iptables rules to enable proper connectivity for a WireGuard client running behind a NAT or firewall, ensuring that traffic is correctly forwarded and masqueraded.
flask¶
Portfolio¶
Portfolio to showcase your projects and creative work with a focus on user experience and easy customization. 🚀
forum¶
Discourse¶
Discourse is a popular open-source discussion platform designed to foster community engagement with modern, user-friendly features and robust moderation tools.
MyBB¶
Transform your community engagement with MyBB, a feature-rich forum solution that combines modern design with robust functionality. Enjoy dynamic discussions, intuitive moderation, and a vibrant user interface that brings your community together.
friendica¶
Friendica¶
Empower your decentralized social networking with Friendica, a platform designed to foster communication and community building with ease. Experience a robust, containerized deployment that streamlines installation, configuration, and maintenance for your Friendica instance.
frontend¶
🌍 Global CSS Injection for Nginx¶
Global CSS injection for Nginx-based apps using dynamic colorschemes.
fun¶
Gamer Default 🎮¶
Installs a curated set of open source games for Arch Linux.
funkwhale¶
Funkwhale¶
Dive into a world of rhythm and sound with Funkwhale, an innovative self-hosted music sharing platform that celebrates creativity and community. Enjoy an energetic soundscape and seamless music streaming that amplifies your passion for tunes.
fusiondirectory¶
FusionDirectory (DRAFT)¶
FusionDirectory is a web-based tool to manage LDAP directories and this role ensures a reliable, easy-to-use interface for LDAP administration.
gamemode¶
Gamer 🎮¶
Gaming setup role for Arch Linux systems.
Gamer Core 🧩¶
Installs essential gaming utilities, launchers, and runtimes on Linux.
games¶
Gamer Default 🎮¶
Installs a curated set of open source games for Arch Linux.
gaming¶
Gamer 🎮¶
Gaming setup role for Arch Linux systems.
Gamer Core 🧩¶
Installs essential gaming utilities, launchers, and runtimes on Linux.
Gamer Default 🎮¶
Installs a curated set of open source games for Arch Linux.
RetroArch 🎮¶
Installs and configures RetroArch.
gcc¶
GCC 🧠¶
Installs the GNU Compiler Collection (GCC).
git¶
Backup Directory Validator¶
Setup the directory validator to validate backup directories
Git¶
Installs Git and configures it using a custom git-configurator for personal computers.
Gitea¶
Boost your development journey with Gitea, a lightweight and energetic self-hosted Git service that offers efficient code collaboration, intuitive version control, and an agile environment for your projects. Ignite your coding spirit, innovate faster, and code with confidence!
Git¶
Installs Git using the Pacman package manager on Arch Linux systems.
Kevins Package Manager 🤖📦¶
Automates the installation of Kevin’s Package Manager — a tool for managing multiple repositories and automating Git operations.
gitea¶
Gitea¶
Boost your development journey with Gitea, a lightweight and energetic self-hosted Git service that offers efficient code collaboration, intuitive version control, and an agile environment for your projects. Ignite your coding spirit, innovate faster, and code with confidence!
gitlab¶
GitLab¶
Accelerate your development with GitLab, an all-in-one platform for source code management, CI/CD, and more. Experience a robust and collaborative environment that empowers your development process.
global¶
🌍 Global CSS Injection for Nginx¶
Global CSS injection for Nginx-based apps using dynamic colorschemes.
gnome¶
GNOME Desktop¶
Aggregates essential GNOME desktop roles—including caffeine, extensions, and terminal—for a complete GNOME environment on Linux.
GNOME Extensions Manager¶
Configures GNOME Shell extensions and installs the CLI GNOME Extension Manager for managing extensions.
GNOME Terminal¶
Installs GNOME Terminal on Arch Linux, providing a modern terminal emulator for the GNOME desktop environment.
SSH Agent 🔐¶
Persistent SSH agent setup for GNOME Wayland sessions with SSH configuration pulled from Git.
graphics¶
Gamer 🎮¶
Gaming setup role for Arch Linux systems.
greenlight¶
health¶
Health CSP Crawler¶
Checks for CSP-blocked resources via Puppeteer-based Node.js crawler
health-msmtp¶
Sends periodic health check emails via msmtp
hibernate¶
Driver Lid Switch 🛑💻¶
Fixes incorrect lid switch behavior on Linux laptops by setting up hibernation and configuring systemd.
homepage¶
Nginx Static HTML Server¶
Configures an Nginx server to host static HTML websites with HTTPS support, automatic SSL certificate retrieval via Let’s Encrypt, and secure default settings.
html¶
Nginx Static HTML Server¶
Configures an Nginx server to host static HTML websites with HTTPS support, automatic SSL certificate retrieval via Let’s Encrypt, and secure default settings.
https¶
Certbot¶
Automates the installation and configuration of Certbot for SSL/TLS certificate management
Syncope (DRAFT)¶
Apache Syncope is an open-source Identity and Access Management (IAM) system, offering centralized identity governance, user provisioning, role management, and workflow integration.
Nginx Certbot Automation¶
Automates Let’s Encrypt SSL/TLS certificate renewals for Nginx using Certbot and systemd services with automatic reloads after successful renewals.
Nginx HTTPS Certificate Retrieval¶
Automates the retrieval of Let’s Encrypt SSL/TLS certificates for Nginx domains using Certbot, supporting both single-domain and wildcard certificates with DNS and webroot ACME challenges.
Nginx File Server¶
Configures an Nginx-based file server with HTTPS support, automatic SSL/TLS certificate retrieval, directory listing, and .well-known handling for secure static file hosting.
Nginx Static HTML Server¶
Configures an Nginx server to host static HTML websites with HTTPS support, automatic SSL certificate retrieval via Let’s Encrypt, and secure default settings.
iam¶
Syncope (DRAFT)¶
Apache Syncope is an open-source Identity and Access Management (IAM) system, offering centralized identity governance, user provisioning, role management, and workflow integration.
identity¶
Syncope (DRAFT)¶
Apache Syncope is an open-source Identity and Access Management (IAM) system, offering centralized identity governance, user provisioning, role management, and workflow integration.
Persona: Corporate 🏢¶
Deploys a corporate identity environment with web assets, legal pages, and a portfolio site on Linux.
identity management¶
Keycloak¶
Step into a secure future with Keycloak! Our dynamic identity and access management solution offers streamlined SSO capabilities, robust security measures, and an intuitive user experience that propels your applications to unprecedented heights of performance and reliability.
LDAP Directory¶
Unleash the potential of centralized identity management with our robust LDAP Directory solution, powered by OpenLDAP. Manage users, groups, and schemas securely with extensive customization options and integrated TLS support.
images¶
Update Docker¶
Updates Docker Compose instances by detecting changes in Docker image digests and rebuilding containers when necessary. This role automates Docker image pulls and container rebuilds.
infrastructure¶
Docker Server¶
Installs and maintains Docker.
Docker Compose¶
Manages Docker Compose project structure and execution logic on Arch Linux.
installation¶
Git¶
Installs Git using the Pacman package manager on Arch Linux systems.
