Mercurial > code > home > repos > infra
annotate system.py @ 284:a46eb2a77df7
minecraft forwarding
| author | drewp@bigasterisk.com |
|---|---|
| date | Mon, 15 Apr 2024 02:28:52 -0700 |
| parents | 4e424a144183 |
| children | 3af02e24eaf9 |
| rev | line source |
|---|---|
| 1 | 1 import os |
|
10
1fec9fe18a4e
more system.py cleanup; add pi /boot/config.txt
drewp@bigasterisk.com
parents:
6
diff
changeset
|
2 |
| 1 | 3 from pyinfra import host |
| 4 from pyinfra.facts.server import LinuxDistribution | |
|
12
15c5ce7c74b5
refactor, cleanup, split large deploys
drewp@bigasterisk.com
parents:
10
diff
changeset
|
5 from pyinfra.operations import apt, files, server, systemd |
| 1 | 6 |
|
3
61945df2a392
updates to work on recent raspbian installs
drewp@bigasterisk.com
parents:
2
diff
changeset
|
7 is_pi = host.get_fact(LinuxDistribution)['name'] in ['Debian', 'Raspbian GNU/Linux'] |
| 1 | 8 |
| 9 TZ = 'America/Los_Angeles' | |
| 10 | |
|
12
15c5ce7c74b5
refactor, cleanup, split large deploys
drewp@bigasterisk.com
parents:
10
diff
changeset
|
11 |
| 91 | 12 def timezone(): |
| 13 files.link(path='/etc/localtime', target=f'/usr/share/zoneinfo/{TZ}') | |
| 14 files.replace(path='/etc/timezone', text='.*', replace=TZ) | |
| 138 | 15 |
| 1 | 16 |
| 91 | 17 def fstab(): |
| 18 fstab_file = f'files/fstab/{host.name}' | |
| 19 if os.path.exists(fstab_file): | |
| 20 files.put(src=fstab_file, dest='/etc/fstab') | |
| 1 | 21 |
| 91 | 22 def pi_tmpfs(): |
| 1 | 23 for line in [ |
| 24 'tmpfs /var/log tmpfs defaults,noatime,mode=0755 0 0', | |
| 25 'tmpfs /tmp tmpfs defaults,noatime 0 0', | |
| 26 ]: | |
| 27 files.line(path="/etc/fstab", line=line, replace=line) | |
| 28 | |
| 29 # stop SD card corruption (along with some mounts in fstab) | |
| 30 apt.packages(packages=['dphys-swapfile'], present=False) | |
| 31 | |
| 32 | |
| 91 | 33 def no_sleep(): |
|
34
d4fb38f13c79
refactor dns and some other non-net setup
drewp@bigasterisk.com
parents:
12
diff
changeset
|
34 server.shell(commands=['systemctl mask sleep.target suspend.target hibernate.target hybrid-sleep.target']) |
|
d4fb38f13c79
refactor dns and some other non-net setup
drewp@bigasterisk.com
parents:
12
diff
changeset
|
35 |
| 91 | 36 def nfs_server(): |
|
34
d4fb38f13c79
refactor dns and some other non-net setup
drewp@bigasterisk.com
parents:
12
diff
changeset
|
37 apt.packages(packages=['nfs-kernel-server']) |
|
d4fb38f13c79
refactor dns and some other non-net setup
drewp@bigasterisk.com
parents:
12
diff
changeset
|
38 files.template(src='templates/bang_exports.j2', dest='/etc/exports') |
|
37
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
34
diff
changeset
|
39 |
| 91 | 40 def smaller_journals(): |
|
37
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
34
diff
changeset
|
41 files.line(name='shorter systemctl log window, for disk space', |
|
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
34
diff
changeset
|
42 path='/etc/systemd/journald.conf', |
|
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
34
diff
changeset
|
43 line='MaxFileSec', |
|
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
34
diff
changeset
|
44 replace="MaxFileSec=7day") |
|
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
34
diff
changeset
|
45 |
| 203 | 46 def web_forward(): |
|
37
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
34
diff
changeset
|
47 for port in [80, 443]: |
| 284 | 48 files.template(src="templates/webforward.service.j2", dest=f"/etc/systemd/system/web_forward_{port}.service", serv_host='bang', port=port, name='web', fam='tcp') |
|
37
fbd0849dfdbd
redo networking to be much simpler. Uses systemd-networkd
drewp@bigasterisk.com
parents:
34
diff
changeset
|
49 systemd.service(service=f'web_forward_{port}', enabled=True, restarted=True) |
| 91 | 50 |
| 284 | 51 def minecraft_forward(): |
| 52 port = 25765 | |
| 53 for fam in ['tcp', 'udp']: | |
| 54 files.template(src="templates/webforward.service.j2", dest=f"/etc/systemd/system/mc_smp_{fam}_forward_{port}.service", serv_host='ditto', port=port, name='mc_smp', fam=fam) | |
| 55 systemd.service(service=f'mc_smp_{fam}_forward_{port}', enabled=True, restarted=True) | |
| 56 | |
| 145 | 57 server.hostname(hostname=host.name) |
| 91 | 58 timezone() |
| 59 fstab() | |
| 60 | |
| 61 if not is_pi: | |
| 62 files.line(path='/etc/update-manager/release-upgrades', line="^Prompt=", replace="Prompt=normal") | |
| 63 | |
| 64 if is_pi and host.name != 'pipe': | |
| 65 pi_tmpfs() | |
| 278 | 66 |
| 67 # this now lives on pipe in /opt/dnsmasq/tftp/f63f14b6/config.txt | |
| 68 #files.template(src='templates/boot_config.txt.j2', dest='/boot/config.txt') | |
| 91 | 69 |
| 146 | 70 if host.name in ['bang', 'pipe', 'ditto']: |
| 91 | 71 no_sleep() |
| 72 | |
|
194
0d37dde619d0
zfs now serving from ditto, new pool is stor7
drewp@bigasterisk.com
parents:
155
diff
changeset
|
73 if host.name in ['bang', 'ditto']: |
| 91 | 74 nfs_server() |
| 75 | |
| 76 if host.name == 'prime': | |
|
126
fe3ae7c95e65
collect all apt/sources.list into a central template
drewp@bigasterisk.com
parents:
118
diff
changeset
|
77 smaller_journals() |
| 247 | 78 web_forward() |
| 284 | 79 minecraft_forward() |
| 247 | 80 |
| 81 # for space, consider: | |
| 82 # k3s crictl rmi --prune | |
| 83 # snap list --all | while read snapname ver rev trk pub notes; do if [[ $notes = *disabled* ]]; then snap remove "$snapname" --revision="$rev"; fi; done | |
| 84 # podman system reset | |
| 85 |