Python-Pip¶
Installs the python-pip package to provide the Python package manager, ensuring that Python packages can be installed reliably on the target system.
iptables¶
WireGuard Client behind NAT¶
Adapts iptables rules to enable proper connectivity for a WireGuard client running behind a NAT or firewall, ensuring that traffic is correctly forwarded and masqueraded.
java¶
Persona: Java Developer☕️¶
Installs tools and dependencies for Java development on Linux.
javascript¶
Node.js¶
Installs Node.js
npm¶
Installs npm and runs optional ‘npm ci’ inside a project
jdk¶
Persona: Java Developer☕️¶
Installs tools and dependencies for Java development on Linux.
joomla¶
Joomla CMS¶
Elevate your website management with Joomla, a powerful content management system that fuses versatility with dynamic design, inspiring creativity and driving your digital presence to new heights.
keepassxc¶
SSH Agent 🔐¶
Persistent SSH agent setup for GNOME Wayland sessions with SSH configuration pulled from Git.
keycloak¶
Keycloak¶
Step into a secure future with Keycloak! Our dynamic identity and access management solution offers streamlined SSO capabilities, robust security measures, and an intuitive user experience that propels your applications to unprecedented heights of performance and reliability.
lam¶
LAM¶
Elevate your LDAP directory management with LAM (LDAP Account Manager), a powerful solution for efficient administration of LDAP directories.
laptop¶
Driver Lid Switch 🛑💻¶
Fixes incorrect lid switch behavior on Linux laptops by setting up hibernation and configuring systemd.
ldap¶
EspoCRM¶
Empower your customer relationship management with EspoCRM, an open-source platform that combines workflow automation, seamless LDAP/OIDC SSO integration, and a sleek, lightweight user interface. Tailored for businesses of all sizes, EspoCRM enables you to manage your sales, customer interactions, and business processes with ease, fostering productivity and streamlined communication across teams.
FusionDirectory (DRAFT)¶
FusionDirectory is a web-based tool to manage LDAP directories and this role ensures a reliable, easy-to-use interface for LDAP administration.
LAM¶
Elevate your LDAP directory management with LAM (LDAP Account Manager), a powerful solution for efficient administration of LDAP directories.
LDAP Directory¶
Unleash the potential of centralized identity management with our robust LDAP Directory solution, powered by OpenLDAP. Manage users, groups, and schemas securely with extensive customization options and integrated TLS support.
Nextcloud Server¶
Elevate your collaboration with Nextcloud, a vibrant self-hosted cloud solution designed for dynamic file sharing, seamless communication, and effortless teamwork. Embrace unparalleled control, flexibility, and a boosted digital workspace that adapts to your every need.
OpenProject¶
Transform your project management with OpenProject, a vibrant and collaborative tool that brings clarity and energy to your planning, tracking, and team communication. Experience streamlined workflows and an innovative platform that propels your projects forward.
phpldapadmin¶
Take control of your LDAP directory with phpldapadmin — a web‑based LDAP client offering an intuitive interface to manage your LDAP directories. This containerized deployment simplifies administration and provides secure, flexible configuration options.
letsencrypt¶
Certbot¶
Automates the installation and configuration of Certbot for SSL/TLS certificate management
Let’s Encrypt SSL for Nginx 🔐¶
An Ansible role to automate Let’s Encrypt SSL certificate issuance and renewal for Nginx
Nginx Certbot Automation¶
Automates Let’s Encrypt SSL/TLS certificate renewals for Nginx using Certbot and systemd services with automatic reloads after successful renewals.
Nginx Domain Setup 🚀¶
Automated domain provisioning (TLS, vHost, OAuth2) for Nginx.
Nginx HTTPS Certificate Retrieval¶
Automates the retrieval of Let’s Encrypt SSL/TLS certificates for Nginx domains using Certbot, supporting both single-domain and wildcard certificates with DNS and webroot ACME challenges.
Nginx File Server¶
Configures an Nginx-based file server with HTTPS support, automatic SSL/TLS certificate retrieval, directory listing, and .well-known handling for secure static file hosting.
Nginx Static HTML Server¶
Configures an Nginx server to host static HTML websites with HTTPS support, automatic SSL certificate retrieval via Let’s Encrypt, and secure default settings.
libreoffice¶
LibreOffice¶
Installs LibreOffice along with Liberation fonts and language packages on Arch Linux systems for a complete office suite experience.
lid¶
Driver Lid Switch 🛑💻¶
Fixes incorrect lid switch behavior on Linux laptops by setting up hibernation and configuring systemd.
linux¶
Docker Server¶
Installs and maintains Docker.
listmonk¶
Listmonk¶
Elevate your email marketing with Listmonk, a high-performance, self-hosted newsletter and mailing list manager featuring a modern dashboard, advanced analytics, and flexible configuration options.
local¶
Backup Docker to Local¶
Automates the backup of Docker volumes to a local folder
Backup Remote to Local¶
Pulls backups from a remote server and stores them locally using rsync with retry logic. This role is part of a comprehensive backup scheme and works in conjunction with other roles to ensure reliable backup operations.
lock¶
System Maintenance Lock¶
Ensures system integrity during maintenance activities by blocking execution until critical services have stopped, using a locking mechanism with timeout and retry logic.
log-management¶
ELK Stack¶
Transform online learning and collaboration with BigBlueButton, an interactive web conferencing solution designed to energize virtual classrooms and meetings. Enjoy dynamic tools and an engaging environment that makes every session a powerful learning experience.
lutris¶
Gamer 🎮¶
Gaming setup role for Arch Linux systems.
Gamer Core 🧩¶
Installs essential gaming utilities, launchers, and runtimes on Linux.
mail¶
Postfix¶
Installs and configures Postfix to provide a robust mail transfer agent setup with a preconfigured aliases file for local mail delivery.
mail server¶
Mailu¶
Revolutionize your email communications with Mailu, a secure and flexible mail server solution that integrates comprehensive features for managing digital correspondence reliably.
mailu¶
Mailu¶
Revolutionize your email communications with Mailu, a secure and flexible mail server solution that integrates comprehensive features for managing digital correspondence reliably.
maintenance¶
Cleanup Docker Anonymous Volumes¶
Install and run dockreap to clean up unused anonymous Docker volumes
System Maintenance Lock¶
Ensures system integrity during maintenance activities by blocking execution until critical services have stopped, using a locking mechanism with timeout and retry logic.
update¶
Centralizes system update operations by conditionally invoking platform-specific update roles and Docker image updates.
Update apt¶
Updates packages on Debian-based systems by refreshing the apt cache and performing a distribution upgrade.
Update Docker¶
Updates Docker Compose instances by detecting changes in Docker image digests and rebuilding containers when necessary. This role automates Docker image pulls and container rebuilds.
Update Pacman¶
Updates the package cache and upgrades all installed packages on Arch Linux systems using pacman.
Update Pip Packages¶
Automatically updates all Python Pip packages to their latest available versions.
Update yay¶
Updates AUR packages on Arch Linux systems using yay. This role automates the upgrade process for AUR packages, ensuring that the system remains up-to-date with the latest versions available in the Arch User Repository.
make¶
Make Installation¶
Installs GNU Make using the Pacman package manager on Arch Linux systems.
management¶
LAM¶
Elevate your LDAP directory management with LAM (LDAP Account Manager), a powerful solution for efficient administration of LDAP directories.
Syncope (DRAFT)¶
Apache Syncope is an open-source Identity and Access Management (IAM) system, offering centralized identity governance, user provisioning, role management, and workflow integration.
mangohud¶
Gamer Core 🧩¶
Installs essential gaming utilities, launchers, and runtimes on Linux.
mariadb¶
Central Database¶
The Docker Central Database Role lets you quickly provision a centralized database through Docker Compose. Whether using MariaDB or PostgreSQL, this role provides a reliable, low-maintenance solution that supports your business applications.
MariaDB¶
The Docker MariaDB Role offers an easy and efficient way to deploy a MariaDB server inside a Docker container. Manage your data securely and effectively, making it ideal for production or local development.
PhpMyAdmin¶
Manage your databases with confidence using PHPMyAdmin, a robust and dynamic tool designed to simplify administration and enhance productivity. Enjoy an intuitive interface, powerful features, and an energetic approach that makes database management a breeze.
Snipe‑IT¶
Snipe‑IT is an open‑source asset management system providing a containerized deployment with centralized MariaDB integration, configurable SMTP settings, and pending SAML authentication enhancements for secure asset tracking and management.
mastodon¶
Mastodon¶
Dive into a decentralized social experience with Mastodon, a federated platform designed for dynamic, community-driven networking. Enjoy real-time updates, robust moderation, and customizable user interfaces that empower communities to thrive.
matomo¶
Matomo Analytics¶
Experience the power of Matomo, an innovative open-source analytics platform that delivers real-time insights, robust visitor tracking, and privacy-first features to elevate your website performance. Dive into actionable data with unmatched precision and clarity.
matrix¶
Matrix¶
Step into the future of communication with Matrix, a dynamic and decentralized platform that delivers secure, real-time messaging and collaboration. Benefit from federation, end-to-end encryption, and versatile bridging that connects you globally while safeguarding your data.
Matrix (Deprecated)¶
This role deploys and configures a Matrix homeserver using Ansible automation. Benefit from a secure, federated, and scalable communication platform with integrated support for bridges and modern web clients.
mediawiki¶
MediaWiki¶
Empower your knowledge base with MediaWiki, a versatile and collaborative platform designed for comprehensive, user-driven documentation. Benefit from an extensive extension ecosystem, robust content management, and customizable configurations tailored to your needs.
microblog¶
Mastodon¶
Dive into a decentralized social experience with Mastodon, a federated platform designed for dynamic, community-driven networking. Enjoy real-time updates, robust moderation, and customizable user interfaces that empower communities to thrive.
microcontroller¶
Persona: Arduino Developer🔌¶
Installs tools and permissions for Arduino development on Linux.
monitoring¶
Health CSP Crawler¶
Checks for CSP-blocked resources via Puppeteer-based Node.js crawler
health-msmtp¶
Sends periodic health check emails via msmtp
moodle¶
Moodle¶
Ignite the learning experience with Moodle, a powerful and versatile platform for online education that energizes classrooms and fosters interactive learning.
msmtp¶
WordPress¶
Use the full power of WordPress—with its intuitive interface, customizable themes and plugins, responsive design, and advanced SEO tools—in a scalable and secure containerized environment.
health-msmtp¶
Sends periodic health check emails via msmtp
msmtp 📧¶
Installs and configures msmtp, a lightweight SMTP client and sendmail replacement.
Automated Email Alerts for Service Failures¶
Installs and configures components for sending email notifications. This role is part of the systemd-notifier suite, providing automated alerts when services fail.
mtu¶
Wireguard Client¶
Manages WireGuard on a client system by deploying services and scripts to set MTU on network interfaces and ensure optimal VPN connectivity.
multisite¶
WordPress¶
Use the full power of WordPress—with its intuitive interface, customizable themes and plugins, responsive design, and advanced SEO tools—in a scalable and secure containerized environment.
music¶
Spotify 🎵¶
Installs the Spotify client.
Funkwhale¶
Dive into a world of rhythm and sound with Funkwhale, an innovative self-hosted music sharing platform that celebrates creativity and community. Enjoy an energetic soundscape and seamless music streaming that amplifies your passion for tunes.
mybb¶
MyBB¶
Transform your community engagement with MyBB, a feature-rich forum solution that combines modern design with robust functionality. Enjoy dynamic discussions, intuitive moderation, and a vibrant user interface that brings your community together.
nat¶
WireGuard Client behind NAT¶
Adapts iptables rules to enable proper connectivity for a WireGuard client running behind a NAT or firewall, ensuring that traffic is correctly forwarded and masqueraded.
network¶
Cloudflare DNS Records¶
Manages DNS A-records in Cloudflare zones.
Persona: Network Administrator🌐¶
Installs essential network analysis tools for system administrators on Linux.
networking¶
WireGuard Client behind NAT¶
Adapts iptables rules to enable proper connectivity for a WireGuard client running behind a NAT or firewall, ensuring that traffic is correctly forwarded and masqueraded.
Wireguard¶
Manages Wireguard VPN configuration on the host. Installs necessary tools, deploys sysctl settings for IP forwarding, and copies the Wireguard configuration file to enable secure VPN connectivity.
nextcloud¶
Nextcloud Client ☁️¶
Installs and links Nextcloud desktop client folders for cloud-integrated user environments.
Nextcloud Server¶
Elevate your collaboration with Nextcloud, a vibrant self-hosted cloud solution designed for dynamic file sharing, seamless communication, and effortless teamwork. Embrace unparalleled control, flexibility, and a boosted digital workspace that adapts to your every need.
nginx¶
cleanup-domains¶
Remove Nginx configuration files and revoke/delete Certbot certificates for deprecated domains
Nextcloud Server¶
Elevate your collaboration with Nextcloud, a vibrant self-hosted cloud solution designed for dynamic file sharing, seamless communication, and effortless teamwork. Embrace unparalleled control, flexibility, and a boosted digital workspace that adapts to your every need.
Syncope (DRAFT)¶
Apache Syncope is an open-source Identity and Access Management (IAM) system, offering centralized identity governance, user provisioning, role management, and workflow integration.
Let’s Encrypt SSL for Nginx 🔐¶
An Ansible role to automate Let’s Encrypt SSL certificate issuance and renewal for Nginx
Nginx Certbot Automation¶
Automates Let’s Encrypt SSL/TLS certificate renewals for Nginx using Certbot and systemd services with automatic reloads after successful renewals.
Nginx Docker Reverse Proxy 🚀¶
Nginx reverse proxy front-end for local Docker applications.
Nginx Domain Setup 🚀¶
Automated domain provisioning (TLS, vHost, OAuth2) for Nginx.
Nginx HTTPS Certificate Retrieval¶
Automates the retrieval of Let’s Encrypt SSL/TLS certificates for Nginx domains using Certbot, supporting both single-domain and wildcard certificates with DNS and webroot ACME challenges.
🌍 Global CSS Injection for Nginx¶
Global CSS injection for Nginx-based apps using dynamic colorschemes.
Nginx WWW Redirect 🌐¶
An Ansible role to redirect www subdomains to non-www domains in Nginx
Nginx File Server¶
Configures an Nginx-based file server with HTTPS support, automatic SSL/TLS certificate retrieval, directory listing, and .well-known handling for secure static file hosting.
Nginx Static HTML Server¶
Configures an Nginx server to host static HTML websites with HTTPS support, automatic SSL certificate retrieval via Let’s Encrypt, and secure default settings.
Persona: Corporate 🏢¶
Deploys a corporate identity environment with web assets, legal pages, and a portfolio site on Linux.
nodejs¶
Roulette Wheel¶
This role deploys and configures the Roulette Wheel application using Docker Compose. It automates the process of pulling the latest source code from GitHub, building a Docker image, and deploying the application.
Health CSP Crawler¶
Checks for CSP-blocked resources via Puppeteer-based Node.js crawler
Node.js¶
Installs Node.js
npm¶
Installs npm and runs optional ‘npm ci’ inside a project
notifications¶
Unified Service Failure Notifier¶
Installs a unified systemd notification service that sends alerts via both Telegram and Email when a service fails.
Automated Email Alerts for Service Failures¶
Installs and configures components for sending email notifications. This role is part of the systemd-notifier suite, providing automated alerts when services fail.
Automated Telegram Alerts for Service Failures¶
Installs and configures components for sending Telegram notifications through systemd. This role is part of the systemd-notifier suite, providing automated alerts when services fail.
notifier¶
Unified Service Failure Notifier¶
Installs a unified systemd notification service that sends alerts via both Telegram and Email when a service fails.
npm¶
npm¶
Installs npm and runs optional ‘npm ci’ inside a project
oauth2¶
pgAdmin¶
Take control of your PostgreSQL databases with pgAdmin — a powerful, open source, web-based administration tool offering an intuitive user interface, multi‑server management, robust configuration options, and optional OAuth2 integration for enhanced security.
PhpMyAdmin¶
Manage your databases with confidence using PHPMyAdmin, a robust and dynamic tool designed to simplify administration and enhance productivity. Enjoy an intuitive interface, powerful features, and an energetic approach that makes database management a breeze.
Nginx Domain Setup 🚀¶
Automated domain provisioning (TLS, vHost, OAuth2) for Nginx.
office-suite¶
LibreOffice¶
Installs LibreOffice along with Liberation fonts and language packages on Arch Linux systems for a complete office suite experience.
oidc¶
EspoCRM¶
Empower your customer relationship management with EspoCRM, an open-source platform that combines workflow automation, seamless LDAP/OIDC SSO integration, and a sleek, lightweight user interface. Tailored for businesses of all sizes, EspoCRM enables you to manage your sales, customer interactions, and business processes with ease, fostering productivity and streamlined communication across teams.
Nextcloud Server¶
Elevate your collaboration with Nextcloud, a vibrant self-hosted cloud solution designed for dynamic file sharing, seamless communication, and effortless teamwork. Embrace unparalleled control, flexibility, and a boosted digital workspace that adapts to your every need.
Taiga¶
Supercharge your project management with Taiga—a dynamic, agile tool designed for teams that thrive on creativity and collaboration. Experience a vibrant interface, robust task tracking, and an energetic platform that drives your projects to success.
open-source¶
Discourse¶
Discourse is a popular open-source discussion platform designed to foster community engagement with modern, user-friendly features and robust moderation tools.
Matomo Analytics¶
Experience the power of Matomo, an innovative open-source analytics platform that delivers real-time insights, robust visitor tracking, and privacy-first features to elevate your website performance. Dive into actionable data with unmatched precision and clarity.
PeerTube¶
Transform your video hosting experience with Peertube, a decentralized platform built for scalability, innovation, and community collaboration.
Gamer Default 🎮¶
Installs a curated set of open source games for Arch Linux.
openid¶
Taiga¶
Supercharge your project management with Taiga—a dynamic, agile tool designed for teams that thrive on creativity and collaboration. Experience a vibrant interface, robust task tracking, and an energetic platform that drives your projects to success.
openldap¶
LDAP Directory¶
Unleash the potential of centralized identity management with our robust LDAP Directory solution, powered by OpenLDAP. Manage users, groups, and schemas securely with extensive customization options and integrated TLS support.
openproject¶
OpenProject¶
Transform your project management with OpenProject, a vibrant and collaborative tool that brings clarity and energy to your planning, tracking, and team communication. Experience streamlined workflows and an innovative platform that propels your projects forward.
optimization¶
System Storage Optimizer Role¶
Optimizes storage allocation for Docker volumes by migrating volumes between SSD and HDD based on container image types, and creates symbolic links to maintain consistent paths.
package¶
Package Manager Installation 📦¶
Installs and updates packages using pkgmgr.
Python-Pip¶
Installs the python-pip package to provide the Python package manager, ensuring that Python packages can be installed reliably on the target system.
package-management¶
System AUR Helper¶
Installs the AUR helper yay and configures an aur_builder user with appropriate sudo privileges to facilitate AUR package management on Arch Linux systems.
pacman¶
Git¶
Installs Git and configures it using a custom git-configurator for personal computers.
Fakeroot¶
Installs fakeroot on Arch Linux using Pacman, enabling non-privileged file manipulations required for package building and development.
Git¶
Installs Git using the Pacman package manager on Arch Linux systems.
update¶
Centralizes system update operations by conditionally invoking platform-specific update roles and Docker image updates.
Update Pacman¶
Updates the package cache and upgrades all installed packages on Arch Linux systems using pacman.
peertube¶
PeerTube¶
Transform your video hosting experience with Peertube, a decentralized platform built for scalability, innovation, and community collaboration.
performance¶
Gamer 🎮¶
Gaming setup role for Arch Linux systems.
Gamer Core 🧩¶
Installs essential gaming utilities, launchers, and runtimes on Linux.
System Storage Optimizer Role¶
Optimizes storage allocation for Docker volumes by migrating volumes between SSD and HDD based on container image types, and creates symbolic links to maintain consistent paths.
persona¶
Persona: Administrator 🛠️¶
Installs essential tools for Linux system administrators on Linux.
Persona: Network Administrator🌐¶
Installs essential network analysis tools for system administrators on Linux.
Persona: Corporate 🏢¶
Deploys a corporate identity environment with web assets, legal pages, and a portfolio site on Linux.
Persona: Developer 👨💻¶
Installs a base development environment for software engineers on Linux.
Persona: Arduino Developer🔌¶
Installs tools and permissions for Arduino development on Linux.
Persona: Java Developer☕️¶
Installs tools and dependencies for Java development on Linux.
Persona: PHP Developer🐘¶
Installs PHP and related development tools on Linux for PHP software engineering.
Persona: Developer – Python 🐍¶
Installs tools and environment for Python development on Linux.
Persona: Developer – Shell 🐚¶
Installs tools for Bash scripting and shell development on Linux.
personal-computer¶
Git¶
Installs Git and configures it using a custom git-configurator for personal computers.
pgadmin¶
pgAdmin¶
Take control of your PostgreSQL databases with pgAdmin — a powerful, open source, web-based administration tool offering an intuitive user interface, multi‑server management, robust configuration options, and optional OAuth2 integration for enhanced security.
php¶
Nextcloud Server¶
Elevate your collaboration with Nextcloud, a vibrant self-hosted cloud solution designed for dynamic file sharing, seamless communication, and effortless teamwork. Embrace unparalleled control, flexibility, and a boosted digital workspace that adapts to your every need.
Persona: PHP Developer🐘¶
Installs PHP and related development tools on Linux for PHP software engineering.
phpldapadmin¶
phpldapadmin¶
Take control of your LDAP directory with phpldapadmin — a web‑based LDAP client offering an intuitive interface to manage your LDAP directories. This containerized deployment simplifies administration and provides secure, flexible configuration options.
phpmyadmin¶
PhpMyAdmin¶
Manage your databases with confidence using PHPMyAdmin, a robust and dynamic tool designed to simplify administration and enhance productivity. Enjoy an intuitive interface, powerful features, and an energetic approach that makes database management a breeze.
pip¶
Persona: Developer – Python 🐍¶
Installs tools and environment for Python development on Linux.
Python-Pip¶
Installs the python-pip package to provide the Python package manager, ensuring that Python packages can be installed reliably on the target system.
Update Pip Packages¶
Automatically updates all Python Pip packages to their latest available versions.
pixelfed¶
Pixelfed¶
Pixelfed is a decentralized image sharing platform that champions creativity and privacy. This containerized deployment provides a secure, scalable, and modern environment for sharing visual content within a federated network.
pkgmgr¶
Cleanup Docker Anonymous Volumes¶
Install and run dockreap to clean up unused anonymous Docker volumes
Kevins Package Manager 🤖📦¶
Automates the installation of Kevin’s Package Manager — a tool for managing multiple repositories and automating Git operations.
Package Manager Installation 📦¶
Installs and updates packages using pkgmgr.
Update pkgmgr¶
Checks if the pkgmgr command is available and runs ‘pkgmgr update –all’ to update all repositories.
Update pkgmgr¶
Checks if the pkgmgr command is available and runs ‘pkgmgr update –all’ to update all repositories.
portfolio¶
Portfolio¶
Portfolio to showcase your projects and creative work with a focus on user experience and easy customization. 🚀
postfix¶
Postfix¶
Installs and configures Postfix to provide a robust mail transfer agent setup with a preconfigured aliases file for local mail delivery.
postgresql¶
Central Database¶
The Docker Central Database Role lets you quickly provision a centralized database through Docker Compose. Whether using MariaDB or PostgreSQL, this role provides a reliable, low-maintenance solution that supports your business applications.
pgAdmin¶
Take control of your PostgreSQL databases with pgAdmin — a powerful, open source, web-based administration tool offering an intuitive user interface, multi‑server management, robust configuration options, and optional OAuth2 integration for enhanced security.
PhpMyAdmin¶
Manage your databases with confidence using PHPMyAdmin, a robust and dynamic tool designed to simplify administration and enhance productivity. Enjoy an intuitive interface, powerful features, and an energetic approach that makes database management a breeze.
PostgreSQL¶
The Docker PostgreSQL Role offers an easy and efficient way to run a PostgreSQL database inside a Docker container. Manage your data securely and effectively, making it ideal for production or local development.
power¶
Driver Lid Switch 🛑💻¶
Fixes incorrect lid switch behavior on Linux laptops by setting up hibernation and configuring systemd.
presentation¶
Presentation¶
This Presentation Software is a powerful tool designed for showcasing the CyMaIS platform to various audiences, including Administrators, Developers, End-Users, Businesses, and Investors.
profile¶
Shell 🐚¶
Ensures that .profile is sourced in all shells.
project-management¶
OpenProject¶
Transform your project management with OpenProject, a vibrant and collaborative tool that brings clarity and energy to your planning, tracking, and team communication. Experience streamlined workflows and an innovative platform that propels your projects forward.
Taiga¶
Supercharge your project management with Taiga—a dynamic, agile tool designed for teams that thrive on creativity and collaboration. Experience a vibrant interface, robust task tracking, and an energetic platform that drives your projects to success.
provider¶
Backup Provider¶
Configures the host as a backup provider to facilitate secure backup operations.
puppeteer¶
Health CSP Crawler¶
Checks for CSP-blocked resources via Puppeteer-based Node.js crawler
python¶
Persona: Developer – Python 🐍¶
Installs tools and environment for Python development on Linux.
Python-Pip¶
Installs the python-pip package to provide the Python package manager, ensuring that Python packages can be installed reliably on the target system.
Update Pip Packages¶
Automatically updates all Python Pip packages to their latest available versions.
real-time¶
Matrix¶
Step into the future of communication with Matrix, a dynamic and decentralized platform that delivers secure, real-time messaging and collaboration. Benefit from federation, end-to-end encryption, and versatile bridging that connects you globally while safeguarding your data.
Matrix (Deprecated)¶
This role deploys and configures a Matrix homeserver using Ansible automation. Benefit from a secure, federated, and scalable communication platform with integrated support for bridges and modern web clients.
records¶
Cloudflare DNS Records¶
Manages DNS A-records in Cloudflare zones.
redirect¶
Nginx WWW Redirect 🌐¶
An Ansible role to redirect www subdomains to non-www domains in Nginx
remote¶
Backup Remote to Local¶
Pulls backups from a remote server and stores them locally using rsync with retry logic. This role is part of a comprehensive backup scheme and works in conjunction with other roles to ensure reliable backup operations.
repositories¶
Kevins Package Manager 🤖📦¶
Automates the installation of Kevin’s Package Manager — a tool for managing multiple repositories and automating Git operations.
restart¶
Docker Auto Restart¶
Automates the restart of Docker Compose instances by detecting docker-compose.yml files and executing a restart script, ensuring consistent service availability.
retroarch¶
RetroArch 🎮¶
Installs and configures RetroArch.
revealjs¶
Presentation¶
This Presentation Software is a powerful tool designed for showcasing the CyMaIS platform to various audiences, including Administrators, Developers, End-Users, Businesses, and Investors.
reverse_proxy¶
Nginx Docker Reverse Proxy 🚀¶
Nginx reverse proxy front-end for local Docker applications.
root¶
Root User¶
Manages the generation and handling of an SSH key for the root user. This role ensures secure remote access by generating a new RSA 4096-bit key pair if one does not exist, and displays the public key for further use.
roulette¶
Roulette Wheel¶
This role deploys and configures the Roulette Wheel application using Docker Compose. It automates the process of pulling the latest source code from GitHub, building a Docker image, and deploying the application.
runtime¶
Node.js¶
Installs Node.js
sales¶
EspoCRM¶
Empower your customer relationship management with EspoCRM, an open-source platform that combines workflow automation, seamless LDAP/OIDC SSO integration, and a sleek, lightweight user interface. Tailored for businesses of all sizes, EspoCRM enables you to manage your sales, customer interactions, and business processes with ease, fostering productivity and streamlined communication across teams.
saml¶
Snipe‑IT¶
Snipe‑IT is an open‑source asset management system providing a containerized deployment with centralized MariaDB integration, configurable SMTP settings, and pending SAML authentication enhancements for secure asset tracking and management.
scheduling¶
Systemd Timer¶
Configures a systemd timer to periodically start a specified service. This role automates the creation, reloading, and restarting of systemd timer units for recurring tasks.
scripting¶
Persona: Developer – Shell 🐚¶
Installs tools for Bash scripting and shell development on Linux.
security¶
Backup Provider¶
Configures the host as a backup provider to facilitate secure backup operations.
User for Backup Provider¶
Sets up a dedicated backup user with restricted SSH commands for backup operations. This role configures a backup user with custom SSH key restrictions and sudo rights, ensuring secure and controlled access for backup processes.
Browsers 🎨¶
Wrapper role to install and configure both Chromium and Firefox with enforced security extensions.
Chromium 🌐¶
Automates the installation and configuration of the Chromium browser with enforced security extensions.
Let’s Encrypt SSL for Nginx 🔐¶
An Ansible role to automate Let’s Encrypt SSL certificate issuance and renewal for Nginx
Postfix¶
Installs and configures Postfix to provide a robust mail transfer agent setup with a preconfigured aliases file for local mail delivery.
SSHD¶
Configures a secure SSH daemon environment by deploying a templated sshd_config file and restarting the SSH service as needed.
Sudo¶
Installs and configures the sudo package with a default sudoers file to ensure secure privilege escalation and system administration.
System Security¶
Configures security-related settings on the target system and ensures essential security services are properly managed.
Administrator User¶
Creates a dedicated administrator user for local administrative tasks, ensuring secure privilege escalation and proper system management. This role configures the administrator account, sets up the home directory, SSH settings, and grants sudo privileges with password authentication.
Root User¶
Manages the generation and handling of an SSH key for the root user. This role ensures secure remote access by generating a new RSA 4096-bit key pair if one does not exist, and displays the public key for further use.
self-hosted¶
Funkwhale¶
Dive into a world of rhythm and sound with Funkwhale, an innovative self-hosted music sharing platform that celebrates creativity and community. Enjoy an energetic soundscape and seamless music streaming that amplifies your passion for tunes.
Gitea¶
Boost your development journey with Gitea, a lightweight and energetic self-hosted Git service that offers efficient code collaboration, intuitive version control, and an agile environment for your projects. Ignite your coding spirit, innovate faster, and code with confidence!
GitLab¶
Accelerate your development with GitLab, an all-in-one platform for source code management, CI/CD, and more. Experience a robust and collaborative environment that empowers your development process.
Joomla CMS¶
Elevate your website management with Joomla, a powerful content management system that fuses versatility with dynamic design, inspiring creativity and driving your digital presence to new heights.
Keycloak¶
Step into a secure future with Keycloak! Our dynamic identity and access management solution offers streamlined SSO capabilities, robust security measures, and an intuitive user experience that propels your applications to unprecedented heights of performance and reliability.
Listmonk¶
Elevate your email marketing with Listmonk, a high-performance, self-hosted newsletter and mailing list manager featuring a modern dashboard, advanced analytics, and flexible configuration options.
Mailu¶
Revolutionize your email communications with Mailu, a secure and flexible mail server solution that integrates comprehensive features for managing digital correspondence reliably.
seo¶
Nginx WWW Redirect 🌐¶
An Ansible role to redirect www subdomains to non-www domains in Nginx
shell¶
Persona: Developer – Shell 🐚¶
Installs tools for Bash scripting and shell development on Linux.
Shell 🐚¶
Ensures that .profile is sourced in all shells.
smtp¶
Snipe‑IT¶
Snipe‑IT is an open‑source asset management system providing a containerized deployment with centralized MariaDB integration, configurable SMTP settings, and pending SAML authentication enhancements for secure asset tracking and management.
msmtp 📧¶
Installs and configures msmtp, a lightweight SMTP client and sendmail replacement.
snipe-it¶
Snipe‑IT¶
Snipe‑IT is an open‑source asset management system providing a containerized deployment with centralized MariaDB integration, configurable SMTP settings, and pending SAML authentication enhancements for secure asset tracking and management.
software¶
Persona: Developer 👨💻¶
Installs a base development environment for software engineers on Linux.
Persona: Java Developer☕️¶
Installs tools and dependencies for Java development on Linux.
Persona: PHP Developer🐘¶
Installs PHP and related development tools on Linux for PHP software engineering.
Persona: Developer – Python 🐍¶
Installs tools and environment for Python development on Linux.
sphinx¶
Sphinx Documentation¶
Automates building and serving Sphinx documentation. Unlock comprehensive insights with our extensive documentation. Explore guides, tutorials, and support resources designed to help you navigate software effortlessly.
spotify¶
Spotify 🎵¶
Installs the Spotify client.
ssh¶
User for Backup Provider¶
Sets up a dedicated backup user with restricted SSH commands for backup operations. This role configures a backup user with custom SSH key restrictions and sudo rights, ensuring secure and controlled access for backup processes.
SSH Agent 🔐¶
Persistent SSH agent setup for GNOME Wayland sessions with SSH configuration pulled from Git.
SSHD¶
Configures a secure SSH daemon environment by deploying a templated sshd_config file and restarting the SSH service as needed.
System Security¶
Configures security-related settings on the target system and ensures essential security services are properly managed.
User¶
Executes common tasks for user environment configuration.
Administrator User¶
Creates a dedicated administrator user for local administrative tasks, ensuring secure privilege escalation and proper system management. This role configures the administrator account, sets up the home directory, SSH settings, and grants sudo privileges with password authentication.
Root User¶
Manages the generation and handling of an SSH key for the root user. This role ensures secure remote access by generating a new RSA 4096-bit key pair if one does not exist, and displays the public key for further use.
sshd¶
SSHD¶
Configures a secure SSH daemon environment by deploying a templated sshd_config file and restarting the SSH service as needed.
ssl¶
Certbot¶
Automates the installation and configuration of Certbot for SSL/TLS certificate management
Certbot Reaper¶
Automates the revocation and deletion of unused Let’s Encrypt certificates
Let’s Encrypt SSL for Nginx 🔐¶
An Ansible role to automate Let’s Encrypt SSL certificate issuance and renewal for Nginx
Nginx Certbot Automation¶
Automates Let’s Encrypt SSL/TLS certificate renewals for Nginx using Certbot and systemd services with automatic reloads after successful renewals.
Nginx HTTPS Certificate Retrieval¶
Automates the retrieval of Let’s Encrypt SSL/TLS certificates for Nginx domains using Certbot, supporting both single-domain and wildcard certificates with DNS and webroot ACME challenges.
Nginx File Server¶
Configures an Nginx-based file server with HTTPS support, automatic SSL/TLS certificate retrieval, directory listing, and .well-known handling for secure static file hosting.
Nginx Static HTML Server¶
Configures an Nginx server to host static HTML websites with HTTPS support, automatic SSL certificate retrieval via Let’s Encrypt, and secure default settings.
sso¶
Keycloak¶
Step into a secure future with Keycloak! Our dynamic identity and access management solution offers streamlined SSO capabilities, robust security measures, and an intuitive user experience that propels your applications to unprecedented heights of performance and reliability.
OpenProject¶
Transform your project management with OpenProject, a vibrant and collaborative tool that brings clarity and energy to your planning, tracking, and team communication. Experience streamlined workflows and an innovative platform that propels your projects forward.
static¶
Nginx Static HTML Server¶
Configures an Nginx server to host static HTML websites with HTTPS support, automatic SSL certificate retrieval via Let’s Encrypt, and secure default settings.
static-files¶
Nginx File Server¶
Configures an Nginx-based file server with HTTPS support, automatic SSL/TLS certificate retrieval, directory listing, and .well-known handling for secure static file hosting.
steam¶
Gamer 🎮¶
Gaming setup role for Arch Linux systems.
Gamer Core 🧩¶
Installs essential gaming utilities, launchers, and runtimes on Linux.
storage¶
Cleanup Disc Space¶
Frees disk space on the target system by executing a cleanup script that removes temporary files, clears package caches, and optionally handles Docker and backup cleanup.
System Storage Optimizer Role¶
Optimizes storage allocation for Docker volumes by migrating volumes between SSD and HDD based on container image types, and creates symbolic links to maintain consistent paths.
streaming¶
Spotify 🎵¶
Installs the Spotify client.
sudo¶
Sudo¶
Installs and configures the sudo package with a default sudoers file to ensure secure privilege escalation and system administration.
Administrator User¶
Creates a dedicated administrator user for local administrative tasks, ensuring secure privilege escalation and proper system management. This role configures the administrator account, sets up the home directory, SSH settings, and grants sudo privileges with password authentication.
syncope¶
Syncope (DRAFT)¶
Apache Syncope is an open-source Identity and Access Management (IAM) system, offering centralized identity governance, user provisioning, role management, and workflow integration.
system¶
Docker Server¶
Installs and maintains Docker.
Persona: Administrator 🛠️¶
Installs essential tools for Linux system administrators on Linux.
System Maintenance Lock¶
Ensures system integrity during maintenance activities by blocking execution until critical services have stopped, using a locking mechanism with timeout and retry logic.
System Security¶
Configures security-related settings on the target system and ensures essential security services are properly managed.
update¶
Centralizes system update operations by conditionally invoking platform-specific update roles and Docker image updates.
Update apt¶
Updates packages on Debian-based systems by refreshing the apt cache and performing a distribution upgrade.
Update Pacman¶
Updates the package cache and upgrades all installed packages on Arch Linux systems using pacman.
Update pkgmgr¶
Checks if the pkgmgr command is available and runs ‘pkgmgr update –all’ to update all repositories.
Update yay¶
Updates AUR packages on Arch Linux systems using yay. This role automates the upgrade process for AUR packages, ensuring that the system remains up-to-date with the latest versions available in the Arch User Repository.
systemd¶
Docker 🐳¶
Automated backups to a swappable USB device.
Backup Docker to Local¶
Automates the backup of Docker volumes to a local folder
Backup Remote to Local¶
Pulls backups from a remote server and stores them locally using rsync with retry logic. This role is part of a comprehensive backup scheme and works in conjunction with other roles to ensure reliable backup operations.
Certbot Reaper¶
Automates the revocation and deletion of unused Let’s Encrypt certificates
SSH Agent 🔐¶
Persistent SSH agent setup for GNOME Wayland sessions with SSH configuration pulled from Git.
Wireguard Client¶
Manages WireGuard on a client system by deploying services and scripts to set MTU on network interfaces and ensure optimal VPN connectivity.
Driver Lid Switch 🛑💻¶
Fixes incorrect lid switch behavior on Linux laptops by setting up hibernation and configuring systemd.
Docker Healer 🩺¶
Automated recovery for unhealthy or exited Docker Compose containers.
Health CSP Crawler¶
Checks for CSP-blocked resources via Puppeteer-based Node.js crawler
health-msmtp¶
Sends periodic health check emails via msmtp
Nginx Certbot Automation¶
Automates Let’s Encrypt SSL/TLS certificate renewals for Nginx using Certbot and systemd services with automatic reloads after successful renewals.
Docker Auto Restart¶
Automates the restart of Docker Compose instances by detecting docker-compose.yml files and executing a restart script, ensuring consistent service availability.
Unified Service Failure Notifier¶
Installs a unified systemd notification service that sends alerts via both Telegram and Email when a service fails.
Automated Email Alerts for Service Failures¶
Installs and configures components for sending email notifications. This role is part of the systemd-notifier suite, providing automated alerts when services fail.
Automated Telegram Alerts for Service Failures¶
Installs and configures components for sending Telegram notifications through systemd. This role is part of the systemd-notifier suite, providing automated alerts when services fail.
Systemd Timer¶
Configures a systemd timer to periodically start a specified service. This role automates the creation, reloading, and restarting of systemd timer units for recurring tasks.
Update Docker¶
Updates Docker Compose instances by detecting changes in Docker image digests and rebuilding containers when necessary. This role automates Docker image pulls and container rebuilds.
Wireguard¶
Manages Wireguard VPN configuration on the host. Installs necessary tools, deploys sysctl settings for IP forwarding, and copies the Wireguard configuration file to enable secure VPN connectivity.
taiga¶
Taiga¶
Supercharge your project management with Taiga—a dynamic, agile tool designed for teams that thrive on creativity and collaboration. Experience a vibrant interface, robust task tracking, and an energetic platform that drives your projects to success.
telegram¶
Unified Service Failure Notifier¶
Installs a unified systemd notification service that sends alerts via both Telegram and Email when a service fails.
Automated Telegram Alerts for Service Failures¶
Installs and configures components for sending Telegram notifications through systemd. This role is part of the systemd-notifier suite, providing automated alerts when services fail.
terminal¶
GNOME Terminal¶
Installs GNOME Terminal on Arch Linux, providing a modern terminal emulator for the GNOME desktop environment.
theming¶
🌍 Global CSS Injection for Nginx¶
Global CSS injection for Nginx-based apps using dynamic colorschemes.
ticketing¶
Attendize¶
Revolutionize your event management with Attendize, an energetic and intuitive platform designed to streamline ticketing and event planning. Enjoy a feature-rich, user-friendly solution that transforms every event into an unforgettable experience.
timer¶
Cleanup Backups Timer¶
Schedules periodic cleanup of old backups by configuring a systemd timer to trigger the cleanup-backups-service role.
Systemd Timer¶
Configures a systemd timer to periodically start a specified service. This role automates the creation, reloading, and restarting of systemd timer units for recurring tasks.
tls¶
Certbot¶
Automates the installation and configuration of Certbot for SSL/TLS certificate management
LDAP Directory¶
Unleash the potential of centralized identity management with our robust LDAP Directory solution, powered by OpenLDAP. Manage users, groups, and schemas securely with extensive customization options and integrated TLS support.
Nginx Certbot Automation¶
Automates Let’s Encrypt SSL/TLS certificate renewals for Nginx using Certbot and systemd services with automatic reloads after successful renewals.
Nginx Domain Setup 🚀¶
Automated domain provisioning (TLS, vHost, OAuth2) for Nginx.
Nginx HTTPS Certificate Retrieval¶
Automates the retrieval of Let’s Encrypt SSL/TLS certificates for Nginx domains using Certbot, supporting both single-domain and wildcard certificates with DNS and webroot ACME challenges.
tools¶
Persona: Administrator 🛠️¶
Installs essential tools for Linux system administrators on Linux.
Persona: Network Administrator🌐¶
Installs essential network analysis tools for system administrators on Linux.
Persona: Developer 👨💻¶
Installs a base development environment for software engineers on Linux.
uncategorized¶
Bluray-Player¶
QBittorrent¶
Zoom¶
Jenkins¶
Docker Repository Setup¶
role driver-epson-multiprinter¶
Ansible Role: driver-msi-keyboard-color¶
Ansible role to set up dynamic keyboard color change on MSI laptops
health-btrfs¶
health-disc-space¶
Health Check for Docker Containers¶
Health Check for Docker Volumes¶
health-journalctl¶
health-nginx¶
role journalctl¶
role nginx¶
Nginx Docker Cert Deploy Role¶
Nginx Https Server¶
Nginx Matomo Tracking Role¶
Nginx Redirect Role¶
Assets Server¶
Nginx Homepage Role¶
Designer¶
Employee¶
update¶
Package Manager Installation 📦¶
Installs and updates packages using pkgmgr.
Docker Auto Restart¶
Automates the restart of Docker Compose instances by detecting docker-compose.yml files and executing a restart script, ensuring consistent service availability.
update¶
Centralizes system update operations by conditionally invoking platform-specific update roles and Docker image updates.
Update apt¶
Updates packages on Debian-based systems by refreshing the apt cache and performing a distribution upgrade.
Update Docker¶
Updates Docker Compose instances by detecting changes in Docker image digests and rebuilding containers when necessary. This role automates Docker image pulls and container rebuilds.
Update Pacman¶
Updates the package cache and upgrades all installed packages on Arch Linux systems using pacman.
Update Pip Packages¶
Automatically updates all Python Pip packages to their latest available versions.
Update pkgmgr¶
Checks if the pkgmgr command is available and runs ‘pkgmgr update –all’ to update all repositories.
Update yay¶
Updates AUR packages on Arch Linux systems using yay. This role automates the upgrade process for AUR packages, ensuring that the system remains up-to-date with the latest versions available in the Arch User Repository.
url-shortener¶
YOURLS¶
Streamline your online presence with YOURLS — a nimble, open‑source URL shortener that empowers you to create, track, and manage short links effortlessly. This containerized deployment integrates centralized MariaDB support and a customizable environment, ensuring a secure and scalable solution for all your link management needs.
usb¶
Docker 🐳¶
Automated backups to a swappable USB device.
user¶
User for Backup Provider¶
Sets up a dedicated backup user with restricted SSH commands for backup operations. This role configures a backup user with custom SSH key restrictions and sudo rights, ensuring secure and controlled access for backup processes.
Nextcloud Client ☁️¶
Installs and links Nextcloud desktop client folders for cloud-integrated user environments.
User¶
Executes common tasks for user environment configuration.
Administrator User¶
Creates a dedicated administrator user for local administrative tasks, ensuring secure privilege escalation and proper system management. This role configures the administrator account, sets up the home directory, SSH settings, and grants sudo privileges with password authentication.
Root User¶
Manages the generation and handling of an SSH key for the root user. This role ensures secure remote access by generating a new RSA 4096-bit key pair if one does not exist, and displays the public key for further use.
validator¶
Backup Directory Validator¶
Setup the directory validator to validate backup directories
version control¶
Gitea¶
Boost your development journey with Gitea, a lightweight and energetic self-hosted Git service that offers efficient code collaboration, intuitive version control, and an agile environment for your projects. Ignite your coding spirit, innovate faster, and code with confidence!
GitLab¶
Accelerate your development with GitLab, an all-in-one platform for source code management, CI/CD, and more. Experience a robust and collaborative environment that empowers your development process.
video¶
video platform¶
PeerTube¶
Transform your video hosting experience with Peertube, a decentralized platform built for scalability, innovation, and community collaboration.
video-hosting¶
PeerTube¶
Transform your video hosting experience with Peertube, a decentralized platform built for scalability, innovation, and community collaboration.
volumes¶
Cleanup Docker Anonymous Volumes¶
Install and run dockreap to clean up unused anonymous Docker volumes
vpn¶
Wireguard Client¶
Manages WireGuard on a client system by deploying services and scripts to set MTU on network interfaces and ensure optimal VPN connectivity.
Wireguard¶
Manages Wireguard VPN configuration on the host. Installs necessary tools, deploys sysctl settings for IP forwarding, and copies the Wireguard configuration file to enable secure VPN connectivity.
wayland¶
SSH Agent 🔐¶
Persistent SSH agent setup for GNOME Wayland sessions with SSH configuration pulled from Git.
web¶
Nextcloud Server¶
Elevate your collaboration with Nextcloud, a vibrant self-hosted cloud solution designed for dynamic file sharing, seamless communication, and effortless teamwork. Embrace unparalleled control, flexibility, and a boosted digital workspace that adapts to your every need.
Portfolio¶
Portfolio to showcase your projects and creative work with a focus on user experience and easy customization. 🚀
Nginx Docker Reverse Proxy 🚀¶
Nginx reverse proxy front-end for local Docker applications.
Persona: Corporate 🏢¶
Deploys a corporate identity environment with web assets, legal pages, and a portfolio site on Linux.
Persona: PHP Developer🐘¶
Installs PHP and related development tools on Linux for PHP software engineering.
webui¶
pgAdmin¶
Take control of your PostgreSQL databases with pgAdmin — a powerful, open source, web-based administration tool offering an intuitive user interface, multi‑server management, robust configuration options, and optional OAuth2 integration for enhanced security.
phpldapadmin¶
Take control of your LDAP directory with phpldapadmin — a web‑based LDAP client offering an intuitive interface to manage your LDAP directories. This containerized deployment simplifies administration and provides secure, flexible configuration options.
PhpMyAdmin¶
Manage your databases with confidence using PHPMyAdmin, a robust and dynamic tool designed to simplify administration and enhance productivity. Enjoy an intuitive interface, powerful features, and an energetic approach that makes database management a breeze.
wiki¶
MediaWiki¶
Empower your knowledge base with MediaWiki, a versatile and collaborative platform designed for comprehensive, user-driven documentation. Benefit from an extensive extension ecosystem, robust content management, and customizable configurations tailored to your needs.
wildcard¶
Nginx HTTPS Certificate Retrieval¶
Automates the retrieval of Let’s Encrypt SSL/TLS certificates for Nginx domains using Certbot, supporting both single-domain and wildcard certificates with DNS and webroot ACME challenges.
Nginx WWW Redirect 🌐¶
An Ansible role to redirect www subdomains to non-www domains in Nginx
wine¶
Gamer 🎮¶
Gaming setup role for Arch Linux systems.
Gamer Core 🧩¶
Installs essential gaming utilities, launchers, and runtimes on Linux.
wireguard¶
Wireguard Client¶
Manages WireGuard on a client system by deploying services and scripts to set MTU on network interfaces and ensure optimal VPN connectivity.
WireGuard Client behind NAT¶
Adapts iptables rules to enable proper connectivity for a WireGuard client running behind a NAT or firewall, ensuring that traffic is correctly forwarded and masqueraded.
Wireguard¶
Manages Wireguard VPN configuration on the host. Installs necessary tools, deploys sysctl settings for IP forwarding, and copies the Wireguard configuration file to enable secure VPN connectivity.
wordpress¶
WordPress¶
Use the full power of WordPress—with its intuitive interface, customizable themes and plugins, responsive design, and advanced SEO tools—in a scalable and secure containerized environment.
www¶
Nginx WWW Redirect 🌐¶
An Ansible role to redirect www subdomains to non-www domains in Nginx
yay¶
System AUR Helper¶
Installs the AUR helper yay and configures an aur_builder user with appropriate sudo privileges to facilitate AUR package management on Arch Linux systems.
Update yay¶
Updates AUR packages on Arch Linux systems using yay. This role automates the upgrade process for AUR packages, ensuring that the system remains up-to-date with the latest versions available in the Arch User Repository.
yourls¶
YOURLS¶
Streamline your online presence with YOURLS — a nimble, open‑source URL shortener that empowers you to create, track, and manage short links effortlessly. This containerized deployment integrates centralized MariaDB support and a customizable environment, ensuring a secure and scalable solution for all your link management needs.
zsh¶
Shell 🐚¶
Ensures that .profile is sourced in all shells.
social network¶
Bluesky¶
Soar to new digital heights with Bluesky, an innovative platform that reimagines social networking with its forward-thinking, community-driven approach. Experience a burst of energy, creativity, and the freedom to connect in a truly inspiring way.
Friendica¶
Empower your decentralized social networking with Friendica, a platform designed to foster communication and community building with ease. Experience a robust, containerized deployment that streamlines installation, configuration, and maintenance for your Friendica instance.
Mastodon¶
Dive into a decentralized social experience with Mastodon, a federated platform designed for dynamic, community-driven networking. Enjoy real-time updates, robust moderation, and customizable user interfaces that empower communities to thrive.